<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Hi Martin,</div><div><br></div><div>As far as i know, every DHE offers forward secrecy. ECDHE means that it uses elliptic curves. I think the reason why BetterCrypto does not recommend it is, most implementations use the NIST Curve which properbly has a NSA backdoor. Most crypto scientist recommend the Curve25519 which is very rare implemented. If the Curve25519 will be more widespread they will recommend ECDHE, because its much faster than DHE.<br><br>Andreas Mirbach<div><br></div><div>Sent from my iPad</div></div><div><br>On 22.04.2014, at 02:40, Martin J <<a href="mailto:rc6encrypted@gmail.com">rc6encrypted@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr"><div>Hi,</div><div><br></div><div>In many places throughout the text are EDH and EECDH used (e.g. Apache), and in the OpenVPN section is ECDHE is explicitly written that it have been excluded. ECDHE offers forward secrecy, which prevents captured packages to be decrypted later on, even when having the private key.</div>
<div><br></div><div>According to this talk by Nadia Heninger djb Tanja Lange given at 30C3 last year, those not ending with 'E' have other problems, and should be avoided. Please see and the next 5 minutes.</div>
<div><br></div><div><a href="http://youtu.be/HJB1mYEZPPA?t=20m50s">http://youtu.be/HJB1mYEZPPA?t=20m50s</a><br></div><div><br></div><div>Why are ECDHE not the preferred in the text?</div><div><br></div><div>Best regards,</div>
<div>Martin</div><div><br></div></div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Ach mailing list</span><br><span><a href="mailto:Ach@lists.cert.at">Ach@lists.cert.at</a></span><br><span><a href="http://lists.cert.at/cgi-bin/mailman/listinfo/ach">http://lists.cert.at/cgi-bin/mailman/listinfo/ach</a></span><br></div></blockquote></body></html>