Skip to content

Latest commit

 

History

History
14 lines (11 loc) · 839 Bytes

README.md

File metadata and controls

14 lines (11 loc) · 839 Bytes
Raw

Pre-defined DHE groups

This repository contains .pem files for pre-defined DHE groups as recommended by IETF RFC 7919 for:

  • ffdhe4096
  • ffdhe3072
  • ffdhe2048

Testing with Internet.nl

With the Internet.nl test tool you can test if your web and mail server use these pre-defined groups for Diffie-Hellman key exchange.

NCSC-NL TLS Guidelines

Internet.nl uses the 'IT Security Guidelines for Transport Layer Security (TLS) v2.1' from NCSC-NL (in English) as a baseline. NCSC-NL has assigned the following security levels to these groups (guideline B6-1 and table 10):

  • Sufficient: ffdhe4096 and ffdhe3072
  • Phase out: ffdhe2048