Tuesday, May 12, 2020

Diffie-Hellman Groups Cisco and AWS

Hi, I'm trying to understand more about Diffie-Hellman Groups and which I should use or avoid.

At work we use Cisco ASA which supports 14, 19, 20, 21 and 24 (leaving 1-5 which I should avoid as far as I am aware of).

So far I've learned that I should also avoid 24.

Now we try to set up a tunnel with AWS but they only support 14, 15, 16, 17, 18, 22, 23, 24.

It seems as if besides 14 and 24 there's no value I can choose from. But is there a reason I should use these other groups that AWS offers? Are they more secure?

Can anyone offer a good source for knowledge on this topic? I've tried google a lot but so far I got more questions.

Thank you :-)



No comments:

Post a Comment