Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 5
Abstract: The Diffie-Hellman (DH) Group Exchange for the Secure Shell (SSH) transport-layer protocol specifies that servers and clients should support groups with a minimum modulus group size of 1024 bits. Recent security research has shown that the minimum value of 1024 bits is insufficient to protect against state-sponsored actors and any organization with enough computing resources. This RFC updates RFC 4419, which allowed for DH moduli less than 2048 bits; now, 2048 bits is the minimum acceptable group size.
Publication Date: 2017-12-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8270
Link: https://doi.org/10.17487/RFC8270
Author(s): Loganaden Velvindron
Mark D. Baushke
Keyword(s): SSH, Diffie-Hellman

Latest version of IETF RFC 8270

Document Versions — IETF RFC 8270

▶ IETF RFC 8270 (2017-12-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 4419 [Active*]
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8270.json

Amends:

IETF RFC 4419 [Active*]

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8270, Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits. Available at https://doi.org/10.17487/RFC8270

Snippet:

IETF RFC 8270, Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits. Available at https://doi.org/10.17487/RFC8270

HTML (ISO 690 compliant)

Preview:

IETF RFC 8270, Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits. Available at https://doi.org/10.17487/RFC8270

Snippet:

<span class="citation"><cite>IETF RFC 8270</cite>, Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits. Available at <a href="https://doi.org/10.17487/RFC8270" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8270</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8270, Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits
doi: 10.17487/RFC8270
url: https://doi.org/10.17487/RFC8270

Snippet:

<li>
<cite id="bib-rfc8270">IETF RFC 8270</cite>, Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits
<span class="doi">10.17487/RFC8270</span>
</li>

Referenced By

IETF RFC 9142 [Active*]