Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits, December 2017
- File formats:
- PROPOSED STANDARD
- RFC 4419
- L. Velvindron
- curdle (sec)
Discuss this RFC: Send questions or comments to the mailing list [email protected]
The Diffie-Hellman (DH) Group Exchange for the Secure Shell (SSH) transport-layer protocol specifies that servers and clients should support groups with a minimum modulus group size of 1024 bits. Recent security research has shown that the minimum value of 1024 bits is insufficient to protect against state-sponsored actors and any organization with enough computing resources. This RFC updates RFC 4419, which allowed for DH moduli less than 2048 bits; now, 2048 bits is the minimum acceptable group size.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 8729.