Overview[1]#
FREAK ("Factoring RSA_EXPORT Keys") is an Exploit of a cryptographic weakness in the SSL/TLS protocols using RSA key-exchange introduced decades earlier for compliance with United States Cryptography Export-Import Laws. (Export Ciphers)FREAK is an Exploit of the RSA key-exchange similar to the logjam which was an attack of the Diffie-Hellman key-exchange.
FREAK allows a downgrade in TLS to Export-grade Cryptography which then allows decryption
FREAK attack in OpenSSL has the CVE identifier CVE-2015-0204.
- based on information obtained 2017-06-07-
