RFC 8270

Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits, December 2017

Canonical URL:
https://www.rfc-editor.org/rfc/rfc8270.txt
File formats:
Plain TextPDF
Status:
PROPOSED STANDARD
Updates:
RFC 4419
Authors:
L. Velvindron
M. Baushke
Stream:
IETF
Source:
curdle (sec)

Cite this RFC: TXT  |  XML

DOI:  10.17487/RFC8270

Discuss this RFC: Send questions or comments to curdle@ietf.org

Other actions: Submit Errata  |  Find IPR Disclosures from the IETF


Abstract

The Diffie-Hellman (DH) Group Exchange for the Secure Shell (SSH) transport-layer protocol specifies that servers and clients should support groups with a minimum modulus group size of 1024 bits. Recent security research has shown that the minimum value of 1024 bits is insufficient to protect against state-sponsored actors and any organization with enough computing resources. This RFC updates RFC 4419, which allowed for DH moduli less than 2048 bits; now, 2048 bits is the minimum acceptable group size.


For the definition of Status, see RFC 2026.

For the definition of Stream, see RFC 4844.


Download PDF Reader