CVE-2022-40735
MediumSummary
The Diffie-Hellman Key Agreement Protocol allows long exponents, making certain calculations unnecessarily expensive. The 1996 van Oorschot and Wiener paper showed that appropriately short exponents can be used with adequate subgroup constraints, but these are not utilized.
Risk Assessment
Using long exponents in DH can lead to increased CPU load and potentially slower communication, but does not pose a direct security threat unless combined with other weaknesses.
Recommendation
Configure DH implementations to use short exponents as recommended, and update cryptographic libraries to the latest versions.
Original NVD description (English source)
The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "(appropriately) short exponents" can be used when there are adequate subgroup constraints, and these shor