Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Hypothetically, what could an attacker achieve if they have a copy of of /etc/ssh/moduli?

share|improve this question

migrated from Oct 15 '11 at 18:33

This question came from our site for system and network administrators.

Nothing. The attacker already has it: it is distributed with the OpenSSH source code. This file is used to define the group in which the Diffie-Hellman key exchange may run; the group description is public, it contains no secret value, and can be shared at will. OpenSSH includes several group definitions and selects one at random just because they are paranoid (which is not necessarily a bad thing, for a security product).

share|improve this answer
Presumably though, if it was discovered that one of the commonly distributed values was weak for any reason, then the fact that so many people use it would be problematic? – frankster Jan 6 '15 at 18:26
Yes, it would be problematic, in roughly the same extent as, say, when a buffer overflow is discovered in some Internet-facing service. The past is past; only thing to do would be to patch; in this case, the patch would be a new /etc/ssh/moduli file, distributed through the normal channels for security updates (every Linux distribution has its own mechanism for that). Note that replacing that file does not entail changing the server key, so the update is painless for users. – Thomas Pornin Jan 6 '15 at 20:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.