Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

I'm using TLS with a Diffie-Hellman key exchange to negotiate the symmetric keys. How long should the exponents be?

share|improve this question

marked as duplicate by CodesInChaos, Paŭlo Ebermann Jun 26 '13 at 19:43

This question was marked as an exact duplicate of an existing question.

Which key-exchange are you talking about? DHE? – CodesInChaos Jun 26 '13 at 6:42
Yes, Diffie Hellman. – Clay Freeman Jun 26 '13 at 15:42

Diffie-Hellman exponents need at a size at least twice the security level.

So for elliptic curve DH you need the same size as the underlying field. For example 256 bits for P-256.

For finite-field DH you still need twice the security level as exponent, but significantly larger fields. For example for an 80 bit level you need 160 bit exponents and a ~1024 bit field.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.