Search RFCs
RFC 8270
Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits,December 2017
- File formats:
- Status:
- PROPOSED STANDARD
- Updates:
- RFC 4419
- Authors:
- L. Velvindron
M. Baushke - Stream:
- IETF
- Source:
- curdle (sec)
Cite this RFC:TXT | XML | BibTeX
DOI: https://doi.org/10.17487/RFC8270
Discuss this RFC: Send questions or comments to the mailing listcurdle@ietf.org
Other actions:View Errata | Submit Errata | Find IPR Disclosures from the IETF | View History of RFC 8270
Abstract
The Diffie-Hellman (DH) Group Exchange for the Secure Shell (SSH)transport-layer protocol specifies that servers and clients shouldsupport groups with a minimum modulus group size of 1024 bits.Recent security research has shown that the minimum value of 1024bits is insufficient to protect against state-sponsored actors andany organization with enough computing resources. This RFC updatesRFC 4419, which allowed for DH moduli less than 2048 bits; now, 2048bits is the minimum acceptable group size.
For the definition ofStatus,seeRFC 2026.
For the definition ofStream, seeRFC 8729.