I do a research in Logjam attack and I need a help in learning some terms that are new for me. what does "export grade" cryptography mean? and how this related to Logjam attack?

  • $\begingroup$ Logjam basically manipulated to get the handshake to use "export" parameters and then finish it as a MITM. As for what "export grade" means, search for "crypto wars" in the 90s. $\endgroup$ – SEJPM Nov 23 '16 at 19:36

"Export grade" cryptography is a result of The Crypto Wars. Laws were passed in the United States that resulted in the crippling of encryption software that was distributed outside of the united states. This section from wikipedia explains it well enough:

The longest key size allowed for export without individual license proceedings was 40 bits, so Netscape developed two versions of its web browser. The "U.S. edition" had the full 128-bit strength. The "International Edition" had its effective key length reduced to 40 bits by revealing 88 bits of the key in the SSL protocol. Acquiring the 'U.S. domestic' version turned out to be sufficient hassle that most computer users, even in the U.S., ended up with the 'International' version,[7] whose weak 40-bit encryption could be broken in a matter of days using a single personal computer. A similar situation occurred with Lotus Notes for the same reasons

The 40-bit limit was for symmetric ciphers, where there is no (known) attack better than trying all $2^n$ keys. Asymmetric algorithms like DH and RSA need larger key sizes for the same security; see e.g. How much computing resource is required to brute-force RSA? and Security strength of RSA in relation with the modulus size . At the time 512-bit RSA or DH was rated equivalent to 40-bit symmetric, and thus export of those algorithms was limited to 512 bits. (DSA was rated the same, but was not limited because it is not an encryption algorithm.) This is why weakdh.org states that:

The Logjam attack allows a man-in-the-middle attacker to downgrade vulnerable TLS connections to 512-bit export-grade cryptography.

Ultimately, some software was required to be written using key sizes that were understood to be breakable; export grade cryptography refers to this form of an algorithm that uses a reduced and breakable key size. The Logjam attack works by tricking the TLS exchange into using crypto that is weaker and potentially breakable.

  • $\begingroup$ proposed addition $\endgroup$ – dave_thompson_085 Nov 24 '16 at 5:38
  • $\begingroup$ @dave_thompson_085, if something is added about asymmetric ciphers I think it should discuss what export limits applied to them. Your suggestion just says 40-bit was the limit for symmetric ciphers, without mentioning one for asymmetric or citing a source. $\endgroup$ – otus Nov 24 '16 at 5:53
  • 1
    $\begingroup$ @otus: clarified 512 was the limit. I don't have a primary source; in those days government regulations like ITAR weren't online, instead you had to pay maybe \$100 to the Superintendent of Documents or travel to one of the depository libraries that had the Federal Register in paper books -- shelves and shelves full of them. I (or you!) could link 2246 and 6101 if you think that helps, but they only say 'US export law' for RSA-512 and don't explain DH-512 at all (though to anyone who knows the math the equivalence is obvious). $\endgroup$ – dave_thompson_085 Nov 24 '16 at 8:57
  • $\begingroup$ @dave_thompson_085 Thanks for the edits - it looks good! $\endgroup$ – Ella Rose Nov 24 '16 at 17:19

I do a research in Logjam attack and I need a help in learning some terms that are new for me. what does "export grade" cryptography mean? and how this related to Logjam attack?

In the 90's the government of USA built the Export Grade as an attempt to control foreign countries usage of cryptography

This list is composed of common crypto algorithms, but with their key length reduced in a way that NSA could eavesdrop on any communication, since they have the power to break the algorithm based in that reduced key length.

In the case of Logjam, it downgrades the selected Diffie-Hellman algorithm in TLS so it uses a 512-bit prime. In these conditions, the researchers (and NSA) are able to compute the symmetric key being used, thus impersonating on the whole TLS Handshake.


Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.