Re: DH group exchange (Re: SSH key algorithm updates)

[Damien Miller <djm%mindrot.org@localhost>]

On Tue, 10 Nov 2015, Niels Möller wrote:

> > It may also be desirable to setup a way that RFC 3526 groups:
> >
> >   diffie-hellman-group14-sha256 (2048-bit MODP group - 112 bits of security)
> >   diffie-hellman-group15-sha256 (3072-bit MODP group - 128 bits of security)
> >
> >   diffie-hellman-group16-sha384 (4096-bit MODP group - ~150 bits of security)

FWIW OpenSSH has been using RFC3526 group 16 as the fallback group for
group-exchange when it can't find a local pre-computed group list.

-d