The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hi,

> Ah, another round of a vendor obsoleting a crypto parameter. I guess
> it's reasonable to "do something" as this will help against logjam; only
> a bit too drastic to make it a DoS IMHO.

FWIW, I just discovered that Chrome will also get harsh on TLS servers
with <1024 DH soon. Chrome 45 is the target for deprecation of small DH
groups:

https://groups.google.com/a/chromium.org/forum/#!topic/security-dev/WyGIpevBV1s

So in IEEE 802.1X we are certainly not the only ones impacted by this.

I haven't found an easy way to determine DH group length in eapol_test
yet. If someone knows more, I'll be very happy to listen :-)

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature