[tor-bugs] #5598 [Tor Relay]: Turn DynamicDHGroups off by default

[Tor Bug Tracker & Wiki]

#5598: Turn DynamicDHGroups off by default
-------------------------+--------------------------------------------------
 Reporter:  rransom      |          Owner:     
     Type:  enhancement  |         Status:  new
 Priority:  minor        |      Milestone:     
Component:  Tor Relay    |        Version:     
 Keywords:               |         Parent:     
   Points:               |   Actualpoints:     
-------------------------+--------------------------------------------------

Comment(by iang):

 Replying to [comment:10 mikeperry]:
 > Also note: I am not a cryptographer. I just play one on tv.

 Hey, that's my line!  ;-)

 If we're worried about the difference between solving DLs in a single,
 common, 1024-bit Zp group versus solving it for lots of different 1024-bit
 Zp groups, then our prime is way too small.  You don't want to be anywhere
 near the place where even one (random) problem of that size could be
 solved (with acceptable probability in reasonable time).

 It's true that precomputation tables make it faster to compute DLs for a
 fixed prime once you've built the tables, but if they can do it once, in a
 few years, they'll probably be able to do it often.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5598#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online