Mehdi Akiki

Posts tagged "tls"

  • Published on

    Reference

    My Laptop Still Trusted the Cracked eMudhra Keys

    Eight eMudhra CA keys had a private value below 256, so my laptop found all of them in a fraction of a second. Then I looked at what still trusted the root above them. The browsers were fixed in hours. curl, Python and the system store were not.
  • Published on

    Investigation · Part 9 of 10 · Following a TCP connection

    What a TLS Handshake Costs

    On loopback a TCP connect costs tens of microseconds and a TLS 1.3 handshake costs about one to three milliseconds. I counted the records, the bytes and the CPU on both sides, compared an RSA and an ECDSA certificate, measured resumption, and found 42 ms that were not TLS at all.