Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Hypothetically, what could an attacker achieve if they have a copy of of /etc/ssh/moduli?

share|improve this question

migrated from serverfault.com Oct 15 '11 at 18:33

This question came from our site for professional system and network administrators.

1 Answer 1

Nothing. The attacker already has it: it is distributed with the OpenSSH source code. This file is used to define the group in which the Diffie-Hellman key exchange may run; the group description is public, it contains no secret value, and can be shared at will. OpenSSH includes several group definitions and selects one at random just because they are paranoid (which is not necessarily a bad thing, for a security product).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.