As I understand it, the Logjam TLS attack is an attack that downgrades the DHE cipher suite used by the server to DHE_EXPORT. Where the client thinks it is talking DHE 512 and the server things it's talking DHE_EXPORT (which is 512 but with a different name?).

It is not possible to downgrade to a lower (weaker) bit DHE ciphers: it is just a cipher downgrade.

1 Answer 1


In Logjam attack, the client presents a list of cipher suites (includes some strong cipher and EXPORT cipher as well). A Man-in-the-Middle attack will change this request such that highest grade cipher in the request becomes the EXPORT grade cipher.

The server doesn't want to reject this request (it could be an eCommerce website and server don't want to lose business), so the shared secret is derived using export grade cipher suite which can be broken if that prime group is sieved using GNFS.

Check out this video, it's a long one but from the authors of Logjam https://www.youtube.com/watch?v=mS8gm-_rJgM

  • So it is correct that it is only logjam if the EXPORT cipher suite is used in exploitation/is allowed by the server?
    – Wealot
    Jul 4, 2017 at 13:24
  • cannot confirm , because it could be legitimate request from client but now-a-days browser are cautious and it never fallback to these cipher suites infact 1024 bit key size is getting phased out. As per NIST Key length should be of size of 2048 or more after 2013 onwards . nvlpubs.nist.gov/nistpubs/Legacy/SP/…
    – Chits
    Jul 4, 2017 at 15:07

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .