New answers tagged diffie-hellman
The SRP paper has this point in its list of security properties: 6. If the user's password itself is compromised, it should not allow the intruder to determine the session key K for past sessions and decrypt them. Even present sessions should at least be protected from passive eavesdropping. The following section is titled Reduction to ...
The size of the modulus for ssh implementations of Diffie-Hellman (according to RFC4419 from 2006) should be between 1024 and 8192 bits. This seems to be a bit off from what @poncho recommended (128 bits) in 2012.
Top 50 recent answers are included