[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: More MODP Diffie-Hellman groups for IKE



At 09:58 28.08.01 -0400, Jason Palmatier wrote:
 >Have numbers been assigned to the additional MODP groups described in
 >draft-ietf-ipsec-ike-modp-groups-01.txt ?  The bakeoff notes seemed to
 >indicate some testing was carried out using new larger groups and timeouts
 >occured from the extra computation.  Were these the MODP groups described
 >in the above draft?  If so, what numbers were used to negotiate them or
 >were they negotiated in a different manner?  Any help would be appreciated.
 >
 >Jason Palmatier
 >IBM iSeries eServer
 >Endicott, NY
 >email: palmatie@us.ibm.com
 >
 >

We used numbers 40000+modulussize at the interops.
42048, 43072, 44096

These will be changed when the RFC is out.

Jörn




Follow-Ups: References: