Skip to main content
replaced https://tools.ietf.org/html/rfc with https://www.rfc-editor.org/rfc/rfc
Source Link

For standard SSH, most non-EC DH keyexchange (aka classic, integer, modp, or $Z_p$) and all ECDH keyexchange use predefined groups which include the integer g in DH or point G in (X9.63-style) ECDH. The group is defined by the keyexchange method name selected by the KEXINIT (type 20) message exchangeKEXINIT (type 20) message exchange.

Methods diffie-hellman-group-exchange-{sha1,sha256} ([KEX]DH_GEX) in RFC4419RFC4419, and the little-used variant gss-gex-* in RFC4462RFC4462, are the only standard ones that transmit group parameters, and they are only defined for DH not ECDH.

The draft you link follows this practice, although the Bernstein ECDH method used for X25519 and X448 actually uses only the X-coordinate, not the full point.

For standard SSH, most non-EC DH keyexchange (aka classic, integer, modp, or $Z_p$) and all ECDH keyexchange use predefined groups which include the integer g in DH or point G in (X9.63-style) ECDH. The group is defined by the keyexchange method name selected by the KEXINIT (type 20) message exchange.

Methods diffie-hellman-group-exchange-{sha1,sha256} ([KEX]DH_GEX) in RFC4419, and the little-used variant gss-gex-* in RFC4462, are the only standard ones that transmit group parameters, and they are only defined for DH not ECDH.

The draft you link follows this practice, although the Bernstein ECDH method used for X25519 and X448 actually uses only the X-coordinate, not the full point.

For standard SSH, most non-EC DH keyexchange (aka classic, integer, modp, or $Z_p$) and all ECDH keyexchange use predefined groups which include the integer g in DH or point G in (X9.63-style) ECDH. The group is defined by the keyexchange method name selected by the KEXINIT (type 20) message exchange.

Methods diffie-hellman-group-exchange-{sha1,sha256} ([KEX]DH_GEX) in RFC4419, and the little-used variant gss-gex-* in RFC4462, are the only standard ones that transmit group parameters, and they are only defined for DH not ECDH.

The draft you link follows this practice, although the Bernstein ECDH method used for X25519 and X448 actually uses only the X-coordinate, not the full point.

deleted 1 character in body
Source Link
dave_thompson_085
  • 6.5k
  • 1
  • 21
  • 24

For standard SSH, most non-EC DH keyexchange (aka classic, integer, modp, or $Z_p$) and all ECDH keyexchange use predefined groups which include anthe integer g in DH or a point G in (X9.63-style) ECDH. The group is defined by the keyexchange method name selected by the KEXINIT (type 20) message exchange.

Methods diffie-hellman-group-exchange-{sha1,sha256} (abbreviated DHGEX or DH_GEX[KEX]DH_GEX) in RFC4419, and the little-used variant gss-gex-* in RFC4462, are the only standard ones that transmit group parameters, and they are only defined for DH not ECDH.

The draft you link follows this practice, although the Bernstein ECDH method used for X25519 and X448 actually uses only the X-coordinate, not the full point.

For standard SSH, most non-EC DH keyexchange (aka classic, integer, modp, or $Z_p$) and all ECDH keyexchange use predefined groups which include an integer g in DH or a point G in (X9.63-style) ECDH. The group is defined by the keyexchange method name selected by the KEXINIT (type 20) message exchange.

Methods diffie-hellman-group-exchange-{sha1,sha256} (abbreviated DHGEX or DH_GEX) in RFC4419, and the little-used variant gss-gex-* in RFC4462, are the only standard ones that transmit group parameters, and they are only defined for DH not ECDH.

The draft you link follows this practice, although the Bernstein ECDH method used for X25519 and X448 actually uses only the X-coordinate, not the full point.

For standard SSH, most non-EC DH keyexchange (aka classic, integer, modp, or $Z_p$) and all ECDH keyexchange use predefined groups which include the integer g in DH or point G in (X9.63-style) ECDH. The group is defined by the keyexchange method name selected by the KEXINIT (type 20) message exchange.

Methods diffie-hellman-group-exchange-{sha1,sha256} ([KEX]DH_GEX) in RFC4419, and the little-used variant gss-gex-* in RFC4462, are the only standard ones that transmit group parameters, and they are only defined for DH not ECDH.

The draft you link follows this practice, although the Bernstein ECDH method used for X25519 and X448 actually uses only the X-coordinate, not the full point.

Source Link
dave_thompson_085
  • 6.5k
  • 1
  • 21
  • 24

For standard SSH, most non-EC DH keyexchange (aka classic, integer, modp, or $Z_p$) and all ECDH keyexchange use predefined groups which include an integer g in DH or a point G in (X9.63-style) ECDH. The group is defined by the keyexchange method name selected by the KEXINIT (type 20) message exchange.

Methods diffie-hellman-group-exchange-{sha1,sha256} (abbreviated DHGEX or DH_GEX) in RFC4419, and the little-used variant gss-gex-* in RFC4462, are the only standard ones that transmit group parameters, and they are only defined for DH not ECDH.

The draft you link follows this practice, although the Bernstein ECDH method used for X25519 and X448 actually uses only the X-coordinate, not the full point.