Re: Prime example of a can of worms

[Matthias Weckbecker <matthias () weckbecker name>]

On Mon, 19 Oct 2015 17:40:14 -0400
Daniel Kahn Gillmor <dkg () fifthhorseman net> wrote:
[...]
> On the flip side, saying "use only strong (>=2048bit today in 2015?),
> well-known, well-structured, publicly-vetted groups" is very simple
> guidance: clear and easy to follow.

Interestingly I noticed OpenSSH bumped their 'DH_GRP_MIN' to 2048 bit
just a few days ago to account for precomputation attacks:

http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/dh.h.diff?
r1=1.13&r2=1.14

RFC4419 seems to recommend 1024 bit minimum, but the document appears
to be from 2006.

[...]
>       --dkg

Matthias