This blog posts explains that ECDSA and DSA signatures are malleable,\nthat JWTs can be malleable as well\nand how this can be used to bypass some broken implementations\nof JWT deny lists\n(for revocation of JWTs or anti-replay protection).
\n"}, {"id": "http://www.gabriel.urdhr.fr/2021/10/19/diffie-hellman-intro/", "title": "Introduction to the Diffie-Hellman key exchange", "url": "https://www.gabriel.urdhr.fr/2021/10/19/diffie-hellman-intro/", "date_published": "2021-10-19T00:00:00+02:00", "date_modified": "2021-10-19T00:00:00+02:00", "tags": ["computer", "network", "cryptography", "tls", "diffie-hellman", "elliptic-curve"], "content_html": "The Diffie-Hellman (DH) key exchange (and variants thereof) is widely used\nin many protocols\n(such as TLS, SSH, IKE (IPSec), Signal, etc.)\nto bootstrap some symmetric key material\nwhich may then be used to secure communication channel between two parties.\nThis introduction\nfocuses on the different ways the DH key exchange\nis used in practice\nin several protocols (especially TLS)\nand the impact of these different approaches on the security.\nThis is intended as a prelude for the upcoming next episodes\nabout how TLS works.
\n"}]}