| Description: | A previously published vulnerability in the TLS protocol allows a man-in-the-middle attacker to downgrade vulnerable TLS connections using ephemeral Diffie-Hellman key exchange to 512-bit export-grade cryptography. This vulnerability is known as 'Logjam'. AIX OpenSSL had the Logjam mitigation for TLS clients by rejecting handshakes with DH parameters shorter than 768 bits. This limit has now been increased to 1024 bits. |