LogJam Attack - Computerphile

TL;DR

Log Jam is a classic cryptographic attack from 2015 that involves a complex process of man-in-the-middle attacks, protocol downgrades, and breaking weak diffie-hellman keys to access encrypted communication.

Transcript

while we're recording so um I believe you owe me a video I owe you a video yep I did make a promise that I would record a video on log Jam I didn't I forgot and then there's Log Jam as well I don't know did we do a video on log Jam if we didn't I'll do a video on logger and here we are we're going to do it we're going to talk about Log Jam um bette... Read More

Key Insights

• 👊 Log Jam is a complex attack that involves multiple stages, including man-in-the-middle attacks, protocol downgrades, and breaking weak diffie-hellman keys.
• 👊 The attack targets protocols like TLS and VPNs, compromising encrypted communication.
• 🏑 The number field sieve algorithm is used to break the diffie-hellman key exchange, and its pre-computed data significantly speeds up the attack process.
• 🤩 Log Jam prompted a change in internet protocols, with the adoption of stronger diffie-hellman keys and countermeasures against protocol downgrades.

Questions & Answers

Q: What is Log Jam and when did the attack occur?

Log Jam is a cryptographic attack from 2015. It involves breaking the diffie-hellman key exchange to gain access to encrypted communication.

Q: How does the attacker manipulate the key exchange process?

The attacker performs a man-in-the-middle attack and downgrades the diffie-hellman protocol to convince the server to use a weak key. This allows the attacker to break the key and gain access to encrypted communication.

Q: What are the potential targets of the Log Jam attack?

Log Jam can target any protocol that uses diffie-hellman key exchange, such as TLS and VPNs. This makes it a significant threat to internet communication.

Q: How does the number field sieve help in breaking the diffie-hellman key exchange?

The number field sieve is a complex algorithm used to break the diffie-hellman key exchange. It involves pre-computing a large amount of data based on the prime number used in the key exchange, which allows for quicker computation during the attack.

Summary & Key Takeaways

• Log Jam is an attack on diffie-hellman key exchange, commonly used in TLS and VPN protocols.

• The attack involves intercepting and manipulating messages to convince servers to use weak diffie-hellman keys.

• The attacker then uses the number field sieve to break the key exchange and gain access to encrypted communication.