Re: DH group exchange (Re: SSH key algorithm updates)

Damien Miller <[email protected]>
Newsgroups gmane.ietf.secsh
Message-ID <[email protected]> 
On Tue, 10 Nov 2015, Niels Möller wrote:

> > It may also be desirable to setup a way that RFC 3526 groups:
> >
> >   diffie-hellman-group14-sha256 (2048-bit MODP group - 112 bits of security)
> >   diffie-hellman-group15-sha256 (3072-bit MODP group - 128 bits of security)
> >
> >   diffie-hellman-group16-sha384 (4096-bit MODP group - ~150 bits of security)

FWIW OpenSSH has been using RFC3526 group 16 as the fallback group for
group-exchange when it can't find a local pre-computed group list.

-d
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.