[openssl-dev] Need CVE-2015-3193 impact explained

Leif Thuresson leif.thuresson at foxt.com
Mon Dec 7 09:53:15 UTC 2015


The description of CVE-2015-3193 in 2015-12-04 security advisory
states that EC algorithms are not affected, but attacks against DH are 
considered feasible.
Not being a cryptographer that leaves me a bit confused.
Are applications supporting cipher suites with ECDHE- variants vulnerable?

Thanks,
/Leif




More information about the openssl-dev mailing list