Forum Discussion

Deltavista_1797's avatar
Deltavista_1797
Icon for Nimbostratus rankNimbostratus
Dec 10, 2014

DHE key exchange: why is ephemeral key only 1024bit long?

Hello,   during a recent analysis comparing security options provided by Apache httpd and F5 LTM we discovered that while Apache for RHEL/CentOS has lifted a limitation of 1024 bits for ephemeral ...
application delivery
LTM
security
JG's avatar
JG
Icon for Cumulonimbus rankCumulonimbus
May 28, 2015

There was this argument about the benefits of off-loading SSL operations to the hardware (ASIC) of F5. If ECDHE is too much even for F5 to handle, imagine the situation of the boxes the Apache httpd runs on. :-)

 

But I suspect F5 is probably worried about the existing older F5 hardware....

 

The SSL/TLS has really shaken up the industry in the past year and a lot of things stop working sooner...