To be clear, the heartbleed bug has nothing to do with key size directly. It has to do with using an internal allocator with a buggy LIFO rather than the system malloc() and then trusting user input over calculable data. The only thing that might help with having a longer key is that it might be slightly less likely to fit into the problem memory read into past the end of working data, but multiple 64k chunks could be read back by exploiting this bug.
In reply to Re^6: Should I recompile SSL CPAN modules now?
by mr_mischief
in thread Should I recompile SSL CPAN modules now?
by vsespb
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |