|
PolarSSL has been reported to contain a flaw related to the use of weak keys in a Diffie-Hellman key exchange, allowing Man-in-The-Middle (MiTM) attacks. However, the attack described in the PolarSSL advisory does not appear to work in the real world: while the server may accept a weak DH key, the client is supposed to validate the signature of the server's DH key, so a 3rd party must intercept and replace both keys in the exchange. At that point of the exchange, the attacker could just as well establish a direct SSL session with the server to achieve the same results.
|
