Additional Diffie-Hellman Groups for Use with IETF Standards
RFC 5114, “Additional Diffie-Hellman Groups for Use with IETF Standards”, is an Informational document published in January 2008 by M. Lepinski, S. Kent. The canonical text is published by the RFC Editor.
Abstract
This document describes eight Diffie-Hellman groups that can be used in conjunction with IETF protocols to provide security for Internet communications. The groups allow implementers to use the same groups with a variety of security protocols, e.g., SMIME, Secure SHell (SSH), Transport Layer Security (TLS), and Internet Key Exchange (IKE).
All of these groups comply in form and structure with relevant standards from ISO, ANSI, NIST, and the IEEE. These groups are compatible with all IETF standards that make use of Diffie-Hellman or Elliptic Curve Diffie-Hellman cryptography.
These groups and the associated test data are defined by NIST on their web site [EX80056A], but have not yet (as of this writing) been published in a formal NIST document. Publication of these groups and associated test data, as well as describing how to use Diffie-Hellman and Elliptic Curve Diffie-Hellman for key agreement in all of the protocols cited below, in one RFC, will facilitate development of interoperable implementations and support the Federal Information Processing Standard (FIPS) validation of implementations that make use of these groups. This memo provides information for the Internet community.
What “Informational” means
Published for the general information of the community. It does not define an IETF standard and carries no standards-track status.
The canonical text of RFC 5114 is hosted at rfc-editor.org. Available in TXT,HTML.
- RFC 5113 Network Discovery and Selection Problem
- RFC 5115 Telephony Routing over IP Attribute for Resource Priority
- RFC 5112 The Presence-Specific Static Dictionary for Signaling Compression
- RFC 5116 An Interface and Algorithms for Authenticated Encryption
- RFC 5111 Experiment in Exploratory Group Formation within the Internet Engineering Task Force
- RFC 5117 RTP Topologies
- RFC 5110 Overview of the Internet Multicast Routing Architecture
- RFC 5118 Session Initiation Protocol Torture Test Messages for Internet Protocol Version 6