⬇ Download holy card: ·
Saint Logjam, Who Downgraded Diffie-Hellman
Patron of TLS connections, overly short Diffie-Hellman parameters, and "export" ciphers that should have vanished in the nineties.
Life
On 20 May 2015 a group of researchers revealed Logjam (CVE-2015-4000): an attacker between client and server could force a TLS connection to use the weak 512-bit "export" Diffie-Hellman parameters, a legacy of 1990s US crypto restrictions, and then break them. Worse, many servers shared the same few primes, so a one-time computational effort opened many of them.
Prayer
O Saint Logjam, who drags cryptography back to the nineties, let our key exchanges stay long and unrepeatable. Amen.
How to celebrate
Celebrated by disabling export ciphers, using Diffie-Hellman parameters of at least 2048 bits and, better still, elliptic curves.
A twenty-year-old key, today's secret.