Collected research

The Curious Case of WebCrypto Diffie-Hellman on Firefox — Small Subgroups Key Recovery Attack on DH

Antonio Sanso · Into The Symmetry

Applies a small-subgroup confinement attack to Firefox's finite-field WebCrypto Diffie-Hellman implementation. Script execution mutates algorithm parameters after key generation, then chosen groups and the Chinese Remainder Theorem recover a supposedly non-extractable private key.

Record

Researcher

Antonio Sanso

Published by

Into The Symmetry

In the archive

• Collected in the 2020 research round

Tags

• browser
• javascript
• side-channel

This page is the archive's own catalogue record. The research is the work of Antonio Sanso, first published at the original source. Preserved copies are kept so the citation survives its host.