Re: Ephemeral RSA (was Re: [TLS] Any advice regarding frequency

[Martin Rex <martin.rex@xxxxxxx>]

Whyte, William wrote:
> 
> RSA keys take a long time to generate, so it's not clear that this
> would have any significant advantages over ephemeral DH.

One of the advantages is that the code is already there and most
of it interoperability tested because the RSA_EXPORT key exchange
method requires an ephemeral RSA keypair for use with certs
that have RSA keys >512 bits.

There is no requirement to generate a new ephemeral RSA keypair on every
SSL handshake.  It should be perfectly sufficient for a TLS server
to re-generate an ephemeral keypair out-of-band like once per hour.

SSHD in daemon mode uses a similar approach.

-Martin 

_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls