Reject excessively large primes in DH key generation. Problem reported

by Guido Vranken to OpenSSL (https://github.com/openssl/openssl/pull/6457)
and based on his diff.  suggestions from tb@, ok tb@ jsing@

"During key agreement in a TLS handshake using a DH(E) based ciphersuite a
malicious server can send a very large prime value to the client. This will
cause the client to spend an unreasonably long period of time generating a key
for this prime resulting in a hang until the client has finished. This could be
exploited in a Denial Of Service attack."

0 files changed, 0 insertions, 0 deletions