Help Center/ Virtual Private Network/ FAQs/ FAQs - S2C Classic VPN/ VPN Negotiation and Interconnection/ How Many Bits Do the DH Groups Used by VPN Have?
Updated on 2024-07-23 GMT+08:00
View PDF
Share

How Many Bits Do the DH Groups Used by VPN Have?

The Diffie-Hellman (DH) groups determine the strength of the key used in the key exchange process. Higher DH group numbers are usually more secure, but extra time is required to calculate the key.

Table 1 lists the bits corresponding to the DH groups used by VPN.

Table 1 Bit corresponding to each DH group

DH Group

Modulus

1

768 bits

2

1024 bits

5

1536 bits

14

2048 bits

15

3072 bits

16

4096 bits

19

ecp256 bits

20

ecp384 bits

21

ecp521 bits

The following DH algorithms have security risks and are not recommended: DH group 1, DH group 2, and DH group 5.