An attacker using a carefully crafted handshake can force the use of weak keying material in OpenSSL SSL/TLS. openssl.org/news/secadv_20…