Forum Discussion

Deltavista_1797's avatar
Deltavista_1797
Icon for Nimbostratus rankNimbostratus
Dec 10, 2014

DHE key exchange: why is ephemeral key only 1024bit long?

Hello,   during a recent analysis comparing security options provided by Apache httpd and F5 LTM we discovered that while Apache for RHEL/CentOS has lifted a limitation of 1024 bits for ephemeral ...
application delivery
LTM
security
bkhowson's avatar
bkhowson
Icon for Nimbostratus rankNimbostratus
May 20, 2015

This is an old topic, but is now a big deal due to "LogJam" guidance at:

 

https://weakdh.org/

 

Follow the link to "Guide to Deploying Diffie-Hellman for TLS" https://weakdh.org/sysadmin.html

 

"Good News! This site uses a unique or infrequently used 1024-bit Diffie-Hellman group. You are likely safe, but it's still a good idea to generate a unique, 2048-bit group for the site. "

 

The step by step guide does not cover F5 products...