{"Transcoder":"pdf2json@4.0.3 [https://github.com/modesty/pdf2json]","Meta":{"PDFFormatVersion":"1.5","IsAcroFormPresent":false,"IsXFAPresent":false,"Title":"Imperfect Forward Secrecy: How Diffie-Hellman Fails in Practice","Author":"","Subject":"","Keywords":"","Creator":"LaTeX with hyperref package","Producer":"pdfTeX-1.40.14","CreationDate":"D:20150821110623-04'00'","ModDate":"D:20150821110805-04'00'","Trapped":{"name":"False"},"Metadata":{}},"Pages":[{"Width":38.25,"Height":49.5,"HLines":[],"VLines":[],"Fills":[],"Texts":[{"x":11.445,"y":4.582,"w":80.716,"clr":0,"sw":0.36196875,"A":"left","R":[{"T":"Imperfect","S":-1,"TS":[2,21.933,1,0]}]},{"x":16.801,"y":4.582,"w":70.746,"clr":0,"sw":0.36196875,"A":"left","R":[{"T":"Forward","S":-1,"TS":[2,21.933,1,0]}]},{"x":21.535,"y":4.582,"w":74.763,"clr":0,"sw":0.36196875,"A":"left","R":[{"T":"Secrecy:","S":-1,"TS":[2,21.933,1,0]}]},{"x":9.294,"y":5.827,"w":37.857,"clr":0,"sw":0.36196875,"A":"left","R":[{"T":"How","S":-1,"TS":[2,21.933,1,0]}]},{"x":11.971,"y":5.827,"w":120.564,"clr":0,"sw":0.36196875,"A":"left","R":[{"T":"Difﬁe-Hellman","S":-1,"TS":[2,21.933,1,0]}]},{"x":19.818,"y":5.827,"w":40.869,"clr":0,"sw":0.36196875,"A":"left","R":[{"T":"Fails","S":-1,"TS":[2,21.933,1,0]}]},{"x":22.684,"y":5.827,"w":85.72,"clr":0,"sw":0.36196875,"A":"left","R":[{"T":"inPractice","S":-1,"TS":[2,21.933,1,0]}]},{"x":3.8520000000000003,"y":7.462999999999999,"w":30.557,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"David","S":-1,"TS":[2,14.955,0,0]}]},{"x":5.97,"y":7.462999999999999,"w":34.55,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Adrian","S":-1,"TS":[2,14.955,0,0]}]},{"x":8.125,"y":7.224,"w":4.594,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"¶","S":-1,"TS":[2,8.978,0,0]}]},{"x":8.873,"y":7.462999999999999,"w":63.122,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Karthikeyan","S":-1,"TS":[2,14.955,0,0]}]},{"x":13.025,"y":7.462999999999999,"w":57.814,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Bhargavan","S":-1,"TS":[2,14.955,0,0]}]},{"x":16.59,"y":7.224,"w":3.819,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"∗","S":-1,"TS":[2,8.978,0,0]}]},{"x":17.338,"y":7.462999999999999,"w":26.564,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Zakir","S":-1,"TS":[2,14.955,0,0]}]},{"x":19.206,"y":7.462999999999999,"w":55.125,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Durumeric","S":-1,"TS":[2,14.955,0,0]}]},{"x":22.673,"y":7.224,"w":4.594,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"¶","S":-1,"TS":[2,8.978,0,0]}]},{"x":23.42,"y":7.462999999999999,"w":39.846,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Pierrick","S":-1,"TS":[2,14.955,0,0]}]},{"x":26.119,"y":7.462999999999999,"w":39.2,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Gaudry","S":-1,"TS":[2,14.955,0,0]}]},{"x":28.587,"y":7.224,"w":3.432,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"†","S":-1,"TS":[2,8.978,0,0]}]},{"x":29.334,"y":7.462999999999999,"w":45.178,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Matthew","S":-1,"TS":[2,14.955,0,0]}]},{"x":32.366,"y":7.462999999999999,"w":33.223,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Green","S":-1,"TS":[2,14.955,0,0]}]},{"x":34.427,"y":7.224,"w":3.432,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"§","S":-1,"TS":[2,8.978,0,0]}]},{"x":4.389,"y":8.241,"w":9.301,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"J.","S":-1,"TS":[2,14.955,0,0]}]},{"x":5.178,"y":8.241,"w":23.252,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Alex","S":-1,"TS":[2,14.955,0,0]}]},{"x":6.839,"y":8.241,"w":58.46,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Halderman","S":-1,"TS":[2,14.955,0,0]}]},{"x":10.467,"y":8.003,"w":4.594,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"¶","S":-1,"TS":[2,8.978,0,0]}]},{"x":11.214,"y":8.241,"w":31.226,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Nadia","S":-1,"TS":[2,14.955,0,0]}]},{"x":13.373,"y":8.241,"w":48.501,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Heninger","S":-1,"TS":[2,14.955,0,0]}]},{"x":16.405,"y":8.003,"w":3.432,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"‡","S":-1,"TS":[2,8.978,0,0]}]},{"x":17.152,"y":8.241,"w":27.891,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Drew","S":-1,"TS":[2,14.955,0,0]}]},{"x":19.103,"y":8.241,"w":46.505,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Springall","S":-1,"TS":[2,14.955,0,0]}]},{"x":22.006,"y":8.003,"w":4.594,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"¶","S":-1,"TS":[2,8.978,0,0]}]},{"x":22.753,"y":8.241,"w":57.133,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Emmanuel","S":-1,"TS":[2,14.955,0,0]}]},{"x":26.531,"y":8.241,"w":37.204,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Thomé","S":-1,"TS":[2,14.955,0,0]}]},{"x":28.849,"y":8.003,"w":3.432,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"†","S":-1,"TS":[2,8.978,0,0]}]},{"x":29.596,"y":8.241,"w":25.918,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Luke","S":-1,"TS":[2,14.955,0,0]}]},{"x":31.424,"y":8.241,"w":40.539,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Valenta","S":-1,"TS":[2,14.955,0,0]}]},{"x":33.89,"y":8.003,"w":3.432,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"‡","S":-1,"TS":[2,8.978,0,0]}]},{"x":4.608,"y":9.019,"w":49.828,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Benjamin","S":-1,"TS":[2,14.955,0,0]}]},{"x":7.93,"y":9.019,"w":65.788,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"VanderSloot","S":-1,"TS":[2,14.955,0,0]}]},{"x":11.99,"y":8.781,"w":4.594,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"¶","S":-1,"TS":[2,8.978,0,0]}]},{"x":12.737,"y":9.019,"w":20.587,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Eric","S":-1,"TS":[2,14.955,0,0]}]},{"x":14.231,"y":9.019,"w":46.493,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Wustrow","S":-1,"TS":[2,14.955,0,0]}]},{"x":17.115,"y":8.781,"w":4.594,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"¶","S":-1,"TS":[2,8.978,0,0]}]},{"x":17.862,"y":9.019,"w":47.186,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Santiago","S":-1,"TS":[2,14.955,0,0]}]},{"x":21.019,"y":9.019,"w":89.698,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Zanella-Béguelin","S":-1,"TS":[2,14.955,0,0]}]},{"x":26.625,"y":8.781,"w":3.819,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"k","S":-1,"TS":[2,8.978,0,0]}]},{"x":27.372,"y":9.019,"w":23.922,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Paul","S":-1,"TS":[2,14.955,0,0]}]},{"x":29.075,"y":9.019,"w":70.403,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Zimmermann","S":-1,"TS":[2,14.955,0,0]}]},{"x":33.464,"y":8.781,"w":3.432,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"†","S":-1,"TS":[2,8.978,0,0]}]},{"x":6.353,"y":9.694,"w":3.819,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"∗","S":-1,"TS":[2,8.978,0,0]}]},{"x":6.681,"y":9.932,"w":26.571,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"INRIA","S":-1,"TS":[2,12.963,0,0]}]},{"x":8.515,"y":9.932,"w":88.033,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Paris-Rocquencourt","S":-1,"TS":[2,12.963,0,0]}]},{"x":15.272,"y":9.694,"w":3.432,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"†","S":-1,"TS":[2,8.978,0,0]}]},{"x":15.6,"y":9.932,"w":26.571,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"INRIA","S":-1,"TS":[2,12.963,0,0]}]},{"x":17.434,"y":9.932,"w":59.24,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Nancy-Grand","S":-1,"TS":[2,12.963,0,0]}]},{"x":21.31,"y":9.932,"w":17.166,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Est,","S":-1,"TS":[2,12.963,0,0]}]},{"x":22.556,"y":9.932,"w":30.995,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"CNRS,","S":-1,"TS":[2,12.963,0,0]}]},{"x":24.666,"y":9.932,"w":16.618,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,12.963,0,0]}]},{"x":25.878,"y":9.932,"w":44.286,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Université","S":-1,"TS":[2,12.963,0,0]}]},{"x":28.819,"y":9.932,"w":11.079,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"de","S":-1,"TS":[2,12.963,0,0]}]},{"x":29.684,"y":9.932,"w":36.544,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Lorraine","S":-1,"TS":[2,12.963,0,0]}]},{"x":5.235,"y":10.347,"w":3.819,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"k","S":-1,"TS":[2,8.978,0,0]}]},{"x":5.563,"y":10.585,"w":40.41,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Microsoft","S":-1,"TS":[2,12.963,0,0]}]},{"x":8.262,"y":10.585,"w":42.632,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Research","S":-1,"TS":[2,12.963,0,0]}]},{"x":12.172,"y":10.347,"w":3.432,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"‡","S":-1,"TS":[2,8.978,0,0]}]},{"x":12.5,"y":10.585,"w":43.728,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"University","S":-1,"TS":[2,12.963,0,0]}]},{"x":15.406,"y":10.585,"w":8.309,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"of","S":-1,"TS":[2,12.963,0,0]}]},{"x":16.099,"y":10.585,"w":59.25,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Pennsylvania","S":-1,"TS":[2,12.963,0,0]}]},{"x":20.985,"y":10.347,"w":3.432,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"§","S":-1,"TS":[2,8.978,0,0]}]},{"x":21.314,"y":10.585,"w":26.581,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Johns","S":-1,"TS":[2,12.963,0,0]}]},{"x":23.148,"y":10.585,"w":35.986,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Hopkins","S":-1,"TS":[2,12.963,0,0]}]},{"x":26.642,"y":10.347,"w":4.594,"clr":0,"sw":1.59140625,"A":"left","R":[{"T":"¶","S":-1,"TS":[2,8.978,0,0]}]},{"x":26.971,"y":10.585,"w":43.728,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"University","S":-1,"TS":[2,12.963,0,0]}]},{"x":29.877,"y":10.585,"w":8.309,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"of","S":-1,"TS":[2,12.963,0,0]}]},{"x":30.57,"y":10.585,"w":39.862,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Michigan","S":-1,"TS":[2,12.963,0,0]}]},{"x":9.622,"y":11.675,"w":14.944,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"For","S":-1,"TS":[2,12.963,0,0]}]},{"x":10.729,"y":11.675,"w":42.642,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"additional","S":-1,"TS":[2,12.963,0,0]}]},{"x":13.568,"y":11.675,"w":40.41,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"materials","S":-1,"TS":[2,12.963,0,0]}]},{"x":16.266,"y":11.675,"w":16.618,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,12.963,0,0]}]},{"x":17.478,"y":11.675,"w":32.121,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"contact","S":-1,"TS":[2,12.963,0,0]}]},{"x":19.659,"y":11.675,"w":52.047,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"information,","S":-1,"TS":[2,12.963,0,0]}]},{"x":23.085,"y":11.675,"w":17.156,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"visit","S":-1,"TS":[2,12.963,0,0]}]},{"x":24.33,"y":11.675,"w":59.788,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"WeakDH.org.","S":-1,"TS":[2,12.963,0,0]}]},{"x":3.112,"y":13.358,"w":65.095,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ABSTRACT","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.083,"y":14.261,"w":225.334,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WeinvestigatethesecurityofDiﬃe-Hellmankeyexchangeas","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":14.915,"w":217.688,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"usedinpopularInternetprotocolsandﬁndittobelesssecure","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":15.568999999999999,"w":216.214,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thanwidelybelieved.First,wepresentLogjam,anovelﬂaw","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":16.222,"w":225.016,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inTLSthatletsaman-in-the-middledowngradeconnections","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":16.876,"w":216.583,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"to“export-grade”Diﬃe-Hellman.Tocarryoutthisattack,","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":3.092,"y":17.53,"w":217.01,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"weimplementthenumberﬁeldsievediscretelogalgorithm.","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":3.091,"y":18.184,"w":206.45,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Afteraweek-longprecomputationforaspeciﬁed512-bit","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":18.837,"w":214.494,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"group,wecancomputearbitrarydiscretelogsinthatgroup","S":-1,"TS":[2,11.849442,0,0]}]},{"x":3.112,"y":19.491,"w":218.329,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inaboutaminute.Weﬁndthat82%ofvulnerableserversuse","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":20.145,"w":225.516,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"asingle512-bitgroup,allowingustocompromiseconnections","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":20.799,"w":215.657,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"to7%ofAlexaTopMillionHTTPSsites.Inresponse,major","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":21.453,"w":181.839,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"browsersarebeingchangedtorejectshortgroups.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":22.107,"w":213.95,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WegoontoconsiderDiﬃe-Hellmanwith768-and1024-bit","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":22.76,"w":216.245,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groups.Weestimatethateveninthe1024-bitcase,thecom-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":23.414,"w":222.065,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"putationsareplausiblegivennation-stateresources.Asmall","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":24.068,"w":215.089,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"numberofﬁxedorstandardizedgroupsareusedbymillions","S":-1,"TS":[2,11.83151,0,0]}]},{"x":3.112,"y":24.722,"w":215.826,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofservers;performingprecomputationforasingle1024-bit","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":3.112,"y":25.375,"w":218.574,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groupwouldallowpassiveeavesdroppingon18%ofpopular","S":-1,"TS":[2,11.849442,0,0]}]},{"x":3.112,"y":26.029,"w":208.698,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"HTTPSsites,andasecondgroupwouldallowdecryption","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":26.683,"w":201.976,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"oftraﬃcto66%ofIPsecVPNsand26%ofSSHservers.A","S":-1,"TS":[2,11.957034,0,0]}]},{"x":3.112,"y":27.337,"w":220.231,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"closereadingofpublishedNSAleaksshowsthattheagency’s","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":27.991,"w":212.109,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attacksonVPNsareconsistentwithhavingachievedsuch","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":3.112,"y":28.645,"w":215.667,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"abreak.Weconcludethatmovingtostrongerkeyexchange","S":-1,"TS":[2,11.813578,0,0]}]},{"x":3.112,"y":29.298,"w":208.564,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"methodsshouldbeapriorityfortheInternetcommunity.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":30.999,"w":8.966,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1.","S":-1,"TS":[2,14.955,0,0]}]},{"x":4.42,"y":30.999,"w":95.64,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"INTRODUCTION","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.673,"y":31.808999999999997,"w":201.555,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Diﬃe-Hellmankeyexchangeiswidelyusedtoestablish","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":32.462,"w":220.257,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sessionkeysinInternetprotocols.Itisthemainkeyexchange","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":33.116,"w":209.259,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mechanisminSSHandIPsecandapopularoptioninTLS.","S":-1,"TS":[2,12.001864,0,0]}]},{"x":3.083,"y":33.77,"w":220.082,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WeexaminehowDiﬃe-Hellmaniscommonlyimplemented","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":3.112,"y":34.424,"w":216.975,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"anddeployedwiththeseprotocolsandﬁndthat,inpractice,","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":3.112,"y":35.078,"w":193.049,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"itfrequentlyoﬀerslesssecuritythanwidelybelieved.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":35.731,"w":205.399,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Therearetworeasonsforthis.First,asurprisingnumber","S":-1,"TS":[2,11.83151,0,0]}]},{"x":3.112,"y":36.385,"w":214.711,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofserversuseweakDiﬃe-Hellmanparametersormaintain","S":-1,"TS":[2,12.118421999999999,0,0]}]},{"x":3.112,"y":37.039,"w":190.998,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"supportforobsolete1990s-eraexport-gradecrypto.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":15.618,"y":37.039,"w":20.757,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"More","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":37.693,"w":219.823,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"critically,thecommonpracticeofusingstandardized,hard-","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":39.736,"w":30.999,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Permission","S":-1,"TS":[2,9.974,0,0]}]},{"x":5.193,"y":39.736,"w":5.426,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"to","S":-1,"TS":[2,9.974,0,0]}]},{"x":5.675,"y":39.736,"w":15.106,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"make","S":-1,"TS":[2,9.974,0,0]}]},{"x":6.762,"y":39.736,"w":17.826,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"digital","S":-1,"TS":[2,9.974,0,0]}]},{"x":8.02,"y":39.736,"w":5.809,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"or","S":-1,"TS":[2,9.974,0,0]}]},{"x":8.526,"y":39.736,"w":12.393,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"hard","S":-1,"TS":[2,9.974,0,0]}]},{"x":9.444,"y":39.736,"w":17.819,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"copies","S":-1,"TS":[2,9.974,0,0]}]},{"x":10.701,"y":39.736,"w":5.809,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"of","S":-1,"TS":[2,9.974,0,0]}]},{"x":11.207,"y":39.736,"w":10.845,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"part","S":-1,"TS":[2,9.974,0,0]}]},{"x":12.028,"y":39.736,"w":5.809,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"or","S":-1,"TS":[2,9.974,0,0]}]},{"x":12.534,"y":39.736,"w":6.974,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"all","S":-1,"TS":[2,9.974,0,0]}]},{"x":13.113,"y":39.736,"w":5.809,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"of","S":-1,"TS":[2,9.974,0,0]}]},{"x":13.619,"y":39.736,"w":10.077,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"this","S":-1,"TS":[2,9.974,0,0]}]},{"x":14.392,"y":39.736,"w":14.332,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"work","S":-1,"TS":[2,9.974,0,0]}]},{"x":15.431,"y":39.736,"w":8.132,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"for","S":-1,"TS":[2,9.974,0,0]}]},{"x":16.083,"y":39.736,"w":23.628,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"personal","S":-1,"TS":[2,9.974,0,0]}]},{"x":17.702,"y":39.736,"w":5.809,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"or","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.112,"y":40.296,"w":28.28,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"classroom","S":-1,"TS":[2,9.974,0,0]}]},{"x":5.001,"y":40.296,"w":9.296,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"use","S":-1,"TS":[2,9.974,0,0]}]},{"x":5.702,"y":40.296,"w":4.652,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"is","S":-1,"TS":[2,9.974,0,0]}]},{"x":6.114,"y":40.296,"w":20.915,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"granted","S":-1,"TS":[2,9.974,0,0]}]},{"x":7.542,"y":40.296,"w":21.313,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"without","S":-1,"TS":[2,9.974,0,0]}]},{"x":8.995,"y":40.296,"w":8.515,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"fee","S":-1,"TS":[2,9.974,0,0]}]},{"x":9.648,"y":40.296,"w":24.793,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"provided","S":-1,"TS":[2,9.974,0,0]}]},{"x":11.319,"y":40.296,"w":10.461,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"that","S":-1,"TS":[2,9.974,0,0]}]},{"x":12.093,"y":40.296,"w":17.819,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"copies","S":-1,"TS":[2,9.974,0,0]}]},{"x":13.328,"y":40.296,"w":8.515,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"are","S":-1,"TS":[2,9.974,0,0]}]},{"x":13.98,"y":40.296,"w":8.913,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"not","S":-1,"TS":[2,9.974,0,0]}]},{"x":14.659,"y":40.296,"w":15.106,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"made","S":-1,"TS":[2,9.974,0,0]}]},{"x":15.724,"y":40.296,"w":5.809,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"or","S":-1,"TS":[2,9.974,0,0]}]},{"x":16.207,"y":40.296,"w":29.835,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"distributed","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.112,"y":40.857,"w":8.132,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"for","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.758,"y":40.857,"w":15.113,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"proﬁt","S":-1,"TS":[2,9.974,0,0]}]},{"x":4.841,"y":40.857,"w":5.809,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"or","S":-1,"TS":[2,9.974,0,0]}]},{"x":5.342,"y":40.857,"w":32.924,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"commercial","S":-1,"TS":[2,9.974,0,0]}]},{"x":7.537,"y":40.857,"w":28.273,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"advantage","S":-1,"TS":[2,9.974,0,0]}]},{"x":9.443,"y":40.857,"w":10.07,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,9.974,0,0]}]},{"x":10.21,"y":40.857,"w":10.461,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"that","S":-1,"TS":[2,9.974,0,0]}]},{"x":11.002,"y":40.857,"w":17.819,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"copies","S":-1,"TS":[2,9.974,0,0]}]},{"x":12.253,"y":40.857,"w":12.002,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"bear","S":-1,"TS":[2,9.974,0,0]}]},{"x":13.141,"y":40.857,"w":10.077,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"this","S":-1,"TS":[2,9.974,0,0]}]},{"x":13.909,"y":40.857,"w":17.044,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"notice","S":-1,"TS":[2,9.974,0,0]}]},{"x":15.112,"y":40.857,"w":10.07,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,9.974,0,0]}]},{"x":15.879000000000001,"y":40.857,"w":8.522,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"the","S":-1,"TS":[2,9.974,0,0]}]},{"x":16.55,"y":40.857,"w":9.687,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"full","S":-1,"TS":[2,9.974,0,0]}]},{"x":17.293,"y":40.857,"w":12.393,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"cita-","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.112,"y":41.417,"w":10.852,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"tion","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.9450000000000003,"y":41.417,"w":6.974,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"on","S":-1,"TS":[2,9.974,0,0]}]},{"x":4.536,"y":41.417,"w":8.522,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"the","S":-1,"TS":[2,9.974,0,0]}]},{"x":5.224,"y":41.417,"w":10.852,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ﬁrst","S":-1,"TS":[2,9.974,0,0]}]},{"x":6.057,"y":41.417,"w":14.91,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"page.","S":-1,"TS":[2,9.974,0,0]}]},{"x":7.262,"y":41.417,"w":30.999,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Copyrights","S":-1,"TS":[2,9.974,0,0]}]},{"x":9.354,"y":41.417,"w":8.132,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"for","S":-1,"TS":[2,9.974,0,0]}]},{"x":10.018,"y":41.417,"w":29.828,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"third-party","S":-1,"TS":[2,9.974,0,0]}]},{"x":12.036,"y":41.417,"w":33.705,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"components","S":-1,"TS":[2,9.974,0,0]}]},{"x":14.298,"y":41.417,"w":5.809,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"of","S":-1,"TS":[2,9.974,0,0]}]},{"x":14.816,"y":41.417,"w":10.077,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"this","S":-1,"TS":[2,9.974,0,0]}]},{"x":15.601,"y":41.417,"w":14.332,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"work","S":-1,"TS":[2,9.974,0,0]}]},{"x":16.652,"y":41.417,"w":13.564,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"must","S":-1,"TS":[2,9.974,0,0]}]},{"x":17.654,"y":41.417,"w":6.583,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"be","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.112,"y":41.977,"w":24.597,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"honored.","S":-1,"TS":[2,9.974,0,0]}]},{"x":4.892,"y":41.977,"w":9.687,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"For","S":-1,"TS":[2,9.974,0,0]}]},{"x":5.642,"y":41.977,"w":6.974,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"all","S":-1,"TS":[2,9.974,0,0]}]},{"x":6.223,"y":41.977,"w":14.332,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"other","S":-1,"TS":[2,9.974,0,0]}]},{"x":7.264,"y":41.977,"w":13.753,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"uses,","S":-1,"TS":[2,9.974,0,0]}]},{"x":8.277,"y":41.977,"w":20.141,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"contact","S":-1,"TS":[2,9.974,0,0]}]},{"x":9.681,"y":41.977,"w":8.522,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"the","S":-1,"TS":[2,9.974,0,0]}]},{"x":10.358,"y":41.977,"w":49.773,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Owner/Author(s).","S":-1,"TS":[2,9.974,0,0]}]},{"x":13.712,"y":41.977,"w":28.287,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Copyright","S":-1,"TS":[2,9.974,0,0]}]},{"x":15.624,"y":41.977,"w":4.652,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"is","S":-1,"TS":[2,9.974,0,0]}]},{"x":16.06,"y":41.977,"w":12.009,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"held","S":-1,"TS":[2,9.974,0,0]}]},{"x":16.955,"y":41.977,"w":6.974,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"by","S":-1,"TS":[2,9.974,0,0]}]},{"x":17.535,"y":41.977,"w":8.522,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"the","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.112,"y":42.538,"w":46.286,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"owner/author(s).","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.112,"y":43.098,"w":23.83,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"CCS’15,","S":-1,"TS":[2,9.974,0,0]}]},{"x":4.711,"y":43.098,"w":22.463,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"October","S":-1,"TS":[2,9.974,0,0]}]},{"x":6.224,"y":43.098,"w":19.179,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"12–16,","S":-1,"TS":[2,9.974,0,0]}]},{"x":7.531,"y":43.098,"w":15.692,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2015,","S":-1,"TS":[2,9.974,0,0]}]},{"x":8.621,"y":43.098,"w":22.268,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Denver,","S":-1,"TS":[2,9.974,0,0]}]},{"x":10.122,"y":43.098,"w":27.701,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Colorado,","S":-1,"TS":[2,9.974,0,0]}]},{"x":11.962,"y":43.098,"w":15.692,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"USA.","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.112,"y":43.658,"w":15.887,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ACM","S":-1,"TS":[2,9.974,0,0]}]},{"x":4.214,"y":43.658,"w":74.189,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"978-1-4503-3832-5/15/10.","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.112,"y":44.219,"w":14.332,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DOI:","S":-1,"TS":[2,9.974,0,0]}]},{"x":4.117,"y":44.219,"w":124.186,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"http://dx.doi.org/10.1145/2810103.2813707.","S":-1,"TS":[2,9.974,0,0]}]},{"x":19.551,"y":13.358,"w":214.642,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"coded,orwidelysharedDiﬃe-Hellmanparametershasthe","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":19.551,"y":14.012,"w":222.68,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"eﬀectofdramaticallyreducingthecostoflarge-scaleattacks,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":14.666,"w":172.682,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bringingsomewithinrangeoffeasibilitytoday.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":15.318999999999999,"w":206.836,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ThecurrentbesttechniqueforattackingDiﬃe-Hellman","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":15.972999999999999,"w":192.478,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"reliesoncompromisingoneoftheprivateexponents(","S":-1,"TS":[2,12.14532,0,0]}]},{"x":33.413,"y":15.972999999999999,"w":4.882,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"a","S":-1,"TS":[2,11.966,0,1]}]},{"x":33.718,"y":15.972999999999999,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",","S":-1,"TS":[2,12.14532,0,0]}]},{"x":34.087,"y":15.972999999999999,"w":3.949,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,11.966,0,1]}]},{"x":34.334,"y":15.972999999999999,"w":3.584,"clr":0,"sw":0.669125,"A":"left","R":[{"T":")","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":16.627,"w":208.547,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bycomputingthediscretelogofthecorrespondingpublic","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.536,"y":17.281,"w":24.833,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"value(","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.302,"y":17.281,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":21.597,"y":17.043,"w":4.035,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"a","S":-1,"TS":[2,8.978,0,1]}]},{"x":22.04,"y":17.281,"w":17.406,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"mod","S":-1,"TS":[2,11.966,0,0]}]},{"x":23.304,"y":17.281,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":23.593,"y":17.281,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",","S":-1,"TS":[2,12.14532,0,0]}]},{"x":23.977,"y":17.281,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":24.272,"y":17.043,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":24.668,"y":17.281,"w":17.406,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"mod","S":-1,"TS":[2,11.966,0,0]}]},{"x":25.932,"y":17.281,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.221,"y":17.281,"w":6.144,"clr":0,"sw":0.669125,"A":"left","R":[{"T":").","S":-1,"TS":[2,12.14532,0,0]}]},{"x":26.938,"y":17.281,"w":112.218,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Withstate-of-the-artnumber","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":17.935,"w":219.714,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ﬁeldsievealgorithms,computingasinglediscretelogismore","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":18.588,"w":204.322,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"diﬃcultthanfactoringanRSAmodulusofthesamesize.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":19.242,"w":225.269,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"However,anadversarywhoperformsalargeprecomputation","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":19.896,"w":38.696,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"foraprime","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":22.334,"y":19.896,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":22.76,"y":19.896,"w":178.359,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"canthenquicklycalculatearbitrarydiscretelogs","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":20.55,"w":214.524,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inthatgroup,amortizingthecostoveralltargetsthatshare","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":21.204,"w":58.462,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thisparameter.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":23.7,"y":21.204,"w":142.683,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Althoughthisfactiswellknownamong","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":21.857,"w":206.607,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mathematicalcryptographers,itseemstohavebeenlost","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":22.511,"w":222.724,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"amongpractitionersdeployingcryptosystems.Weexploitit","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":19.551,"y":23.165,"w":111.481,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"toobtainthefollowingresults:","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.508,"y":24.143,"w":26.112,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Active","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.419,"y":24.143,"w":28.976,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"attacks","S":-1,"TS":[2,12.14532,0,0]}]},{"x":23.512,"y":24.143,"w":9.727,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"on","S":-1,"TS":[2,12.14532,0,0]}]},{"x":24.379,"y":24.143,"w":25.878,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"export","S":-1,"TS":[2,12.14532,0,0]}]},{"x":26.275,"y":24.143,"w":28.233,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ciphers","S":-1,"TS":[2,12.14532,0,0]}]},{"x":28.321,"y":24.143,"w":7.679,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"in","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.057,"y":24.143,"w":20.094,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"TLS.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":31.014,"y":24.143,"w":51.477,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Weintroduce","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":24.797,"w":218.1,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Logjam,anewattackonTLSbywhichaman-in-the-middle","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":25.451,"w":217.958,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attackercandowngradeaconnectiontoexport-gradecryp-","S":-1,"TS":[2,12.037728,0,0]}]},{"x":19.551,"y":26.105,"w":222.77,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tography.ThisattackisreminiscentoftheFREAKattack[7]","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":26.759,"w":223.564,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"butappliestotheephemeralDiﬃe-Hellmanciphersuitesand","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":27.412,"w":221.695,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"isaTLSprotocolﬂawratherthananimplementationvulner-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":28.066,"w":222.247,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ability.Wepresentmeasurementsthatshowthatthisattack","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":28.72,"w":214.027,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"appliesto8.4%ofAlexaTopMillionHTTPSsitesand3.4%","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":29.374,"w":220.671,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofallHTTPSserversthathavebrowser-trustedcertiﬁcates.","S":-1,"TS":[2,11.957034,0,0]}]},{"x":20.111,"y":30.028,"w":204.368,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Toexploitthisattack,weimplementedthenumberﬁeld","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":19.551,"y":30.681,"w":220.111,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sievediscretelogalgorithmandcarriedoutprecomputation","S":-1,"TS":[2,11.876339999999999,0,0]}]},{"x":19.551,"y":31.335,"w":205.084,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"fortwo512-bitDiﬃe-Hellmangroupsusedbymorethan","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":31.988999999999997,"w":108.971,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"92%ofthevulnerableservers.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":26.823,"y":31.988999999999997,"w":93.844,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thisallowsustocompute","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":32.643,"w":219.4,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"individualdiscretelogsinaboutaminute.Usingourdiscrete","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":33.297,"w":218.273,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"logoracle,wecancompromiseconnectionstoover7%ofTop","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":33.95,"w":213.862,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"MillionHTTPSsites.Discretelogsoverlargergroupshave","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":19.551,"y":34.604,"w":202.486,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"beencomputedbefore[8],but,asfarasweareaware,this","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":19.551,"y":35.258,"w":212.186,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"istheﬁrsttimetheyhavebeenexploitedtoexposeconcrete","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":19.536,"y":35.912,"w":138.508,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"vulnerabilitiesinreal-worldsystems.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":36.566,"w":210.978,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WewerealsoabletocompromiseDiﬃe-Hellmanformany","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":19.551,"y":37.219,"w":224.581,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"otherserversbecauseofdesignandimplementationﬂawsand","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":37.873,"w":226.626,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"conﬁgurationmistakes.Theseincludeuseofcomposite-order","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":38.527,"w":208.926,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"subgroupsincombinationwithshortexponents,whichis","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.536,"y":39.181,"w":225.385,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"vulnerabletoaknownattackofvanOorschotandWiener[51],","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":39.835,"w":226.01,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andtheinabilityofclientstoproperlyvalidateDiﬃe-Hellman","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":40.488,"w":223.816,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"parameterswithoutknowingthesubgrouporder,whichTLS","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":41.142,"w":123.762,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"hasnoprovisiontocommunicate.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.982,"y":41.142,"w":76.603,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Weimplementthese","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":41.796,"w":227.597,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attackstooanddiscoverseveralvulnerableimplementations.","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":19.519,"y":42.774,"w":21.474,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Risks","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.099,"y":42.774,"w":18.706,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"from","S":-1,"TS":[2,12.14532,0,0]}]},{"x":22.502,"y":42.774,"w":33.787,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"common","S":-1,"TS":[2,12.14532,0,0]}]},{"x":24.867,"y":42.774,"w":32.765,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1024-bit","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.166,"y":42.774,"w":29.253,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"groups.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.631,"y":42.774,"w":68.634,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Weexploretheim-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":43.428,"w":213.888,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"plicationsofprecomputationattacksfor768-and1024-bit","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":44.082,"w":220.194,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groups,whicharewidelyusedinpracticeandstillconsidered","S":-1,"TS":[2,11.786679999999999,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[{"x":3.882,"y":10.241,"w":0.703,"l":20.039,"oc":"#7f7f7f","dsh":1},{"x":3.882,"y":3.588,"w":0.703,"l":20.039,"oc":"#7f7f7f","dsh":1},{"x":24.957,"y":3.588,"w":0.703,"l":9.27,"oc":"#7f7f7f","dsh":1},{"x":24.957,"y":10.241,"w":0.703,"l":9.27,"oc":"#7f7f7f","dsh":1},{"x":4.619,"y":7.382,"w":0.703,"l":1.251,"oc":"#000000"},{"x":5.904,"y":7.382,"w":0.703,"l":1.813,"oc":"#000000"},{"x":8.232,"y":7.382,"w":0.703,"l":1.813,"oc":"#000000"},{"x":10.078,"y":7.382,"w":0.703,"l":1.251,"oc":"#000000"},{"x":11.362,"y":7.382,"w":0.703,"l":1.813,"oc":"#000000"},{"x":13.69,"y":7.382,"w":0.703,"l":1.813,"oc":"#000000"},{"x":15.536,"y":7.382,"w":0.703,"l":1.251,"oc":"#000000"},{"x":20.754,"y":7.382,"w":0.703,"l":0.889,"oc":"#000000"},{"x":24.006,"y":7.382,"w":0.703,"l":3.097,"oc":"#000000"},{"x":27.136,"y":7.382,"w":0.703,"l":1.491,"oc":"#000000"},{"x":28.661,"y":7.382,"w":0.703,"l":1.813,"oc":"#000000"},{"x":30.989,"y":7.382,"w":0.703,"l":1.813,"oc":"#000000"},{"x":32.835,"y":7.382,"w":0.703,"l":0.577,"oc":"#000000"},{"x":19.801,"y":42.502,"w":0.597,"l":7.472,"oc":"#000"}],"VLines":[{"x":3.589,"y":3.882,"w":0.703,"l":6.066,"oc":"#7f7f7f","dsh":1},{"x":24.214,"y":3.882,"w":0.703,"l":6.066,"oc":"#7f7f7f","dsh":1},{"x":24.664,"y":3.882,"w":0.703,"l":6.066,"oc":"#7f7f7f","dsh":1},{"x":34.521,"y":3.882,"w":0.703,"l":6.066,"oc":"#7f7f7f","dsh":1},{"x":23.99,"y":6.389,"w":0.703,"l":1.512,"oc":"#000000"},{"x":21.691,"y":6.389,"w":0.703,"l":1.512,"oc":"#000000"},{"x":27.136,"y":5.501,"w":0.703,"l":1.847,"oc":"#000000"}],"Fills":[{"x":3.589,"y":3.588,"w":20.626,"h":6.652,"oc":"#fffad8"},{"x":24.664,"y":3.588,"w":9.857,"h":6.652,"oc":"#ffe5e5"},{"x":21.691,"y":6.389,"w":2.299,"h":1.8,"oc":"#fff39e"},{"x":21.691,"y":6.102,"w":2.299,"h":0.575,"oc":"#fff39e"}],"Texts":[{"x":3.7880000000000003,"y":6.71,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":6.101,"y":3.7430000000000003,"w":44.283,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"polynomial","S":-1,"TS":[2,11.966,0,0]}]},{"x":6.476,"y":4.55,"w":34.36,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"selection","S":-1,"TS":[2,11.966,0,0]}]},{"x":12.189,"y":3.8339999999999996,"w":27.444,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"sieving","S":-1,"TS":[2,11.966,0,0]}]},{"x":17.827,"y":3.6790000000000003,"w":22.55,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"linear","S":-1,"TS":[2,11.966,0,0]}]},{"x":17.582,"y":4.485,"w":29.206,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"algebra","S":-1,"TS":[2,11.966,0,0]}]},{"x":21.667,"y":6.795,"w":11.775,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"log","S":-1,"TS":[2,11.966,0,0]}]},{"x":22.76,"y":6.795,"w":10.239,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"db","S":-1,"TS":[2,11.966,0,0]}]},{"x":10.499,"y":8.913,"w":73.345,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"precomputation","S":-1,"TS":[2,11.966,1,0]}]},{"x":26.383,"y":4.382,"w":11.493,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"y,g","S":-1,"TS":[2,11.966,0,1]}]},{"x":29.412,"y":4.084,"w":26.168,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"descen","S":-1,"TS":[2,11.966,0,0]}]},{"x":31.32,"y":4.084,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"t","S":-1,"TS":[2,11.966,0,0]}]},{"x":33.436,"y":6.774,"w":5.224,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,11.966,0,1]}]},{"x":28.171,"y":8.913,"w":46.123,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"individual","S":-1,"TS":[2,11.966,1,0]}]},{"x":31.826999999999998,"y":8.913,"w":13.557,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"log","S":-1,"TS":[2,11.966,1,0]}]},{"x":3.112,"y":10.673,"w":33.172,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Figure1:","S":-1,"TS":[2,12.091524,0,0]}]},{"x":5.663,"y":10.673,"w":203.346,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Thenumberﬁeldsievealgorithmfordiscretelog","S":-1,"TS":[2,11.966,1,0]}]},{"x":20.075,"y":10.673,"w":203.024,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"consistsofaprecomputationstagethatdependsonlyon","S":-1,"TS":[2,12.091524,0,0]}]},{"x":3.112,"y":11.327,"w":35.864,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theprime","S":-1,"TS":[2,11.840475999999999,0,0]}]},{"x":5.706,"y":11.327,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":6.186,"y":11.327,"w":413.233,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andadescentstagethatcomputesindividuallogs.Withsuﬃcientprecomputation,anattackercanquicklybreak","S":-1,"TS":[2,11.840475999999999,0,0]}]},{"x":3.112,"y":11.98,"w":182.845,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"anyDiﬃe-Hellmaninstancesthatuseaparticular","S":-1,"TS":[2,11.966,0,0]}]},{"x":15.867999999999999,"y":11.98,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":16.158,"y":11.98,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":13.92,"w":216.566,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"secure.Weprovidenewestimatesforthecomputationalre-","S":-1,"TS":[2,11.948068,0,0]}]},{"x":3.112,"y":14.574,"w":217.589,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sourcesnecessarytocomputediscretelogsingroupsofthese","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":15.228,"w":219.088,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sizes,concludingthat768-bitgroupsarewithinrangeofaca-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":15.881,"w":212.132,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"demicteams,and1024-bitgroupsmayplausiblybewithin","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":3.112,"y":16.535,"w":214.57,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"rangeofstate-levelattackers.Inbothcases,individuallogs","S":-1,"TS":[2,11.939102,0,0]}]},{"x":3.112,"y":17.189,"w":212.518,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"canbequicklycomputedaftertheinitialprecomputation.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":17.843,"w":213.585,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WethenexamineevidencefrompublishedSnowdendocu-","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":3.112,"y":18.497,"w":221.147,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mentsthatsuggestsNSAmayalreadybeexploiting1024-bit","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":19.15,"w":223.892,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Diﬃe-HellmantodecryptVPNtraﬃc.Weperformmeasure-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":19.804,"w":210.412,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mentstounderstandtheimplicationsofsuchanattackfor","S":-1,"TS":[2,12.05566,0,0]}]},{"x":3.112,"y":20.458,"w":226.445,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"popularprotocols,ﬁndingthatanattackerwhocouldperform","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":21.112,"w":220.165,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"precomputationsforten1024-bitgroupscouldpassivelyde-","S":-1,"TS":[2,11.930136,0,0]}]},{"x":3.112,"y":21.766,"w":214.997,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"crypttraﬃctoabout66%ofIKEVPNs,26%ofSSHservers,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.084,"y":22.419,"w":202.494,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"16%ofSMTPservers,and24%ofpopularHTTPSsites.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.077,"y":23.264,"w":45.87,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Mitigations","S":-1,"TS":[2,12.14532,0,0]}]},{"x":6.195,"y":23.264,"w":14.847,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.335,"y":23.264,"w":29.851,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"lessons.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":9.789,"y":23.264,"w":120.813,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Asashort-termcountermeasure","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":23.918,"w":212.431,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inresponsetotheLogjamattack,allmainstreambrowsers","S":-1,"TS":[2,12.05566,0,0]}]},{"x":3.112,"y":24.572,"w":200.129,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"areimplementingamorerestrictivepolicyonthesizeof","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":25.226,"w":218.119,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Diﬃe-Hellmangroupstheyaccept.Wefurtherrecommend","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":3.112,"y":25.879,"w":209.3,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thatTLSserversdisableexport-gradecryptographyand","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":26.533,"w":177.428,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"carefullyvettheDiﬃe-Hellmangroupstheyuse.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":14.888,"y":26.533,"w":21.249,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":27.187,"w":217.572,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"longerterm,weadvocatethatprotocolsmigratetostronger","S":-1,"TS":[2,11.849442,0,0]}]},{"x":3.112,"y":27.841,"w":221.915,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Diﬃe-Hellmangroups,suchasthosebasedonellipticcurves.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":29.352,"w":8.966,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2.","S":-1,"TS":[2,14.955,0,0]}]},{"x":4.42,"y":29.352,"w":106.268,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DIFFIE-HELLMAN","S":-1,"TS":[2,14.955,0,0]}]},{"x":11.248,"y":29.352,"w":101.618,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"CRYPTANALYSIS","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.673,"y":30.161,"w":218.16,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Diﬃe-Hellmankeyexchangewastheﬁrstpublishedpublic-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":30.815,"w":69.649,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"keyalgorithm[14].","S":-1,"TS":[2,12.14532,0,0]}]},{"x":8.07,"y":30.815,"w":123.075,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inthesimplecaseofprimegroups,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.091,"y":31.469,"w":109.739,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"AliceandBobagreeonaprime","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.681,"y":31.469,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":12.198,"y":31.469,"w":57.388,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andagenerator","S":-1,"TS":[2,12.14532,0,0]}]},{"x":16.539,"y":31.469,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":17.062,"y":31.469,"w":12.031,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofa","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":32.123,"w":122.175,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"multiplicativesubgroupmodulo","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.634,"y":32.123,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":11.924,"y":32.123,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.516,"y":32.123,"w":41.833,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Alicesends","S":-1,"TS":[2,12.14532,0,0]}]},{"x":15.682,"y":32.123,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":15.977,"y":31.884999999999998,"w":4.035,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"a","S":-1,"TS":[2,8.978,0,1]}]},{"x":16.42,"y":32.123,"w":17.406,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"mod","S":-1,"TS":[2,11.966,0,0]}]},{"x":17.684,"y":32.123,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":17.973,"y":32.123,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":32.776,"w":37.862,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Bobsends","S":-1,"TS":[2,12.14532,0,0]}]},{"x":6.074,"y":32.776,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":6.368,"y":32.538,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":6.764,"y":32.776,"w":17.406,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"mod","S":-1,"TS":[2,11.966,0,0]}]},{"x":8.028,"y":32.776,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":8.317,"y":32.776,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",","S":-1,"TS":[2,12.14532,0,0]}]},{"x":8.775,"y":32.776,"w":124.618,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andeachcomputesasharedsecret","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":33.43,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":3.407,"y":33.192,"w":7.309,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ab","S":-1,"TS":[2,8.978,0,1]}]},{"x":4.055,"y":33.43,"w":17.406,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"mod","S":-1,"TS":[2,11.966,0,0]}]},{"x":5.319,"y":33.43,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":5.608,"y":33.43,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,12.14532,0,0]}]},{"x":6.15,"y":33.43,"w":165.12,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WhilethereisalsoaDiﬃe-Hellmanexchange","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":34.084,"w":187.637,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"overellipticcurvegroups,weaddressonlythe“mod","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":16.259,"y":34.084,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":16.549,"y":34.084,"w":23.354,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"”case.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.673,"y":34.738,"w":205.305,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ThesecurityofDiﬃe-Hellmanisnotknowntobeequiva-","S":-1,"TS":[2,11.939102,0,0]}]},{"x":3.112,"y":35.392,"w":217.538,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"lenttothediscretelogproblem(exceptincertaingroups[13,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.098,"y":36.045,"w":219.124,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"33,34]),butcomputingdiscretelogsremainsthebestknown","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":36.699,"w":215.403,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"cryptanalyticattack.Anattackerwhocanﬁndthediscrete","S":-1,"TS":[2,11.92117,0,0]}]},{"x":3.112,"y":37.353,"w":11.775,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"log","S":-1,"TS":[2,11.966,0,0]}]},{"x":4.04,"y":37.353,"w":5.224,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,11.966,0,1]}]},{"x":4.559,"y":37.353,"w":18.706,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"from","S":-1,"TS":[2,11.966,0,0]}]},{"x":5.92,"y":37.353,"w":4.539,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"y","S":-1,"TS":[2,11.966,0,1]}]},{"x":6.384,"y":37.353,"w":7.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"=","S":-1,"TS":[2,11.966,0,0]}]},{"x":6.992,"y":37.353,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":7.286,"y":37.115,"w":4.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,8.978,0,1]}]},{"x":7.738,"y":37.353,"w":17.406,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"mod","S":-1,"TS":[2,11.966,0,0]}]},{"x":9.002,"y":37.353,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":9.483,"y":37.353,"w":116.171,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"caneasilyﬁndthesharedsecret.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":38.007,"w":201.721,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Textbookdescriptionsofdiscretelogcanbemisleading","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":38.661,"w":223.318,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"aboutthecomputationaltradeoﬀs,forexamplebybalancing","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":39.314,"w":181.107,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"parameterstominimizeoveralltimetocomputea","S":-1,"TS":[2,12.14532,0,0]}]},{"x":16.617,"y":39.314,"w":22.581,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"single","S":-1,"TS":[2,12.14532,0,1]}]},{"x":3.112,"y":39.968,"w":208.033,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"discretelog.Infact,asillustratedinFigure1,asinglelarge","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":3.112,"y":40.622,"w":73.233,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"precomputationon","S":-1,"TS":[2,12.14532,0,0]}]},{"x":8.293,"y":40.622,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":8.838,"y":40.622,"w":110.159,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"canbeusedtoeﬃcientlybreak","S":-1,"TS":[2,12.14532,0,0]}]},{"x":17.396,"y":40.622,"w":9.408,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"all","S":-1,"TS":[2,12.14532,0,1]}]},{"x":3.112,"y":41.276,"w":180.168,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Diﬃe-Hellmanexchangesmadewiththatprime.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.089,"y":42.12,"w":68.455,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Thetypicalcase","S":-1,"TS":[2,11.966,1,0]}]},{"x":8.414,"y":42.12,"w":150.706,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Diﬃe-Hellmanistypicallyimplemented","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.092,"y":42.774,"w":201.271,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"withprimeﬁeldsandlargegrouporders.Inthiscase,the","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":43.428,"w":218.133,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mosteﬃcientdiscretelogalgorithmisthenumberﬁeldsieve","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.045,"y":44.082,"w":65.656,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"(NFS)[21,24,43].","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.603,"y":43.844,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[3,8.978,0,0]}]},{"x":8.16,"y":44.082,"w":136.113,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thereisacloselyrelatednumberﬁeld","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":13.92,"w":221.354,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sievealgorithmforfactoring[12,31],andinfactmanypartsof","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":14.574,"w":220.626,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theimplementationscanbeshared.Thegeneraltechniqueis","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":15.228,"w":226.292,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"calledindexcalculusandhasfourstageswithdiﬀerentcompu-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":15.881,"w":217.157,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tationalproperties.Theﬁrstthreestepsareonlydependent","S":-1,"TS":[2,11.813578,0,0]}]},{"x":19.551,"y":16.535,"w":45.591,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ontheprime","S":-1,"TS":[2,11.966,0,0]}]},{"x":22.976,"y":16.535,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":23.457,"y":16.535,"w":143.219,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andcomprisemostofthecomputation.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":17.189,"w":25.592,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Firstis","S":-1,"TS":[2,11.957034,0,0]}]},{"x":22.094,"y":17.189,"w":43.515,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"polynomial","S":-1,"TS":[2,11.957034,0,1]}]},{"x":25.017,"y":17.189,"w":34.577,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"selection","S":-1,"TS":[2,11.957034,0,1]}]},{"x":27.118,"y":17.189,"w":101.166,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",inwhichoneﬁndsapolyno-","S":-1,"TS":[2,11.957034,0,0]}]},{"x":19.551,"y":17.843,"w":17.406,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mial","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":20.78,"y":17.843,"w":4.472,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"f","S":-1,"TS":[2,11.966,0,1]}]},{"x":21.12,"y":17.843,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":21.34,"y":17.843,"w":4.286,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"z","S":-1,"TS":[2,11.966,0,1]}]},{"x":21.632,"y":17.843,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":22.015,"y":17.843,"w":83.992,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"deﬁninganumberﬁeld","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":27.795,"y":17.843,"w":6.974,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Q","S":-1,"TS":[3,11.966,0,0]}]},{"x":28.231,"y":17.843,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":28.451,"y":17.843,"w":4.286,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"z","S":-1,"TS":[2,11.966,0,1]}]},{"x":28.743,"y":17.843,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":28.962,"y":17.843,"w":9.08,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/f","S":-1,"TS":[2,11.966,0,1]}]},{"x":29.591,"y":17.843,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":29.81,"y":17.843,"w":4.286,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"z","S":-1,"TS":[2,11.966,0,1]}]},{"x":30.102,"y":17.843,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":30.485,"y":17.843,"w":61.714,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forthecomputa-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":18.497,"w":72.204,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tion.(Forourcases,","S":-1,"TS":[2,11.939102,0,0]}]},{"x":24.835,"y":18.497,"w":4.472,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"f","S":-1,"TS":[2,11.966,0,1]}]},{"x":25.175,"y":18.497,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,11.939102,0,0]}]},{"x":25.399,"y":18.497,"w":4.286,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"z","S":-1,"TS":[2,11.966,0,1]}]},{"x":25.691,"y":18.497,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,11.939102,0,0]}]},{"x":26.106,"y":18.497,"w":115.344,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"typicallyhasdegree5or6.)This","S":-1,"TS":[2,11.939102,0,0]}]},{"x":19.551,"y":19.15,"w":207.574,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"parallelizeswellandisonlyasmallportionoftheruntime.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":19.804,"w":71.018,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inthesecondstage,","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":25.247,"y":19.804,"w":27.285,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"sieving","S":-1,"TS":[2,11.822543999999999,0,1]}]},{"x":26.925,"y":19.804,"w":107.74,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",onefactorsrangesofintegers","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":19.551,"y":20.458,"w":222.918,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andnumberﬁeldelementsinbatchestoﬁndmanyrelationsof","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":21.112,"w":218.488,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"elements,allofwhoseprimefactorsarelessthansomebound","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":21.766,"w":6.973,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"B","S":-1,"TS":[2,11.966,0,1]}]},{"x":20.201,"y":21.766,"w":26.625,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"(called","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":22.018,"y":21.766,"w":6.973,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"B","S":-1,"TS":[2,11.966,0,1]}]},{"x":22.482,"y":21.766,"w":148.908,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"-smooth).Modernimplementationsuse","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":32.432,"y":21.766,"w":30.108,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"special-","S":-1,"TS":[2,11.786679999999999,0,1]}]},{"x":34.217,"y":21.766,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":19.551,"y":22.419,"w":134.269,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"latticesieving,whichforeachspecial","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.432,"y":22.419,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":29.931,"y":22.419,"w":64.639,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"exploresasieving","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":23.073,"w":32.021,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"regionof","S":-1,"TS":[2,12.14532,0,0]}]},{"x":22.036,"y":23.073,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[2,12.14532,0,0]}]},{"x":22.33,"y":22.835,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[3,8.978,0,0]}]},{"x":22.559,"y":22.835,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"I","S":-1,"TS":[2,8.978,0,1]}]},{"x":23.045,"y":23.073,"w":68.685,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"candidates,where","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.876,"y":23.073,"w":4.028,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"I","S":-1,"TS":[2,11.966,0,1]}]},{"x":28.394,"y":23.073,"w":54.366,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"isaparameter.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":32.206,"y":23.073,"w":28.929,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Sieving","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":23.727,"w":124.089,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"parallelizeswellsinceeachspecial","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":27.956,"y":23.727,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":28.398,"y":23.727,"w":94.521,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ishandledindependently","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":24.381,"w":215.274,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"oftheothers,butiscomputationallyexpensive,becausewe","S":-1,"TS":[2,11.939102,0,0]}]},{"x":19.551,"y":25.035,"w":215.251,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mustsearchthroughandattempttofactormanyelements.","S":-1,"TS":[2,12.05566,0,0]}]},{"x":19.53,"y":25.688,"w":197.478,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thetimeforthisstepdependsonheuristicestimatesof","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":26.342,"w":116.266,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theprobabilityofencountering","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.736,"y":26.342,"w":6.973,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"B","S":-1,"TS":[2,11.966,0,1]}]},{"x":28.2,"y":26.342,"w":89.257,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"-smoothnumbersinthis","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":26.996,"w":91.313,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"search;italsodependson","S":-1,"TS":[2,11.948068,0,0]}]},{"x":26.205,"y":26.996,"w":4.028,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"I","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.692,"y":26.996,"w":102.217,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andonthenumberofspecial","S":-1,"TS":[2,11.948068,0,0]}]},{"x":34.217,"y":26.996,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":19.551,"y":27.65,"w":157.864,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"toconsiderbeforehavingenoughrelations.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":28.304,"w":64.328,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inthethirdstage,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":25.195,"y":28.304,"w":23.169,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"linear","S":-1,"TS":[2,12.14532,0,1]}]},{"x":26.924,"y":28.304,"w":28.343,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"algebra","S":-1,"TS":[2,12.14532,0,1]}]},{"x":28.673,"y":28.304,"w":77.405,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",weconstructalarge,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":28.957,"w":210.258,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sparsematrixconsistingofthecoeﬃcientvectorsofprime","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":29.611,"w":216.457,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"factorizationswehavefound.Anonzerokernelvectorofthe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":30.265,"w":90.427,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"matrixmodulotheorder","S":-1,"TS":[2,12.05566,0,0]}]},{"x":26.045,"y":30.265,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.515,"y":30.265,"w":105.336,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofthegroupwillgiveuslogsof","S":-1,"TS":[2,12.05566,0,0]}]},{"x":19.551,"y":30.919,"w":210.606,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"manysmallelements.Thisdatabaseoflogsservesasinput","S":-1,"TS":[2,12.001864,0,0]}]},{"x":19.551,"y":31.573,"w":154.986,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"totheﬁnalstage.Thediﬃcultydependson","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":30.411,"y":31.573,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":30.848,"y":31.573,"w":54.546,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andthematrix","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":32.226,"w":169.342,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sizeandcanbeparallelizedinalimitedfashion.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":32.88,"w":56.374,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Theﬁnalstage,","S":-1,"TS":[2,11.92117,0,0]}]},{"x":24.195,"y":32.88,"w":29.403,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"descent","S":-1,"TS":[2,11.92117,0,1]}]},{"x":26.023,"y":32.88,"w":121.219,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",actuallydeducesthediscretelog","S":-1,"TS":[2,11.92117,0,0]}]},{"x":19.551,"y":33.534,"w":44.312,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofthetarget","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":22.717,"y":33.534,"w":4.539,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"y","S":-1,"TS":[2,11.966,0,1]}]},{"x":23.021,"y":33.534,"w":162.763,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Were-sieveuntilwecanﬁndasetofrelations","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":34.188,"w":107.334,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thatallowustowritethelogof","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":27.597,"y":34.188,"w":4.539,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"y","S":-1,"TS":[2,11.966,0,1]}]},{"x":28.087,"y":34.188,"w":86.397,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"intermsofthelogsinthe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":34.842,"w":212.271,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"precomputeddatabase.Thisstepisaccomplishedinthree","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":35.495,"w":220.942,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"phases:aninitializationphase,whichtriestowritethetarget","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":36.149,"w":209.909,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"intermsofmedium-sizedprimes,amiddlephase,inwhich","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":19.551,"y":36.803,"w":217.133,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thesemedium-sizedprimesarefurthersieveduntiltheycan","S":-1,"TS":[2,11.876339999999999,0,0]}]},{"x":19.551,"y":37.457,"w":207.879,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"berepresentedbyelementsinthedatabaseofknownlogs,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":38.111,"w":215.047,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andaﬁnalphasethatactuallyreconstructsthetargetusing","S":-1,"TS":[2,11.813578,0,0]}]},{"x":19.551,"y":38.764,"w":206.179,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thelogdatabase.Crucially,descentistheonlyNFSstage","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":39.418,"w":49.202,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thatinvolves","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":22.977,"y":39.418,"w":4.539,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"y","S":-1,"TS":[2,11.966,0,1]}]},{"x":23.472,"y":39.418,"w":11.796,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"(or","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":24.404,"y":39.418,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":24.699,"y":39.418,"w":140.439,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"),sopolynomialselection,sieving,and","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":19.551,"y":40.072,"w":150.363,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"linearalgebracanbedoneonceforaprime","S":-1,"TS":[2,11.885306,0,0]}]},{"x":30.611,"y":40.072,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":31.093,"y":40.072,"w":48.715,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andreusedto","S":-1,"TS":[2,11.885306,0,0]}]},{"x":19.551,"y":40.726,"w":153.285,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"computethediscretelogsofmanytargets.","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.579,"y":42.163,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[3,8.978,0,0]}]},{"x":19.839,"y":42.401,"w":27.779,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Recent","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.913,"y":42.401,"w":45.128,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"spectacular","S":-1,"TS":[2,12.14532,0,0]}]},{"x":25.092,"y":42.401,"w":36.147,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"advances","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.7,"y":42.401,"w":7.679,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"in","S":-1,"TS":[2,12.14532,0,0]}]},{"x":28.493,"y":42.401,"w":30.796,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"discrete","S":-1,"TS":[2,12.14532,0,0]}]},{"x":30.759,"y":42.401,"w":11.775,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"log","S":-1,"TS":[2,12.14532,0,0]}]},{"x":31.813000000000002,"y":42.401,"w":42.563,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"algorithms","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":42.961,"w":205.005,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"haveresultedinaquasi-polynomialalgorithmforsmall-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":43.522,"w":217.357,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"characteristicﬁelds[3],buttheseadvancesarenotknownto","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":44.082,"w":146.836,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"applytotheprimeﬁeldsusedinpractice.","S":-1,"TS":[2,11.966,0,0]}]},{"x":18.66,"y":45.95,"w":4.608,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"2","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[{"x":8.322,"y":23.521,"w":0.569,"l":0.277,"oc":"#000"},{"x":7.483,"y":24.723,"w":0.569,"l":0.208,"oc":"#000"},{"x":16.335,"y":28.752,"w":0.569,"l":0.455,"oc":"#000"},{"x":19.826,"y":3.385,"w":1.105,"l":14.894,"oc":"#000"},{"x":19.826,"y":4.236,"w":0.69,"l":14.894,"oc":"#000"},{"x":19.826,"y":9.944,"w":1.105,"l":14.894,"oc":"#000"},{"x":19.801,"y":41.941,"w":0.597,"l":7.472,"oc":"#000"}],"VLines":[],"Fills":[],"Texts":[{"x":3.673,"y":3.235,"w":132.49,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Therunningtimeofthisalgorithmis","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":12.947,"y":3.235,"w":6.271,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"L","S":-1,"TS":[2,11.966,0,1]}]},{"x":13.339,"y":3.2969999999999997,"w":3.841,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,8.978,0,1]}]},{"x":13.61,"y":3.235,"w":8.191,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(1","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":14.112,"y":3.235,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/","S":-1,"TS":[2,11.966,0,1]}]},{"x":14.4,"y":3.235,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":14.682,"y":3.235,"w":2.56,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":",","S":-1,"TS":[2,11.966,0,1]}]},{"x":14.938,"y":3.235,"w":12.799,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(64","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":15.722,"y":3.235,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/","S":-1,"TS":[2,11.966,0,1]}]},{"x":16.01,"y":3.235,"w":8.191,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"9)","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":16.511,"y":2.997,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[3,8.978,0,0]}]},{"x":16.74,"y":2.997,"w":3.819,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/","S":-1,"TS":[2,8.978,0,1]}]},{"x":16.978,"y":2.997,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3","S":-1,"TS":[3,8.978,0,0]}]},{"x":17.238,"y":3.235,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":17.617,"y":3.235,"w":7.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"=","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":3.9560000000000004,"w":14.082,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"exp","S":-1,"TS":[2,11.966,0,0]}]},{"x":4.089,"y":3.4669999999999996,"w":4.566,"clr":0,"sw":1.030875,"A":"left","R":[{"T":"\u0000","S":-1,"TS":[2,12.963,0,0]}]},{"x":4.374,"y":3.9560000000000004,"w":8.191,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(1","S":-1,"TS":[2,11.966,0,0]}]},{"x":4.886,"y":3.9560000000000004,"w":2.56,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,1]}]},{"x":5.046,"y":3.9560000000000004,"w":20.99,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"923+","S":-1,"TS":[2,11.966,0,0]}]},{"x":6.614,"y":3.9560000000000004,"w":4.461,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"o","S":-1,"TS":[2,11.966,0,1]}]},{"x":6.893,"y":3.9560000000000004,"w":30.718,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(1))(log","S":-1,"TS":[2,11.966,0,0]}]},{"x":8.916,"y":3.9560000000000004,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":9.205,"y":3.9560000000000004,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,11.966,0,0]}]},{"x":9.429,"y":3.718,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[3,8.978,0,0]}]},{"x":9.657,"y":3.718,"w":3.819,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/","S":-1,"TS":[2,8.978,0,1]}]},{"x":9.896,"y":3.718,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3","S":-1,"TS":[3,8.978,0,0]}]},{"x":10.155,"y":3.9560000000000004,"w":27.134,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(loglog","S":-1,"TS":[2,11.966,0,0]}]},{"x":12.057,"y":3.9560000000000004,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":12.347,"y":3.9560000000000004,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,11.966,0,0]}]},{"x":12.571,"y":3.718,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[3,8.978,0,0]}]},{"x":12.799,"y":3.718,"w":3.819,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/","S":-1,"TS":[2,8.978,0,1]}]},{"x":13.038,"y":3.718,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3","S":-1,"TS":[3,8.978,0,0]}]},{"x":13.297,"y":3.4669999999999996,"w":4.566,"clr":0,"sw":1.030875,"A":"left","R":[{"T":"\u0001","S":-1,"TS":[2,12.963,0,0]}]},{"x":13.582,"y":3.9560000000000004,"w":61.541,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Thisisobtained","S":-1,"TS":[2,11.939102,0,0]}]},{"x":3.112,"y":4.609,"w":188.276,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bytuningmanyparameters,includingthedegreeof","S":-1,"TS":[2,12.091524,0,0]}]},{"x":16.55,"y":4.609,"w":4.472,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"f","S":-1,"TS":[2,11.966,0,1]}]},{"x":16.891,"y":4.609,"w":15.362,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",the","S":-1,"TS":[2,12.091524,0,0]}]},{"x":3.112,"y":5.263,"w":27.444,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sieving","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.167,"y":5.263,"w":24.598,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"region","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.039,"y":5.263,"w":41.004,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"parameter","S":-1,"TS":[2,12.14532,0,0]}]},{"x":9.958,"y":5.263,"w":4.028,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"I","S":-1,"TS":[2,11.966,0,1]}]},{"x":10.253,"y":5.263,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",","S":-1,"TS":[2,12.14532,0,0]}]},{"x":10.749,"y":5.263,"w":17.407,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.192,"y":5.263,"w":19.505,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"most","S":-1,"TS":[2,12.14532,0,0]}]},{"x":13.739,"y":5.263,"w":50.447,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"importantly,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":17.288,"y":5.263,"w":12.803,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"the","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":5.917,"w":70.806,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"smoothnessbound","S":-1,"TS":[2,12.001864,0,0]}]},{"x":7.9719999999999995,"y":5.917,"w":6.973,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"B","S":-1,"TS":[2,11.966,0,1]}]},{"x":8.436,"y":5.917,"w":137.207,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Earlyarticles(e.g.[21])encountered","S":-1,"TS":[2,12.001864,0,0]}]},{"x":3.112,"y":6.571,"w":222.357,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"technicaldiﬃcultieswithdescentandreportedthatthecom-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":7.225,"w":214.904,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"plexityofthisstepwouldequalthatoftheprecomputation;","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":3.112,"y":7.879,"w":228.819,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thismayhavecontributedtomisconceptionsabouttheperfor-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":8.532,"w":220.839,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"manceoftheNFSfordiscretelogs.Morerecentanalyseshave","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":9.186,"w":139.851,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"improvedthecomplexityofdescentto","S":-1,"TS":[2,12.14532,0,0]}]},{"x":13.257,"y":9.186,"w":6.271,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"L","S":-1,"TS":[2,11.966,0,1]}]},{"x":13.649,"y":9.248,"w":3.841,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,8.978,0,1]}]},{"x":13.92,"y":9.186,"w":8.191,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(1","S":-1,"TS":[2,12.14532,0,0]}]},{"x":14.443,"y":9.186,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/","S":-1,"TS":[2,11.966,0,1]}]},{"x":14.731,"y":9.186,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3","S":-1,"TS":[2,12.14532,0,0]}]},{"x":15.024,"y":9.186,"w":2.56,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":",","S":-1,"TS":[2,11.966,0,1]}]},{"x":15.28,"y":9.186,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[2,12.14532,0,0]}]},{"x":15.574,"y":9.186,"w":2.56,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,1]}]},{"x":15.734,"y":9.186,"w":17.407,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"442)","S":-1,"TS":[2,12.14532,0,0]}]},{"x":17.059,"y":9.186,"w":16.895,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"[10],","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":9.84,"w":41.493,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andlaterto","S":-1,"TS":[2,12.001864,0,0]}]},{"x":6.293,"y":9.84,"w":6.271,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"L","S":-1,"TS":[2,11.966,0,1]}]},{"x":6.685,"y":9.902,"w":3.841,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,8.978,0,1]}]},{"x":6.956,"y":9.84,"w":8.191,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(1","S":-1,"TS":[2,12.001864,0,0]}]},{"x":7.47,"y":9.84,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/","S":-1,"TS":[2,11.966,0,1]}]},{"x":7.757999999999999,"y":9.84,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3","S":-1,"TS":[2,12.001864,0,0]}]},{"x":8.048,"y":9.84,"w":2.56,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":",","S":-1,"TS":[2,11.966,0,1]}]},{"x":8.304,"y":9.84,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[2,12.001864,0,0]}]},{"x":8.593,"y":9.84,"w":2.56,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,1]}]},{"x":8.753,"y":9.84,"w":17.407,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"232)","S":-1,"TS":[2,12.001864,0,0]}]},{"x":10.037,"y":9.84,"w":113.221,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"[2],whichismuchcheaperthan","S":-1,"TS":[2,12.001864,0,0]}]},{"x":3.112,"y":10.494,"w":118.314,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theprecomputationinpractice.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":11.147,"w":199.661,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thenumerousparametersofthealgorithmallowsome","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":11.801,"w":218.802,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ﬂexibilitytoreducetimeonsomecomputationalstepsatthe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":12.455,"w":207.53,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"expenseofothers.Forexample,sievingmorewillresultin","S":-1,"TS":[2,12.109456,0,0]}]},{"x":3.112,"y":13.109,"w":214.167,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"asmallermatrix,makinglinearalgebracheaper,anddoing","S":-1,"TS":[2,11.983932,0,0]}]},{"x":3.112,"y":13.763,"w":208.553,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"moreworkintheprecomputationmakestheﬁnaldescent","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":14.416,"w":210.857,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"stepeasier.In§3.3,weshowhowexploitingthesetradeoﬀs","S":-1,"TS":[2,11.983932,0,0]}]},{"x":3.112,"y":15.07,"w":207.878,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"allowsustoquicklycompute512-bitdiscretelogsinorder","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":15.724,"w":211.625,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"toperformaneﬀectiveman-in-the-middleattackonTLS.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":16.595,"w":128.424,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Improperlygeneratedgroups","S":-1,"TS":[2,11.966,1,0]}]},{"x":12.617,"y":16.595,"w":72.979,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Adiﬀerentfamilyof","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":17.249,"w":218.827,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"algorithmsrunsintimeexponentialingrouporder,andthey","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":17.903,"w":206.613,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"arepracticalevenforlargeprimeswhenthegrouporderis","S":-1,"TS":[2,12.05566,0,0]}]},{"x":3.112,"y":18.556,"w":208.477,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"smallorhasmanysmallprimefactors.Toavoidthis,most","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":3.112,"y":19.21,"w":222.235,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"implementationsuse“safe”primes,whichhavetheproperty","S":-1,"TS":[2,11.83151,0,0]}]},{"x":3.112,"y":19.864,"w":16.895,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"that","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":4.372,"y":19.864,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":4.788,"y":19.864,"w":7.167,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"−","S":-1,"TS":[2,11.966,0,0]}]},{"x":5.363,"y":19.864,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":5.814,"y":19.864,"w":7.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"=","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":6.427,"y":19.864,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":6.718,"y":19.864,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":7.188,"y":19.864,"w":54.109,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forsomeprime","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":11.182,"y":19.864,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":11.459,"y":19.864,"w":88.985,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",sothattheonlypossible","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":3.112,"y":20.518,"w":80.292,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"subgroupshaveorder","S":-1,"TS":[2,12.14532,0,0]}]},{"x":8.829,"y":20.518,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[2,12.14532,0,0]}]},{"x":9.122,"y":20.518,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",","S":-1,"TS":[2,12.14532,0,0]}]},{"x":9.5,"y":20.518,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":9.777,"y":20.518,"w":10.772,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",or","S":-1,"TS":[2,12.14532,0,0]}]},{"x":10.888,"y":20.518,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.182,"y":20.518,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":11.459,"y":20.518,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.932,"y":20.518,"w":84.093,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"However,asweshowin","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":21.172,"w":207.794,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"§3.5,improperlygeneratedgroupsaresometimesusedin","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":21.825,"w":126.331,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"practiceandsusceptibletoattack.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":22.479,"w":200.713,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thebaby-stepgiant-step[45]andPollardrho[42]algo-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":23.133,"w":61.765,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"rithmsbothtake","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":7.592,"y":22.783,"w":7.679,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"√","S":-1,"TS":[2,11.966,0,0]}]},{"x":8.072,"y":23.133,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":8.542,"y":23.133,"w":129.865,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"timetocomputeadiscreteloginany","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":3.045,"y":23.787,"w":72.558,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"(sub)groupoforder","S":-1,"TS":[2,12.14532,0,0]}]},{"x":8.363,"y":23.787,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":8.64,"y":23.787,"w":126.092,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",whilePollardlambda[42]canﬁnd","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":24.441,"w":5.224,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,11.966,0,1]}]},{"x":3.633,"y":24.441,"w":7.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"<","S":-1,"TS":[2,11.966,0,1]}]},{"x":4.275,"y":24.441,"w":3.327,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"t","S":-1,"TS":[2,11.966,0,1]}]},{"x":4.696,"y":24.441,"w":25.601,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"intime","S":-1,"TS":[2,12.14532,0,0]}]},{"x":6.753,"y":23.984,"w":7.679,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"√","S":-1,"TS":[2,11.966,0,0]}]},{"x":7.233,"y":24.441,"w":3.327,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"t","S":-1,"TS":[2,11.966,0,1]}]},{"x":7.441,"y":24.441,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.922000000000001,"y":24.441,"w":143.973,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Theseparallelizewell[50],andprecom-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":25.094,"w":182.11,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"putationcanspeedupindividuallogcalculations.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":15.131,"y":25.094,"w":18.944,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Ifthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":25.748,"w":128.641,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"factorizationofthesubgrouporder","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.68,"y":25.748,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":13.231,"y":25.748,"w":35.12,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"isknown,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":15.763000000000002,"y":25.748,"w":27.649,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"onecan","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":26.402,"w":199.624,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"useanyoftheabovealgorithmstocomputethediscrete","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":27.056,"w":102.767,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"logineachsubgroupoforder","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.001,"y":27.056,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":11.279,"y":26.784,"w":3.521,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"e","S":-1,"TS":[2,8.978,0,1]}]},{"x":11.499,"y":26.863,"w":2.658,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"i","S":-1,"TS":[2,7.981,0,1]}]},{"x":11.259,"y":27.21,"w":2.664,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"i","S":-1,"TS":[2,8.978,0,1]}]},{"x":11.953,"y":27.056,"w":32.509,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"dividing","S":-1,"TS":[2,12.14532,0,0]}]},{"x":14.251,"y":27.056,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":14.528,"y":27.056,"w":46.104,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",andthenre-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":27.71,"w":21.27,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"cover","S":-1,"TS":[2,12.14532,0,0]}]},{"x":4.643,"y":27.71,"w":5.224,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,11.966,0,1]}]},{"x":5.176,"y":27.71,"w":140.976,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"usingtheChineseremaindertheorem.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":14.462,"y":27.71,"w":36.967,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thisisthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":28.363,"w":161.262,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Pohlig-Hellmanalgorithm[41],whichcosts","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":14.189,"y":27.912,"w":10.517,"clr":0,"sw":1.030875,"A":"left","R":[{"T":"P","S":-1,"TS":[2,12.963,0,0]}]},{"x":14.846,"y":28.566,"w":2.664,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"i","S":-1,"TS":[2,8.978,0,1]}]},{"x":15.14,"y":28.363,"w":4.284,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"e","S":-1,"TS":[2,11.966,0,1]}]},{"x":15.408,"y":28.426,"w":2.664,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"i","S":-1,"TS":[2,8.978,0,1]}]},{"x":15.605,"y":28.013,"w":7.679,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"√","S":-1,"TS":[2,11.966,0,0]}]},{"x":16.085,"y":28.363,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":16.343,"y":28.426,"w":2.664,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"i","S":-1,"TS":[2,8.978,0,1]}]},{"x":16.732,"y":28.363,"w":21.041,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"using","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":3.112,"y":29.017,"w":132.639,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"baby-stepgiant-steporPollardrho.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":29.888,"w":73.506,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Standardprimes","S":-1,"TS":[2,11.966,1,0]}]},{"x":8.614,"y":29.888,"w":145.15,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Generatingprimeswithspecialproper-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":30.542,"w":225.452,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tiescanbecomputationallyburdensome,somanyimplemen-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":31.196,"w":224.416,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tationsuseﬁxedorstandardizedDiﬃe-Hellmanparameters.","S":-1,"TS":[2,11.885306,0,0]}]},{"x":3.091,"y":31.85,"w":211.855,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"AprominentexampleistheOakleygroups[40],whichgive","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":3.031,"y":32.503,"w":215.254,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"“safe”primesoflength768(OakleyGroup1),1024(Oakley","S":-1,"TS":[2,11.876339999999999,0,0]}]},{"x":3.112,"y":33.157,"w":206.648,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Group2),and1536(OakleyGroup5).Thesegroupswere","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":33.811,"w":215.98,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"publishedin1998andhavebeenusedformanyapplications","S":-1,"TS":[2,11.795646,0,0]}]},{"x":3.112,"y":34.465,"w":153.4,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"since,includingIKE,SSH,Tor,andOTR.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":35.119,"w":203.104,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Whenprimesareofsuﬃcientstrength,thereseemstobe","S":-1,"TS":[2,11.939102,0,0]}]},{"x":3.112,"y":35.772,"w":224.81,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"nodisadvantagetoreusingthem.However,widespreadreuse","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":36.426,"w":215.071,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofDiﬃe-Hellmangroupscanconvertattacksthatareatthe","S":-1,"TS":[2,11.849442,0,0]}]},{"x":3.112,"y":37.08,"w":220.778,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"limitsofanadversary’scapabilitiesintodevastatingbreaks,","S":-1,"TS":[2,11.930136,0,0]}]},{"x":3.112,"y":37.734,"w":206.097,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sinceitallowstheattackertoamortizethecostofdiscrete","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":3.112,"y":38.388,"w":226.512,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"logprecomputationamongvastnumbersofpotentialtargets.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":40.003,"w":8.966,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3.","S":-1,"TS":[2,14.955,0,0]}]},{"x":4.42,"y":40.003,"w":73.726,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ATTACKING","S":-1,"TS":[2,14.955,0,0]}]},{"x":9.215,"y":40.003,"w":22.595,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"TLS","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.673,"y":40.813,"w":198.236,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TLSsupportsDiﬃe-Hellmanasoneofseveralpossible","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":41.467,"w":86.84,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"keyexchangemethods,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":8.943,"y":41.467,"w":117.586,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andabouttwo-thirdsofpopular","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":42.12,"w":222.595,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"HTTPSsitesallowit,mostcommonlyusing1024-bitprimes.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":42.774,"w":207.487,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"However,asmallernumberofserversalsosupportlegacy","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.031,"y":43.428,"w":222.784,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"“export-grade”Diﬃe-Hellmanusing512-bitprimesthatare","S":-1,"TS":[2,11.92117,0,0]}]},{"x":3.092,"y":44.082,"w":223.227,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wellwithinreachofNFS-basedcryptanalysis.Furthermore,","S":-1,"TS":[2,11.939102,0,0]}]},{"x":19.912,"y":3.207,"w":24.471,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Source","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":22.56,"y":3.207,"w":39.404,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Popularity","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.695,"y":3.207,"w":22.232,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Prime","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.912,"y":4.05,"w":27.514,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Apache","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":22.575,"y":4.05,"w":15.526,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"82%","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.666,"y":4.05,"w":135.5,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"9fdb8b8a004544f0045f1737d0ba2e0b","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.666,"y":4.61,"w":135.496,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"274cdf1a9f588218fb435316a16e3741","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.666,"y":5.17,"w":135.491,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"71fd19d8d8f37c39bf863fd60e3e3006","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.666,"y":5.731,"w":135.498,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"80a3030c6e4c3757d08f70e6aa871033","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.912,"y":6.478,"w":31.372,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"mod_ssl","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":22.545,"y":6.478,"w":15.526,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"10%","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.666,"y":6.478,"w":135.486,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"d4bcd52406f69b35994b88de5db89682","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.666,"y":7.038,"w":135.498,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"c8157f62d8f33633ee5772f11f05ab22","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.666,"y":7.599,"w":135.496,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"d6b5145b9f241e5acc31ff090a4bc711","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.666,"y":8.159,"w":135.486,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"48976f76795094e71e7903529f5a824b","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.912,"y":8.906,"w":3.293,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.118,"y":8.906,"w":22.627,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"others","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":21.547,"y":8.906,"w":3.293,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":")","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":22.736,"y":8.906,"w":11.291,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"8%","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.666,"y":8.906,"w":71.61,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"(463distinctprimes)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.53,"y":10.173,"w":30.209,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Table1:","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":21.716,"y":10.173,"w":134.044,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Top512-bitDHprimesforTLS.","S":-1,"TS":[2,11.966,1,0]}]},{"x":31.139,"y":10.173,"w":49.916,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"8.4%ofAlexa","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.53,"y":10.826,"w":115.366,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Top1MHTTPSdomainsallow","S":-1,"TS":[2,12.14532,0,0]}]},{"x":28.216,"y":10.826,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":31.816000000000003,"y":10.826,"w":33.533,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",ofwhich","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":11.48,"w":209.932,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"92.3%useoneofthetwomostpopularprimes,shownhere.","S":-1,"TS":[2,11.92117,0,0]}]},{"x":19.551,"y":13.409,"w":213.504,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forbothnormalandexport-gradeDiﬃe-Hellman,thevast","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":14.063,"w":187.669,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"majorityofserversuseahandfulofcommongroups.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":14.717,"w":202.519,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inthissection,weexploitthesefactstoconstructanovel","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":19.551,"y":15.370999999999999,"w":215.02,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attackagainstTLS,whichwecalltheLogjamattack.First,","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":19.53,"y":16.025,"w":216.388,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"weperformNFSprecomputationsforthetwomostpopular","S":-1,"TS":[2,11.92117,0,0]}]},{"x":19.551,"y":16.678,"w":208.761,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"512-bitprimesontheweb,sothatwecanquicklycompute","S":-1,"TS":[2,11.983932,0,0]}]},{"x":19.551,"y":17.332,"w":214.072,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thediscretelogforanykey-exchangemessagethatusesone","S":-1,"TS":[2,11.885306,0,0]}]},{"x":19.551,"y":17.986,"w":216.953,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofthem.Next,weshowhowaman-in-the-middle,soarmed,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":18.64,"w":213.719,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"canattackconnectionsbetweenpopularbrowsersandany","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":19.294,"w":212.587,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"serverthatallowsexport-gradeDiﬃe-Hellman,byusinga","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.53,"y":19.947,"w":211.386,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TLSprotocolﬂawtodowngradetheconnectiontoexport-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":20.601,"w":209.682,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"strengthandthenrecoveringthesessionkey.Weﬁndthat","S":-1,"TS":[2,12.109456,0,0]}]},{"x":19.551,"y":21.255,"w":223.177,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thisattackwithourprecomputationscancompromiseabout","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.536,"y":21.909,"w":216.371,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"7.8%ofHTTPSserversamongAlexaTopMilliondomains.","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":23.058,"w":14.944,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3.1","S":-1,"TS":[2,14.955,0,0]}]},{"x":21.232,"y":23.058,"w":22.595,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"TLS","S":-1,"TS":[2,14.955,0,0]}]},{"x":22.831,"y":23.058,"w":19.271,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,14.955,0,0]}]},{"x":24.222,"y":23.058,"w":75.711,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Difﬁe-Hellman","S":-1,"TS":[2,14.955,0,0]}]},{"x":20.111,"y":23.868,"w":216.576,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TheTLShandshakebeginswithanegotiationtodetermine","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":24.521,"w":217.001,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thecryptoalgorithmsusedforthesession.Theclientsendsa","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":25.175,"w":183.816,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"listofsupportedciphersuites(andarandomnonce","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":32.031,"y":25.175,"w":8.147,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"cr","S":-1,"TS":[2,11.966,0,1]}]},{"x":32.557,"y":25.175,"w":29.182,"clr":0,"sw":0.669125,"A":"left","R":[{"T":")within","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":25.829,"w":12.803,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"the","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":20.478,"y":25.829,"w":42.091,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ClientHello","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":23.2,"y":25.829,"w":170.813,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"message,whereeachciphersuitespeciﬁesakey","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":26.483,"w":219.711,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"exchangealgorithmandotherprimitives.Theserverselects","S":-1,"TS":[2,11.867374,0,0]}]},{"x":19.551,"y":27.137,"w":213.65,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"aciphersuitefromtheclient’slistandsignalsitsselectionin","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":27.79,"w":4.608,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"a","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.037,"y":27.79,"w":43.475,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ServerHello","S":-1,"TS":[2,11.966,0,0]}]},{"x":22.946,"y":27.79,"w":136.313,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"message(containingarandomnonce","S":-1,"TS":[2,11.966,0,0]}]},{"x":32.41,"y":27.79,"w":8.45,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"sr","S":-1,"TS":[2,11.966,0,1]}]},{"x":32.954,"y":27.79,"w":6.144,"clr":0,"sw":0.669125,"A":"left","R":[{"T":").","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":28.444,"w":214.518,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TLSspeciﬁesciphersuitessupportingmultiplevarietiesof","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":19.551,"y":29.098,"w":223.066,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Diﬃe-Hellman.TextbookDiﬃe-Hellmanwithunrestricted","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":19.551,"y":29.752,"w":181.043,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"strengthiscalled“ephemeral”Diﬃe-Hellman,or","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":32.122,"y":29.752,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,11.04173,0,0]}]},{"x":33.205,"y":29.752,"w":17.407,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",and","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":19.551,"y":30.406,"w":157.107,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"isidentiﬁedbyciphersuitesthatbeginwith","S":-1,"TS":[2,11.92117,0,0]}]},{"x":30.647,"y":30.406,"w":42.364,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"TLS_DHE_*","S":-1,"TS":[3,11.966,0,0]}]},{"x":33.295,"y":30.406,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.92117,0,0]}]},{"x":33.454,"y":30.168,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[3,8.978,0,0]}]},{"x":33.969,"y":30.406,"w":8.446,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"In","S":-1,"TS":[2,11.92117,0,0]}]},{"x":19.551,"y":31.059,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":20.603,"y":31.059,"w":205.792,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",theserverisresponsibleforselectingtheDiﬃe-Hellman","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":31.713,"w":111.575,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"parameters.Itchoosesagroup","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":27.211,"y":31.713,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":27.431,"y":31.713,"w":11.58,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p,g","S":-1,"TS":[2,11.966,0,1]}]},{"x":28.271,"y":31.713,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":28.49,"y":31.713,"w":40.499,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",computes","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":31.273,"y":31.713,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":31.567,"y":31.475,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":31.802999999999997,"y":31.713,"w":39.015,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",andsends","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":32.367,"w":4.608,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"a","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":20.006,"y":32.367,"w":75.14,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ServerKeyExchange","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":24.775,"y":32.367,"w":145.863,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"messagecontainingasignatureoverthe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":33.021,"w":20.482,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tuple","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.077,"y":33.021,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.305,"y":33.021,"w":40.25,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"cr,sr,p,g,g","S":-1,"TS":[2,11.966,0,1]}]},{"x":24.213,"y":32.783,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":24.449,"y":33.021,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,12.14532,0,0]}]},{"x":24.898,"y":33.021,"w":133.516,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"usingthelong-termsigningkeyfrom","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":33.675,"w":217.184,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"itscertiﬁcate.Theclientveriﬁesthesignatureandresponds","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":19.53,"y":34.328,"w":22.526,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"witha","S":-1,"TS":[2,11.966,0,0]}]},{"x":21.328,"y":34.328,"w":73.755,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ClientKeyExchange","S":-1,"TS":[2,11.966,0,0]}]},{"x":26.13,"y":34.328,"w":74.342,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"messagecontaining","S":-1,"TS":[2,11.966,0,0]}]},{"x":31.144,"y":34.328,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":31.439,"y":34.09,"w":4.035,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"a","S":-1,"TS":[2,8.978,0,1]}]},{"x":31.722,"y":34.328,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":34.982,"w":207.619,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Toensureagreementonthenegotiationmessages,andto","S":-1,"TS":[2,11.92117,0,0]}]},{"x":19.551,"y":35.636,"w":210.342,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"preventdowngradeattacks[52],eachpartycomputesthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.53,"y":36.29,"w":86.565,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TLSmastersecretfrom","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":25.495,"y":36.29,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":25.79,"y":36.052,"w":7.309,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ab","S":-1,"TS":[2,8.978,0,1]}]},{"x":26.444,"y":36.29,"w":115.808,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andcalculatesaMACofitsview","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":36.944,"w":104.589,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofthehandshaketranscript.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":26.585,"y":36.944,"w":103.297,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TheseMACsareexchanged","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":37.598,"w":35.601,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inapairof","S":-1,"TS":[2,11.92117,0,0]}]},{"x":22.576,"y":37.598,"w":31.585,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Finished","S":-1,"TS":[2,11.92117,0,0]}]},{"x":24.732,"y":37.598,"w":144.129,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"messagesandveriﬁedbytherecipients.","S":-1,"TS":[2,11.92117,0,0]}]},{"x":19.53,"y":38.251,"w":213.972,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thereafter,clientandserverstartexchangingapplication","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":38.905,"w":222.818,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"data,protectedbyanauthenticatedencryptionschemewith","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":39.559,"w":81.041,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"keysalsoderivedfrom","S":-1,"TS":[2,11.966,0,0]}]},{"x":25.352,"y":39.559,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":25.647,"y":39.321,"w":7.309,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ab","S":-1,"TS":[2,8.978,0,1]}]},{"x":26.135,"y":39.559,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":40.213,"w":213.75,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Tocomplywith1990s-eraU.S.exportrestrictionsoncryp-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":40.866,"w":218.292,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tography,SSL3.0andTLS1.0supportedreduced-strength","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.579,"y":41.602,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[3,8.978,0,0]}]},{"x":19.839,"y":41.84,"w":202.048,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TLSalsosupportsararelyused“static”Diﬃe-Hellman","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":42.401,"w":207.867,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"format,wheretheserver’skeyexchangevalueisﬁxedand","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":42.961,"w":220.159,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"containedinitscertiﬁcate.Newciphersuitesthatuseelliptic","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":43.522,"w":83.348,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"curveDiﬃe-Hellman(","S":-1,"TS":[2,11.840475999999999,0,0]}]},{"x":24.687,"y":43.522,"w":27.661,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ECDHE","S":-1,"TS":[2,10.858419999999999,0,0]}]},{"x":26.392,"y":43.522,"w":110.883,"clr":0,"sw":0.669125,"A":"left","R":[{"T":")aregaininginpopularity,but","S":-1,"TS":[2,11.840475999999999,0,0]}]},{"x":19.53,"y":44.082,"w":210.089,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wefocusexclusivelyonthetraditionalprimeﬁeldvariety.","S":-1,"TS":[2,11.966,0,0]}]},{"x":18.66,"y":45.95,"w":4.608,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"3","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[],"VLines":[],"Fills":[],"Texts":[{"x":3.112,"y":12.639,"w":33.172,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Figure2:","S":-1,"TS":[2,12.127388,0,0]}]},{"x":5.671,"y":12.639,"w":84.196,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"TheLogjamattack.","S":-1,"TS":[2,11.966,1,0]}]},{"x":11.63,"y":12.639,"w":94.972,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Aman-in-the-middlecan","S":-1,"TS":[2,12.127388,0,0]}]},{"x":3.112,"y":13.293,"w":216.118,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forceTLSclientstouseexport-strengthDHwithanyserver","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":3.112,"y":13.947,"w":41.52,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thatallows","S":-1,"TS":[2,11.948068,0,0]}]},{"x":6.069,"y":13.947,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.95406,0,0]}]},{"x":9.591,"y":13.947,"w":119.088,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Then,byﬁndingthe512-bitdis-","S":-1,"TS":[2,11.948068,0,0]}]},{"x":3.112,"y":14.601,"w":223.518,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"cretelog,theattackercanlearnthesessionkeyandarbitrarily","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":15.254000000000001,"w":102.493,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"readormodifythecontents.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":10.304,"y":15.254000000000001,"w":18.829,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Data","S":-1,"TS":[3,11.966,0,0]}]},{"x":11.481,"y":15.016,"w":7.085,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"fs","S":-1,"TS":[2,8.978,0,1]}]},{"x":12.168,"y":15.254000000000001,"w":85.798,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"referstoFalseStart[30]","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":15.908000000000001,"w":220.487,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"applicationdatathatsomeTLSclientssendbeforereceiving","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":16.562,"w":42.902,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theserver’s","S":-1,"TS":[2,11.966,0,0]}]},{"x":6.162,"y":16.562,"w":31.585,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Finished","S":-1,"TS":[2,11.966,0,0]}]},{"x":8.328,"y":16.562,"w":34.922,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"message.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":18.543,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.83451,0,0]}]},{"x":6.773,"y":18.543,"w":165.182,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ciphersuitesthatwererestrictedtoprimesno","S":-1,"TS":[2,11.813578,0,0]}]},{"x":3.112,"y":19.197,"w":74.309,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"longerthan512bits.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":8.198,"y":19.197,"w":73.619,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inallotherrespects,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":14.474,"y":19.197,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":3.112,"y":19.85,"w":123.59,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"protocolmessagesareidenticalto","S":-1,"TS":[2,11.867374,0,0]}]},{"x":11.715,"y":19.85,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.88233,0,0]}]},{"x":12.776,"y":19.85,"w":76.848,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Therelevantexport","S":-1,"TS":[2,11.867374,0,0]}]},{"x":3.112,"y":20.504,"w":206.105,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"restrictionsarenolongerineﬀect,butmanylibrariesand","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":21.158,"w":226.595,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"serversmaintainsupportforbackwardscompatibility.Many","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.092,"y":21.812,"w":205.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TLSserversarestillconﬁguredwithtwogroups:astrong","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.084,"y":22.466,"w":95.054,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"1024-bitgroupforregular","S":-1,"TS":[2,11.912204,0,0]}]},{"x":9.758,"y":22.466,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.92218,0,0]}]},{"x":11.017,"y":22.466,"w":101.684,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"keyexchangesanda512-bit","S":-1,"TS":[2,11.912204,0,0]}]},{"x":3.112,"y":23.119,"w":58.919,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groupforlegacy","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.536,"y":23.119,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":11.136,"y":23.119,"w":94.389,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Thishasbeenconsidered","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":23.773,"w":213.392,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"safebecausemostmodernTLSclientsdonotoﬀeroraccept","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":24.427,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":6.834,"y":24.427,"w":49.79,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ciphersuites.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":25.081,"w":206.603,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TounderstandhowHTTPSserversinthewilduseDiﬃe-","S":-1,"TS":[2,11.912204,0,0]}]},{"x":3.112,"y":25.735,"w":194.835,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Hellman,wemodiﬁedtheZMap[15]toolchaintooﬀer","S":-1,"TS":[2,11.939102,0,0]}]},{"x":16.986,"y":25.735,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.94609,0,0]}]},{"x":3.112,"y":26.388,"w":14.847,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,12.14532,0,0]}]},{"x":4.287,"y":26.388,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":8.115,"y":26.388,"w":141.613,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ciphersuitesandscannedTCP/443on","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":27.042,"w":18.431,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"both","S":-1,"TS":[2,12.14532,0,0]}]},{"x":4.6,"y":27.042,"w":12.803,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"the","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.729,"y":27.042,"w":13.054,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"full","S":-1,"TS":[2,12.14532,0,0]}]},{"x":6.874,"y":27.042,"w":24.574,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"public","S":-1,"TS":[2,12.14532,0,0]}]},{"x":8.753,"y":27.042,"w":19.068,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"IPv4","S":-1,"TS":[2,12.14532,0,0]}]},{"x":10.282,"y":27.042,"w":29.82,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"address","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.495,"y":27.042,"w":21.557,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"space","S":-1,"TS":[2,12.14532,0,0]}]},{"x":14.183,"y":27.042,"w":14.847,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,12.14532,0,0]}]},{"x":15.442,"y":27.042,"w":12.803,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"the","S":-1,"TS":[2,12.14532,0,0]}]},{"x":16.571,"y":27.042,"w":23.04,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Alexa","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":27.696,"w":204.96,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Top1Mdomains.ThescanstookplaceinMarch2015.Of","S":-1,"TS":[2,12.073592,0,0]}]},{"x":3.112,"y":28.35,"w":221.705,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"539,000HTTPSsitesamongTop1Mdomains,wefoundthat","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":29.003,"w":64.069,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"68.3%supported","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.661,"y":29.003,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,11.1294,0,0]}]},{"x":8.98,"y":29.003,"w":74.308,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and8.4%supported","S":-1,"TS":[2,12.14532,0,0]}]},{"x":14.405,"y":29.003,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":18.005,"y":29.003,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":29.657,"w":213.29,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Of14.3millionIPv4HTTPSserverswithbrowser-trusted","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":30.311,"w":109.712,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"certiﬁcates,23.9%supported","S":-1,"TS":[2,11.966,0,0]}]},{"x":10.562,"y":30.311,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":11.827,"y":30.311,"w":34.3,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and4.9%","S":-1,"TS":[2,11.966,0,0]}]},{"x":14.355,"y":30.311,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":17.884,"y":30.311,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":30.965,"w":216.456,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WhiletheTLSprotocolallowsserverstogeneratetheirown","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":31.619,"w":220.731,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Diﬃe-Hellmanparameters,theoverwhelmingmajorityuse","S":-1,"TS":[2,12.109456,0,0]}]},{"x":3.112,"y":32.272,"w":213.463,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"oneofahandfulofprimes.AsshowninTable1,justtwo512-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":32.926,"w":214.399,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bitprimesaccountfor92.3%ofAlexaTop1Mdomainsthat","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":33.58,"w":30.789,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"support","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":5.168,"y":33.58,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.8106,0,0]}]},{"x":8.627,"y":33.58,"w":138.474,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",and92.5%ofallserverswithbrowser-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":34.234,"w":119.512,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"trustedcertiﬁcatesthatsupport","S":-1,"TS":[2,11.795646,0,0]}]},{"x":11.229,"y":34.234,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.81857,0,0]}]},{"x":14.691,"y":34.234,"w":51.73,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".(Non-export","S":-1,"TS":[2,11.795646,0,0]}]},{"x":3.112,"y":34.888,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.93015,0,0]}]},{"x":4.372,"y":34.888,"w":197.655,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"followsasimilardistributionwithlongerprimes.)The","S":-1,"TS":[2,11.92117,0,0]}]},{"x":3.112,"y":35.541,"w":214.703,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mostpopular512-bitprimewashard-codedintomanyver-","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":3.112,"y":36.195,"w":204.913,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sionsofApache.Introducedin2005withApache2.1.5,it","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":36.849,"w":218.922,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wasuseduntil2.4.7,whichdisabledexportciphersuites.We","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":3.112,"y":37.503,"w":221.285,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"founditinusebyabout564,000serverswithbrowser-trusted","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":38.157,"w":208.653,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"certiﬁcates.Thesecondmostpopular512-bitprimeisthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":38.81,"w":56.905,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"defaultusedfor","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":7.263,"y":38.81,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.009849999999998,0,0]}]},{"x":11.002,"y":38.81,"w":42.035,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"whenusing","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":14.034,"y":38.81,"w":32.95,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"mod_ssl","S":-1,"TS":[3,11.966,0,0]}]},{"x":16.093,"y":38.81,"w":24.368,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Itwas","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":3.112,"y":39.464,"w":199.818,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"introducedinversion2.3.0in1999.Wefounditinuseby","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":40.118,"w":202.88,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"about89,000serverswithbrowser-trustedcertiﬁcates.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":41.311,"w":14.944,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3.2","S":-1,"TS":[2,14.955,0,0]}]},{"x":4.794,"y":41.311,"w":32.53,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Active","S":-1,"TS":[2,14.955,0,0]}]},{"x":7.013,"y":41.311,"w":59.106,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Downgrade","S":-1,"TS":[2,14.955,0,0]}]},{"x":10.894,"y":41.311,"w":9.959,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"to","S":-1,"TS":[2,14.955,0,0]}]},{"x":11.704,"y":41.311,"w":72.388,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Export-Grade","S":-1,"TS":[2,14.955,0,0]}]},{"x":16.415,"y":41.311,"w":25.906,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.673,"y":42.12,"w":212.055,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Giventhewidespreaduseoftheseprimes,anattackerwith","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":42.774,"w":211.39,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theabilitytocomputediscretelogsin512-bitgroupscould","S":-1,"TS":[2,11.983932,0,0]}]},{"x":3.112,"y":43.428,"w":60.953,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"eﬃcientlybreak","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":7.307,"y":43.428,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.99391,0,0]}]},{"x":11.038,"y":43.428,"w":99.7,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"handshakesforabout8%of","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":3.091,"y":44.082,"w":204.957,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"AlexaTop1MHTTPSsites,butmodernbrowsersnever","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":3.235,"w":221.941,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"negotiateexport-gradeciphersuites.Tocircumventthis,we","S":-1,"TS":[2,11.939102,0,0]}]},{"x":19.551,"y":3.8890000000000002,"w":202.636,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"showhowanattackerwhocancompute512-bitdiscrete","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":4.543,"w":15.41,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"logs","S":-1,"TS":[2,12.14532,0,0]}]},{"x":20.733,"y":4.543,"w":7.998,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"in","S":-1,"TS":[2,12.14532,0,1]}]},{"x":21.456,"y":4.543,"w":15.171,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"real","S":-1,"TS":[2,12.14532,0,1]}]},{"x":22.637,"y":4.543,"w":17.642,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"time","S":-1,"TS":[2,12.14532,0,1]}]},{"x":23.924,"y":4.543,"w":90.174,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"candowngradearegular","S":-1,"TS":[2,12.14532,0,0]}]},{"x":30.458,"y":4.543,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,11.1294,0,0]}]},{"x":31.753,"y":4.543,"w":43.008,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"connection","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":5.196,"w":25.653,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tousea","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.781,"y":5.196,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":25.577,"y":5.196,"w":124.481,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"group,andtherebybreakboththe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":5.85,"w":179.468,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"conﬁdentialityandintegrityofapplicationdata.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":6.504,"w":202.822,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Theattack,whichwecallLogjam,isdepictedinFigure2","S":-1,"TS":[2,11.849442,0,0]}]},{"x":19.551,"y":7.158,"w":157.742,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andreliesonaﬂawinthewayTLScomposes","S":-1,"TS":[2,12.14532,0,0]}]},{"x":32.192,"y":7.158,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,11.1294,0,0]}]},{"x":33.548,"y":7.158,"w":14.847,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":7.811999999999999,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":23.151,"y":7.811999999999999,"w":80.587,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Whenaserverselects","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.433,"y":7.811999999999999,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":33.266,"y":7.811999999999999,"w":15.635,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"fora","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":8.465,"w":152.341,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"handshake,itproceedsbyissuingasigned","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":29.892,"y":8.465,"w":75.14,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ServerKeyExchange","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":9.119,"w":107.108,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"messagecontaininga512-bit","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":27.017,"y":9.119,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":27.306,"y":9.182,"w":10.959,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"512","S":-1,"TS":[3,8.978,0,0]}]},{"x":28.022,"y":9.119,"w":87.951,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",butthestructureofthis","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":19.551,"y":9.773,"w":204.182,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"messageisidenticaltothemessagesentduringstandard","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":33.443,"y":9.773,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":19.551,"y":10.427,"w":49.79,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ciphersuites.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":23.097,"y":10.427,"w":157.68,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Critically,thesignedportionoftheserver’s","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":11.081,"w":216.547,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"messagefailstoincludeanyindicationofthespeciﬁccipher-","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":19.551,"y":11.734,"w":216.284,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"suitethattheserverhaschosen.Providedthataclientoﬀers","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":12.388,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":20.603,"y":12.388,"w":152.185,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",anactiveattackercanrewritetheclient’s","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":31.242,"y":12.388,"w":42.091,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ClientHello","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":33.993,"y":12.388,"w":8.191,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"to","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":13.042,"w":78.194,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"oﬀeracorresponding","S":-1,"TS":[2,11.876339999999999,0,0]}]},{"x":24.99,"y":13.042,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.8903,0,0]}]},{"x":28.677,"y":13.042,"w":88.398,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ciphersuiteacceptedby","S":-1,"TS":[2,11.876339999999999,0,0]}]},{"x":19.551,"y":13.696,"w":223.044,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theserverandremoveotherciphersuitesthatcouldbechosen","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":14.35,"w":31.284,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"instead.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.847,"y":14.35,"w":93.563,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Theattackerrewritesthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":28.608,"y":14.35,"w":43.475,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ServerHello","S":-1,"TS":[2,12.14532,0,0]}]},{"x":31.587,"y":14.35,"w":42.111,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"responseto","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":15.003,"w":67.665,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"replacethechosen","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":24.123,"y":15.003,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.8106,0,0]}]},{"x":27.729,"y":15.003,"w":103.494,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ciphersuitewithamatching","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":15.657,"w":149.69,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"non-exportciphersuiteandforwardsthe","S":-1,"TS":[2,11.92117,0,0]}]},{"x":29.822,"y":15.657,"w":75.14,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ServerKeyExchange","S":-1,"TS":[2,11.92117,0,0]}]},{"x":19.551,"y":16.311,"w":92.37,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"messagetotheclientasis.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":25.875,"y":16.311,"w":100.403,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Theclientwillinterpretthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":16.965,"w":71.47,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"export-gradetuple","S":-1,"TS":[2,11.813578,0,0]}]},{"x":24.342,"y":16.965,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,11.813578,0,0]}]},{"x":24.562,"y":16.965,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":24.851,"y":17.027,"w":10.959,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"512","S":-1,"TS":[3,8.978,0,0]}]},{"x":25.567,"y":16.965,"w":13.908,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":",g,g","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.669,"y":16.727,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":26.905,"y":16.965,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,11.813578,0,0]}]},{"x":27.317,"y":16.965,"w":27.952,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"asvalid","S":-1,"TS":[2,11.813578,0,0]}]},{"x":29.387,"y":16.965,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.83451,0,0]}]},{"x":30.634,"y":16.965,"w":61.534,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"parameterscho-","S":-1,"TS":[2,11.813578,0,0]}]},{"x":19.551,"y":17.619,"w":180.708,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"senbytheserverandproceedwiththehandshake.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":31.505,"y":17.619,"w":15.874,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"The","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":18.272,"w":221.549,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"clientandserverhavediﬀerenthandshaketranscriptsatthis","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":18.926,"w":144.197,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"stage,butanattackerwhocancompute","S":-1,"TS":[2,12.14532,0,0]}]},{"x":30.219,"y":18.926,"w":3.949,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,11.966,0,1]}]},{"x":30.68,"y":18.926,"w":49.739,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inclosetoreal","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":19.58,"w":212.455,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"timecanthenderivethemastersecretandconnectionkeys","S":-1,"TS":[2,11.948068,0,0]}]},{"x":19.551,"y":20.234,"w":209.237,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tocompletethehandshakewiththeclient,andthenfreely","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":19.551,"y":20.888,"w":214.949,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"readandwriteapplicationdatapretendingtobetheserver.","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":20.111,"y":21.541,"w":208.557,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Therearetworemainingchallengesinimplementingthis","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":19.551,"y":22.195,"w":215.946,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"activedowngradeattack.Theﬁrstistocomputeindividual","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":19.551,"y":22.849,"w":206.387,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"discretelogsinclosetorealtime,andthesecondistodelay","S":-1,"TS":[2,11.813578,0,0]}]},{"x":19.551,"y":23.503,"w":224.683,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"handshakecompletionuntilthediscretelogcomputationhas","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":24.157,"w":214.914,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"hadtimetoﬁnish.Weaddresstheseinthenextsubsections.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":25.122,"w":148.334,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Comparisonwithpreviousattacks","S":-1,"TS":[2,11.966,1,0]}]},{"x":30.445,"y":25.122,"w":57.284,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Logjamisremi-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":25.776,"w":217.813,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"niscentoftherecentFREAK[7]attack,inwhichanattacker","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":26.429,"w":204.636,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"downgradesaregularRSAkeyexchangetoonethatuses","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":27.083,"w":215.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"export-grade512-bitephemeralRSAkeys,relyingonabug","S":-1,"TS":[2,11.92117,0,0]}]},{"x":19.551,"y":27.737,"w":143.87,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inseveralTLSclientimplementations.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.04,"y":27.737,"w":66.842,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Theattackerthen","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":28.391,"w":214.696,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"factorstheephemeralkeytohijackfutureconnectionsthat","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":19.551,"y":29.044,"w":210.86,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"usethesamekey.Thecryptanalysistakesseveralhourson","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":19.551,"y":29.698,"w":221.5,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"commodityhardwareandisusableuntiltheservergenerates","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":30.352,"w":199.535,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"afreshephemeralRSAkey(typicallywhenitrestarts).","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":31.006,"w":197.503,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Incontrast,LogjamisduetoaprotocolﬂawinTLS,not","S":-1,"TS":[2,11.92117,0,0]}]},{"x":19.551,"y":31.659999999999997,"w":216.031,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"animplementationbug.Fromaclientperspective,theonly","S":-1,"TS":[2,11.92117,0,0]}]},{"x":19.551,"y":32.313,"w":121.087,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"defenseistorejectsmallprimesin","S":-1,"TS":[2,11.957034,0,0]}]},{"x":28.46,"y":32.313,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.962029999999999,0,0]}]},{"x":29.725,"y":32.313,"w":72.716,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"handshakes.(Prior","S":-1,"TS":[2,11.957034,0,0]}]},{"x":19.551,"y":32.967,"w":165.403,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tothiswork,mostpopularbrowsersaccepted","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":30.901,"y":32.967,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":31.366,"y":32.967,"w":21.812,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofsize","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":33.054,"y":32.967,"w":7.167,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"≥","S":-1,"TS":[2,11.966,0,0]}]},{"x":33.662,"y":32.967,"w":13.823,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"512","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":33.621,"w":214.841,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bits.)LogjamaﬀectsfewerserversthanFREAK,but,aswe","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":19.551,"y":34.275,"w":211.544,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"shallsee,thecostpercompromisedconnectionisfarlower,","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":19.551,"y":34.929,"w":216.999,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sincetheprecomputationforeach512-bitgroupcanbeused","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":35.583,"w":217.408,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"indeﬁnitelyagainstallserversthatusethatgroup,andsince","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":36.236,"w":196.987,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"eachindividualdiscretelogonlytakesaboutaminute.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":36.89,"w":212.099,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"LogjamandFREAKbothfollowthesamepatternasother","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":37.544,"w":222.842,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"cross-protocolattacksdiscoveredinTLS.AsearlyasSSL3.0,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":38.198,"w":220.762,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"SchneierandWagnernotedarelatedvulnerabilitythatthey","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":38.851,"w":23.042,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"called","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":21.199,"y":38.851,"w":12.936,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"key","S":-1,"TS":[2,12.064625999999999,0,1]}]},{"x":22.223,"y":38.851,"w":35.767,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"exchange","S":-1,"TS":[2,12.064625999999999,0,1]}]},{"x":24.688,"y":38.851,"w":30.695,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"rollback","S":-1,"TS":[2,12.064625999999999,0,1]}]},{"x":26.844,"y":38.851,"w":112.704,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"[52].Mavrogiannopoulosetal.","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":19.551,"y":39.505,"w":226.6,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"showedhowexplicit-curveECDHEhandshakescouldbecon-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":40.159,"w":121.747,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"fusedwithDHEhandshakes[35].","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.664,"y":40.159,"w":83.045,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Alltheseattackscould","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":40.813,"w":211.866,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bepreventedbyadditionallysigningtheciphersuiteinthe","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":19.551,"y":41.467,"w":75.14,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ServerKeyExchange","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":24.334,"y":41.467,"w":144.872,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"message.WeexpectthatTLS1.3willﬁx","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":42.12,"w":216.629,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thisprotocolﬂaw.Moregenerally,Logjamcanalsobeinter-","S":-1,"TS":[2,11.795646,0,0]}]},{"x":19.551,"y":42.774,"w":211.363,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"pretedasabackwardscompatibilityattack[23]whereone","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":43.428,"w":216.435,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"partyusesonlystrongcryptographybuttheothersupports","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":19.551,"y":44.082,"w":128.451,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bothstrongandweakciphersuites.","S":-1,"TS":[2,11.966,0,0]}]},{"x":18.66,"y":45.95,"w":4.608,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"4","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[{"x":22.054,"y":7.206,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":34.467,"y":7.206,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":22.054,"y":5.523,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":34.467,"y":5.523,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":22.054,"y":3.841,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":34.467,"y":3.841,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":22.19,"y":3.505,"w":0.61,"l":12.413,"oc":"#000000"},{"x":22.19,"y":7.541,"w":0.61,"l":12.413,"oc":"#000000"}],"VLines":[{"x":22.961,"y":7.405,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":22.961,"y":3.369,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":25.648,"y":7.405,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":25.648,"y":3.369,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":28.334,"y":7.405,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":28.334,"y":3.369,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":31.021,"y":7.405,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":31.021,"y":3.369,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":33.707,"y":7.405,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":33.707,"y":3.369,"w":0.305,"l":0.272,"oc":"#7f7f7f"},{"x":22.19,"y":3.505,"w":0.61,"l":4.037,"oc":"#000000"},{"x":34.603,"y":3.505,"w":0.61,"l":4.037,"oc":"#000000"}],"Fills":[],"Texts":[{"x":3.112,"y":3.235,"w":14.944,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3.3","S":-1,"TS":[2,14.955,0,0]}]},{"x":4.794,"y":3.235,"w":35.865,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"512-bit","S":-1,"TS":[2,14.955,0,0]}]},{"x":7.222,"y":3.235,"w":41.819,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Discrete","S":-1,"TS":[2,14.955,0,0]}]},{"x":10.022,"y":3.235,"w":19.929,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Log","S":-1,"TS":[2,14.955,0,0]}]},{"x":11.455,"y":3.235,"w":72.399,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Computations","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.673,"y":4.044,"w":217.617,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WemodiﬁedCADO-NFS[1]toimplementthenumberﬁeld","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":4.698,"w":207.412,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sievediscretelogalgorithmfrom§2andappliedittothree","S":-1,"TS":[2,12.019796,0,0]}]},{"x":3.112,"y":5.352,"w":135.235,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"512-bitprimes,includingthetoptwo","S":-1,"TS":[2,11.957034,0,0]}]},{"x":12.672,"y":5.352,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.962029999999999,0,0]}]},{"x":16.389,"y":5.352,"w":26.696,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"primes","S":-1,"TS":[2,11.957034,0,0]}]},{"x":3.112,"y":6.006,"w":222.749,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"showninTable1.Precomputationtook7daysforeachprime,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":6.66,"w":223.344,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"afterwhichcomputingindividuallogstookamedianof70sec-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":7.313000000000001,"w":211.906,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"onds.Welisttheruntimeforeachstageofthecomputation","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":3.112,"y":7.9670000000000005,"w":191.922,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"below.Thetimeswereaboutthesameforeachprime.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":9.026,"w":74.696,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Precomputation","S":-1,"TS":[2,11.966,1,0]}]},{"x":8.55,"y":9.026,"w":137.508,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"AsillustratedinFigure1,theprecom-","S":-1,"TS":[2,11.813578,0,0]}]},{"x":3.112,"y":9.68,"w":228.046,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"putationphaseincludesthepolynomialselection,sieving,and","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":10.333,"w":227.208,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"linearalgebrasteps.Forthisprecomputation,wedeliberately","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":10.987,"w":214.083,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sievedmorethanstrictlynecessary.Thisenabledtwoopti-","S":-1,"TS":[2,12.073592,0,0]}]},{"x":3.112,"y":11.641,"w":215.32,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mizations:ﬁrst,withmorerelationsobtainedfromsieving,","S":-1,"TS":[2,12.073592,0,0]}]},{"x":3.092,"y":12.295,"w":216.206,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"weeventuallyobtainalargerdatabaseofknownlogs,which","S":-1,"TS":[2,11.83151,0,0]}]},{"x":3.112,"y":12.949,"w":220.284,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"makesthedescentfaster.Second,moresievingrelationsalso","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.097,"y":13.602,"w":219.231,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"yieldasmallerlinearalgebrastep,whichisdesirablebecause","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":14.256,"w":199.667,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sievingismucheasiertoparallelizethanlinearalgebra.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":14.91,"w":199.322,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Forthepolynomialselectionandsievingsteps,weused","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":15.564,"w":213.768,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"idletimeon2000–3000CPUcoresinparallel,ofwhichmost","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":16.218,"w":114.525,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"CPUswereIntelSandyBridge.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":10.785,"y":16.218,"w":93.125,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Polynomialselectionran","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":16.871,"w":209.398,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forabout3hours,whichintotalcorrespondsto7,600core-","S":-1,"TS":[2,11.974965999999998,0,0]}]},{"x":3.112,"y":17.525,"w":24.646,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"hours.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.085,"y":17.525,"w":176.837,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Sievingranfor15hours,correspondingto21,400","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":18.179,"w":44.124,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"core-hours.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":6.243,"y":18.179,"w":165.29,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thissuﬃcedtocollect40,003,519relationsof","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":18.833,"w":218.967,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"which28,372,442wereunique,involving15,207,865primes","S":-1,"TS":[2,12.091524,0,0]}]},{"x":3.112,"y":19.487,"w":110.435,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofatmost27bits(hencebound","S":-1,"TS":[2,11.966,0,0]}]},{"x":11.375,"y":19.487,"w":6.973,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"B","S":-1,"TS":[2,11.966,0,1]}]},{"x":12.03,"y":19.487,"w":33.978,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"from§2is","S":-1,"TS":[2,11.966,0,0]}]},{"x":14.73,"y":19.487,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[2,11.966,0,0]}]},{"x":15.018,"y":19.249,"w":7.306,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"27","S":-1,"TS":[3,8.978,0,0]}]},{"x":15.506,"y":19.487,"w":6.144,"clr":0,"sw":0.669125,"A":"left","R":[{"T":").","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":20.14,"w":189.522,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Fromthisdataset,weobtainedasquarematrixwith","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.098,"y":20.794,"w":225.49,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"2,157,378rowsandcolumns,with113nonzerocoeﬃcientsper","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":21.448,"w":224.57,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"rowonaverage.Wesolvedthecorrespondinglinearsystemon","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":22.102,"w":214.667,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"a36-nodeclusterwithtwo8-coreIntelXeonE5-2650CPUs","S":-1,"TS":[2,11.849442,0,0]}]},{"x":3.112,"y":22.756,"w":221.383,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"pernode,connectedwithInﬁnibandFDR.Weusedtheblock","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.083,"y":23.409,"w":175.468,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Wiedemannalgorithm[11,49]withparameters","S":-1,"TS":[2,11.966,0,0]}]},{"x":15.085,"y":23.409,"w":8.119,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"m","S":-1,"TS":[2,11.966,0,1]}]},{"x":15.751999999999999,"y":23.409,"w":7.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"=","S":-1,"TS":[2,11.966,0,0]}]},{"x":16.361,"y":23.409,"w":9.215,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"18","S":-1,"TS":[2,11.966,0,0]}]},{"x":17.128,"y":23.409,"w":14.847,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":24.063,"w":5.559,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"n","S":-1,"TS":[2,11.966,0,1]}]},{"x":3.621,"y":24.063,"w":7.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"=","S":-1,"TS":[2,11.903238,0,0]}]},{"x":4.226,"y":24.063,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"6","S":-1,"TS":[2,11.903238,0,0]}]},{"x":4.512,"y":24.063,"w":200.382,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".UsingtheunoptimizedimplementationfromCADO-","S":-1,"TS":[2,11.903238,0,0]}]},{"x":3.112,"y":24.717,"w":107.729,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"NFS[1]forlinearalgebraover","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.673,"y":24.717,"w":13.245,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"GF","S":-1,"TS":[2,11.966,0,0]}]},{"x":12.501,"y":24.717,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.729,"y":24.717,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":13.019,"y":24.717,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,12.14532,0,0]}]},{"x":13.247,"y":24.717,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",","S":-1,"TS":[2,12.14532,0,0]}]},{"x":13.722,"y":24.717,"w":63.486,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thecomputation","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":25.371,"w":210.733,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ﬁnishedin120hours,correspondingto60,000core-hours.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.083,"y":26.025,"w":215.459,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Weexpectthatoptimizationscouldbringthiscostdownby","S":-1,"TS":[2,11.876339999999999,0,0]}]},{"x":3.112,"y":26.678,"w":85.087,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"atleastafactorofthree.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":27.332,"w":207.702,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Intotal,thewall-clocktimeforeachprecomputationwas","S":-1,"TS":[2,11.903238,0,0]}]},{"x":3.112,"y":27.986,"w":82.766,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"slightlyoveroneweek.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":8.72,"y":27.986,"w":124.15,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Eachresultingdatabaseofknown","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":28.64,"w":213.368,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"logsforthedescentoccupiesabout2.5GBinASCIIformat.","S":-1,"TS":[2,11.813578,0,0]}]},{"x":3.112,"y":29.698,"w":36.786,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Descent","S":-1,"TS":[2,11.966,1,0]}]},{"x":6.16,"y":29.698,"w":176.329,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Oncethisprecomputationwasﬁnished,wewere","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":30.352,"w":211.889,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"abletoruntheﬁnaldescentsteptocomputeindividualdis-","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":3.112,"y":31.006,"w":219.94,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"cretelogsinaboutaminutefortargetsineachofthesegroups.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":31.659999999999997,"w":215.435,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inordertosavetimeonindividualcomputations,weimple-","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":3.112,"y":32.313,"w":217.359,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mentedaclient-serverarchitectureusingtheZeroMQmes-","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":3.112,"y":32.967,"w":216.834,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"saginglibrary.Theservermaintainstheprecomputeddata","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":3.112,"y":33.621,"w":203.497,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inRAMandreturnslogsforvaluespassedtoitbyclients.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":34.275,"w":215.732,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WeimplementedthedescentcalculationinamixofPython","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":34.929,"w":208.164,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andC.Theﬁrstandsecondstagesareparallelizedandrun","S":-1,"TS":[2,11.930136,0,0]}]},{"x":3.112,"y":35.583,"w":210.737,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sievinginC,andtheﬁnaldiscretelogisdeducedinPython.","S":-1,"TS":[2,11.813578,0,0]}]},{"x":3.083,"y":36.236,"w":212.107,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Werantheserveronamachinewithtwo18-coreIntelXeon","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":36.89,"w":218.227,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"E5-2699CPUsand128GBofRAM.Onaverage,computing","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":37.544,"w":207.785,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"individuallogstookabout70seconds,butthetimevaried","S":-1,"TS":[2,12.127388,0,0]}]},{"x":3.112,"y":38.198,"w":208.538,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"from34to206seconds(seeFig.3).Thisisdividedbetween","S":-1,"TS":[2,11.795646,0,0]}]},{"x":3.112,"y":38.851,"w":222.169,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"about20secondsfordescentinitializationandtheremainder","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":39.505,"w":215.687,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"onthemiddlephase.Furtheroptimizations—suchasmore","S":-1,"TS":[2,11.957034,0,0]}]},{"x":3.112,"y":40.159,"w":210.532,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"eﬀectiveparallelizationonthemiddlephaseoradditional","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":40.813,"w":217.983,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sieving—shouldbringthemediantimewellbelowaminute.","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":3.673,"y":41.467,"w":205.328,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Forpurposesofcomparison,asingle512-bitRSAfactor-","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":3.112,"y":42.12,"w":216.668,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"izationusingtheCADO-NFSimplementationtakesabout","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":42.774,"w":205.457,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"eightdaysofwall-clocktimeonthecomputerusedforthe","S":-1,"TS":[2,12.127388,0,0]}]},{"x":3.112,"y":43.428,"w":223.598,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"descent,andaboutthreehoursparallelizedacross1,800cores","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":44.082,"w":57.976,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofAmazonEC2","S":-1,"TS":[2,11.966,0,0]}]},{"x":7.312,"y":44.082,"w":47.071,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"c4.8xlarge","S":-1,"TS":[3,11.966,0,0]}]},{"x":10.446,"y":44.082,"w":39.015,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"instances.","S":-1,"TS":[2,11.966,0,0]}]},{"x":22.393,"y":7.561999999999999,"w":9.963,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"30","S":-1,"TS":[2,12.963,0,0]}]},{"x":25.079,"y":7.561999999999999,"w":9.963,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"60","S":-1,"TS":[2,12.963,0,0]}]},{"x":27.766,"y":7.561999999999999,"w":9.963,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"90","S":-1,"TS":[2,12.963,0,0]}]},{"x":30.293,"y":7.561999999999999,"w":14.945,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"120","S":-1,"TS":[2,12.963,0,0]}]},{"x":32.98,"y":7.561999999999999,"w":14.945,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"150","S":-1,"TS":[2,12.963,0,0]}]},{"x":21.261,"y":6.661,"w":4.982,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"0","S":-1,"TS":[2,12.963,0,0]}]},{"x":20.766,"y":4.978,"w":4.982,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"0","S":-1,"TS":[2,12.963,0,0]}]},{"x":21.084,"y":4.978,"w":2.768,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":".","S":-1,"TS":[3,12.963,0,0]}]},{"x":21.261,"y":4.978,"w":4.982,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"5","S":-1,"TS":[2,12.963,0,0]}]},{"x":21.261,"y":3.2960000000000003,"w":4.982,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[2,12.963,0,0]}]},{"x":27.048,"y":8.441,"w":34.372,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Seconds","S":-1,"TS":[2,12.963,0,0]}]},{"x":20.205,"y":6.516,"w":21.31,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"CDF","S":-1,"TS":[2,12.963,0,0],"RA":90}]},{"x":20.205,"y":4.943,"w":8.026,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"of","S":-1,"TS":[2,12.963,0,0],"RA":90}]},{"x":20.205,"y":4.217,"w":18.874,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"keys","S":-1,"TS":[2,12.963,0,0],"RA":90}]},{"x":19.551,"y":9.609,"w":33.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Figure3:","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":22.009,"y":9.609,"w":182.204,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Individualdiscretelogtimefor512-bitDH.","S":-1,"TS":[2,11.966,1,0]}]},{"x":19.529,"y":10.263,"w":206.143,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Afteraweek-longprecomputationforeachofthetwotop","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":10.917,"w":202.69,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"export-gradeprimes(seeTable1),wecanquicklybreak","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":11.571,"w":203.52,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"anykeyexchangethatusesthem.Hereweshowtimesfor","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":12.224,"w":211.908,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"computing3,500individuallogs;themedianis70seconds.","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":14.338,"w":14.944,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3.4","S":-1,"TS":[2,14.955,0,0]}]},{"x":21.232,"y":14.338,"w":32.53,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Active","S":-1,"TS":[2,14.955,0,0]}]},{"x":23.452,"y":14.338,"w":34.526,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Attack","S":-1,"TS":[2,14.955,0,0]}]},{"x":25.796,"y":14.338,"w":81.689,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Implementation","S":-1,"TS":[2,14.955,0,0]}]},{"x":20.111,"y":15.147,"w":209.71,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Weimplementedaman-in-the-middlenetworkattacker","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":15.800999999999998,"w":214.953,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thatsitsbetweenaTLSclient(webbrowser)andanyserver","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":16.455,"w":51.319,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thatsupports","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":23.065,"y":16.455,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.8106,0,0]}]},{"x":26.701,"y":16.455,"w":114.325,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andusesthemostcommon512-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":17.109,"w":218.306,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bitApachegroup.Ourimplementationfollowsthemessage","S":-1,"TS":[2,11.930136,0,0]}]},{"x":19.551,"y":17.762,"w":216.925,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sequenceinFigure2:itdowngradestheconnectiontowards","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":19.551,"y":18.416,"w":202.932,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theserver,computesthesessionkeys,andtakesoverthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":19.07,"w":215.794,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"connectiontowardstheclientbyimpersonatingtheserver.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":19.724,"w":183.503,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Themainchallengeistocomputethesharedsecret","S":-1,"TS":[2,12.14532,0,0]}]},{"x":33.712,"y":19.724,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":34.007,"y":19.486,"w":7.309,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"ab","S":-1,"TS":[2,8.978,0,1]}]},{"x":19.551,"y":20.378,"w":180.165,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"beforethehandshakecompletesinordertoforgea","S":-1,"TS":[2,11.948068,0,0]}]},{"x":32.525,"y":20.378,"w":31.585,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Finished","S":-1,"TS":[2,11.948068,0,0]}]},{"x":19.551,"y":21.032,"w":219.687,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"messagefromtheserver.Withourdescentimplementation,","S":-1,"TS":[2,11.92117,0,0]}]},{"x":19.551,"y":21.685,"w":208.329,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thecomputationtakesanaverageof70seconds,butthere","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":19.551,"y":22.339,"w":202.752,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"areseveralwaysanattackercanworkaroundthisdelay:","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.518,"y":23.267,"w":51.034,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Non-browser","S":-1,"TS":[2,11.867374,0,0]}]},{"x":22.865,"y":23.267,"w":28.212,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"clients.","S":-1,"TS":[2,11.867374,0,0]}]},{"x":25.123,"y":23.267,"w":139.928,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"DiﬀerentTLSclientsimposediﬀerent","S":-1,"TS":[2,11.867374,0,0]}]},{"x":19.551,"y":23.92,"w":109.178,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"timelimitsforthehandshake,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":26.818,"y":23.92,"w":85.271,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"afterwhichtheykillthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":24.574,"w":45.568,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"connection.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":22.911,"y":24.574,"w":110.742,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Command-lineclientssuchas","S":-1,"TS":[2,12.14532,0,0]}]},{"x":30.972,"y":24.574,"w":18.829,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"curl","S":-1,"TS":[3,11.966,0,0]}]},{"x":32.407,"y":24.574,"w":14.847,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,12.14532,0,0]}]},{"x":33.612,"y":24.574,"w":14.121,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"git","S":-1,"TS":[3,11.966,0,0]}]},{"x":19.551,"y":25.228,"w":213.905,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"oftenrununattended,sotheyhavelongornotimeouts,and","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.53,"y":25.882,"w":183.617,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wecanhijacktheirconnectionswithoutdiﬃculty.","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.459,"y":26.809,"w":17.534,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"TLS","S":-1,"TS":[2,12.14532,0,0]}]},{"x":20.814,"y":26.809,"w":32.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"warning","S":-1,"TS":[2,12.14532,0,0]}]},{"x":23.108,"y":26.809,"w":24.649,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"alerts.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":25.341,"y":26.809,"w":126.705,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Webbrowserstendtohaveshorter","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":27.463,"w":218.551,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"timeouts,butwecankeeptheirconnectionsalivebysending","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.53,"y":28.117,"w":207.97,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TLSwarningalerts,whichareignoredbythebrowserbut","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":28.771,"w":222.663,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"resetthehandshaketimer.Forexample,thisallowsustokeep","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":29.425,"w":227.106,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Firefox’sTLSconnectionsaliveindeﬁnitely.(Otherbrowsers","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.53,"y":30.078,"w":167.305,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wetestedclosetheconnectionafteraminute.)","S":-1,"TS":[2,12.14532,0,0]}]},{"x":30.552,"y":30.078,"w":37.628,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Although","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":30.732,"w":205.481,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thevictimconnectionstilltakesmuchlongerthanusual,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":31.386000000000003,"w":200.685,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theattackermightchoosetocompromisearequestfora","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":32.04,"w":220.375,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"backgroundresourcethatdoesnotdelayrenderingthepage.","S":-1,"TS":[2,11.813578,0,0]}]},{"x":19.52,"y":32.967,"w":43.159,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Ephemeral","S":-1,"TS":[2,12.14532,0,0]}]},{"x":22.492,"y":32.967,"w":13.826,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"key","S":-1,"TS":[2,12.14532,0,0]}]},{"x":23.593,"y":32.967,"w":32.765,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"caching.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":26.28,"y":32.967,"w":108.61,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ManyTLSserversdonotusea","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":33.621,"w":40.523,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"freshvalue","S":-1,"TS":[2,12.14532,0,0]}]},{"x":22.541,"y":33.621,"w":3.949,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,11.966,0,1]}]},{"x":23.007,"y":33.621,"w":151.368,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"foreachconnection,butinsteadcompute","S":-1,"TS":[2,12.14532,0,0]}]},{"x":33.964,"y":33.621,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":34.259,"y":33.383,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":19.551,"y":34.275,"w":222.863,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"onceandreuseitformultiplenegotiations.Withoutenabling","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":34.929,"w":12.803,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"the","S":-1,"TS":[2,12.14532,0,0]}]},{"x":20.58,"y":34.929,"w":94.143,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"SSL_OP_SINGLE_DH_USE","S":-1,"TS":[3,11.966,0,0]}]},{"x":26.678,"y":34.929,"w":100.554,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"option,OpenSSLwillreuse","S":-1,"TS":[2,12.14532,0,0]}]},{"x":33.964,"y":34.929,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":34.259,"y":34.691,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":19.551,"y":35.583,"w":202.899,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forthelifetimeofaTLScontext.WhilebothApacheand","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":36.236,"w":212.635,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Nginxinternallyapplythisoption,certainloadbalancers,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":36.89,"w":86.162,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"suchasstud[48],donot.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":25.405,"y":36.89,"w":110.592,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TheF5BIG-IPloadbalancers","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":37.544,"w":142.394,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andhardwareTLSfrontendswillreuse","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":29.386,"y":37.544,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":29.681,"y":37.306,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":30.108,"y":37.544,"w":65.393,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"unlessthe“Single","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":38.198,"w":197.933,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"DH”optionischecked[53].MicrosoftSchannelcaches","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":33.119,"y":38.198,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":33.413,"y":37.96,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":33.831,"y":38.198,"w":11.027,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"for","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":38.851,"w":216.143,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"twohours—thissettingishard-coded.Fortheseservers,an","S":-1,"TS":[2,11.813578,0,0]}]},{"x":19.551,"y":39.505,"w":143.969,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attackercancomputethediscretelogof","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":29.653,"y":39.505,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":29.948,"y":39.267,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":30.372,"y":39.505,"w":62.741,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"fromoneconnec-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":40.159,"w":215.473,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tionanduseittoattacklaterhandshakes,avoidingtheneed","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":40.813,"w":212.535,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"todothecomputationonline.ByrandomlysamplingIPv4","S":-1,"TS":[2,12.019796,0,0]}]},{"x":19.551,"y":41.467,"w":202.979,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"hostsservingbrowser-trustedcertiﬁcatesthatsupport","S":-1,"TS":[2,11.939102,0,0]}]},{"x":33.345,"y":41.467,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.94609,0,0]}]},{"x":34.415,"y":41.467,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",","S":-1,"TS":[2,11.939102,0,0]}]},{"x":19.53,"y":42.12,"w":93.002,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wefoundthat17%reused","S":-1,"TS":[2,12.14532,0,0]}]},{"x":26.441,"y":42.12,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.735,"y":41.882,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":27.171,"y":42.12,"w":99.737,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"atleastonceoverthecourse","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":42.774,"w":207.763,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"of20handshakes,andthat15%onlyusedonevalue.How-","S":-1,"TS":[2,12.05566,0,0]}]},{"x":19.551,"y":43.428,"w":30.253,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ever,for","S":-1,"TS":[2,11.957034,0,0]}]},{"x":21.809,"y":43.428,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.962029999999999,0,0]}]},{"x":25.335,"y":43.428,"w":64.84,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",only0.1%reused","S":-1,"TS":[2,11.957034,0,0]}]},{"x":30.154,"y":43.428,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":30.449,"y":43.19,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":30.685,"y":43.428,"w":54.841,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",likelybecause","S":-1,"TS":[2,11.957034,0,0]}]},{"x":19.551,"y":44.082,"w":215.114,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"MicrosoftIISdoesnotsupport512-bitexportciphersuites.","S":-1,"TS":[2,11.966,0,0]}]},{"x":18.66,"y":45.95,"w":4.608,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"5","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[{"x":11.621,"y":42.425,"w":0.569,"l":0.455,"oc":"#000"},{"x":9.195,"y":43.649,"w":0.597,"l":0.907,"oc":"#000"}],"VLines":[],"Fills":[],"Texts":[{"x":3.021,"y":3.235,"w":17.534,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"TLS","S":-1,"TS":[2,12.14532,0,0]}]},{"x":4.348,"y":3.235,"w":20.916,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"False","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.892,"y":3.235,"w":23.059,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Start.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.911,"y":3.235,"w":144.687,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Evenwhenclientsenforceshortertime-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":3.8890000000000002,"w":138.839,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"outsandserversdonotreusevaluesfor","S":-1,"TS":[2,12.037728,0,0]}]},{"x":13.346,"y":3.8890000000000002,"w":3.949,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,11.966,0,1]}]},{"x":13.592,"y":3.8890000000000002,"w":62.23,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",theattackercan","S":-1,"TS":[2,12.037728,0,0]}]},{"x":3.112,"y":4.543,"w":204.308,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"stillbreaktheconﬁdentialityofuserrequestsiftheclient","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":5.196,"w":216.413,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"supportstheTLSFalseStartextension[30].Thisextension","S":-1,"TS":[2,11.867374,0,0]}]},{"x":3.112,"y":5.85,"w":211.097,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"reducesconnectionlatencybyhavingtheclientsendearly","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":6.504,"w":221.985,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"applicationdata(suchasanHTTPrequest)withoutwaiting","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":7.158,"w":53.93,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"fortheserver’s","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":7.084,"y":7.158,"w":31.585,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Finished","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":9.275,"y":7.158,"w":126.354,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"messagetoarrive.Recentversions","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":3.112,"y":7.811999999999999,"w":218.397,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofChrome,InternetExplorer,andFirefoximplementFalse","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":3.112,"y":8.465,"w":206.46,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Start,buttheirpoliciesonwhentoenableitvarybetween","S":-1,"TS":[2,12.073592,0,0]}]},{"x":3.097,"y":9.119,"w":224.477,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"versions.Firefox35,Chrome41,andInternetExplorer(Win-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":9.773,"w":128.042,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"dows10)sendFalseStartdatawith","S":-1,"TS":[2,12.019796,0,0]}]},{"x":12.447,"y":9.773,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,11.01782,0,0]}]},{"x":13.527,"y":9.773,"w":58.782,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Inthesecases,a","S":-1,"TS":[2,12.019796,0,0]}]},{"x":3.112,"y":10.427,"w":226.421,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"man-in-the-middlecanrecordthehandshakeanddecryptthe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":11.081,"w":213.567,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"FalseStartpayloadatleisure.Wenotethatthisinitialdata","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":11.734,"w":224.886,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sentbyabrowseroftencontainssensitiveuserauthentication","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":12.388,"w":162.129,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"information,suchaspasswordsandcookies.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":13.763,"w":14.944,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3.5","S":-1,"TS":[2,14.955,0,0]}]},{"x":4.794,"y":13.763,"w":30.545,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Other","S":-1,"TS":[2,14.955,0,0]}]},{"x":6.889,"y":13.763,"w":29.888,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Weak","S":-1,"TS":[2,14.955,0,0]}]},{"x":8.944,"y":13.763,"w":19.271,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,14.955,0,0]}]},{"x":10.335,"y":13.763,"w":73.726,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Misconﬁgured","S":-1,"TS":[2,14.955,0,0]}]},{"x":15.13,"y":13.763,"w":38.531,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Groups","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.673,"y":14.572,"w":202.789,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inourscans,wefoundseveralotherexploitablesecurity","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":3.112,"y":15.226,"w":195.361,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"issuesintheDHEconﬁgurationsusedbyTLSservers.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":16.178,"w":123.173,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"512-bitprimesinnon-export","S":-1,"TS":[2,11.966,1,0]}]},{"x":12.034,"y":16.178,"w":17.779,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.969999999999999,1,0]}]},{"x":13.983,"y":16.178,"w":57.34,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Wefound2,631","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":16.832,"w":204.419,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"serverswithbrowser-trustedcertiﬁcates(and118inthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":17.485,"w":203.238,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Top1Mdomains)thatused512-bitorweakerprimesfor","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":18.139,"w":43.796,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"non-export","S":-1,"TS":[2,12.14532,0,0]}]},{"x":6.193,"y":18.139,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,11.1294,0,0]}]},{"x":7.288,"y":18.139,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.949,"y":18.139,"w":137.932,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Intheseinstances,activeattacksmay","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":18.793,"w":59.776,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"beunnecessary.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.222,"y":18.793,"w":87.185,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Ifabrowsernegotiatesa","S":-1,"TS":[2,12.14532,0,0]}]},{"x":13.976,"y":18.793,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,11.1294,0,0]}]},{"x":15.277,"y":18.793,"w":43.595,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ciphersuite","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":19.447,"w":94.412,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"withoneoftheseservers,a","S":-1,"TS":[2,12.14532,0,0]}]},{"x":10.288,"y":19.447,"w":28.227,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"passive","S":-1,"TS":[2,12.14532,0,1]}]},{"x":12.277,"y":19.447,"w":84.856,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"eavesdroppercanlater","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":20.101,"w":205.21,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"computethediscretelogandobtaintheTLSsessionkeys","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":20.754,"w":209.603,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"fortheconnection.Anactiveattackmaystillbenecessary","S":-1,"TS":[2,12.037728,0,0]}]},{"x":3.092,"y":21.408,"w":217.13,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"whentheclient’sorderingofciphersuiteswouldresultinthe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":22.062,"w":71.576,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"servernotselecting","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":7.955,"y":22.062,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":9.007,"y":22.062,"w":73.625,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Inthiscase,asinthe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":14.616,"y":22.062,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.8106,0,0]}]},{"x":3.112,"y":22.716,"w":215.968,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"downgradeattack,anactiveattackercanforcetheserverto","S":-1,"TS":[2,11.840475999999999,0,0]}]},{"x":3.112,"y":23.37,"w":72.524,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"chooseavulnerable","S":-1,"TS":[2,11.966,0,0]}]},{"x":8.221,"y":23.37,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":9.487,"y":23.37,"w":46.155,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ciphersuite.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":24.023,"w":202.728,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Asaproof-of-concept,weimplementedapassiveeaves-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":24.677,"w":70.504,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"dropperforregular","S":-1,"TS":[2,11.948068,0,0]}]},{"x":8.1,"y":24.677,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.95406,0,0]}]},{"x":9.363,"y":24.677,"w":124.283,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"connectionsandusedittodecrypt","S":-1,"TS":[2,11.948068,0,0]}]},{"x":3.112,"y":25.331,"w":223.235,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"testconnectionstowww.fbi.gov.UntilApril2015,thisserver","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":25.985,"w":206.165,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"usedthedefault512-bitDHgroupfromOpenSSL,which","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":26.639,"w":203.568,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wasthethirdgroupforwhichweperformedtheNFSpre-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":27.293,"w":167.618,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"computation.Thewebsitenolongersupports","S":-1,"TS":[2,11.966,0,0]}]},{"x":14.805,"y":27.293,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":15.878,"y":27.293,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.087,"y":28.244,"w":35.915,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Attacks","S":-1,"TS":[2,11.966,1,0]}]},{"x":5.665,"y":28.244,"w":11.199,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"on","S":-1,"TS":[2,11.966,1,0]}]},{"x":6.699,"y":28.244,"w":74.544,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"composite-order","S":-1,"TS":[2,11.966,1,0]}]},{"x":11.691,"y":28.244,"w":46.933,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"subgroups","S":-1,"TS":[2,11.966,1,0]}]},{"x":15.472,"y":28.244,"w":36.756,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Failureto","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":28.898,"w":216.946,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"generateDiﬃe-Hellmanprimesaccordingtobestpractices","S":-1,"TS":[2,12.109456,0,0]}]},{"x":3.112,"y":29.552,"w":122.026,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"canresultindevastatingattacks.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.351,"y":29.552,"w":78.07,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"NoteveryTLSserver","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":30.206,"w":69.615,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"uses“safe”primes.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.938000000000001,"y":30.206,"w":137.022,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Outofapproximately70,000distinct","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":30.86,"w":211.971,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"primesseenacrossbothexportandnon-exportTLSscans,","S":-1,"TS":[2,12.091524,0,0]}]},{"x":3.092,"y":31.512999999999998,"w":121.163,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"4,800werenotsafe,meaningthat","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":11.856,"y":31.512999999999998,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":12.081,"y":31.512999999999998,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":12.498,"y":31.512999999999998,"w":7.167,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"−","S":-1,"TS":[2,11.966,0,0]}]},{"x":13.075,"y":31.512999999999998,"w":8.191,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1)","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":13.59,"y":31.512999999999998,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/","S":-1,"TS":[2,11.966,0,1]}]},{"x":13.878,"y":31.512999999999998,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":14.36,"y":31.512999999999998,"w":57.444,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wascomposite.","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":3.045,"y":32.167,"w":147.298,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"(Incidentally,wealsofound9composite","S":-1,"TS":[2,12.14532,0,0]}]},{"x":13.644,"y":32.167,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":13.933,"y":32.167,"w":6.144,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".)","S":-1,"TS":[2,12.14532,0,0]}]},{"x":14.638,"y":32.167,"w":50.302,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thesegroups","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":32.821,"w":146.192,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"arenotnecessarilyvulnerable,aslongas","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":13.262,"y":32.821,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":13.727,"y":32.821,"w":65.122,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"generatesagroup","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.092,"y":33.475,"w":216.067,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"withatleastonesuﬃcientlylargesubgroupordertoruleout","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":34.129,"w":159.934,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thePohlig-Hellmanalgorithmasanattack.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":34.782,"w":205.321,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Insomereal-lifeconﬁgurations,however,choosingsuch","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":35.436,"w":205.451,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"primescanleadtoanattack.Foreﬃciencyreasons,some","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":36.09,"w":137.912,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"implementationsuseephemeralkeys","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":12.066,"y":36.09,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":12.361,"y":35.852,"w":4.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,8.978,0,1]}]},{"x":12.787,"y":36.09,"w":79.688,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"withashortexponent","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":36.744,"w":5.224,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,11.966,0,1]}]},{"x":3.439,"y":36.744,"w":111.328,"clr":0,"sw":0.669125,"A":"left","R":[{"T":";commonlysuggestedsizesfor","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":11.194,"y":36.744,"w":5.224,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,11.966,0,1]}]},{"x":11.707,"y":36.744,"w":85.694,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"areassmallas160or224","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":37.398,"w":212.421,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bits,intendedtomatchtheestimatedstrengthofa1024-or","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":3.098,"y":38.051,"w":58.384,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"2048-bitgroup.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.144,"y":38.051,"w":29.383,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Forsafe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":9.613,"y":38.051,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":9.902,"y":38.051,"w":111.488,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",suchexponentlengthsarenot","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":38.705,"w":213.498,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"knowntodecreasesecurity,asthemosteﬃcientattackwill","S":-1,"TS":[2,11.957034,0,0]}]},{"x":3.112,"y":39.359,"w":122.532,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bethePollardlambdaalgorithm.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.276,"y":39.359,"w":74.668,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Butiftheorderofthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":40.013,"w":85.856,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"subgroupgeneratedby","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":8.919,"y":40.013,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":9.402,"y":40.013,"w":122.592,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"hassmallfactors,theycanbeused","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":40.667,"w":209,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"torecoverinformationaboutexponents.Fromasubsetof","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":41.32,"w":26.949,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"factors","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.073,"y":41.32,"w":4.608,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"{","S":-1,"TS":[2,11.966,0,0]}]},{"x":5.361,"y":41.32,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":5.638,"y":41.06,"w":3.521,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"e","S":-1,"TS":[2,8.978,0,1]}]},{"x":5.858,"y":41.127,"w":3.39,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[3,7.981,0,0]}]},{"x":5.618,"y":41.468,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[3,8.978,0,0]}]},{"x":6.228,"y":41.32,"w":11.797,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"...q","S":-1,"TS":[2,11.966,0,1]}]},{"x":7.274,"y":41.04,"w":3.521,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"e","S":-1,"TS":[2,8.978,0,1]}]},{"x":7.494,"y":41.127,"w":3.776,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"k","S":-1,"TS":[2,7.981,0,1]}]},{"x":7.254,"y":41.486,"w":3.951,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"k","S":-1,"TS":[2,8.978,0,1]}]},{"x":7.797000000000001,"y":41.32,"w":4.608,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"}","S":-1,"TS":[2,11.966,0,0]}]},{"x":8.328,"y":41.32,"w":17.919,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"with","S":-1,"TS":[2,12.14532,0,0]}]},{"x":9.712,"y":40.869,"w":9.41,"clr":0,"sw":1.030875,"A":"left","R":[{"T":"Q","S":-1,"TS":[2,12.963,0,0]}]},{"x":10.3,"y":41.523,"w":2.664,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"i","S":-1,"TS":[2,8.978,0,1]}]},{"x":10.594,"y":41.32,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":10.871,"y":41.048,"w":3.521,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"e","S":-1,"TS":[2,8.978,0,1]}]},{"x":11.091,"y":41.127,"w":2.658,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"i","S":-1,"TS":[2,7.981,0,1]}]},{"x":10.851,"y":41.474,"w":2.664,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"i","S":-1,"TS":[2,8.978,0,1]}]},{"x":11.564,"y":41.32,"w":7.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"=","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.265,"y":41.32,"w":4.286,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"z","S":-1,"TS":[2,11.966,0,1]}]},{"x":12.557,"y":41.32,"w":78.714,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",Pohlig-Hellmancan","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":42.036,"w":28.974,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"recover","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":5.043,"y":42.036,"w":5.224,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,11.966,0,1]}]},{"x":5.754,"y":42.036,"w":17.406,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"mod","S":-1,"TS":[2,11.966,0,0]}]},{"x":7.05,"y":42.036,"w":4.286,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"z","S":-1,"TS":[2,11.966,0,1]}]},{"x":7.53,"y":42.036,"w":25.601,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"intime","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":9.475,"y":41.585,"w":10.517,"clr":0,"sw":1.030875,"A":"left","R":[{"T":"P","S":-1,"TS":[2,12.963,0,0]}]},{"x":10.132,"y":42.239,"w":2.664,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"i","S":-1,"TS":[2,8.978,0,1]}]},{"x":10.426,"y":42.036,"w":4.284,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"e","S":-1,"TS":[2,11.966,0,1]}]},{"x":10.693,"y":42.099,"w":2.664,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"i","S":-1,"TS":[2,8.978,0,1]}]},{"x":10.891,"y":41.686,"w":7.679,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"√","S":-1,"TS":[2,11.966,0,0]}]},{"x":11.371,"y":42.036,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":11.628,"y":42.099,"w":2.664,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"i","S":-1,"TS":[2,8.978,0,1]}]},{"x":11.826,"y":42.036,"w":8.702,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".If","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":12.802,"y":42.036,"w":5.224,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,11.966,0,1]}]},{"x":13.288,"y":42.036,"w":7.167,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"≤","S":-1,"TS":[2,11.966,0,0]}]},{"x":13.896,"y":42.036,"w":4.286,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"z","S":-1,"TS":[2,11.966,0,1]}]},{"x":14.188,"y":42.036,"w":53.912,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",thissuﬃcesto","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":42.69,"w":28.974,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"recover","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.125,"y":42.69,"w":5.224,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,11.966,0,1]}]},{"x":5.451,"y":42.69,"w":172.032,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Ifnot,Pollardlambdacanusethisinformation","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":43.428,"w":37.165,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"torecover","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":5.807,"y":43.428,"w":5.224,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,11.966,0,1]}]},{"x":6.325,"y":43.428,"w":25.601,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"intime","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":8.322,"y":42.911,"w":9.963,"clr":0,"sw":1.030875,"A":"left","R":[{"T":"p","S":-1,"TS":[2,12.963,0,0]}]},{"x":8.945,"y":43.428,"w":14.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x/z","S":-1,"TS":[2,11.966,0,1]}]},{"x":9.851,"y":43.428,"w":114.163,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Thisattackwasﬁrstdescribed","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":3.112,"y":44.082,"w":179.848,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ashypotheticalbyvanOorschotandWiener[51].","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":3.235,"w":194.221,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ToseeifTLSserversinthewildwerevulnerabletothis","S":-1,"TS":[2,12.127388,0,0]}]},{"x":19.551,"y":3.8890000000000002,"w":218.99,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attack,wetestedvariousnon-safeprimesfoundinourscans.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":4.543,"w":88.286,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Foreachnon-safeprime","S":-1,"TS":[2,12.14532,0,0]}]},{"x":26.156,"y":4.543,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.445,"y":4.543,"w":113.753,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",weopportunisticallyfactored","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":5.196,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":19.968,"y":5.196,"w":7.167,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"−","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.543,"y":5.196,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":21.027,"y":5.196,"w":188.229,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"usingBernstein’sbatchmethod[5].Wethenranthe","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":19.551,"y":5.85,"w":162.558,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"GMP-ECMimplementationsofthePollard","S":-1,"TS":[2,11.930136,0,0]}]},{"x":30.599,"y":5.85,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":31.016,"y":5.85,"w":7.167,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"−","S":-1,"TS":[2,11.966,0,0]}]},{"x":31.592,"y":5.85,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[2,11.930136,0,0]}]},{"x":32.071,"y":5.85,"w":38.929,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"algorithm","S":-1,"TS":[2,11.930136,0,0]}]},{"x":19.551,"y":6.504,"w":212.253,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andtheECMfactoringmethods[54]for5daysparallelized","S":-1,"TS":[2,11.930136,0,0]}]},{"x":19.551,"y":7.158,"w":188.26,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"across28coresanddiscovered36,447primefactors.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":7.811999999999999,"w":124.008,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Wethenexaminedthegenerators","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":28.416,"y":7.811999999999999,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":28.862,"y":7.811999999999999,"w":76.875,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"usedwitheachprime","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":34.16,"y":7.811999999999999,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":34.45,"y":7.811999999999999,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.521,"y":8.465,"w":74.089,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Weclassiﬁedatuple","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":24.903,"y":8.465,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":25.128,"y":8.465,"w":18.678,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p,g,y","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.528,"y":8.465,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":26.945,"y":8.465,"w":105.747,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sentbyaserverasinteresting","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":19.551,"y":9.119,"w":99.11,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"iftheprimefactorizationof","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":26.539,"y":9.119,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.939,"y":9.119,"w":7.167,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"−","S":-1,"TS":[2,11.966,0,0]}]},{"x":27.498,"y":9.119,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":27.963,"y":9.119,"w":97.91,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"hadrevealedprimefactors","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":9.773,"w":48.684,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"oftheorderof","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":23.409,"y":9.773,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":23.703,"y":9.773,"w":149.624,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",andorderedthembytheestimatedwork","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":19.551,"y":10.427,"w":227.476,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"requiredusingPohlig-HellmanandPollardlambdatorecover","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":11.081,"w":93.743,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"atargetprivateexponent","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":25.995,"y":11.081,"w":5.224,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"x","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.506,"y":11.081,"w":81.444,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"oflengthrangingfrom","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":32.229,"y":11.081,"w":9.215,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"64","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":32.977,"y":11.081,"w":8.191,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"to","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":33.662,"y":11.081,"w":13.823,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"256","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":11.734,"w":73.317,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bits.Therewere753","S":-1,"TS":[2,12.14532,0,0]}]},{"x":25.078,"y":11.734,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,12.14532,0,0]}]},{"x":25.306,"y":11.734,"w":11.58,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p,g","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.146,"y":11.734,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,12.14532,0,0]}]},{"x":26.573,"y":11.734,"w":108.968,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"pairswhereweknewfactorsof","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":12.388,"w":98.658,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thesubgroupgeneratedby","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":26.306,"y":12.388,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.6,"y":12.388,"w":110.979,"clr":0,"sw":0.669125,"A":"left","R":[{"T":";thesehadbeenusedfor40,903","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":13.042,"w":124.962,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"connectionsacrossallofourscans.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":13.696,"w":219.505,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WeimplementedthevanOorschotandWieneralgorithmin","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":14.35,"w":221.423,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Sage[47]usingaparallelPollardrhoimplementationthatwe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.53,"y":15.003,"w":219.337,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wroteinCusingtheGMPlibrary.Weusedthedistinguished","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":15.657,"w":210.334,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"pointsmethodforcollisiondetection;foraprimeknownin","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":19.551,"y":16.311,"w":215.457,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"advance,thisimplementationcanbearbitrarilyspedupby","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":16.965,"w":167.338,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"precomputingatableofdistinguishedpoints.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":17.619,"w":209.361,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Wecomputedpartialinformationabouttheserversecret","S":-1,"TS":[2,11.974965999999998,0,0]}]},{"x":19.551,"y":18.272,"w":203.19,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"exponentusedin460exchangesandwereabletorecover","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":18.926,"w":211.125,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thewholeexponentusedby159diﬀerenthosts,53ofwhich","S":-1,"TS":[2,11.885306,0,0]}]},{"x":19.551,"y":19.58,"w":219.886,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"authenticatedwithvalidbrowser-trustedcertiﬁcates.Inall","S":-1,"TS":[2,12.001864,0,0]}]},{"x":19.551,"y":20.234,"w":217.67,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"cases,thevulnerablehostsused512-bitprimemoduli;three","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":19.551,"y":20.888,"w":206.107,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofthemused160-bitexponentsandtherestused128bits.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.53,"y":21.541,"w":214.849,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Theorderofthelargest-ordersubgrouprangedfrom46bits","S":-1,"TS":[2,11.840475999999999,0,0]}]},{"x":19.483,"y":22.195,"w":207.872,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"(whichﬁnishesinseconds)to81bits(whichtookbetween","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":22.849,"w":129.091,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"50and176hours)implementation.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":28.224,"y":22.849,"w":74.897,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ThePollardlambda","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":23.503,"w":212.171,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"calculationsusedintervalwidthvaryingfrom40to70bits.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":24.157,"w":201.072,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Ourcomputationswouldhaveallowedustohijackcon-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":24.81,"w":207.47,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"nectionstoavarietyofvulnerableTLSservers,including","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.53,"y":25.464,"w":218.275,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"webinterfacesforVPNdevices(48hosts),communications","S":-1,"TS":[2,11.983932,0,0]}]},{"x":19.551,"y":26.118,"w":220.859,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"software(21hosts),webconferencingservers(27hosts),and","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":26.772,"w":209.209,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"FTPservers(6hosts).Asaproof-of-concept,wemodiﬁed","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":27.426,"w":205.797,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ourman-in-the-middleattackerof§3.3toimpersonatea","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.536,"y":28.079,"w":172.835,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"vulnerableserverandcaptureusercredentials.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":30.852,"y":28.079,"w":41.492,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Compared","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":28.733,"w":206.84,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"toanattackusingNFS,wecouldcomputethediscretelog","S":-1,"TS":[2,12.05566,0,0]}]},{"x":19.53,"y":29.387,"w":175.107,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"withadelayhardlynoticeableforbrowserusers.","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":30.352,"w":96.295,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Misconﬁguredgroups","S":-1,"TS":[2,11.966,1,0]}]},{"x":26.485,"y":30.352,"w":123.043,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TheDigitalSignatureAlgorithm","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.483,"y":31.006,"w":83.755,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"(DSA)[38]usesprimes","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":25.554,"y":31.006,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.035,"y":31.006,"w":34.864,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"suchthat","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":28.611,"y":31.006,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":29.028,"y":31.006,"w":7.167,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"−","S":-1,"TS":[2,11.966,0,0]}]},{"x":29.604,"y":31.006,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":30.088,"y":31.006,"w":60.51,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"hasalargeprime","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":19.551,"y":31.659999999999997,"w":23.314,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"factor","S":-1,"TS":[2,12.037728,0,0]}]},{"x":21.212,"y":31.659999999999997,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":21.681,"y":31.659999999999997,"w":14.847,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,12.037728,0,0]}]},{"x":22.809,"y":31.659999999999997,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":23.296,"y":31.659999999999997,"w":124.604,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"generatesonlyasubgroupoforder","S":-1,"TS":[2,12.037728,0,0]}]},{"x":32.299,"y":31.659999999999997,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":32.577,"y":31.659999999999997,"w":26.367,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".When","S":-1,"TS":[2,12.037728,0,0]}]},{"x":19.551,"y":32.313,"w":219.368,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"usingproperlygeneratedDSAparameters,thesegroupsare","S":-1,"TS":[2,11.885306,0,0]}]},{"x":19.551,"y":32.967,"w":224.707,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"secureforuseinDiﬃe-Hellmankeyexchanges.Notably,DSA","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":33.621,"w":116.257,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groupsarehard-codedinJava’s","S":-1,"TS":[2,12.14532,0,0]}]},{"x":28.331,"y":33.621,"w":98.85,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"sun.security.provider","S":-1,"TS":[3,11.966,0,0]}]},{"x":19.551,"y":34.275,"w":206.968,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"packageandareusedbydefaultinmanyJava-basedTLS","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":34.929,"w":219.212,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"servers.However,someserversinourscansusedJava’sDSA","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":35.583,"w":34.939,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"primesas","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":21.979,"y":35.583,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":22.412,"y":35.583,"w":151.33,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"butmistakenlyusedtheDSAgrouporder","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":32.674,"y":35.583,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":33.096,"y":35.583,"w":20.482,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inthe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":36.236,"w":78.641,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"placeofthegenerator","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":25.024,"y":36.236,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":25.319,"y":36.236,"w":135.847,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Wefound5,741hostsmisconﬁgured","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":36.89,"w":33.584,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thisway.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":37.544,"w":73.619,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thissubstitutionof","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":25.11,"y":37.544,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":25.55,"y":37.544,"w":11.027,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"for","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":26.389,"y":37.544,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.847,"y":37.544,"w":110.968,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"islikelyduetoausabilityprob-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":38.198,"w":216.028,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"lem:thecanonicalASN.1representationofDiﬃe-Hellman","S":-1,"TS":[2,12.127388,0,0]}]},{"x":19.551,"y":38.851,"w":208.724,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"keyexchangeparameters(comingfromPKCS#3)isase-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":39.505,"w":27.397,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"quence","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.49,"y":39.505,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.718,"y":39.505,"w":11.58,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p,g","S":-1,"TS":[2,11.966,0,1]}]},{"x":22.558,"y":39.505,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,12.14532,0,0]}]},{"x":22.786,"y":39.505,"w":162.537,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",whilethatofDSAparameters(comingfrom","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":40.159,"w":33.451,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"PKIX)is","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":22.002,"y":40.159,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":22.223,"y":40.159,"w":18.257,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p,q,g","S":-1,"TS":[2,11.966,0,1]}]},{"x":23.596,"y":40.159,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":23.817,"y":40.159,"w":154.707,"clr":0,"sw":0.669125,"A":"left","R":[{"T":";weconjecturethattheconfusionbetween","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":19.551,"y":40.813,"w":177.173,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theseformatsledtoasimpleprogrammingerror.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":41.467,"w":156.398,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"InaDSAgroup,thesubgroupgeneratedby","S":-1,"TS":[2,12.14532,0,0]}]},{"x":32.007,"y":41.467,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":32.525,"y":41.467,"w":27.7,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"islikely","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":42.12,"w":191.79,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tohavemanysmallprimefactorsinitsorder,sincefor","S":-1,"TS":[2,12.14532,0,0]}]},{"x":34.206,"y":42.12,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":19.551,"y":42.774,"w":102.444,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"generatedaccordingto[38],","S":-1,"TS":[2,12.14532,0,0]}]},{"x":26.903,"y":42.774,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.131,"y":42.774,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":27.557,"y":42.774,"w":7.167,"clr":0,"sw":1.33828125,"A":"left","R":[{"T":"−","S":-1,"TS":[2,11.966,0,0]}]},{"x":28.141,"y":42.774,"w":8.191,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1)","S":-1,"TS":[2,12.14532,0,0]}]},{"x":28.663,"y":42.774,"w":8.725,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/q","S":-1,"TS":[2,11.966,0,1]}]},{"x":29.433,"y":42.774,"w":71.773,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"isarandominteger.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":43.428,"w":39.234,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ForJava’s","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":22.168,"y":43.428,"w":98.85,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"sun.security.provider","S":-1,"TS":[3,11.966,0,0]}]},{"x":28.502,"y":43.428,"w":74.82,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"512-bitprime,using","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":33.557,"y":43.428,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":33.99,"y":43.428,"w":8.242,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"as","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":44.082,"w":216.789,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ageneratorleaks290bitsofinformationaboutexponentsat","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":18.66,"y":45.95,"w":4.608,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"6","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[{"x":19.801,"y":43.623,"w":0.597,"l":7.472,"oc":"#000"}],"VLines":[],"Fills":[],"Texts":[{"x":3.112,"y":3.235,"w":58.434,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"acostofroughly","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":7.505,"y":3.235,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":7.789999999999999,"y":2.997,"w":7.306,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"40","S":-1,"TS":[3,8.978,0,0]}]},{"x":8.47,"y":3.235,"w":142.373,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"operations.Luckily,sincetheprovider","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":3.112,"y":3.8890000000000002,"w":110.215,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"generatesexponentsoflength","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.269,"y":3.8890000000000002,"w":17.149,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"max","S":-1,"TS":[2,11.966,0,0]}]},{"x":12.349,"y":3.8890000000000002,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.577,"y":3.8890000000000002,"w":10.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"n/","S":-1,"TS":[2,11.966,0,1]}]},{"x":13.213,"y":3.8890000000000002,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[2,12.14532,0,0]}]},{"x":13.506,"y":3.8890000000000002,"w":2.56,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":",","S":-1,"TS":[2,11.966,0,1]}]},{"x":13.762,"y":3.8890000000000002,"w":17.407,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"384)","S":-1,"TS":[2,12.14532,0,0]}]},{"x":15.154,"y":3.8890000000000002,"w":11.027,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"for","S":-1,"TS":[2,12.14532,0,0]}]},{"x":16.14,"y":3.8890000000000002,"w":5.559,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"n","S":-1,"TS":[2,11.966,0,1]}]},{"x":16.488,"y":3.8890000000000002,"w":14.335,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"-bit","S":-1,"TS":[2,12.14532,0,0]}]},{"x":17.684,"y":3.8890000000000002,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":17.973,"y":3.8890000000000002,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":4.543,"w":164.297,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thisdoesnotsuﬃcetorecoverafullexponent.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":13.927,"y":4.543,"w":33.84,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Still,this","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":5.196,"w":214.424,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"misconﬁgurationbugresultsinasigniﬁcantlossofsecurity","S":-1,"TS":[2,12.001864,0,0]}]},{"x":3.112,"y":5.85,"w":175.685,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andservesasacautionarytaleforprogrammers.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":7.324,"w":8.966,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"4.","S":-1,"TS":[2,14.955,0,0]}]},{"x":4.42,"y":7.324,"w":83.709,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"STATE-LEVEL","S":-1,"TS":[2,14.955,0,0]}]},{"x":9.839,"y":7.324,"w":57.133,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"THREATS","S":-1,"TS":[2,14.955,0,0]}]},{"x":13.596,"y":7.324,"w":17.275,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"TO","S":-1,"TS":[2,14.955,0,0]}]},{"x":14.863,"y":7.324,"w":17.933,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DH","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.673,"y":8.133,"w":213.578,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Theprevioussectionsdemonstratetheexistenceofpracti-","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":3.112,"y":8.787,"w":222.272,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"calattacksagainstDiﬃe-Hellmankeyexchangeascurrently","S":-1,"TS":[2,11.83151,0,0]}]},{"x":3.112,"y":9.441,"w":206.663,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"usedbyTLS.However,theseattacksrelyontheabilityto","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":3.112,"y":10.095,"w":218.832,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"downgradeconnectionstoexport-gradecryptoorontheuse","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":10.749,"w":220.532,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofunsafeparameters.Inthissectionweaddressthefollowing","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":11.402,"w":214.127,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"question:howsecureisDiﬃe-Hellmaninbroaderpractice,","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":3.112,"y":12.056,"w":217.903,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"asusedinotherprotocolsthatdonotsuﬀerfromdowngrade,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":12.71,"w":146.851,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andwhenappliedwithstrongergroups?","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":13.364,"w":196.396,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Toanswerthisquestionwemustﬁrstexaminehowthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":14.018,"w":215.824,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"numberﬁeldsievefordiscretelogscalesto768-and1024-bit","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":14.671,"w":214.043,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groups.Aswearguebelow,768-bitgroups,whicharestillin","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":15.325,"w":221.142,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"relativelywidespreaduse,arenowwithinreachforacademic","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":15.979,"w":222.714,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"computationalresources,andperformingprecomputations","S":-1,"TS":[2,12.118421999999999,0,0]}]},{"x":3.112,"y":16.633,"w":202.234,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forasmallnumberof1024-bitgroupsisplausiblywithin","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":17.287,"w":216.107,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theresourcesofstate-levelattackers.Theprecomputation","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":17.94,"w":225.743,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wouldlikelyrequirespecial-purposehardware,butwouldnot","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":18.594,"w":223.175,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"requireanymajoralgorithmicimprovementsbeyondwhatis","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":19.248,"w":220.3,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"knownintheacademicliterature.Wefurthershowthateven","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":19.902,"w":207.65,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inthe1024-bitcase,thedescenttime—necessarytosolve","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":20.555,"w":214.973,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"anyspeciﬁcdiscreteloginstancewithinacommongroup—","S":-1,"TS":[2,11.974965999999998,0,0]}]},{"x":3.092,"y":21.209,"w":209.021,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wouldbefastenoughtobreakindividualkeyexchangesin","S":-1,"TS":[2,12.109456,0,0]}]},{"x":3.112,"y":21.863,"w":62.541,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"closetorealtime.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":22.517,"w":213.084,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inlightoftheseresults,weexamineseveralstandardInter-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":23.171,"w":218.781,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"netsecurityprotocols—IKE,SSH,andTLS—todetermine","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":3.112,"y":23.825,"w":227.571,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thevulnerabilityoftheirkeyexchangestoattacksbyresource-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":24.478,"w":215.453,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"fulattackers.Althoughthecostoftheprecomputationfora","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.084,"y":25.132,"w":207.975,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"1024-bitgroupisseveraltimeshigherthanforanRSAkey","S":-1,"TS":[2,12.037728,0,0]}]},{"x":3.112,"y":25.786,"w":217.789,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofequalsize,weobservethataone-timeinvestmentcouldbe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":26.44,"w":208.478,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"usedtoattackmillionsofhosts,duetowidespreadreuseof","S":-1,"TS":[2,11.974965999999998,0,0]}]},{"x":3.112,"y":27.093,"w":230.429,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"themostcommonDiﬃe-Hellmanparameters.Unfortunately,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":27.747,"w":214.998,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ourmeasurementsalsoindicatethatitmaybeverydiﬃcult","S":-1,"TS":[2,11.849442,0,0]}]},{"x":3.112,"y":28.401,"w":220,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tosunsettheuseofﬁxed1024-bitDiﬃe-Hellmangroupsthat","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":29.055,"w":225.205,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"havelongbeenembeddedinstandardsandimplementations.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.673,"y":29.709,"w":194.37,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Finally,weapplythisnewunderstandingtoasetofre-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":30.363,"w":222.715,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"centlypublisheddocumentsleakedbyEdwardSnowden[46]","S":-1,"TS":[2,11.813578,0,0]}]},{"x":3.112,"y":31.016,"w":223.869,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"toevaluatethehypothesisthattheNationalSecurityAgency","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":31.67,"w":13.362,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"has","S":-1,"TS":[2,12.14532,0,0]}]},{"x":4.179,"y":31.67,"w":29.049,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"already","S":-1,"TS":[2,12.14532,0,1]}]},{"x":6.187,"y":31.67,"w":116.53,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"implementedsuchacapability.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":13.94,"y":31.67,"w":50.48,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Weshowthat","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":32.324,"w":206.233,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thishypothesisisconsistentwiththepublisheddetailsof","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":32.978,"w":227.703,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theintelligencecommunity’scryptanalyticcapabilities,and,","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":3.112,"y":33.631,"w":210.611,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"indeed,matchestheknowncapabilitiesmorecloselythan","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":34.285,"w":211.131,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"otherproposedexplanations,suchasnovelbreaksonRC4","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":34.939,"w":203.872,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"orAES.Webelievethatthisanalysismayhelpshedlight","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":35.593,"w":208.039,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"onunansweredquestionsabouthowNSAmaybegaining","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":36.247,"w":133.229,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"accesstoVPN,SSH,andTLStraﬃc.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":37.388,"w":14.944,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"4.1","S":-1,"TS":[2,14.955,0,0]}]},{"x":4.794,"y":37.388,"w":37.204,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Scaling","S":-1,"TS":[2,14.955,0,0]}]},{"x":7.306,"y":37.388,"w":22.583,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"NFS","S":-1,"TS":[2,14.955,0,0]}]},{"x":8.904,"y":37.388,"w":9.959,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"to","S":-1,"TS":[2,14.955,0,0]}]},{"x":9.713,"y":37.388,"w":21.914,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"768-","S":-1,"TS":[2,14.955,0,0]}]},{"x":11.269,"y":37.388,"w":19.271,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,14.955,0,0]}]},{"x":12.661,"y":37.388,"w":41.843,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1024-bit","S":-1,"TS":[2,14.955,0,0]}]},{"x":15.463,"y":37.388,"w":17.933,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DH","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.673,"y":38.198,"w":212.172,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Estimatingthecostfordiscretelogcryptanalysisatlonger","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":38.851,"w":192.58,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"keysizesisfarfromstraightforward,dueinparttothe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":39.505,"w":221.817,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"complexityofparametertuningandtotradeoﬀsbetweenthe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":40.159,"w":209.91,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sievingandlinearalgebrasteps,whichhaveverydiﬀerent","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":40.813,"w":117.897,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"computationalcharacteristics.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.011,"y":40.813,"w":96.581,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"(Muchmoreattentionhas","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":41.467,"w":227.443,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"gonetounderstanding1024-bitfactorization,but,eventhere,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":42.12,"w":209.935,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"manypublishedestimatesarecrudeextrapolationsofthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":42.774,"w":220.582,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"asymptoticcomplexity.)Weattemptestimatesfor768-and","S":-1,"TS":[2,11.876339999999999,0,0]}]},{"x":3.084,"y":43.428,"w":203.743,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"1024-bitdiscretelogbasedontheexistingliteratureand","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":44.082,"w":215.319,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ourownexperiments,butfurtherworkisneededforgreater","S":-1,"TS":[2,11.83151,0,0]}]},{"x":19.551,"y":3.235,"w":223.159,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"conﬁdence,particularlyforthe1024-bitcase.Wesummarize","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":3.8890000000000002,"w":170.236,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"allthecosts,measuredorestimated,inTable2.","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":4.789,"w":167.383,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"DH-768:Feasiblewithacademicpower","S":-1,"TS":[2,11.966,1,0]}]},{"x":31.593,"y":4.789,"w":43.924,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Forthe768-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":5.443,"w":198.992,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bitcase,webaseourestimatesontherecentdiscretelog","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":6.097,"w":210.095,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"recordat596bits[8]andtheintegerfactorizationrecordof","S":-1,"TS":[2,11.903238,0,0]}]},{"x":19.536,"y":6.751,"w":223.4,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"768bitsfrom2009[29].Whilethealgorithmsforfactorization","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":7.404999999999999,"w":206.624,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"anddiscretelogaresimilar,thediscreteloglinearalgebra","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":8.058,"w":210.773,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"stageismanytimesmorediﬃcult,asthematrixentriesare","S":-1,"TS":[2,11.885306,0,0]}]},{"x":19.551,"y":8.712,"w":69.013,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"nolongerBoolean.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":24.254,"y":8.712,"w":135.778,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Wecanreduceoveralltimebysieving","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":9.366,"w":207.311,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"more,thusgeneratingasmallerinputmatrixtothelinear","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":10.02,"w":48.203,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"algebrastep.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":23.016,"y":10.02,"w":157.616,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Sincesievingparallelizesbetterthanlinear","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":10.674,"w":177.463,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"algebra,thistradeoﬀisdesirableforlargeinputs.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":11.327,"w":196.303,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"A596-bitfactorizationtakesabout5core-years,most","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":11.981,"w":74.854,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofitspentonsieving.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":24.731,"y":11.981,"w":122.732,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Incomparison,therecord596-bit","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":12.635,"w":205.61,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"discretelogeﬀorttunedparameterssuchthattheyspent","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":13.289,"w":209.184,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"50core-yearsonsieving.Thisreducedtheirlinearalgebra","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":13.943,"w":210.494,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"calculationto80core-years.Weusedthissamestrategyin","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":19.551,"y":14.596,"w":116.434,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"our512-bitexperimentsin§3.3.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":15.25,"w":200.723,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Similarly,the768-bitRSAfactoringrecordspentmore","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":15.904,"w":201.41,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"timeonsievinginordertosavetimeonthelinearalgebra","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":16.558,"w":204.861,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"step.Thecostofsievingwasaround1500core-years,and","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":17.212,"w":214.217,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thematrixthatwasproducedhad200Mrowsandcolumns.","S":-1,"TS":[2,11.939102,0,0]}]},{"x":19.529,"y":17.865,"w":209.154,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Asaresult,thelinearalgebratook150core-years,buttak-","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":19.551,"y":18.519,"w":214.406,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ingalgorithmicimprovementssince2009intoaccountand","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":19.173,"w":105.745,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"optimizingforthetotaltime,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":26.774,"y":18.935,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3","S":-1,"TS":[3,8.978,0,0]}]},{"x":27.221,"y":19.173,"w":106.825,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"weestimatethatfactoringan","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":19.827,"w":187.888,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"RSA-768integerwouldtake900core-yearsintotal.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":20.481,"w":202.057,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Fora768-bitdiscretelog,wecanexpectthattentimesas","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":21.134,"w":203.842,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"muchsievingastheRSAcasewouldreducethematrixto","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":21.788,"w":215.499,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"around150Mrows.Weextrapolatefromexperimentswith","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":19.551,"y":22.442,"w":214.998,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"existingsoftwarethatthislinearalgebrawouldtake28,500","S":-1,"TS":[2,12.001864,0,0]}]},{"x":19.551,"y":23.096,"w":153.293,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"core-years,foratotalof36,500core-years.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.643,"y":23.096,"w":49.762,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thisiswithin","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":23.75,"w":184.921,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"reachbycomputingpoweravailabletoacademics.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":24.403,"w":159.679,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thedescentsteptakesrelativelylittletime.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":30.597,"y":24.403,"w":40.985,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Weexperi-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":25.057,"w":213.241,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mentedwithbothCADO-NFSandanewimplementation","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.53,"y":25.711,"w":223.786,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"withGMP-ECMbasedontheearly-abortstrategydescribed","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":26.365,"w":214.537,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"in[6].Usingthesetechniques,theinitialdescentphasetook","S":-1,"TS":[2,11.813578,0,0]}]},{"x":19.551,"y":27.019,"w":211.954,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"anaverageofaround1core-day.Theremainingphaseuses","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":27.672,"w":216.477,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sievingmuchasintheprecomputation;extrapolatingfrom","S":-1,"TS":[2,12.019796,0,0]}]},{"x":19.551,"y":28.326,"w":199.734,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"experiments,therestofthedescentshouldtakeatmost","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.522,"y":28.98,"w":41.236,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"1core-day.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":22.59,"y":28.98,"w":155.479,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Intotal,afterprecomputation,thecostofa","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":29.634,"w":220.677,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"single768-bitdiscretelogcomputationisaround2core-days","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":30.288,"w":98.685,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andiseasilyparallelizable.","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":31.188,"w":44.12,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"DH-1024:","S":-1,"TS":[2,11.966,1,0]}]},{"x":22.645,"y":31.188,"w":152.718,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Plausiblewithstate-levelresources","S":-1,"TS":[2,11.966,1,0]}]},{"x":33.685,"y":31.188,"w":14.206,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Ex-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":31.842,"w":229.82,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"perimentallyextrapolatingsievingparameterstothe1024-bit","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":32.496,"w":209.19,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"caseisdiﬃcultduetothetradeoﬀsbetweenthestepsofthe","S":-1,"TS":[2,11.813578,0,0]}]},{"x":19.551,"y":33.149,"w":148.87,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"algorithmandtheirrelativeparallelism.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.49,"y":33.149,"w":55.101,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thepriorwork","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":33.803,"w":206.453,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"proposingparametersforfactoringa1024-bitRSAkeyis","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":34.457,"w":202.867,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thin:[28]proposessmoothnessboundsof42bits,butthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":35.111,"w":170.434,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"proposedvalueofthesievingregionparameter","S":-1,"TS":[2,12.14532,0,0]}]},{"x":31.756999999999998,"y":35.111,"w":4.707,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"I","S":-1,"TS":[3,11.966,0,0]}]},{"x":32.245,"y":35.111,"w":32.584,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"isclearly","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":35.765,"w":199.767,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"toosmall,givingtoofewsmoothresultspersievingsub-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":36.419,"w":218.018,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"task.Sincenopubliclyavailablesoftwarecancurrentlydeal","S":-1,"TS":[2,11.840475999999999,0,0]}]},{"x":19.53,"y":37.072,"w":50.226,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"withvaluesof","S":-1,"TS":[2,12.14532,0,0]}]},{"x":23.349,"y":37.072,"w":4.707,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"I","S":-1,"TS":[3,11.966,0,0]}]},{"x":23.86,"y":37.072,"w":146.599,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"largerthanthoseproposed,wecouldnot","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":37.726,"w":220.13,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"experimentallyupdatetheestimatesofthispaperwithmore","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":38.38,"w":104.313,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"relevantparameterchoices.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":39.034,"w":216.298,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Withoutbetterparameterchoices,weresorttoextrapolat-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":39.688,"w":218.401,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ingfromasymptoticcomplexity.Forthenumberﬁeldsieve,","S":-1,"TS":[2,11.912204,0,0]}]},{"x":19.551,"y":40.341,"w":63.027,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thecomplexityis","S":-1,"TS":[2,12.14532,0,0]}]},{"x":24.279,"y":40.341,"w":14.082,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"exp","S":-1,"TS":[2,11.966,0,0]}]},{"x":25.255,"y":39.852,"w":4.566,"clr":0,"sw":1.030875,"A":"left","R":[{"T":"\u0000","S":-1,"TS":[2,12.963,0,0]}]},{"x":25.541,"y":40.341,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,12.14532,0,0]}]},{"x":25.769,"y":40.341,"w":4.798,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"k","S":-1,"TS":[2,11.966,0,1]}]},{"x":26.247,"y":40.341,"w":7.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"+","S":-1,"TS":[2,12.14532,0,0]}]},{"x":26.865,"y":40.341,"w":4.461,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"o","S":-1,"TS":[2,11.966,0,1]}]},{"x":27.144,"y":40.341,"w":18.942,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(1))(","S":-1,"TS":[2,12.14532,0,0]}]},{"x":28.352,"y":40.341,"w":11.775,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"log","S":-1,"TS":[2,11.966,0,0]}]},{"x":29.191,"y":40.341,"w":7.366,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"N","S":-1,"TS":[2,11.966,0,1]}]},{"x":29.712,"y":40.341,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.94,"y":40.103,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[3,8.978,0,0]}]},{"x":30.169,"y":40.103,"w":3.819,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/","S":-1,"TS":[2,8.978,0,1]}]},{"x":30.407,"y":40.103,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3","S":-1,"TS":[3,8.978,0,0]}]},{"x":30.667,"y":40.341,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(","S":-1,"TS":[2,12.14532,0,0]}]},{"x":30.895,"y":40.341,"w":23.55,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"loglog","S":-1,"TS":[2,11.966,0,0]}]},{"x":32.573,"y":40.341,"w":7.366,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"N","S":-1,"TS":[2,11.966,0,1]}]},{"x":33.094,"y":40.341,"w":3.584,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,12.14532,0,0]}]},{"x":33.323,"y":40.103,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[3,8.978,0,0]}]},{"x":33.551,"y":40.103,"w":3.819,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"/","S":-1,"TS":[2,8.978,0,1]}]},{"x":33.79,"y":40.103,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3","S":-1,"TS":[3,8.978,0,0]}]},{"x":34.049,"y":39.852,"w":4.566,"clr":0,"sw":1.030875,"A":"left","R":[{"T":"\u0001","S":-1,"TS":[2,12.963,0,0]}]},{"x":34.335,"y":40.341,"w":2.56,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":",","S":-1,"TS":[2,11.966,0,1]}]},{"x":19.53,"y":40.995,"w":23.578,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"where","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.242,"y":40.995,"w":7.366,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"N","S":-1,"TS":[2,11.966,0,1]}]},{"x":21.972,"y":40.995,"w":167.119,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"istheintegertofactorortheprimemodulusfor","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":41.649,"w":59.978,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"discretelog,and","S":-1,"TS":[2,12.14532,0,0]}]},{"x":24.008,"y":41.649,"w":4.798,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"k","S":-1,"TS":[2,11.966,0,1]}]},{"x":24.534,"y":41.649,"w":123.559,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"isanalgorithm-speciﬁcconstant.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":32.72,"y":41.649,"w":17.97,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"This","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":42.303,"w":150.238,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"formulaisinherentlyimprecise,sincethe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":30.267,"y":42.303,"w":4.461,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"o","S":-1,"TS":[2,11.966,0,1]}]},{"x":30.546,"y":42.303,"w":11.775,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(1)","S":-1,"TS":[2,12.14532,0,0]}]},{"x":31.492,"y":42.303,"w":42.243,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"intheexpo-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.579,"y":43.283,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"3","S":-1,"TS":[3,8.978,0,0]}]},{"x":19.839,"y":43.522,"w":206.326,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Wewouldlowerthesmoothnessboundscomparedtothe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":44.082,"w":69.213,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"parametersin[29].","S":-1,"TS":[2,11.966,0,0]}]},{"x":18.66,"y":45.95,"w":4.608,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"7","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[{"x":3.886,"y":3.385,"w":1.105,"l":30.336,"oc":"#000"},{"x":6.873,"y":4.23,"w":0.414,"l":6.124,"oc":"#000"},{"x":13.284,"y":4.23,"w":0.414,"l":4.747,"oc":"#000"},{"x":18.319,"y":4.23,"w":0.414,"l":2.819,"oc":"#000"},{"x":3.886,"y":5.067,"w":0.69,"l":30.336,"oc":"#000"},{"x":3.886,"y":6.464,"w":0.414,"l":30.336,"oc":"#000"},{"x":3.886,"y":7.855,"w":0.414,"l":30.336,"oc":"#000"},{"x":3.886,"y":9.26,"w":1.105,"l":30.336,"oc":"#000"},{"x":19.801,"y":44.183,"w":0.597,"l":7.472,"oc":"#000"}],"VLines":[],"Fills":[],"Texts":[{"x":8.998,"y":3.207,"w":26.58,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Sieving","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":13.82,"y":3.207,"w":52.576,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"LinearAlgebra","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":18.4,"y":3.207,"w":29.093,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Descent","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":7.224,"y":4.038,"w":4.234,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"I","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":8.161,"y":4.038,"w":10.821,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"log","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":8.843,"y":4.166,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"2","S":-1,"TS":[3,8.978,0,0]}]},{"x":9.191,"y":4.038,"w":6.387,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"B","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":10.401,"y":4.038,"w":36.992,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"core-years","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":13.616,"y":4.038,"w":16.991,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"rows","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":15.465,"y":4.038,"w":36.992,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"core-years","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":18.449,"y":4.038,"w":34.35,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"core-time","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.236,"y":4.88,"w":32.804,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"RSA-512","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":6.959,"y":4.88,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"14","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":9.085,"y":4.88,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"29","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":12.022,"y":4.88,"w":10.821,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"0.5","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":13.488,"y":4.88,"w":18.575,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"4.3M","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":16.791,"y":4.88,"w":15.055,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"0.33","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":21.721,"y":4.88,"w":28.271,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Timings","S":-1,"TS":[2,9.974,0,0]}]},{"x":23.656,"y":4.88,"w":15.456,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"with","S":-1,"TS":[2,9.974,0,0]}]},{"x":24.789,"y":4.88,"w":24.153,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"default","S":-1,"TS":[2,9.974,0,0]}]},{"x":26.467,"y":4.88,"w":41.79,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"CADO-NFS","S":-1,"TS":[2,9.974,0,0]}]},{"x":29.246,"y":4.88,"w":40.723,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"parameters.","S":-1,"TS":[2,9.974,0,0]}]},{"x":4.516,"y":5.441,"w":28.334,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"DH-512","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":6.959,"y":5.441,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"15","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":9.085,"y":5.441,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"27","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":12.022,"y":5.441,"w":10.821,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"2.5","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":13.488,"y":5.441,"w":18.575,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"2.1M","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":17.056,"y":5.441,"w":10.821,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"7.7","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":18.844,"y":5.441,"w":25.922,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"10mins","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":21.721,"y":5.441,"w":12.225,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"For","S":-1,"TS":[2,9.974,0,0]}]},{"x":22.653,"y":5.441,"w":11.056,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"the","S":-1,"TS":[2,9.974,0,0]}]},{"x":23.511,"y":5.441,"w":46.84,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"computations","S":-1,"TS":[2,9.974,0,0]}]},{"x":26.607,"y":5.441,"w":6.656,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"in","S":-1,"TS":[2,9.974,0,0]}]},{"x":27.191,"y":5.441,"w":12.926,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"this","S":-1,"TS":[2,9.974,0,0]}]},{"x":28.166,"y":5.441,"w":21.683,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"paper;","S":-1,"TS":[2,9.974,0,0]}]},{"x":29.689,"y":5.441,"w":14.702,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"may","S":-1,"TS":[2,9.974,0,0]}]},{"x":30.776,"y":5.441,"w":7.943,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"be","S":-1,"TS":[2,9.974,0,0]}]},{"x":31.44,"y":5.441,"w":40.725,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"suboptimal.","S":-1,"TS":[2,9.974,0,0]}]},{"x":4.236,"y":6.271,"w":32.804,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"RSA-768","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":6.959,"y":6.271,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"16","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":9.085,"y":6.271,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"37","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":11.904,"y":6.271,"w":12.703,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"800","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":13.37,"y":6.271,"w":20.457,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"250M","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":16.939,"y":6.271,"w":12.703,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"100","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":21.721,"y":6.271,"w":13.88,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Est.","S":-1,"TS":[2,9.974,0,0]}]},{"x":22.756,"y":6.271,"w":19.471,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"based","S":-1,"TS":[2,9.974,0,0]}]},{"x":24.141,"y":6.271,"w":8.372,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"on","S":-1,"TS":[2,9.974,0,0]}]},{"x":24.832,"y":6.271,"w":12.453,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"[29]","S":-1,"TS":[2,9.974,0,0]}]},{"x":25.778,"y":6.271,"w":15.456,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"with","S":-1,"TS":[2,9.974,0,0]}]},{"x":26.912,"y":6.271,"w":12.11,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"less","S":-1,"TS":[2,9.974,0,0]}]},{"x":27.837,"y":6.271,"w":26.022,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"sieving.","S":-1,"TS":[2,9.974,0,0]}]},{"x":4.516,"y":6.832,"w":28.334,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"DH-768","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":6.959,"y":6.832,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"17","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":9.085,"y":6.832,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"35","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":11.492,"y":6.832,"w":19.29,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"8,000","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":13.37,"y":6.832,"w":20.457,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"150M","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":16.262,"y":6.832,"w":23.524,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"28,500","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.167,"y":6.832,"w":20.983,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"2days","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":21.721,"y":6.832,"w":13.88,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Est.","S":-1,"TS":[2,9.974,0,0]}]},{"x":22.756,"y":6.832,"w":19.471,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"based","S":-1,"TS":[2,9.974,0,0]}]},{"x":24.141,"y":6.832,"w":8.372,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"on","S":-1,"TS":[2,9.974,0,0]}]},{"x":24.832,"y":6.832,"w":18.679,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"[8,29]","S":-1,"TS":[2,9.974,0,0]}]},{"x":26.167,"y":6.832,"w":12.772,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,9.974,0,0]}]},{"x":27.133,"y":6.832,"w":11.485,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"our","S":-1,"TS":[2,9.974,0,0]}]},{"x":28.019,"y":6.832,"w":14.059,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"own","S":-1,"TS":[2,9.974,0,0]}]},{"x":29.065,"y":6.832,"w":44.052,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"experiments.","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.9720000000000004,"y":7.662000000000001,"w":37.038,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"RSA-1024","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":6.959,"y":7.662000000000001,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"18","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":9.085,"y":7.662000000000001,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"42","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":10.551,"y":7.662000000000001,"w":34.345,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"1,000,000","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":13.598,"y":7.662000000000001,"w":16.815,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"8.7B","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":15.997,"y":7.662000000000001,"w":27.759,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"120,000","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":21.721,"y":7.662000000000001,"w":13.88,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Est.","S":-1,"TS":[2,9.974,0,0]}]},{"x":22.756,"y":7.662000000000001,"w":19.471,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"based","S":-1,"TS":[2,9.974,0,0]}]},{"x":24.141,"y":7.662000000000001,"w":8.372,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"on","S":-1,"TS":[2,9.974,0,0]}]},{"x":24.832,"y":7.662000000000001,"w":37.996,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"complexity","S":-1,"TS":[2,9.974,0,0]}]},{"x":27.375,"y":7.662000000000001,"w":28.982,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"formula.","S":-1,"TS":[2,9.974,0,0]}]},{"x":4.251,"y":8.223,"w":32.569,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"DH-1024","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":6.959,"y":8.223,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"19","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":9.085,"y":8.223,"w":8.469,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"40","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":10.287,"y":8.223,"w":38.58,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"10,000,000","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":13.598,"y":8.223,"w":16.815,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"5.2B","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":15.321,"y":8.223,"w":38.58,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"35,000,000","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":18.902,"y":8.223,"w":25.217,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"30days","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":21.721,"y":8.223,"w":13.88,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Est.","S":-1,"TS":[2,9.974,0,0]}]},{"x":22.756,"y":8.223,"w":19.471,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"based","S":-1,"TS":[2,9.974,0,0]}]},{"x":24.141,"y":8.223,"w":8.372,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"on","S":-1,"TS":[2,9.974,0,0]}]},{"x":24.832,"y":8.223,"w":37.996,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"complexity","S":-1,"TS":[2,9.974,0,0]}]},{"x":27.375,"y":8.223,"w":26.726,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"formula","S":-1,"TS":[2,9.974,0,0]}]},{"x":29.213,"y":8.223,"w":12.772,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,9.974,0,0]}]},{"x":30.179,"y":8.223,"w":11.485,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"our","S":-1,"TS":[2,9.974,0,0]}]},{"x":31.064,"y":8.223,"w":44.052,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"experiments.","S":-1,"TS":[2,9.974,0,0]}]},{"x":3.092,"y":9.489,"w":30.209,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Table2:","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":5.333,"y":9.489,"w":193.484,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Estimatingcostsforfactoringanddiscretelog","S":-1,"TS":[2,11.966,1,0]}]},{"x":18.712,"y":9.489,"w":227.151,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Forsieving,wegivetwoimportantparameters:thenumberof","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":10.143,"w":105.93,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bitsofthesmoothnessbound","S":-1,"TS":[2,11.795646,0,0]}]},{"x":10.598,"y":10.143,"w":4.707,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"B","S":-1,"TS":[3,11.966,0,0]}]},{"x":11.084,"y":10.143,"w":120.696,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andthesievingregionparameter","S":-1,"TS":[2,11.795646,0,0]}]},{"x":19.443,"y":10.143,"w":4.707,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"I","S":-1,"TS":[3,11.966,0,0]}]},{"x":19.737,"y":10.143,"w":204.141,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".Forlinearalgebra,allcostsforDHareforsafeprimes;for","S":-1,"TS":[2,11.795646,0,0]}]},{"x":3.112,"y":10.797,"w":63.683,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"DSAprimeswith","S":-1,"TS":[2,11.966,0,0]}]},{"x":7.669,"y":10.797,"w":4.117,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"q","S":-1,"TS":[2,11.966,0,1]}]},{"x":8.138,"y":10.797,"w":310.108,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"of160bits,thisshouldbedividedby6.4for1024bits,4.8for768bits,and3.2for512bits.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":12.736,"w":217.988,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"nentcanhidepolynomialfactors.Thiscomplexityformula,","S":-1,"TS":[2,11.983932,0,0]}]},{"x":3.092,"y":13.39,"w":17.919,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"with","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":4.416,"y":13.39,"w":4.798,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"k","S":-1,"TS":[2,11.966,0,1]}]},{"x":4.892,"y":13.39,"w":7.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"=","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":5.505,"y":13.39,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":5.796,"y":13.39,"w":2.56,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,1]}]},{"x":5.956,"y":13.39,"w":13.823,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"923","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":6.83,"y":13.39,"w":156.406,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",describestheoveralltimeforbothdiscrete","S":-1,"TS":[2,12.064625999999999,0,0]}]},{"x":3.112,"y":14.044,"w":213.844,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"logandfactorization,whicharebothdominatedbysieving","S":-1,"TS":[2,12.001864,0,0]}]},{"x":3.112,"y":14.698,"w":210.036,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andlinearalgebraintheprecomputation.Thespacecom-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":15.352,"w":210.671,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"plexity(thesizeofthematrixinmemory)isthesquareroot","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":16.005,"w":165.985,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofthisfunction,i.e.,thesamefunction,taking","S":-1,"TS":[2,12.14532,0,0]}]},{"x":15.268,"y":16.005,"w":4.798,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"k","S":-1,"TS":[2,11.966,0,1]}]},{"x":15.751999999999999,"y":16.005,"w":7.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"=","S":-1,"TS":[2,12.14532,0,0]}]},{"x":16.376,"y":16.005,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"0","S":-1,"TS":[2,12.14532,0,0]}]},{"x":16.67,"y":16.005,"w":2.56,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,1]}]},{"x":16.83,"y":16.005,"w":18.431,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"9615","S":-1,"TS":[2,12.14532,0,0]}]},{"x":18.005,"y":16.005,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":16.659,"w":203.436,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Discretelogdescenthasacomplexityofthesameformas","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":17.313,"w":87.883,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"well;[2,Chapter4]gives","S":-1,"TS":[2,12.14532,0,0]}]},{"x":9.829,"y":17.313,"w":4.798,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"k","S":-1,"TS":[2,11.966,0,1]}]},{"x":10.374,"y":17.313,"w":7.167,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"=","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.06,"y":17.313,"w":4.608,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.354,"y":17.313,"w":2.56,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,1]}]},{"x":11.514,"y":17.313,"w":13.823,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"232","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.395,"y":17.313,"w":77.657,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",usinganearly-abort","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":17.967,"w":179.86,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"strategysimilartotheonein[6]mentionedabove.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":18.621,"w":163.229,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Evaluatingtheformulafor768-and1024-bit","S":-1,"TS":[2,12.127388,0,0]}]},{"x":15.353,"y":18.621,"w":7.366,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"N","S":-1,"TS":[2,11.966,0,1]}]},{"x":16.066,"y":18.621,"w":28.519,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"givesus","S":-1,"TS":[2,12.127388,0,0]}]},{"x":3.112,"y":19.274,"w":223.658,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"estimatedmultiplicativefactorsbywhichtimeandspacewill","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":19.928,"w":209.722,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"increasefromthe768-tothe1024-bitcase.Forprecompu-","S":-1,"TS":[2,12.091524,0,0]}]},{"x":3.112,"y":20.582,"w":204.378,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tation,thetotaltimecomplexitywillincreasebyafactor","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":21.236,"w":206.477,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"of1220,whilespacecomplexitywillincreasebyafactorof","S":-1,"TS":[2,12.073592,0,0]}]},{"x":3.098,"y":21.89,"w":207.289,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"35.Thesearevalidforbothfactorizationanddiscretelog,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":22.543,"w":208.073,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sincetheyhavethesameasymptoticbehavior.Hence,for","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":23.197,"w":218.325,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"DH-1024,wegetatotalcostfortheprecomputationofabout","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.092,"y":23.851,"w":60.509,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"45Mcore-years.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.332,"y":23.851,"w":146.963,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thetimecomplexityforeachindividual","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":24.505,"w":204.891,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"logaftertheprecomputationshouldbemultipliedby95.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":25.159,"w":211.541,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thislastnumberdoesnotcorrespondtowhatweobserved","S":-1,"TS":[2,11.983932,0,0]}]},{"x":3.112,"y":25.812,"w":201.061,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inpractice;weattributethattothefactthatthedescent","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":26.466,"w":208.709,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"stephasbeenfarlessstudiedbothintheoryandinpractice","S":-1,"TS":[2,11.795646,0,0]}]},{"x":3.112,"y":27.12,"w":103.573,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"comparedtotheothersteps.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":27.774,"w":198.159,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"For1024-bitdescent,weexperimentedwithourearly-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":28.427,"w":210.668,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"abortimplementationtoinformourestimatesfordescent","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":29.081,"w":224.118,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"initialization,whichshoulddominatetheindividualdiscrete","S":-1,"TS":[2,11.840475999999999,0,0]}]},{"x":3.112,"y":29.735,"w":207.365,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"logcomputation.ForarandomtargetinOakleyGroup2,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":30.389,"w":209.802,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"initializationtook22core-days,yieldingafewprimesofat","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":3.112,"y":31.043,"w":136.648,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"most130bitstobedescendedfurther.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.128,"y":31.043,"w":64.819,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Intwicethistime,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":31.695999999999998,"w":208.093,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wereachedprimesofabout110bits.Atthispoint,wewere","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":3.112,"y":32.35,"w":223.126,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"certaintohavebootstrappedthedescent,andcouldcontinue","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":33.004,"w":202.228,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"downtothesmoothnessboundinafewmorecore-daysif","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":33.658,"w":143.809,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"propersievingsoftwarewereavailable.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.645,"y":33.658,"w":65.131,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thusweestimate","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":34.312,"w":215.674,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thata1024-bitdescentwouldtakeabout30core-days,once","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":3.112,"y":34.965,"w":99.146,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"againeasilyparallelizable.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":36.236,"w":77.69,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Costsinhardware","S":-1,"TS":[2,11.966,1,0]}]},{"x":9.161,"y":36.236,"w":125.325,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Although45Mcore-yearsisahuge","S":-1,"TS":[2,12.118421999999999,0,0]}]},{"x":3.112,"y":36.89,"w":208.104,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"computationaleﬀort,itisnotnecessarilyoutofreachfora","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":3.112,"y":37.544,"w":218.761,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"nationstate.Moreover,atthisscale,signiﬁcantcostsavings","S":-1,"TS":[2,11.795646,0,0]}]},{"x":3.112,"y":38.198,"w":230.519,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"couldberealizedbydevelopingapplication-speciﬁchardware.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.673,"y":38.851,"w":207.001,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Sievingisanaturaltargetforhardwareimplementation.","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":3.092,"y":39.505,"w":200.887,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Toourknowledge,thebestpriordescriptionofanASIC","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":40.159,"w":222.446,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"implementationof1024-bitsievingisthe2007workofGeisel-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":40.813,"w":217.106,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mannandSteinwandt[18].Inthefollowing,weupdatetheir","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":41.467,"w":216.426,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"estimatesformoderntechniquesandadjustparametersfor","S":-1,"TS":[2,12.019796,0,0]}]},{"x":3.112,"y":42.12,"w":215.229,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"discretelog.Weincreasetheirchipcountbyafactoroftento","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":42.774,"w":217.875,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sievemoreandsaveonlinearalgebraasabove,givinganesti-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":43.428,"w":212.367,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mateof3Mchipstocompletesievinginoneyear.Shrinking","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":44.082,"w":217.752,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thediesfromthe130nmtechnologynodeusedinthepaperto","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":12.736,"w":214.579,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"amoremodernsizereducescosts,astransistorsarecheaper","S":-1,"TS":[2,11.83151,0,0]}]},{"x":19.551,"y":13.39,"w":226.431,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"atnewertechnologies.Withstandardtransistorcostsanduti-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":14.044,"w":220.803,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"lization,thiswouldcostabout$2perchiptomanufacture,af-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":14.698,"w":214.256,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"terﬁxeddesignandtape-outcostsofroughly$2M[32].This","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":15.352,"w":215.031,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"suggeststhatan$8MinvestmentwouldbuyenoughASICs","S":-1,"TS":[2,11.983932,0,0]}]},{"x":19.551,"y":16.005,"w":224.478,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tocompletetheDH-1024sievingprecomputationinoneyear.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":16.659,"w":217.449,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Sinceastepofdescentusessieving,thesamehardwarecould","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":17.313,"w":199.397,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"likelybereusedtospeedcalculationsofindividuallogs.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":17.967,"w":208.49,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Estimatingtheﬁnancialcostforthelinearalgebraismore","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":18.621,"w":211.452,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"diﬃcult,sincetherehasbeenlittleworkondesigningchips","S":-1,"TS":[2,11.974965999999998,0,0]}]},{"x":19.551,"y":19.274,"w":214.538,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thataresuitableforthelargerﬁeldsinvolvedindiscretelog.","S":-1,"TS":[2,11.813578,0,0]}]},{"x":19.53,"y":19.928,"w":223.686,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Toderivearoughestimate,wecanbeginwithgeneralpurpose","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":20.582,"w":184.482,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"hardwareandthecore-yearestimatefromTable2.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":31.762999999999998,"y":20.582,"w":15.874,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"The","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.53,"y":21.236,"w":223.046,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Titansupercomputer[39]—at300,000CPUcores,currently","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":19.551,"y":21.89,"w":214.436,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"themostpowerfulsupercomputerintheU.S.—wouldtake","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":19.522,"y":22.543,"w":221.61,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"117yearstocompletethe1024-bitlinearalgebrastage.Titan","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.53,"y":23.197,"w":213.403,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wasconstructedin2012for$94M,suggestingacostof$11B","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":23.851,"w":215.102,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"insupercomputerstoﬁnishthisstepinayear.Inthecontext","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":24.505,"w":220.331,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"offactorization,movinglinearalgebrafromgeneralpurpose","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":19.551,"y":25.159,"w":196.551,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"CPUstoASICshasbeenestimatedtoreducecostsbya","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":25.812,"w":205.798,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"factorof80[17].Ifweoptimisticallyassumethatasimilar","S":-1,"TS":[2,12.05566,0,0]}]},{"x":19.551,"y":26.466,"w":217.816,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"reductioncanbeachievedfordiscretelog,thehardwarecost","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":27.12,"w":195.632,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"toperformthelinearalgebraforDH-1024inoneyearis","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":27.774,"w":199.447,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"plausiblyontheorderofhundredsofmillionsofdollars.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":28.427,"w":188.373,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Toputthisdollarﬁgureincontext,theFY2012bud-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":29.081,"w":214.523,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"getfortheU.S.ConsolidatedCryptologicProgram(which","S":-1,"TS":[2,12.109456,0,0]}]},{"x":19.551,"y":29.735,"w":128.608,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"includestheNSA)was$10.5billion","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.029,"y":29.497,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"4","S":-1,"TS":[3,8.978,0,0]}]},{"x":29.548,"y":29.735,"w":16.895,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"[57].","S":-1,"TS":[2,12.14532,0,0]}]},{"x":31.082,"y":29.735,"w":49.462,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Theagency’s","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":30.389,"w":222.48,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"classiﬁed2013budgetrequest,whichprioritizedinvestment","S":-1,"TS":[2,11.948068,0,0]}]},{"x":19.551,"y":31.043,"w":218.481,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"in“groundbreakingcryptanalyticcapabilitiestodefeatad-","S":-1,"TS":[2,12.118421999999999,0,0]}]},{"x":19.536,"y":31.695999999999998,"w":226.225,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"versarialcryptographyandexploitinternettraﬃc,”included","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":32.35,"w":226.534,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"notable$100Mincreasesintwoprograms[57]:“cryptanalytic","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":33.004,"w":223.905,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ITservices”(to$247M),andacrypticallynamed“cryptanal-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.536,"y":33.658,"w":222.773,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ysisandexploitationservicesprogramC”(to$360M).NSA’s","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":34.312,"w":213.137,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"leakedstrategicplanfortheperiodcalledforitto“continue","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":34.965,"w":196.094,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"toinvestintheindustrialbaseanddrivethestateofthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":35.619,"w":224.354,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"artforhighperformancecomputingtomaintainpre-eminent","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":36.273,"w":163.619,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"cryptanalyticcapabilityforthenation”[63].","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":37.565,"w":14.944,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"4.2","S":-1,"TS":[2,14.955,0,0]}]},{"x":21.232,"y":37.565,"w":9.301,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Is","S":-1,"TS":[2,14.955,0,0]}]},{"x":22,"y":37.565,"w":23.91,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"NSA","S":-1,"TS":[2,14.955,0,0]}]},{"x":23.681,"y":37.565,"w":47.162,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Breaking","S":-1,"TS":[2,14.955,0,0]}]},{"x":26.816,"y":37.565,"w":41.843,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1024-bit","S":-1,"TS":[2,14.955,0,0]}]},{"x":29.618,"y":37.565,"w":23.91,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DH?","S":-1,"TS":[2,14.955,0,0]}]},{"x":20.111,"y":38.374,"w":208.439,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"OurcalculationssuggestthatitisplausiblywithinNSA’s","S":-1,"TS":[2,11.840475999999999,0,0]}]},{"x":19.551,"y":39.028,"w":221.731,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"resourcestohaveperformednumberﬁeldsieveprecomputa-","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":19.551,"y":39.682,"w":211.769,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tionsforatleastasmallnumberof1024-bitDiﬃe-Hellman","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":40.335,"w":211.904,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groups.Thiswouldallowthemtobreakanykeyexchanges","S":-1,"TS":[2,11.957034,0,0]}]},{"x":19.551,"y":40.989,"w":157.382,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"madewiththosegroupsinclosetorealtime.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.882,"y":40.989,"w":40.006,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Iftrue,this","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.53,"y":41.643,"w":225.585,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wouldansweroneofthemajorcryptographicquestionsraised","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":42.297,"w":205.05,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bytheEdwardSnowdenleaks:HowisNSAdefeatingthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":42.951,"w":158.493,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"encryptionforwidelyusedVPNprotocols?","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.579,"y":43.844,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"4","S":-1,"TS":[3,8.978,0,0]}]},{"x":19.839,"y":44.082,"w":211.681,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TheNationalScienceFoundation’sbudgetwas$7billion.","S":-1,"TS":[2,11.966,0,0]}]},{"x":18.66,"y":45.95,"w":4.608,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"8","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[],"VLines":[],"Fills":[],"Texts":[{"x":3.673,"y":3.235,"w":205.156,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ClassiﬁeddocumentspublishedbyDerSpiegel[46]indi-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":3.8890000000000002,"w":213.391,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"catethatNSAispassivelydecryptingIPsecconnectionsat","S":-1,"TS":[2,12.037728,0,0]}]},{"x":3.112,"y":4.543,"w":214.009,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"signiﬁcantscale.Thedocumentsdonotdescribethecrypt-","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":3.112,"y":5.196,"w":218.516,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"analytictechniquesused,buttheydoprovideanoverviewof","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":5.85,"w":213.361,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theattacksystemarchitecture.AfterreviewinghowIPsec","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":3.112,"y":6.504,"w":218.413,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"keyestablishmentworks,wewillusethepublishedinforma-","S":-1,"TS":[2,11.912204,0,0]}]},{"x":3.112,"y":7.158,"w":208.306,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tiontoevaluatethehypothesisthattheNSAisleveraging","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":3.112,"y":7.811999999999999,"w":182.981,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"precomputationtocalculatediscretelogsatscale.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":8.621,"w":19.265,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"IKE","S":-1,"TS":[2,11.966,1,0]}]},{"x":5.132,"y":8.621,"w":174.971,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"InternetKeyExchange(IKE)isthemainkeyes-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":9.275,"w":207.901,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tablishmentprotocolusedforIPsecVPNs.Therearetwo","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.097,"y":9.929,"w":203.699,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"versions,IKEv1[22]andIKEv2[25],whichdiﬀerinmes-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":10.583,"w":211.381,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sagestructurebutareconceptuallysimilar.Forthesakeof","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":11.236,"w":145.88,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"brevity,wewilluseIKEv1terminology.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":11.89,"w":192.684,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"EachIKEsessionbeginswithaPhase1handshake,in","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":12.544,"w":204.844,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"whichtheclientandserverselectaDiﬃe-Hellmangroup","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":13.198,"w":209.988,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"fromasmallsetofstandardizedparametersandperforma","S":-1,"TS":[2,12.019796,0,0]}]},{"x":3.112,"y":13.852,"w":215.194,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"keyexchangetoestablishasharedsecret.Thesharedsecret","S":-1,"TS":[2,11.795646,0,0]}]},{"x":3.112,"y":14.505,"w":218.587,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"iscombinedwithothercleartextvaluestransmittedbyeach","S":-1,"TS":[2,11.849442,0,0]}]},{"x":3.112,"y":15.159,"w":198.172,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"side,suchasnoncesandcookies,toderiveavaluecalled","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":15.812999999999999,"w":29.778,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"SKEYID","S":-1,"TS":[2,11.1294,0,0]}]},{"x":5.011,"y":15.812999999999999,"w":189.554,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".IKEprovidesseveralauthenticationmechanisms,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":16.467,"w":219.905,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"includingsymmetricpre-sharedkeys(PSK);whenIKEv1is","S":-1,"TS":[2,11.885306,0,0]}]},{"x":3.112,"y":17.121,"w":207.882,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"authenticatedwithaPSK,thisvalueisincorporatedinto","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":17.774,"w":60.95,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thederivationof","S":-1,"TS":[2,11.966,0,0]}]},{"x":7.511,"y":17.774,"w":29.778,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"SKEYID","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":9.372,"y":17.774,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":18.428,"w":50.763,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Theresulting","S":-1,"TS":[2,11.849442,0,0]}]},{"x":7.195,"y":18.428,"w":29.778,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"SKEYID","S":-1,"TS":[2,10.866389999999999,0,0]}]},{"x":9.224,"y":18.428,"w":127.87,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"isusedtoencryptandauthenticate","S":-1,"TS":[2,11.849442,0,0]}]},{"x":3.112,"y":19.082,"w":77.798,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"aPhase2handshake.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":8.392,"y":19.082,"w":128.434,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Phase2establishestheparameters","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":19.736,"w":64.533,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andkeymaterial,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.8740000000000006,"y":19.736,"w":35.424,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"KEYMAT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":10.132,"y":19.736,"w":111.248,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",foracryptographictransport","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":20.39,"w":221.419,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"protocolusedtoprotectsubsequenttraﬃc,suchasEncapsu-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":21.043,"w":222.136,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"latingSecurityPayload(ESP)[27]orAuthenticatedHeader","S":-1,"TS":[2,11.840475999999999,0,0]}]},{"x":3.045,"y":21.697,"w":37.882,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"(AH)[26].","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.829,"y":21.697,"w":166.469,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Insomecircumstances,thisphaseincludesan","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":22.351,"w":177.546,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"additionalroundofDiﬃe-Hellman.Ultimately,","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":15.284,"y":22.351,"w":35.424,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"KEYMAT","S":-1,"TS":[2,11.04173,0,0]}]},{"x":17.666,"y":22.351,"w":6.195,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"is","S":-1,"TS":[2,12.046693999999999,0,0]}]},{"x":3.112,"y":23.005,"w":48.171,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"derivedfrom","S":-1,"TS":[2,12.14532,0,0]}]},{"x":6.595,"y":23.005,"w":29.778,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"SKEYID","S":-1,"TS":[2,11.1294,0,0]}]},{"x":8.493,"y":23.005,"w":129.915,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",additionalnonces,andtheresultof","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":23.659,"w":171.061,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theoptionalPhase2Diﬃe-Hellmanexchange.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":24.468,"w":141.503,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"NSA’sVPNexploitationprocess","S":-1,"TS":[2,11.966,1,0]}]},{"x":13.146,"y":24.468,"w":77.363,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thedocumentspub-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":25.122,"w":212.087,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"lishedbyDerSpiegeldescribeasystemnamedTURMOIL","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":3.112,"y":25.776,"w":216.338,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thatisusedtocollectanddecryptVPNtraﬃc.Theevidence","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":26.429,"w":206.448,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"indicatesthatthisdecryptionisperformedusingpassive","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":27.083,"w":205.865,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"eavesdroppinganddoesnotrequiremessageinjectionor","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":27.737,"w":161.904,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"man-in-the-middleattacksonIPsecorIKE.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":13.778,"y":27.737,"w":42.9,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Figure4,an","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":28.391,"w":210.908,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"excerptfromoneofthedocuments[67],illustratestheﬂow","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":3.112,"y":29.044,"w":171.391,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofinformationthroughtheTURMOILsystem","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":29.698,"w":209.378,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TheinitialphasesoftheattackinvolvecollectingIKEand","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":30.352,"w":217.252,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ESPpayloadsanddeterminingwhetherthetraﬃcmatches","S":-1,"TS":[2,12.001864,0,0]}]},{"x":3.112,"y":31.006,"w":87.678,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"anytaskedselector[65].","S":-1,"TS":[2,12.14532,0,0]}]},{"x":9.132,"y":31.006,"w":112.799,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Ifso,TURMOILtransmitsthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":31.659999999999997,"w":217.63,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"completeIKEhandshakeandmaytransmitasmallamount","S":-1,"TS":[2,11.876339999999999,0,0]}]},{"x":3.112,"y":32.313,"w":219.441,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofESPciphertexttoNSA’sCryptanalysisandExploitation","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":3.112,"y":32.967,"w":206.476,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Services(CES)[56,65]viaasecuretunnel.WithinCES,a","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":3.112,"y":33.621,"w":231.603,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"specializedVPNAttackOrchestrator(VAO)systemmanages","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":34.275,"w":214.731,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"acollectionofhigh-performancegridcomputingresources","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":34.929,"w":204.141,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"locatedatNSAHeadquartersandinadatacenteratOak","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":35.583,"w":223.813,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"RidgeNationalLaboratory,whichperformthecomputation","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":3.112,"y":36.236,"w":208.094,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"requiredtogeneratetheESPsessionkey[61,62,67].VAO","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":36.89,"w":219.413,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"alsomaintainsadatabase,CORALREEF,thatstorescryp-","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":37.544,"w":201.765,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tographicvalues,includingasetofknownPSKsandthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":38.198,"w":184.651,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"resulting“recovered”ESPsessionkeys[60,61,67].","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":38.851,"w":202.453,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TheESPtraﬃcitselfisbuﬀeredforupto15minutes[64],","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":39.505,"w":209.192,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"untilCEScanrespondwiththerecoveredESPkeysifthey","S":-1,"TS":[2,11.974965999999998,0,0]}]},{"x":3.092,"y":40.159,"w":219.853,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"weregeneratedcorrectly.Oncekeyshavebeenreturned,the","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":40.813,"w":206.325,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ESPtraﬃcisdecryptedviahardwareaccelerators[59]or","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":41.467,"w":213.675,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"insoftware[68,69].Fromthispoint,decryptedVPNtraﬃc","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":42.12,"w":217.389,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"isreinjectedintoTURMOILprocessinginfrastructureand","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":3.112,"y":42.774,"w":205.526,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"passedtoothersystemsforstorageandanalysis[69].The","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":43.428,"w":220.885,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"documentsindicatethatNSAisrecoveringESPkeysatlarge","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":44.082,"w":153.967,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"scale,withatargetof100,000perhour[64].","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":11.375,"w":33.172,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Figure4:","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":21.986,"y":11.375,"w":169.604,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"NSA’sVPNdecryptioninfrastructure.","S":-1,"TS":[2,11.966,1,0]}]},{"x":33.394,"y":11.375,"w":17.97,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"This","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":12.029,"w":208.859,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"classiﬁedillustrationpublishedbyDerSpiegel[67]shows","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":12.682,"w":211.399,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"capturedIKEhandshakemessagesbeingpassedtoahigh-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":13.336,"w":228.913,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"performancecomputingsystem,whichreturnsthesymmetric","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":13.99,"w":201.582,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"keysforESPsessiontraﬃc.Thedetailsofthisattackare","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":14.644,"w":225.549,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"consistentwithaneﬃcientbreakfor1024-bitDiﬃe-Hellman.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":16.622,"w":138.252,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Evidenceforadiscretelogattack","S":-1,"TS":[2,11.966,1,0]}]},{"x":30.14,"y":16.622,"w":62.463,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Whiletheability","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":17.276,"w":203.023,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"todecryptVPNtraﬃcdoesnotbyitselfindicateadefeat","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":17.93,"w":211.65,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofDiﬃe-Hellman,thereareseveralfeaturesofIKEandthe","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.529,"y":18.584,"w":172.575,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"VAO’soperationthatsupportthishypothesis.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":19.238,"w":200.702,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TheIKEprotocolhasbeenextensivelyanalyzed[9,36],","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":19.891,"w":202.879,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andisnotbelievedtobeexploitableinstandardconﬁgu-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":20.545,"w":167.997,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"rationsunderpassiveeavesdroppingattacks.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":30.679,"y":20.545,"w":37.672,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inorderto","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":21.199,"w":201.834,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"recoverthesessionkeysfortheESPorAHprotocols,the","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":21.853,"w":141.423,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attackermustatminimumrecoverthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.879,"y":21.853,"w":29.778,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"SKEYID","S":-1,"TS":[2,11.1294,0,0]}]},{"x":32.012,"y":21.853,"w":38.94,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"generated","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":22.507,"w":208.898,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bythePhase1exchange.Absentavulnerabilityinthekey","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":23.16,"w":211.237,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"derivationfunctionortransportencryption,thisrequires","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":23.814,"w":213.615,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theattackertorecoveraDiﬃe-Hellmansharedsecretafter","S":-1,"TS":[2,12.05566,0,0]}]},{"x":19.551,"y":24.468,"w":145.498,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"passivelyobservinganIKEhandshake.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":25.122,"w":212.156,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WhileIKEisdesignedtosupportarangeofDiﬃe-Hellman","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":25.776,"w":207.535,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groups,ourInternet-widescans(§4.3)showthatthevast","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":26.429,"w":211.71,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"majorityofIKEsystemsselectoneparticular1024-bitDH","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":19.551,"y":27.083,"w":214.824,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"group,OakleyGroup2,evenwhenoﬀeredstrongergroups.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":27.737,"w":209.917,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Givenaneﬃcientoracleforsolvingthediscretelogarithm","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":19.551,"y":28.391,"w":35.348,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"problem,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":22.105,"y":28.391,"w":163.903,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attacksonIKEarepossibleprovidedthatthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":29.044,"w":123.921,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attackercanobtainthefollowing:","S":-1,"TS":[2,11.974965999999998,0,0]}]},{"x":28.278,"y":29.044,"w":11.775,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(1)","S":-1,"TS":[2,11.974965999999998,0,0]}]},{"x":29.207,"y":29.044,"w":78.903,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"acompletetwo-sided","S":-1,"TS":[2,11.974965999999998,0,0]}]},{"x":19.551,"y":29.698,"w":224.929,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"IKEtranscript,includingtheDiﬃe-Hellmanephemeralkeys","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":19.551,"y":30.352,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":19.846,"y":30.114,"w":4.035,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"a","S":-1,"TS":[2,8.978,0,1]}]},{"x":20.321,"y":30.352,"w":14.847,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":21.446,"y":30.352,"w":4.394,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"g","S":-1,"TS":[2,11.966,0,1]}]},{"x":21.741,"y":30.114,"w":3.274,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"b","S":-1,"TS":[2,8.978,0,1]}]},{"x":22.169,"y":30.352,"w":172.31,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"aswellasthenoncesandcookiestransmittedby","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":19.551,"y":31.006,"w":118.119,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bothsidesoftheconnection,and","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":27.803,"y":31.006,"w":11.775,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"(2)","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":28.69,"y":31.006,"w":84.982,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inIKEv1only,thePSK","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":31.659999999999997,"w":58.186,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"usedinderiving","S":-1,"TS":[2,11.966,0,0]}]},{"x":23.771,"y":31.659999999999997,"w":29.778,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"SKEYID","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.632,"y":31.659999999999997,"w":2.56,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":32.313,"w":192.889,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Bothoftheaboverequirementsarealsopresentinthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":32.967,"w":206.944,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"NSA’sVPNattacksystem.AsFigure4illustrates,ahard","S":-1,"TS":[2,12.127388,0,0]}]},{"x":19.551,"y":33.621,"w":173.671,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"requirementoftheVAOistheneedtoobtainthe","S":-1,"TS":[2,12.037728,0,0]}]},{"x":32.316,"y":33.621,"w":35.047,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"complete","S":-1,"TS":[2,12.037728,0,1]}]},{"x":19.551,"y":34.275,"w":111.622,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"two-sidedIKEtranscript[60].","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.086,"y":34.275,"w":97.384,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thepublisheddocuments","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":34.929,"w":211.78,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"indicatethatthisrequirementsubstantiallyincreasesthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":35.583,"w":209.725,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"complexityoftheattackexecution,sinceIKEtranscripts","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":36.236,"w":212.486,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mustbereassembled(“paired”)whenevertheinteraction","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":36.89,"w":175.83,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"traversesmultiplenetworkpaths[55,56,58,66].","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":37.544,"w":205.364,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Theattacksystemalsoseemstorequireknowledgeofthe","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":19.551,"y":38.198,"w":21.116,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"PSK.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.253,"y":38.198,"w":190.276,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Severaldocumentsdescribetechniquesforanalysts","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":38.852,"w":204.295,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tolocateaPSK,includingusingadatabaseofroutercon-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":39.505,"w":211.816,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ﬁgurations[70,71],theCORALREEFdatabaseofknown","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":40.159,"w":213.141,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"PSKs[60],previouslydecryptedSSHtraﬃc[60],orsystem","S":-1,"TS":[2,12.019796,0,0]}]},{"x":19.551,"y":40.813,"w":221.85,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"administrator“chatter”[70].Additionally,NSAiswillingto","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":19.469,"y":41.467,"w":129.268,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"“[r]unattackstorecoverPSK”[60].","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":42.12,"w":202.359,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Ofcourse,thisexplanationisnotdispositive.Thepossi-","S":-1,"TS":[2,12.118421999999999,0,0]}]},{"x":19.551,"y":42.774,"w":219.967,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bilityremainsthatNSAcoulddefeatIPsecusingalternative","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":43.428,"w":27.7,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"means.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.813,"y":43.428,"w":174.807,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"CertainpublishedNSAdocumentsrefertosoft-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.53,"y":44.082,"w":213.299,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ware“implants”onVPNdevices,indicatingthattheuseof","S":-1,"TS":[2,11.92117,0,0]}]},{"x":18.66,"y":45.95,"w":4.608,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"9","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[{"x":3.941,"y":3.385,"w":1.105,"l":30.225,"oc":"#000"},{"x":14.5,"y":4.23,"w":0.414,"l":19.667,"oc":"#000"},{"x":3.941,"y":5.067,"w":0.69,"l":30.225,"oc":"#000"},{"x":3.941,"y":10.027,"w":1.105,"l":30.225,"oc":"#000"}],"VLines":[],"Fills":[],"Texts":[{"x":17.367,"y":3.207,"w":189.33,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Vulnerableservers,iftheattackercanprecomputefor...","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":14.586,"y":4.038,"w":59.333,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"all512-bitgroups","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":18.967,"y":4.038,"w":59.333,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"all768-bitgroups","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":23.347,"y":4.038,"w":63.992,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"one1024-bitgroup","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":28.019,"y":4.038,"w":66.391,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"ten1024-bitgroups","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.027,"y":4.88,"w":128.307,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"HTTPSTop1Mw/activedowngrade","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":15.472,"y":4.88,"w":47.988,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"45,100(8.4%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.029,"y":4.88,"w":47.988,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"45,100(8.4%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":24.348,"y":4.88,"w":56.457,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"205,000(37.1%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":29.346,"y":4.88,"w":56.457,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"309,000(56.1%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.027,"y":5.441,"w":56.083,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"HTTPSTop1M","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":16.148,"y":5.441,"w":37.167,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"118(0.0%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.705,"y":5.441,"w":37.167,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"407(0.1%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":24.612,"y":5.441,"w":52.223,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"98,500(17.9%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":29.346,"y":5.441,"w":56.457,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"132,000(24.0%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.027,"y":6.001,"w":130.486,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"HTTPSTrustedw/activedowngrade","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":14.574,"y":6.001,"w":52.223,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"489,000(3.4%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.132,"y":6.001,"w":52.223,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"556,000(3.9%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":23.304,"y":6.001,"w":63.043,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"1,840,000(12.8%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":28.302,"y":6.001,"w":63.043,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"3,410,000(23.8%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.027,"y":6.561,"w":58.262,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"HTTPSTrusted","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":15.736,"y":6.561,"w":43.754,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"1,000(0.0%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.028,"y":6.561,"w":47.988,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"46,700(0.3%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":24.348,"y":6.561,"w":56.457,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"939,000(6.56%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":28.935,"y":6.561,"w":63.043,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"1,430,000(10.0%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.027,"y":7.494999999999999,"w":41.602,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"IKEv1IPv4","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":18.382,"y":7.494999999999999,"w":4.234,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"–","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.205,"y":7.494999999999999,"w":47.988,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"64,700(2.6%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":24.112,"y":7.494999999999999,"w":63.043,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"1,690,000(66.1%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":29.111,"y":7.494999999999999,"w":63.043,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"1,690,000(66.1%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.027,"y":8.056,"w":41.602,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"IKEv2IPv4","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":18.382,"y":8.056,"w":4.234,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"–","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.205,"y":8.056,"w":47.988,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"66,000(5.8%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":24.524,"y":8.056,"w":56.457,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"726,000(63.9%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":29.522,"y":8.056,"w":56.457,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"726,000(63.9%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.027,"y":8.99,"w":33.264,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"SSHIPv4","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":18.382,"y":8.99,"w":4.234,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"–","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":23.116,"y":8.99,"w":4.234,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"–","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":24.289,"y":8.99,"w":63.043,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"3,600,000(25.7%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":29.287,"y":8.99,"w":63.043,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"3,600,000(25.7%)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.092,"y":10.256,"w":30.209,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Table3:","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.427,"y":10.256,"w":190.615,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"EstimatedimpactofDiﬃe-Hellmanattacks.","S":-1,"TS":[2,11.966,1,0]}]},{"x":18.488,"y":10.256,"w":226.275,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WeuseInternet-widescanningtoestimatethenumberofreal-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":10.91,"w":461.95,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"worldserversforwhichtypicalconnectionscouldbecompromisedbyattackerswithvariouslevelsofcomputationalresources.","S":-1,"TS":[2,11.876339999999999,0,0]}]},{"x":3.112,"y":11.564,"w":456.23,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ForHTTPS,weprovideﬁgureswithandwithoutdowngradeattacksonthechosenciphersuite.Allothersarepassiveattacks.","S":-1,"TS":[2,11.813578,0,0]}]},{"x":3.112,"y":13.503,"w":205.486,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"targetedmalwareisapieceofthecollectionstrategy[60];","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":14.157,"w":211.399,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"however,thesamedocumentsalsonotethatdecryptionof","S":-1,"TS":[2,12.127388,0,0]}]},{"x":3.112,"y":14.811,"w":71.261,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theresultingtraﬃc","S":-1,"TS":[2,12.14532,0,0]}]},{"x":8.259,"y":14.811,"w":17.407,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"does","S":-1,"TS":[2,12.14532,0,1]}]},{"x":9.582,"y":14.811,"w":12.938,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"not","S":-1,"TS":[2,12.14532,0,1]}]},{"x":10.579,"y":14.811,"w":108.045,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"requireIKEhandshakes,and","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":15.465,"w":205.251,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thusappearstobeanalternativemechanismtotheVAO","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":16.119,"w":216.484,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attackdescribedabove.Themostcompellingargumentfor","S":-1,"TS":[2,11.983932,0,0]}]},{"x":3.112,"y":16.772,"w":203.395,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"apurecryptographicattackisthegeneralityoftheVAO","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":17.426,"w":215.115,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"approach,whichappearstosucceedacrossabroadswathof","S":-1,"TS":[2,11.83151,0,0]}]},{"x":3.112,"y":18.08,"w":101.755,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"non-compromiseddevices.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":19.443,"w":14.944,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"4.3","S":-1,"TS":[2,14.955,0,0]}]},{"x":4.794,"y":19.443,"w":35.184,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Effects","S":-1,"TS":[2,14.955,0,0]}]},{"x":7.179,"y":19.443,"w":9.959,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"of","S":-1,"TS":[2,14.955,0,0]}]},{"x":7.989000000000001,"y":19.443,"w":5.978,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"a","S":-1,"TS":[2,14.955,0,0]}]},{"x":8.549,"y":19.443,"w":41.843,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"1024-bit","S":-1,"TS":[2,14.955,0,0]}]},{"x":11.351,"y":19.443,"w":31.215,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Break","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.673,"y":20.253,"w":197.556,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inthissection,weuseInternet-widescanningtoassess","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":20.906,"w":213.413,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theimpactofahypotheticalDH-1024breakonthreepopu-","S":-1,"TS":[2,11.939102,0,0]}]},{"x":3.112,"y":21.56,"w":210.653,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"larprotocols:IKE,SSH,andHTTPS.Ourmeasurements","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":22.214,"w":208.12,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"indicatethattheseprotocols,astheyarecommonlyused,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":22.868,"w":217.598,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wouldbesubjecttowidespreadcompromisebyastate-level","S":-1,"TS":[2,11.867374,0,0]}]},{"x":3.112,"y":23.522,"w":216.814,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attackerwhohadtheresourcestoinvestinprecomputation","S":-1,"TS":[2,11.912204,0,0]}]},{"x":3.112,"y":24.175,"w":170.645,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forasmallnumberofcommon1024-bitgroups.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":25.122,"w":19.265,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"IKE","S":-1,"TS":[2,11.966,1,0]}]},{"x":5.079,"y":25.122,"w":191.582,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"WemeasuredhowIPsecVPNsuseDiﬃe-Hellmanin","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":25.776,"w":215.811,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"practicebyscanninga1%randomsampleofthepublicIPv4","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":26.429,"w":208.69,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"addressspaceforIKEv1andIKEv2(theprotocolsusedto","S":-1,"TS":[2,12.073592,0,0]}]},{"x":3.112,"y":27.083,"w":173.097,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"initiateanIPsecVPNconnection)inMay2015.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":14.45,"y":27.083,"w":31.541,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Weused","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":27.737,"w":219.573,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theZMapUDPprobemoduletomeasuresupportforOakley","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":28.391,"w":199.308,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Groups1and2(twopopular768-and1024-bit,built-in","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":29.045,"w":145.175,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groups)andwhichgroupserversprefer.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.785,"y":29.045,"w":56.954,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Totestsupport","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":29.698,"w":201.401,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forindividualgroups,weoﬀeredonlythesinglegroupin","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":30.352,"w":36.147,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"question.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.742,"y":30.352,"w":170.698,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Todetectdefaultbehavior,weoﬀeredserversa","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.097,"y":31.006,"w":213.369,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"varietyofDHgroups,withthelowestprioritygroupsbeing","S":-1,"TS":[2,11.948068,0,0]}]},{"x":3.112,"y":31.659999999999997,"w":216.159,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"OakleyGroups1and2.Whenmeasuringserverpreference,","S":-1,"TS":[2,11.92117,0,0]}]},{"x":3.092,"y":32.313,"w":204.227,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"wescannedwiththe3DESsymmetriccipher—themost","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":32.967,"w":214.265,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"commonlysupportedsymmetriccipherinoursinglegroup","S":-1,"TS":[2,12.091524,0,0]}]},{"x":3.112,"y":33.621,"w":217.465,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"scans.Becauseofthis,thepercentageswepresentforIKEv1","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":34.275,"w":211.04,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andIKEv2arealowerboundforthenumberofserversthat","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":34.929,"w":107.441,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"preferOakleyGroups1and2.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":35.583,"w":205.093,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Ofthe80KhoststhatrespondedwithavalidIKEpacket,","S":-1,"TS":[2,11.804611999999999,0,0]}]},{"x":3.092,"y":36.236,"w":218.811,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"44.2%werewillingtoacceptanoﬀeredproposalfromatleast","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":36.89,"w":33.844,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"onescan.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.597,"y":36.89,"w":171.48,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Themajorityoftheremaininghostsresponded","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.092,"y":37.544,"w":22.526,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"witha","S":-1,"TS":[2,12.14532,0,0]}]},{"x":4.925,"y":37.544,"w":84.729,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"NO-PROPOSAL-CHOSEN","S":-1,"TS":[3,11.966,0,0]}]},{"x":10.416,"y":37.544,"w":109.091,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"messageregardlessofourpro-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":38.198,"w":205.461,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"posal.Manyofthesemaybesite-to-siteVPNsthatreject","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":38.851,"w":222.428,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"oursourceaddress.Weconsiderthesehosts“unproﬁled”and","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":39.505,"w":116.137,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"omitthemfromtheresultshere.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":40.159,"w":211.067,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Wefoundthat31.8%ofIKEv1and19.7%ofIKEv2servers","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":40.813,"w":208.528,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"supportOakleyGroup1(768-bit)while86.1%and91.0%","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":41.467,"w":188.133,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"respectivelysupportedOakleyGroup2(1024-bit).","S":-1,"TS":[2,12.14532,0,0]}]},{"x":15.412,"y":41.467,"w":21.778,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inour","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":42.12,"w":212.267,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sampleofIKEv1servers,2.6%ofproﬁledserverspreferred","S":-1,"TS":[2,12.082557999999999,0,0]}]},{"x":3.112,"y":42.774,"w":217.232,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"the768-bitOakleyGroup1—whichiswithincryptanalytic","S":-1,"TS":[2,11.903238,0,0]}]},{"x":3.112,"y":43.428,"w":222.946,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"reachtodayformoderatelyresourcedattackers—and66.1%","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":3.112,"y":44.082,"w":142.743,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"preferredthe1024-bitOakleyGroup2.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.565,"y":44.082,"w":62.473,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ForIKEv2,5.8%","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":13.503,"w":208.225,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofproﬁledserverschoseOakleyGroup1,and63.9%chose","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":19.551,"y":14.157,"w":215.803,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"OakleyGroup2.Thiscoincideswithouranecdotalﬁndings","S":-1,"TS":[2,11.867374,0,0]}]},{"x":19.551,"y":14.811,"w":215.878,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thatmostVPNclientsonlyoﬀerOakleyGroup2bydefault.","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":15.716999999999999,"w":20.076,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"SSH","S":-1,"TS":[2,11.966,1,0]}]},{"x":21.62,"y":15.716999999999999,"w":176.002,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"AllSSHhandshakescompleteeitheraﬁniteﬁeld","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":16.37,"w":217.95,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Diﬃe-HellmanorellipticcurveDiﬃe-Hellmanexchangeas","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":19.551,"y":17.024,"w":209.96,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"partoftheSSHkeyexchange.TheSSHprotocolexplicitly","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":19.551,"y":17.678,"w":210.399,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"deﬁnessupportforOakleyGroup2(1024-bit)andOakley","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":18.332,"w":214.568,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Group14(2048-bit)butalsoallowsaserver-deﬁnedgroup,","S":-1,"TS":[2,12.037728,0,0]}]},{"x":19.53,"y":18.986,"w":223.396,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"whichcanbenegotiatedthroughanauxiliaryDiﬃe-Hellman","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":19.639,"w":168.251,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"GroupExchange(DH-GEX)handshake[16].","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":20.293,"w":187.244,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"InordertomeasurehowSSHusesDHinpractice,we","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":20.947,"w":210.449,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"implementedtheSSHprotocolintheZMaptoolchainand","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":19.551,"y":21.601,"w":221.398,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"scanned1%randomsamplesofthepublicIPv4addressspace","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":22.255,"w":202.208,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inApril2015.Weﬁndthat98.9%ofSSHserverssupport","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":22.908,"w":206.996,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"the1024-bitOakleyGroup2,77.6%supportthe2048-bit","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":23.562,"w":175.307,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"OakleyGroup14,and68.7%supportDH-GEX.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":24.216,"w":211.299,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"DuringtheSSHhandshake,theclientandserverselectthe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":24.87,"w":213.976,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"client’shighestprioritymutuallysupportedkeyexchange","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":25.524,"w":223.391,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"algorithm.Therefore,wecannotdirectlymeasurewhatalgo-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":26.177,"w":218.744,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"rithmserverswillpreferinpractice.Inordertoestimatethis,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.53,"y":26.831,"w":209.572,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"weperformedascaninwhichwemimickedthealgorithms","S":-1,"TS":[2,12.109456,0,0]}]},{"x":19.551,"y":27.485,"w":218.771,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"oﬀeredbyOpenSSH6.6.1p1,thelatestversionofOpenSSH.","S":-1,"TS":[2,11.867374,0,0]}]},{"x":19.551,"y":28.139,"w":212.279,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inthisscan,21.8%ofserverspreferredthe1024-bitOakley","S":-1,"TS":[2,11.957034,0,0]}]},{"x":19.551,"y":28.793,"w":218.119,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Group2,and37.4%preferredaserver-deﬁnedgroup.10%of","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":29.446,"w":213.775,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theserver-deﬁnedgroupswere1024-bit,but,ofthose,near","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":19.551,"y":30.1,"w":205.266,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"allprovidedOakleyGroup2ratherthanacustomgroup.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":30.754,"w":207.008,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Combiningtheseequivalentchoices,weﬁndthatastate-","S":-1,"TS":[2,12.037728,0,0]}]},{"x":19.551,"y":31.408,"w":217.372,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"levelattackerwhoperformedNFSprecomputationsforthe","S":-1,"TS":[2,11.992897999999999,0,0]}]},{"x":19.522,"y":32.062,"w":207.887,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"1024-bitOakleyGroup2(whichhasbeeninstandardsfor","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":32.715,"w":229.448,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"almosttwodecades)couldpassivelyeavesdroponconnections","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":33.369,"w":177.393,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"to3.6M(25.7%)publiclyaccessibleSSHservers.","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":34.275,"w":36.186,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"HTTPS","S":-1,"TS":[2,11.966,1,0]}]},{"x":22.522,"y":34.275,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":23.708,"y":34.275,"w":162.755,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"iscommonlydeployedonwebservers.68.3%","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":34.929,"w":108.201,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofAlexaTop1Msitessupport","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.808,"y":34.929,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,11.1294,0,0]}]},{"x":28.903,"y":34.929,"w":69.526,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",asdo23.9%ofsites","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.53,"y":35.583,"w":213.333,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"withbrowser-trustedcertiﬁcates.OftheTop1Msitesthat","S":-1,"TS":[2,12.037728,0,0]}]},{"x":19.551,"y":36.236,"w":30.789,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"support","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":21.63,"y":36.236,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":22.682,"y":36.236,"w":167.067,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",84%usea1024-bitorsmallergroup,with94%","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":36.89,"w":113.586,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"oftheseusingoneofﬁvegroups.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":37.544,"w":116.571,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Despitewidespreadsupportfor","S":-1,"TS":[2,11.903238,0,0]}]},{"x":28.127,"y":37.544,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.91421,0,0]}]},{"x":29.192,"y":37.544,"w":78.513,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",apassiveeavesdrop-","S":-1,"TS":[2,11.903238,0,0]}]},{"x":19.551,"y":38.198,"w":210.821,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"percanonlydecryptconnectionsthatorganicallyagreeto","S":-1,"TS":[2,12.109456,0,0]}]},{"x":19.551,"y":38.851,"w":214.139,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"useDiﬃe-Hellman.Wecanestimatethenumberofsitesfor","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":19.53,"y":39.505,"w":216.691,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"whichthiswilloccurbyoﬀeringthesamesetsofciphersuites","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":40.159,"w":114.412,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"asChrome,Firefox,andSafari.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.162,"y":40.159,"w":91.749,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Whiletheoﬀeredciphers","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":40.813,"w":208.286,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"diﬀerslightlybetweenbrowsers,thisturnsouttoresultin","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":19.551,"y":41.467,"w":119.66,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"negligiblediﬀerencesinwhether","S":-1,"TS":[2,11.966,0,0]}]},{"x":27.798,"y":41.467,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":29.063,"y":41.467,"w":35.431,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ischosen.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":42.12,"w":222.23,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Approximately24.0%ofbrowserconnectionswithHTTPS-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":42.774,"w":215.154,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"enabledTop1Msites(and10%withbrowser-trustedsites)","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":19.53,"y":43.428,"w":51.203,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"willnegotiate","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":23.011,"y":43.428,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":24.235,"y":43.428,"w":147.781,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"withoneofthetenmostpopular1024-bit","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":44.082,"w":202.971,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"primes;17.9%ofconnectionswithTop1Msitescouldbe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":18.516,"y":45.95,"w":9.215,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"10","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[],"VLines":[],"Fills":[],"Texts":[{"x":3.112,"y":3.235,"w":225.81,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"passivelyeavesdroppedgiventheprecomputationforasingle","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.084,"y":3.8890000000000002,"w":58.387,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"1024-bitprime.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":7.236,"y":3.8890000000000002,"w":142,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Themostpopularsitethatnegotiatesa","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":4.543,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":4.355,"y":4.543,"w":199.593,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ciphersuiteusingoneofthetwomostcommon1024-bit","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":5.196,"w":155.374,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"primesissohu.com(ranked31stglobally).","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":6.046,"w":21.108,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Mail","S":-1,"TS":[2,11.966,1,0]}]},{"x":5.199,"y":6.046,"w":180.538,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TLSisalsousedtosecureemailtransport.SMTP,","S":-1,"TS":[2,12.037728,0,0]}]},{"x":3.112,"y":6.7,"w":207.766,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theprotocolusedtorelaymessagesbetweenmailservers,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":7.353999999999999,"w":202.795,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"allowsaconnectiontobeupgradedtoTLSbyissuingthe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":8.007,"w":37.657,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"STARTTLS","S":-1,"TS":[3,11.966,0,0]}]},{"x":5.649,"y":8.007,"w":180.77,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"command.POP3SandIMAPS,usedbyendusers","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":8.661,"w":207.047,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tofetchreceivedmail,wraptheentireconnectioninTLS.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":9.315,"w":201.67,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Westudied1%samplesofthepublicIPv4addressspace","S":-1,"TS":[2,12.037728,0,0]}]},{"x":3.112,"y":9.969,"w":217.999,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forIMAPS,POP3S,andSMTP+StartTLS.Wefoundthat","S":-1,"TS":[2,11.948068,0,0]}]},{"x":3.112,"y":10.623,"w":125.524,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"50.7%ofSMTPserverssupported","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.477,"y":10.623,"w":37.657,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"STARTTLS","S":-1,"TS":[3,11.966,0,0]}]},{"x":14.83,"y":10.623,"w":43.567,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",41.4%sup-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":11.276,"w":26.134,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ported","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.045,"y":11.276,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,11.1294,0,0]}]},{"x":6.14,"y":11.276,"w":81.476,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",and14.8%supported","S":-1,"TS":[2,12.14532,0,0]}]},{"x":12.354,"y":11.276,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":16.205,"y":11.276,"w":30.793,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ciphers.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.084,"y":11.93,"w":203.636,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"15.5%ofSMTPserversusedoneofthetenmostcommon","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.084,"y":12.584,"w":62.019,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"1024-bitgroups.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":13.238,"w":141.284,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ForIMAPS,8.4%ofserverssupported","S":-1,"TS":[2,11.83151,0,0]}]},{"x":13.474,"y":13.238,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.850449999999999,0,0]}]},{"x":17.142,"y":13.238,"w":14.847,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,11.83151,0,0]}]},{"x":3.098,"y":13.891,"w":56.902,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"75%supported","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":6.892,"y":13.891,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":7.944000000000001,"y":13.891,"w":151.621,"clr":0,"sw":0.669125,"A":"left","R":[{"T":".However,thetenmostcommon1024-bit","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":14.545,"w":219.366,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"primesaccountforonly5.4%ofservers.POP3Sdeployment","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":15.199,"w":151.37,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"issimilar,with8.9%ofserverssupporting","S":-1,"TS":[2,12.14532,0,0]}]},{"x":14.474,"y":15.199,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":3.112,"y":15.853000000000002,"w":81.984,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and74.9%supporting","S":-1,"TS":[2,11.912204,0,0]}]},{"x":8.805,"y":15.853000000000002,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.92218,0,0]}]},{"x":9.872,"y":15.853000000000002,"w":113.198,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",butwiththetenmostcommon","S":-1,"TS":[2,11.912204,0,0]}]},{"x":3.084,"y":16.507,"w":188.132,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"1024-bitprimesaccountingforonly4.8%ofservers.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":17.16,"w":208.529,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Ifeachofthetopten1024-bitprimesusedbyeachprotocol","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.092,"y":17.814,"w":212.64,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"werecompromised,thiswouldaﬀectapproximately1.7M","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":18.468,"w":214.208,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"SMTP,276KIMAPS,and245KPOP3Sservers.Usingour","S":-1,"TS":[2,11.983932,0,0]}]},{"x":3.112,"y":19.122,"w":221.024,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"downgradeattackof§3.3,anattackerwithmodestresources","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":19.776,"w":220.853,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"canhijackconnectionstoapproximately1.6MSMTP,429K","S":-1,"TS":[2,11.903238,0,0]}]},{"x":3.112,"y":20.43,"w":128.004,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"IMAPS,and454KPOP3Sservers.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":21.96,"w":8.966,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"5.","S":-1,"TS":[2,14.955,0,0]}]},{"x":4.42,"y":21.96,"w":128.182,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"RECOMMENDATIONS","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.673,"y":22.769,"w":197.471,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Ourﬁndingsindicatethatoneofthekeyrecommenda-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":23.423,"w":212.945,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tionsfromsecurityexpertsinresponsetothethreatofmass","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":24.077,"w":215.685,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"surveillance—promotionofDHE-basedTLSciphersuites","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":24.73,"w":214.92,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"oﬀering“perfectforwardsecrecy”overRSA-basedcipher-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":25.384,"w":218.937,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"suites—mayhaveactuallyreducedsecurityformanyhosts.","S":-1,"TS":[2,11.948068,0,0]}]},{"x":3.112,"y":26.038,"w":216.107,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Inthissection,wepresentconcreterecommendationstore-","S":-1,"TS":[2,11.983932,0,0]}]},{"x":3.112,"y":26.692,"w":212.351,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"covertheexpectedsecurityofDiﬃe-Hellmanasitisusedin","S":-1,"TS":[2,11.822543999999999,0,0]}]},{"x":3.112,"y":27.346,"w":118.69,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mainstreamInternetprotocols.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.089,"y":28.195,"w":121.622,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Transitiontoellipticcurves.","S":-1,"TS":[2,11.966,1,0]}]},{"x":12.452,"y":28.195,"w":82.501,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Transitioningtoellip-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":28.849,"w":218.532,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ticcurveDiﬃe-Hellman(ECDH)keyexchangewithappro-","S":-1,"TS":[2,12.019796,0,0]}]},{"x":3.112,"y":29.503,"w":212.457,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"priateparametersavoidsallknownfeasiblecryptanalytic","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":30.156,"w":31.536,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attacks.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.482,"y":30.156,"w":176.868,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Currentellipticcurvediscretelogalgorithmsfor","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":30.81,"w":197.835,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"strongcurvesdonotgainasmuchofanadvantagefrom","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":31.464,"w":213.68,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"precomputation.Inaddition,ECDHkeysareshorterthan","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":3.112,"y":32.118,"w":29.442,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"in“mod","S":-1,"TS":[2,11.966,0,0]}]},{"x":5.351,"y":32.118,"w":4.626,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,11.966,0,1]}]},{"x":5.64,"y":32.118,"w":186.437,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"”Diﬃe-Hellman,andshared-secretcomputations","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":32.772,"w":221.416,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"arefaster.Unfortunately,themostwidelysupportedECDH","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":33.425,"w":210.654,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"parameters,thosespeciﬁedbyNIST,arenowviewedwith","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":34.079,"w":207.591,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"suspicionduetoNSAinﬂuenceontheirdesign,despiteno","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":3.112,"y":34.733,"w":120.092,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"knownorsuspectedweaknesses.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.168,"y":34.733,"w":87.471,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Thesecurvesareunder-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":35.387,"w":203.803,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"goingscrutiny,andnewcurves,suchasCurve25519,are","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":36.041,"w":207.031,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"beingstandardizedbytheIRTFforuseinInternetproto-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":36.694,"w":212.719,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"cols.Werecommendtransitioningtoellipticcurveswhere","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":37.348,"w":211.789,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"possible;thisisthemosteﬀectivelong-termsolutiontothe","S":-1,"TS":[2,11.948068,0,0]}]},{"x":3.097,"y":38.002,"w":141.789,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"vulnerabilitiesdescribedinthispaper.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":38.852,"w":144.249,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Increaseminimumkeystrengths.","S":-1,"TS":[2,11.966,1,0]}]},{"x":13.821,"y":38.851,"w":62.859,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Serveroperators","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":39.505,"w":53.861,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"shoulddisable","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":6.78,"y":39.505,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,10.8106,0,0]}]},{"x":10.422,"y":39.505,"w":51.22,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andconﬁgure","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":13.928,"y":39.505,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":15.163,"y":39.505,"w":47.23,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ciphersuites","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":40.159,"w":122.347,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"touseprimesof2048bitsorlarger.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":11.241,"y":40.159,"w":76.866,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Browsersandclients","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":40.813,"w":214.083,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"shouldraisetheminimumacceptedsizeforDiﬃe-Hellman","S":-1,"TS":[2,12.127388,0,0]}]},{"x":3.112,"y":41.467,"w":208.357,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groupstoatleast1024bitsinordertoavoiddowngradeat-","S":-1,"TS":[2,11.930136,0,0]}]},{"x":3.112,"y":42.12,"w":222.061,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tackswhencommunicatingwithserversthatstillusesmaller","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":42.774,"w":29.253,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groups.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":5.373,"y":42.774,"w":166.543,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Primesoflessthan1024bitsshouldnotbecon-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":43.428,"w":211.217,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sideredsecure,evenagainstanattackerwithmoderatere-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":44.082,"w":31.356,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"sources.","S":-1,"TS":[2,11.966,0,0]}]},{"x":20.111,"y":3.235,"w":199,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Ouranalysissuggeststhat1024-bitdiscretelogmaybe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.53,"y":3.8890000000000002,"w":125.607,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"withinreachforstate-levelactors.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.864,"y":3.8890000000000002,"w":63.84,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Assuch,1024-bit","S":-1,"TS":[2,12.14532,0,0]}]},{"x":33.4,"y":3.8890000000000002,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,11.1294,0,0]}]},{"x":19.483,"y":4.543,"w":203.276,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"(and1024-bitRSA)mustbephasedoutinthenearterm.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":5.196,"w":216.047,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"NISThasrecommendedsuchatransitionsince2010[4].We","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":5.85,"w":158.352,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"recommendthatclientsraisetheminimum","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":30.172,"y":5.85,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":31.382,"y":5.85,"w":45.64,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groupsizeto","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.536,"y":6.504,"w":222.125,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"2048bitsassoonasserverconﬁgurationsallow.Serveropera-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":7.158,"w":219.947,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"torsshouldmoveto2048-bitorlargergroupstofacilitatethis","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":7.811999999999999,"w":216.59,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"transition.Precomputationfora2048-bitnon-trapdoored","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":8.465,"w":57.432,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groupisaround","S":-1,"TS":[2,11.912204,0,0]}]},{"x":23.694,"y":8.465,"w":9.215,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"10","S":-1,"TS":[2,11.912204,0,0]}]},{"x":24.266,"y":8.227,"w":3.653,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"9","S":-1,"TS":[3,8.978,0,0]}]},{"x":24.717,"y":8.465,"w":140.16,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"timesharderthanfora1024-bitgroup,","S":-1,"TS":[2,11.912204,0,0]}]},{"x":19.551,"y":9.119,"w":222.791,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"so2048-bitDiﬃe-Hellmanwillremainsecurebarringamajor","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":9.773,"w":101.157,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"algorithmicimprovement.","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.526,"y":10.598,"w":152.105,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Avoidﬁxed-prime1024-bitgroups.","S":-1,"TS":[2,11.966,1,0]}]},{"x":30.434,"y":10.598,"w":64.404,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Forimplementa-","S":-1,"TS":[2,11.974965999999998,0,0]}]},{"x":19.551,"y":11.252,"w":210.227,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tionsthatmustcontinuetouseorsupport1024-bitgroups","S":-1,"TS":[2,12.037728,0,0]}]},{"x":19.551,"y":11.906,"w":218.416,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forcompatibilityreasons,generatingfreshgroupsmayhelp","S":-1,"TS":[2,11.957034,0,0]}]},{"x":19.551,"y":12.559,"w":213.038,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"mitigatesomeofthedamagecausedbyNFS-styleprecom-","S":-1,"TS":[2,12.118421999999999,0,0]}]},{"x":19.551,"y":13.213,"w":210.565,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"putationforverycommonﬁxedgroups.However,wenote","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":13.867,"w":206.623,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thatitispossibletocreatetrapdooredprimes[20,44]that","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":19.551,"y":14.521,"w":220.734,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"arecomputationallydiﬃculttodetect.Atminimum,clients","S":-1,"TS":[2,11.83151,0,0]}]},{"x":19.551,"y":15.175,"w":207.594,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"shouldcheckthatservers’parametersusesafeprimesora","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.536,"y":15.828,"w":217.426,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"veriﬁablegenerationprocess,suchasthatproposedinFIPS","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":19.522,"y":16.482,"w":210.082,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"186[38].Ideally,theprocessforgeneratingandvalidating","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":17.136,"w":208.334,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"parametersinTLSshouldbestandardizedsoastothwart","S":-1,"TS":[2,12.118421999999999,0,0]}]},{"x":19.551,"y":17.79,"w":75.937,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theriskoftrapdoors.","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":18.615,"w":147.912,"clr":0,"sw":0.7704375,"A":"left","R":[{"T":"Don’tdeliberatelyweakencrypto.","S":-1,"TS":[2,11.966,1,0]}]},{"x":30.495,"y":18.615,"w":59.432,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Ourdowngrade","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":19.269,"w":224.103,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attackonexport-grade512-bitDiﬃe-HellmangroupsinTLS","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":19.922,"w":199.7,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"illustratesthefragilityofcryptographic“frontdoors”.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":32.603,"y":19.922,"w":12.542,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Al-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":20.576,"w":136.112,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thoughthekeysizesoriginallyusedin","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":29.547,"y":20.576,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.121429999999998,0,0]}]},{"x":33.335,"y":20.576,"w":18.458,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"were","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":19.551,"y":21.23,"w":207.433,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"intendedtobetractableonlytoNSA,twodecadesofalgo-","S":-1,"TS":[2,12.100489999999999,0,0]}]},{"x":19.551,"y":21.884,"w":225.667,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"rithmicandcomputationalimprovementshavesigniﬁcantly","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":22.538,"w":156.154,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"loweredthebartoattacksonsuchkeysizes.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.848,"y":22.538,"w":42.937,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Despitethe","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":23.192,"w":217.653,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"eventualrelaxationofcryptoexportrestrictionsandsubse-","S":-1,"TS":[2,12.037728,0,0]}]},{"x":19.551,"y":23.845,"w":137.636,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"quentattemptstoremovesupportfor","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.684,"y":23.845,"w":56.47,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE_EXPORT","S":-1,"TS":[2,11.1294,0,0]}]},{"x":33.284,"y":23.845,"w":15.362,"clr":0,"sw":0.669125,"A":"left","R":[{"T":",the","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":24.499,"w":218.676,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"technicaldebtinducedbytheadditionalcomplexityhasleft","S":-1,"TS":[2,11.840475999999999,0,0]}]},{"x":19.551,"y":25.153,"w":152.726,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"implementationsvulnerablefordecades.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":29.583,"y":25.153,"w":62.711,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"LikeFREAK[7],","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":25.807,"w":199.844,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ourattackswarnofthelong-termdebilitatingeﬀectsof","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":26.46,"w":144.962,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"deliberatelyweakeningcryptography.","S":-1,"TS":[2,11.966,0,0]}]},{"x":19.551,"y":27.924,"w":8.966,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"6.","S":-1,"TS":[2,14.955,0,0]}]},{"x":20.858,"y":27.924,"w":77.719,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DISCLOSURE","S":-1,"TS":[2,14.955,0,0]}]},{"x":25.903,"y":27.924,"w":25.895,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"AND","S":-1,"TS":[2,14.955,0,0]}]},{"x":27.708,"y":27.924,"w":63.11,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"RESPONSE","S":-1,"TS":[2,14.955,0,0]}]},{"x":20.111,"y":28.733,"w":13.568,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"We","S":-1,"TS":[2,12.14532,0,0]}]},{"x":21.285,"y":28.733,"w":30.209,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"notiﬁed","S":-1,"TS":[2,12.14532,0,0]}]},{"x":23.52,"y":28.733,"w":23.313,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"major","S":-1,"TS":[2,12.14532,0,0]}]},{"x":25.315,"y":28.733,"w":22.018,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"client","S":-1,"TS":[2,12.14532,0,0]}]},{"x":27.027,"y":28.733,"w":14.847,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"and","S":-1,"TS":[2,12.14532,0,0]}]},{"x":28.282,"y":28.733,"w":23.905,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"server","S":-1,"TS":[2,12.14532,0,0]}]},{"x":30.115,"y":28.733,"w":41.807,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"developers","S":-1,"TS":[2,12.14532,0,0]}]},{"x":33.09,"y":28.733,"w":23.038,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"about","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":29.387,"w":208.203,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thevulnerabilitiesdiscussedinthispaperbeforewemade","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":30.041,"w":71.746,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ourﬁndingspublic.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":24.475,"y":30.041,"w":134.285,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Priortoourwork,InternetExplorer,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":30.695,"w":206.855,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Chrome,Firefox,andOperaallaccepted512-bitprimes,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.53,"y":31.348,"w":176.236,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"whereasSafariallowedgroupsassmallas16bits.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":31.224,"y":31.348,"w":15.153,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Asa","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":32.002,"w":218.716,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"resultofourdisclosures,InternetExplorer[37],Firefox,and","S":-1,"TS":[2,11.813578,0,0]}]},{"x":19.551,"y":32.656,"w":181.155,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Chromearetransitioningtheminimumsizeofthe","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":31.677,"y":32.656,"w":17.172,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"DHE","S":-1,"TS":[2,10.8106,0,0]}]},{"x":32.86,"y":32.656,"w":26.694,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"groups","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":33.31,"w":202.204,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theyacceptto1024bits,andOpenSSLandSafariareex-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":33.964,"w":216.015,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"pectedtofollowsuit.Ontheserverside,wenotiﬁedApache,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":34.617,"w":186.514,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Oracle,IBM,Cisco,andvarioushostingproviders.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":31.869999999999997,"y":34.617,"w":19.453,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Aka-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":35.271,"w":212.527,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"maihasremovedallsupportforexportciphersuites.Many","S":-1,"TS":[2,12.028761999999999,0,0]}]},{"x":19.53,"y":35.925,"w":215.416,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TLSdevelopersplantosupportanewextensionthatallows","S":-1,"TS":[2,11.813578,0,0]}]},{"x":19.551,"y":36.579,"w":210.705,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"clientsandserverstonegotiateafewwell-knowngroupsof","S":-1,"TS":[2,12.037728,0,0]}]},{"x":19.536,"y":37.233,"w":215.206,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"2048-bitsandhigherandtogracefullyrejectweakones[19].","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":38.696,"w":8.966,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"7.","S":-1,"TS":[2,14.955,0,0]}]},{"x":20.858,"y":38.696,"w":81.031,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"CONCLUSION","S":-1,"TS":[2,14.955,0,0]}]},{"x":20.111,"y":39.505,"w":202.006,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Diﬃe-Hellmankeyexchangeisacornerstoneofapplied","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":40.159,"w":216.531,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"cryptography,butweﬁndthat,asusedinpractice,itisoften","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":40.813,"w":207.948,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"lesssecurethanwidelybelieved.Theproblemsstemfrom","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":41.467,"w":212.448,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thefactthatthenumberﬁeldsievefordiscretelogallowsan","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":19.551,"y":42.12,"w":212.666,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"attackertoperformasingleprecomputationthatdepends","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":42.774,"w":213.328,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"onlyonthegroup,afterwhichcomputingindividuallogsin","S":-1,"TS":[2,11.894271999999999,0,0]}]},{"x":19.551,"y":43.428,"w":198.655,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"thatgrouphasafarlowercost.Althoughthisfactiswell","S":-1,"TS":[2,12.14532,0,0]}]},{"x":19.551,"y":44.082,"w":217.783,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"knowntocryptographers,itapparentlyhasnotbeenwidely","S":-1,"TS":[2,11.858407999999999,0,0]}]},{"x":18.516,"y":45.95,"w":9.215,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"11","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[],"VLines":[],"Fills":[],"Texts":[{"x":3.112,"y":3.235,"w":217.294,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"understoodbysystembuilders.Likewise,manycryptogra-","S":-1,"TS":[2,12.136353999999999,0,0]}]},{"x":3.112,"y":3.8890000000000002,"w":212.944,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"phersdidnotappreciatethatthesecurityofalargefraction","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":4.543,"w":215.239,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ofInternetcommunicationdependsonDiﬃe-Hellmankey","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":5.196,"w":193.068,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"exchangesthatuseafewsmall,widelysharedgroups.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.673,"y":5.85,"w":194.172,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Akeylessonfromthisstateofaﬀairsisthatcryptogra-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":6.504,"w":221.312,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"phersandcreatorsofpracticalsystemsneedtoworktogether","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":7.158,"w":220.485,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"moreeﬀectively.Systembuildersshouldtakeresponsibility","S":-1,"TS":[2,12.001864,0,0]}]},{"x":3.112,"y":7.811999999999999,"w":188.778,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forbeingawareofapplicablecryptanalyticattacks.","S":-1,"TS":[2,12.14532,0,0]}]},{"x":15.45,"y":7.811999999999999,"w":23.314,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"Cryp-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":8.465,"w":216.885,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"tographers,fortheirpart,shouldinvolvethemselvesinhow","S":-1,"TS":[2,11.939102,0,0]}]},{"x":3.112,"y":9.119,"w":222.913,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"cryptoisactuallybeingapplied,suchasthroughengagement","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.092,"y":9.773,"w":222.154,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"withstandardseﬀortsandsoftwarereview.Bridgingtheper-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":10.427,"w":215.428,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ilousgapthatseparatesthesecommunitieswillbeessential","S":-1,"TS":[2,11.939102,0,0]}]},{"x":3.112,"y":11.081,"w":124.179,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"forkeepingfuturesystemssecure.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":12.655,"w":93.644,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"Acknowledgments","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.092,"y":13.558,"w":221.761,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"TheauthorswishtothankMichaelBailey,DanielBernstein,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":14.212,"w":232.247,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"RonDreslinski,TanjaLange,AdamLangley,KennyPaterson,","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.091,"y":14.866,"w":217.95,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"AndreiPopov,IvanRistic,EdwardSnowden,BrianSmith,","S":-1,"TS":[2,12.073592,0,0]}]},{"x":3.112,"y":15.518999999999998,"w":215.878,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"MartinThomson,andEricRescorla.Thismaterialisbased","S":-1,"TS":[2,11.867374,0,0]}]},{"x":3.112,"y":16.173,"w":207.979,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"inpartuponworksupportedbytheU.S.NationalScience","S":-1,"TS":[2,12.118421999999999,0,0]}]},{"x":3.112,"y":16.827,"w":219.594,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"FoundationundercontractsCNS-1345254,CNS-1409505,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":17.481,"w":208.493,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"CNS-1518741,andEFRI-1441209,bytheOﬃceofNaval","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":18.135,"w":166.379,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ResearchundercontractN00014-11-1-0470,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":14.019,"y":18.135,"w":42.493,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bytheERC","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":18.788,"w":208.259,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"StartingGrant259639(CRYSP),bytheFrenchANRre-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":19.442,"w":214.05,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"searchgrantANR-12-BS02-001-01,bytheNSFGraduate","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":20.096,"w":216.964,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ResearchFellowshipProgramundergrantDGE-1256260,","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":20.75,"w":206.254,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"bytheMozillaFoundation,byagiftfromSupermicro,by","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":21.404,"w":213.532,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"theGooglePh.D.FellowshipinComputerSecurity,bythe","S":-1,"TS":[2,12.091524,0,0]}]},{"x":3.112,"y":22.057,"w":223.482,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"MorrisWellmanFacultyDevelopmentAssistantProfessor-","S":-1,"TS":[2,12.14532,0,0]}]},{"x":3.112,"y":22.711,"w":221.573,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ship,andbyanAlfredP.SloanFoundationResearchFellow-","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":23.365,"w":221.727,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"ship.SomeexperimentswereconductedusingtheGrid’5000","S":-1,"TS":[2,11.786679999999999,0,0]}]},{"x":3.112,"y":24.019,"w":218.518,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"testbed,whichissupportedbyINRIA,CNRS,RENATER,","S":-1,"TS":[2,12.010829999999999,0,0]}]},{"x":3.112,"y":24.672,"w":219.934,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"andseveralotheruniversitiesandorganizations;additional","S":-1,"TS":[2,12.019796,0,0]}]},{"x":3.112,"y":25.326,"w":188.89,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"experimentsusedUCShardwaredonatedbyCisco.","S":-1,"TS":[2,11.966,0,0]}]},{"x":3.112,"y":26.901,"w":8.966,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"8.","S":-1,"TS":[2,14.955,0,0]}]},{"x":4.42,"y":26.901,"w":80.373,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"REFERENCES","S":-1,"TS":[2,14.955,0,0]}]},{"x":3.377,"y":27.83,"w":8.938,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[1]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":27.83,"w":171.212,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"S.Bai,C.Bouvier,A.Filbois,P.Gaudry,L.Imbert,","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.196,"y":28.391,"w":185.932,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"A.Kruppa,F.Morain,E.Thomé,andP.Zimmermann.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":28.951,"w":33.876,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"cado-nfs","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":6.333,"y":28.951,"w":149.187,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",animplementationofthenumberﬁeldsieve","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":29.511,"w":104.609,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"algorithm,2014.Release2.1.1.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.377,"y":30.134,"w":8.938,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[2]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":30.134,"w":51.795,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"R.Barbulescu.","S":-1,"TS":[2,10.93812,0,0]}]},{"x":7.792,"y":30.134,"w":150.745,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Algorithmesdelogarithmesdiscretsdansles","S":-1,"TS":[2,10.93812,0,1]}]},{"x":4.173,"y":30.695,"w":35.526,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"corpsﬁnis","S":-1,"TS":[2,10.88233,0,1]}]},{"x":6.533,"y":30.695,"w":169.037,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":".PhDthesis,UniversitédeLorraine,France,2013.","S":-1,"TS":[2,10.88233,0,0]}]},{"x":3.377,"y":31.317,"w":8.938,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[3]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":31.317,"w":175.443,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"R.Barbulescu,P.Gaudry,A.Joux,andE.Thomé.A","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":31.878,"w":204.119,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"heuristicquasi-polynomialalgorithmfordiscretelogarithm","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":32.438,"w":130.462,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"inﬁniteﬁeldsofsmallcharacteristic.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":13.59,"y":32.438,"w":37.278,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Eurocrypt","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":15.920000000000002,"y":32.438,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",2014.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.377,"y":33.061,"w":8.938,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[4]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":33.061,"w":179.818,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"E.Barker,W.Barker,W.Burr,W.Polk,andM.Smid.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.186,"y":33.621,"w":206.301,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"NISTSpecialPublication800-57:RecommendationforKey","S":-1,"TS":[2,10.94609,0,1]}]},{"x":4.184,"y":34.181,"w":47.667,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Management","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":7.163,"y":34.181,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",2007.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.377,"y":34.804,"w":8.938,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[5]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":34.804,"w":194.372,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"D.J.Bernstein.Howtoﬁndsmoothpartsofintegers,2004.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":35.365,"w":209.239,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://cr.yp.to/factorization/smoothparts-20040510.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.377,"y":35.987,"w":8.938,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[6]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":35.987,"w":146.089,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"D.J.BernsteinandT.Lange.BatchNFS.In","S":-1,"TS":[2,10.87436,0,0]}]},{"x":14.809,"y":35.987,"w":51.71,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"SelectedAreas","S":-1,"TS":[2,10.87436,0,1]}]},{"x":4.181,"y":36.548,"w":57.716,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"inCryptography","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":7.789,"y":36.548,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",2014.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.377,"y":37.17,"w":8.938,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[7]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":37.17,"w":178.633,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"B.Beurdouche,K.Bhargavan,A.Delignat-Lavaud,","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":37.731,"w":198.59,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"C.Fournet,M.Kohlweiss,A.Pironti,P.-Y.Strub,andJ.K.","S":-1,"TS":[2,10.90624,0,0]}]},{"x":4.216,"y":38.291,"w":180.083,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Zinzindohoue.Amessystateoftheunion:Tamingthe","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":38.851,"w":121.624,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"compositestatemachinesofTLS.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":12.876,"y":38.851,"w":72.275,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"IEEESymposiumon","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":4.189,"y":39.412,"w":72.476,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"SecurityandPrivacy","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":8.718,"y":39.412,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",2015.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.377,"y":40.035,"w":8.938,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[8]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":40.035,"w":195.864,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"C.Bouvier,P.Gaudry,L.Imbert,H.Jeljeli,andE.Thomé.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":40.595,"w":187.089,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Newrecordfordiscretelogarithminaprimeﬁniteﬁeldof","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.189,"y":41.155,"w":202.837,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"180decimaldigits,2014.http://caramel.loria.fr/p180.txt.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.377,"y":41.778,"w":8.938,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[9]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":41.778,"w":185.002,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"R.CanettiandH.Krawczyk.SecurityanalysisofIKE’s","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":42.338,"w":146.882,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"signature-basedkey-exchangeprotocol.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":14.087,"y":42.338,"w":25.47,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Crypto","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":15.679,"y":42.338,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",2002.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":42.961,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[10]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":42.961,"w":181.389,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"A.CommeineandI.Semaev.Analgorithmtosolvethe","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":43.522,"w":193.94,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"discretelogarithmproblemwiththenumberﬁeldsieve.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.186,"y":44.082,"w":18.486,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"PKC","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":5.314,"y":44.082,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",2006.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":3.235,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[11]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":3.235,"w":157.36,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"D.Coppersmith.Solvinglinearequationsover","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":31.533,"y":3.235,"w":22.988,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"GF(2)","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":33.147,"y":3.235,"w":11.055,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"via","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":3.795,"w":101.617,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"blockWiedemannalgorithm.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":27.535,"y":3.795,"w":46.357,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Math.Comp.","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":30.432,"y":3.795,"w":51.752,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",62(205),1994.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":4.439,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[12]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":4.439,"w":113.97,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"R.CrandallandC.B.Pomerance.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":28.821,"y":4.439,"w":64.841,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"PrimeNumbers:A","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":20.591,"y":4.999,"w":97.289,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"ComputationalPerspective","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":26.671,"y":4.999,"w":55.058,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":".Springer,2001.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":5.642,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[13]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":5.642,"w":187.603,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"B.denBoer.Diﬃe-Hellmanisasstrongasdiscretelogfor","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":6.203,"w":60.035,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"certainprimes.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":24.936,"y":6.203,"w":25.47,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Crypto","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":26.528,"y":6.203,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",1988.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":6.846,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[14]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":6.846,"w":154.791,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"W.DiﬃeandM.E.Hellman.Newdirectionsin","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":7.406000000000001,"w":51.764,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"cryptography.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":24.007,"y":7.406000000000001,"w":100.596,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"IEEETrans.Inform.Theory","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":30.773,"y":7.406000000000001,"w":55.987,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",22(6):644–654,","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.628,"y":7.9670000000000005,"w":19.29,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"1976.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":8.61,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[15]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":8.61,"w":189.741,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Z.Durumeric,E.Wustrow,andJ.A.Halderman.ZMap:","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":9.17,"w":204.054,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"FastInternet-widescanninganditssecurityapplications.In","S":-1,"TS":[2,10.92218,0,0]}]},{"x":20.563,"y":9.731,"w":55.655,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"UsenixSecurity","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":24.178,"y":9.731,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",2013.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":10.374,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[16]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":10.374,"w":203.424,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"M.Friedl,N.Provos,andW.Simpson.Diﬃe-Hellmangroup","S":-1,"TS":[2,10.83451,0,0]}]},{"x":20.654,"y":10.934,"w":202.002,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"exchangeforthesecureshell(SSH)transportlayerprotocol.","S":-1,"TS":[2,10.92218,0,0]}]},{"x":20.654,"y":11.495,"w":74.09,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"RFC4419,Mar.2006.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":12.138,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[17]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":12.138,"w":197.213,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"W.Geiselmann,H.Kopfer,R.Steinwandt,andE.Tromer.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":12.698,"w":198.851,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Improvedrouting-basedlinearalgebraforthenumberﬁeld","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":13.259,"w":27.794,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"sieve.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":22.73,"y":13.259,"w":169.987,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"InformationTechnology:CodingandComputing","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":33.354,"y":13.259,"w":2.352,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.641,"y":13.819,"w":19.29,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"2005.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":14.462,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[18]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":14.462,"w":204.01,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"W.GeiselmannandR.Steinwandt.Non-wafer-scalesieving","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":15.023,"w":175.609,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"hardwarefortheNFS:Anotherattempttocopewith","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.628,"y":15.582999999999998,"w":40.217,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"1024-bit.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":23.494,"y":15.582999999999998,"w":37.278,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Eurocrypt","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":25.769,"y":15.582999999999998,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",2007.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":16.226,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[19]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":16.226,"w":204.927,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"D.Gillmor.NegotiatedﬁniteﬁeldDiﬃe-Hellmanephemeral","S":-1,"TS":[2,10.95406,0,0]}]},{"x":20.654,"y":16.787,"w":177.875,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"parametersforTLS.IETFInternetDraft,May2015.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":17.43,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[20]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":17.43,"w":178.232,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"D.M.Gordon.Designinganddetectingtrapdoorsfor","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":17.99,"w":101.575,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"discretelogcryptosystems.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":27.709,"y":17.99,"w":25.47,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Crypto","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":29.301,"y":17.99,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",1992.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":18.634,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[21]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":18.634,"w":125.296,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"D.M.Gordon.Discretelogarithmsin","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":29.544,"y":18.634,"w":15.46,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"GF(","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":30.51,"y":18.634,"w":4.262,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":30.777,"y":18.634,"w":3.293,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":31.159,"y":18.634,"w":31.097,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"usingthe","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":19.194,"w":63.799,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"numberﬁeldsieve.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":25.142,"y":19.194,"w":81.915,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"SIAMJ.DiscreteMath.","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":30.261,"y":19.194,"w":39.049,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",6(1),1993.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":19.837,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[22]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":19.837,"w":200.559,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"D.HarkinsandD.Carrel.TheInternetkeyexchange(IKE).","S":-1,"TS":[2,10.88233,0,0]}]},{"x":20.654,"y":20.398,"w":73.848,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"RFC2409,Nov.1998.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":21.041,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[23]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":21.041,"w":179.513,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"T.Jager,K.G.Paterson,andJ.Somorovsky.Onebad","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":21.601,"w":202.801,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"apple:Backwardscompatibilityattacksonstate-of-the-art","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":22.162,"w":59.518,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"cryptography.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":24.668,"y":22.162,"w":22.421,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"NDSS","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":26.07,"y":22.162,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",2013.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":22.805,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[24]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":22.805,"w":174.937,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"A.JouxandR.Lercier.Improvementstothegeneral","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":23.365,"w":194.747,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"numberﬁeldsievefordiscretelogarithmsinprimeﬁelds.A","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":23.926,"w":159.227,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"comparisonwiththeGaussianintegermethod.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":31.665,"y":23.926,"w":21.87,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Math.","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":20.591,"y":24.486,"w":24.486,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Comp.","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":22.121,"y":24.486,"w":83.746,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",72(242):953–967,2003.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":25.129,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[25]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":25.129,"w":200.258,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"C.Kaufman,P.Hoﬀman,Y.Nir,P.Eronen,andT.Kivinen.","S":-1,"TS":[2,10.8106,0,0]}]},{"x":20.654,"y":25.69,"w":169.755,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Internetkeyexchangeprotocolversion2(IKEv2).","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":26.25,"w":72.444,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"RFC7296,Oct.2014.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":26.893,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[26]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":26.893,"w":189.805,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"S.Kent.IPauthenticationheader.RFC4302,Dec.2005.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":27.536,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[27]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":27.536,"w":170.024,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"S.Kent.IPencapsulatingsecuritypayload(ESP).","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":28.097,"w":72.792,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"RFC4303,Dec.2005.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":28.74,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[28]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":28.74,"w":203.636,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"T.Kleinjung.Cofactorisationstrategiesforthenumberﬁeld","S":-1,"TS":[2,10.90624,0,0]}]},{"x":20.654,"y":29.3,"w":193.334,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"sieveandanestimateforthesievingstepforfactoring1024","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":29.861,"w":195.78,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"bitintegers,2006.http://www.hyperelliptic.org/tanja/","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":30.421,"w":116.403,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"SHARCS/talks06/thorsten.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":31.064,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[29]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":31.064,"w":194.771,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"T.Kleinjung,K.Aoki,J.Franke,A.K.Lenstra,E.Thomé,","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.64,"y":31.625,"w":194.121,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"J.W.Bos,P.Gaudry,A.Kruppa,P.L.Montgomery,D.A.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":32.185,"w":179.033,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Osvik,H.teRiele,A.Timofeev,andP.Zimmermann.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":32.746,"w":144.698,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Factorizationofa768-bitRSAmodulus.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":30.903,"y":32.746,"w":25.47,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Crypto","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":32.495,"y":32.746,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",2010.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":33.389,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[30]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":33.389,"w":197.626,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"A.Langley,N.Modadugu,andB.Moeller.Transportlayer","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":33.949,"w":179.616,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"security(TLS)falsestart.IETFInternetDraft,2010.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":34.592,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[31]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":34.592,"w":148.905,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"A.K.LenstraandH.W.Lenstra,Jr.,editors.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":31.549,"y":34.592,"w":14.429,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"The","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":20.624,"y":35.153,"w":133.262,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"DevelopmentoftheNumberFieldSieve","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":29.883,"y":35.153,"w":55.058,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":".Springer,1993.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":35.796,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[32]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":35.796,"w":185.302,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"M.Lipacis.Semiconductors:Moorestress=structural","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":36.357,"w":161.413,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"industryshift.Technicalreport,Jeﬀeries,2012.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":37,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[33]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":37,"w":184.704,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"U.M.Maurer.Towardstheequivalenceofbreakingthe","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":37.56,"w":205.81,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Diﬃe-Hellmanprotocolandcomputingdiscretelogarithms.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":38.12,"w":7.754,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":21.315,"y":38.12,"w":25.47,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Crypto","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":22.907,"y":38.12,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",1994.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":38.764,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[34]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":38.764,"w":175.141,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"U.M.MaurerandS.Wolf.Diﬃe-Hellmanoracles.In","S":-1,"TS":[2,10.8106,0,0]}]},{"x":32.864,"y":38.764,"w":25.47,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Crypto","S":-1,"TS":[2,10.8106,0,1]}]},{"x":34.424,"y":38.764,"w":2.352,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",","S":-1,"TS":[2,10.8106,0,0]}]},{"x":20.628,"y":39.324,"w":19.29,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"1996.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":39.967,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[35]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":39.967,"w":199.379,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"N.Mavrogiannopoulos,F.Vercauteren,V.Velichkov,and","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":40.528,"w":195.687,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"B.Preneel.Across-protocolattackontheTLSprotocol.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.614,"y":41.088,"w":37.183,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"ACMCCS","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":23.102,"y":41.088,"w":65.443,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",pages62–72,2012.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":41.731,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[36]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":41.731,"w":201.015,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"C.Meadows.AnalysisoftheInternetkeyexchangeprotocol","S":-1,"TS":[2,10.91421,0,0]}]},{"x":20.654,"y":42.292,"w":120.003,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"usingtheNRLprotocolanalyzer.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":29.228,"y":42.292,"w":72.275,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"IEEESymposiumon","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":20.627,"y":42.852,"w":72.476,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"SecurityandPrivacy","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":25.512,"y":42.852,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",1999.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":43.495,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[37]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":43.495,"w":189.515,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"MicrosoftSecurityBulletinMS15-055.Vulnerabilityin","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":44.056,"w":188.989,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Schannelcouldallowinformationdisclosure,May2015.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":18.516,"y":45.95,"w":9.215,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"12","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]},{"Width":38.25,"Height":49.5,"HLines":[],"VLines":[],"Fills":[],"Texts":[{"x":3.112,"y":3.235,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[38]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":3.235,"w":195.181,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"NIST.FIPSPUB186-4:Digitalsignaturestandard,2013.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":3.8609999999999998,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[39]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":3.8609999999999998,"w":197.356,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"OakRidgeNationalLaboratory.IntroducingTitan,2012.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":4.421,"w":120.492,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"https://www.olcf.ornl.gov/titan.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":5.047,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[40]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":5.047,"w":174.315,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"H.Orman.TheOakleykeydeterminationprotocol.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":5.607,"w":73.848,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"RFC2412,Nov.1998.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":6.233,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[41]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":6.233,"w":195.699,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"S.C.PohligandM.E.Hellman.Animprovedalgorithmfor","S":-1,"TS":[2,10.90624,0,0]}]},{"x":4.216,"y":6.794,"w":93.918,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"computinglogarithmsover","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":10.586,"y":6.794,"w":15.46,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"GF(","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":11.552,"y":6.794,"w":4.262,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":"p","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":11.818,"y":6.794,"w":3.293,"clr":0,"sw":0.32553125,"A":"left","R":[{"T":")","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":12.201,"y":6.794,"w":73.688,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"anditscryptographic","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":7.353999999999999,"w":79.615,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"signiﬁcance(corresp.).","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":9.545,"y":7.353999999999999,"w":79.916,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Trans.Inform.Theory","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":14.827,"y":7.353999999999999,"w":43.283,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",24(1),1978.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":7.98,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[42]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":7.98,"w":183.005,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"J.M.Pollard.AMonteCarlomethodforfactorization.","S":-1,"TS":[2,10.858419999999999,0,0]}]},{"x":17.067,"y":7.98,"w":15.426,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"BIT","S":-1,"TS":[2,10.858419999999999,0,1]}]},{"x":4.186,"y":8.54,"w":86.043,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"NumericalMathematics","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":9.564,"y":8.54,"w":75.277,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",15(3):331–334,1975.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":9.166,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[43]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":9.166,"w":122.856,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"O.Schirokauer.Virtuallogarithms.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":12.586,"y":9.166,"w":47.891,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"J.Algorithms","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":15.579,"y":9.166,"w":2.352,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":9.726,"w":72.925,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"57(2):140–147,2005.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":10.352,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[44]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":10.352,"w":186.209,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"I.A.Semaev.Specialprimenumbersanddiscretelogsin","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":10.913,"w":61.212,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"ﬁniteprimeﬁelds.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":8.571,"y":10.913,"w":46.357,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Math.Comp.","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":11.468,"y":10.913,"w":83.746,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",71(237):363–377,2002.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":11.538,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[45]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":11.538,"w":184.461,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"D.Shanks.Classnumber,atheoryoffactorization,and","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":12.099,"w":34.107,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"genera.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":6.7,"y":12.099,"w":90.962,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Proc.Sympos.PureMath.","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":12.85,"y":12.099,"w":59.043,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",volume20.1971.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":12.725,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[46]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":12.724,"w":197.128,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"SpiegelStaﬀ.Pryingeyes:InsidetheNSA’swaronInternet","S":-1,"TS":[2,10.92218,0,0]}]},{"x":4.216,"y":13.285,"w":106.374,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"security.DerSpiegel,Dec2014.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":13.845,"w":174.837,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/international/germany/","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":14.406,"w":210.742,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"inside-the-nsa-s-war-on-internet-security-a-1010361.html.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":15.031,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[47]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":15.031,"w":45.86,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"W.Steinetal.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":7.788,"y":15.031,"w":144.306,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"SageMathematicsSoftware(Version6.5)","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":16.807,"y":15.031,"w":2.352,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":".","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.197,"y":15.591999999999999,"w":122.903,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"TheSageDevelopmentTeam,2015.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":16.152,"w":98.852,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.sagemath.org.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":16.778,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[48]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":16.778,"w":171.934,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"stud:ThescalableTLSunwrappingdaemon,2012.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":17.338,"w":157.229,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"https://github.com/bumptech/stud/blob/","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.189,"y":17.899,"w":219.169,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"19a7f19686bcdbd689c6fbea31f68a276e62d886/stud.c#L593.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":18.525,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[49]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":18.525,"w":200.316,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"E.Thomé.Subquadraticcomputationofvectorgenerating","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":19.085,"w":188.463,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"polynomialsandimprovementoftheblockWiedemann","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":19.645,"w":38.114,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"algorithm.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":6.774,"y":19.645,"w":72.041,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"J.SymbolicComput.","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":11.277,"y":19.645,"w":75.277,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",33(5):757–775,2002.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":20.271,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[50]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":20.271,"w":182.732,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"P.C.VanOorschotandM.J.Wiener.Parallelcollision","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":20.832,"w":180.624,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"searchwithapplicationtohashfunctionsanddiscrete","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":21.392,"w":49.208,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"logarithms.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":7.644,"y":21.392,"w":37.183,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"ACMCCS","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":9.968,"y":21.392,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",1994.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":22.018,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[51]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":22.018,"w":189.256,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"P.C.VanOorschotandM.J.Wiener.OnDiﬃe-Hellman","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":22.578,"w":133.238,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"keyagreementwithshortexponents.In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":13.573,"y":22.578,"w":37.278,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"Eurocrypt","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":15.902999999999999,"y":22.578,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",1996.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":23.204,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[52]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":23.204,"w":200.854,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"D.WagnerandB.Schneier.AnalysisoftheSSL3.0protocol.","S":-1,"TS":[2,10.8106,0,0]}]},{"x":4.216,"y":23.764,"w":7.754,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"In","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.877,"y":23.764,"w":162.9,"clr":0,"sw":0.7143125,"A":"left","R":[{"T":"2ndUsenixWorkshoponElectronicCommerce","S":-1,"TS":[2,10.969999999999999,0,1]}]},{"x":15.837,"y":23.764,"w":21.642,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":",1996.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":3.112,"y":24.39,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[53]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":24.39,"w":196.436,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"J.Wagnon.SSLproﬁlespart5:SSLoptions,2013.https://","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":4.216,"y":24.95,"w":207.359,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"devcentral.f5.com/articles/ssl-proﬁles-part-5-ssl-options.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":3.235,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[54]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":3.235,"w":137.761,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"P.Zimmermannetal.GMP-ECM,2012.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":3.795,"w":134.44,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"https://gforge.inria.fr/projects/ecm.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":4.446,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[55]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":4.446,"w":196.475,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"APEXactive/passiveexﬁltration.Medialeak,Aug.2009.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":5.007,"w":176.235,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/media/media-35671.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":5.657,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[56]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":5.657,"w":199.243,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Fieldedcapability:End-to-endVPNSPIN9designreview.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":6.218,"w":216.214,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Medialeak.http://www.spiegel.de/media/media-35529.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":6.868,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[57]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":6.868,"w":188.665,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"FY2013congressionalbudgetjustiﬁcation.Medialeak.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":7.429,"w":189.425,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://cryptome.org/2013/08/spy-budget-fy13.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":8.079,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[58]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":8.079,"w":135.877,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"GALLANTWAVE@scale.Medialeak.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":8.64,"w":176.235,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/media/media-35514.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":9.29,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[59]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":9.29,"w":131.958,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Innov8experimentproﬁle.Medialeak.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":9.851,"w":176.235,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/media/media-35509.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":10.502,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[60]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":10.502,"w":187.9,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"IntrototheVPNexploitationprocess.Medialeak,Sept.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.641,"y":11.062,"w":195.525,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"2010.http://www.spiegel.de/media/media-35515.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":11.713,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[61]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":11.713,"w":128.189,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"LONGHAUL–WikiInfo.Medialeak.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":12.273,"w":176.235,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/media/media-35533.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":12.924,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[62]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":12.924,"w":130.842,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"POISONNUT–WikiInfo.Medialeak.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":13.484,"w":176.235,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/media/media-35519.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":14.135,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[63]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":14.135,"w":102.165,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"SIGINTstrategy.Medialeak.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":14.695,"w":200.519,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.nytimes.com/interactive/2013/11/23/us/","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":15.256,"w":168.384,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"politics/23nsa-sigint-strategy-document.html.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":15.905999999999999,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[64]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":15.905999999999999,"w":107.739,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"SPIN15VPNstory.Medialeak.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":16.467,"w":176.235,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/media/media-35522.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":17.117,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[65]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":17.117,"w":210.031,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"TURMOIL/APEX/APEXhighleveldescriptiondocument.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":17.678,"w":216.214,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Medialeak.http://www.spiegel.de/media/media-35513.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":18.328,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[66]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":18.328,"w":208.753,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"TURMOILIPsecVPNsessionization.Medialeak,Aug.2009.","S":-1,"TS":[2,10.8106,0,0]}]},{"x":20.654,"y":18.889,"w":176.235,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/media/media-35528.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":19.54,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[67]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":19.54,"w":175.166,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"TURMOILVPNprocessing.Medialeak,Oct.2009.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":20.1,"w":176.235,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/media/media-35526.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":20.751,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[68]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":20.751,"w":183.798,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"VALIANTSURF(VS):Capabilitylevels.Medialeak.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":21.311,"w":176.235,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/media/media-35517.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":21.962,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[69]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":21.962,"w":141.638,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"VALIANTSURF–WikiInfo.Medialeak.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":22.522,"w":176.235,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/media/media-35527.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":23.173,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[70]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":23.173,"w":108.5,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"VPNSigDevbasics.Medialeak.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":23.733,"w":176.235,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"http://www.spiegel.de/media/media-35520.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":19.551,"y":24.384,"w":13.173,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"[71]","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":24.384,"w":197.496,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"WhatyourmothernevertoldyouaboutSIGDEVanalysis.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":20.654,"y":24.944,"w":216.214,"clr":0,"sw":0.69178125,"A":"left","R":[{"T":"Medialeak.http://www.spiegel.de/media/media-35551.pdf.","S":-1,"TS":[2,10.969999999999999,0,0]}]},{"x":18.516,"y":45.95,"w":9.215,"clr":0,"sw":0.669125,"A":"left","R":[{"T":"13","S":-1,"TS":[2,11.966,0,0]}]}],"Fields":[],"Boxsets":[]}]}