[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #5598 [Tor Relay]: Generate DH groups asynchronously when we change TLS keys

#5598: Generate DH groups asynchronously when we change TLS keys
-------------------------+--------------------------------------------------
 Reporter:  rransom      |          Owner:     
     Type:  enhancement  |         Status:  new
 Priority:  major        |      Milestone:     
Component:  Tor Relay    |        Version:     
 Keywords:               |         Parent:     
   Points:               |   Actualpoints:     
-------------------------+--------------------------------------------------

Comment(by nickm):

 Generating DH groups can take minutes to tens of minutes on hardware where
 RSA key generation takes only tiny fractions of a second.  They're very
 different operations.

 Also, rotating your DH groups frequently is even weirder than rotating
 your client-visible TLS keys frequently; I worry that we'd stand out lots.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5598#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs