Great article! However, I find a couple of contradictions here which leaves me a bit confused:

In the 1st part of the article you mention "This is not a vulnerability on the Diffie-Hellman protocol itself, nor a vulnerability on a specific implementation of the Diffie-Hellman protocol.",

whereas, in the 2nd part you mention that according to researchers

"...found a new vulnerability on the TLS protocol. This is not an implementation vulnerability, but a protocol vulnerability, which means any product using TLS, no matter the actual implementation (OpenSSL, GNUTLS, others) is affected."

Which one of these should be deemed to be correct statement?

Thanks !