/dhe_groups

.pem files for pre-defined DHE groups as recommended by IETF RFC 7919

Apache License 2.0Apache-2.0

Pre-defined DHE groups

This repository contains .pem files for pre-defined DHE groups as recommended by IETF RFC 7919 for:

  • ffdhe4096
  • ffdhe3072
  • ffdhe2048

Testing with Internet.nl

With the Internet.nl test tool you can test if your web and mail server use these pre-defined groups for Diffie-Hellman key exchange.

NCSC-NL TLS Guidelines

Internet.nl uses the 'IT Security Guidelines for Transport Layer Security (TLS) v2.0' from NCSC-NL (in English) as a baseline. NCSC-NL has assigned the following security levels to these groups (guideline B6-1 and table 10):

  • Sufficient: ffdhe4096 and ffdhe3072
  • Phase out: ffdhe2048