A Retrospective on the Use of Export Cryptography
summary
Three export-era failures enable modern attacks: FREAK lets a man‑in‑the‑middle force RSA export keys (servers briefly hit ~36.7% support; current measurement finds 2% vulnerable), Logjam downgrades to 512‑bit DHE where precomputation per prime makes many sites breakable (512‑bit factoring ≈ $100 on EC2; shared Apache/nginx primes cover ~92% of vulnerable hosts), and DROWN abuses SSLv2 to decrypt TLS (general DROWN costs ≈ $400 on EC2; special DROWN runs on a laptop in ~1 minute); measurements use zmap scans and show real, long‑lasting protocol harm.
AI-written summary · about
chapters (9)
- 0:00Introduction and background
- 2:00History of cryptography law
- 5:02Evolution of SSL and TLS
- 9:05The FREAK attack
- 19:31The Logjam attack
- 31:21The DROWN attack
- 38:26General DROWN and mitigations
- 42:36Security implications
- 44:56Q&A and future outlook
