Re: Using SSL private key for cookie's HMAC

[Peter Conrad <conrad () tivano de>]

Hi,

On Mon, Sep 06, 2004 at 12:45:10AM +0000, Jason Coombs PivX Solutions wrote:
> The simplest, most direct path to discovering an SSL server's private/public key pair is to precompute every possible 
> key pair and then do a lookup when the server gives you its public key. Every other attack on SSL cryptography that 
> seeks to discover the server's private key *should* be more difficult to accomplish, since it would involve factoring 
> or finding a needle (a discernable pattern that should not exist) in a ciphertext haystack.

erm... factoring is better than brute force, isn't it?

Bye,
        Peter
-- 
Peter Conrad                        Tel: +49 6102 / 80 99 072
[ t]ivano Software GmbH             Fax: +49 6102 / 80 99 071
Bahnhofstr. 18                      http://www.tivano.de/
63263 Neu-Isenburg

Germany