Knowledge Base
Diffie-Hellman Parameter
D

1024-bit HAProxy 1.6 builtin DH parameter

Summary

Name:
1024-bit HAProxy 1.6 builtin DH parameter
Key size:
1024 bits
Publishers:

Check your host!

Type a URL to analyze a service

Get a prompt and clear overview of your security configuration. Right now!

Security

D
Key Size
Name

1024

Security

The Diffie-Hellman ephemeral public key parameter[409][410][411] with prime size less or equal than 1024-bit[424] is weakened against logjam attack[7][8][9][10], but can only be exploited by a national states.

Recommendations

Use a well-known Diffie-Hellman ephemeral public key parameter[426][427][428], or generate a custom Diffie-Hellman ephemeral public key parameter[409][410][411] with a size greater or equal than 2048 bits but less or equal than 4096 bits. In the case of custom parameters, validate that the prime is a safe prime[176] to avoid a small subgroup confinement attack[72][73].

A+
Prime
Name

Safe Prime

Security

Diffie-Hellman ephemeral public key parameter[409][410][411] contains a safe prime[176], so the connection is certainly not vulnerable to a small subgroup confinement attack[72][73].

A
Post-Quantum
Name

False

Security

The Diffie-Hellman[99][100][101][102][103] key exchange provides no protection against a cryptanalytic attack by a quantum computer, and no classical Diffie-Hellman does — just as no classical elliptic curve does — because a quantum computer breaks the hardness assumption they rely on. Only a hybrid key exchange (a classical algorithm combined with a post-quantum cryptography[158][159] one) or a pure post-quantum algorithm is quantum-safe.

Recommendations

Enable a hybrid key exchange or a pure post-quantum algorithm on your server, and prefer it where the configuration allows, so the connection stays secure against a future quantum computer.

Parameter Numbers

Prime (p)
0xfaf92a222aa77fe1674e53f75613c3b1e3296b66316a7fb3c2686bcb1d57391d1fff1cc9a6a49882315d25ff8ae0739681c88379c15a04f8370da83dae74bcdbb6a475d9718aa0179e2dc8a8df2c5f8295f8929ba7335f8971c82d6b1886c49422a5528df6f6d237920fa5ccdb7b1d3da131b7808f0b675e36a5600cf195338b
Copy to clipboard
Generator (g)
0x2
Copy to clipboard

Representations

PEM

Default private value length
-----BEGIN DH PARAMETERS-----
MIGHAoGBAPr5KiIqp3/hZ05T91YTw7HjKWtmMWp/s8Joa8sdVzkdH/8cyaakmIIx
XSX/iuBzloHIg3nBWgT4Nw2oPa50vNu2pHXZcYqgF54tyKjfLF+ClfiSm6czX4lx
yC1rGIbElCKlUo329tI3kg+lzNt7HT2hMbeAjwtnXjalYAzxlTOLAgEC
-----END DH PARAMETERS-----
Download dhparam.pem
Copy to clipboard
Small private value length
-----BEGIN DH PARAMETERS-----
MIGLAoGBAPr5KiIqp3/hZ05T91YTw7HjKWtmMWp/s8Joa8sdVzkdH/8cyaakmIIx
XSX/iuBzloHIg3nBWgT4Nw2oPa50vNu2pHXZcYqgF54tyKjfLF+ClfiSm6czX4lx
yC1rGIbElCKlUo329tI3kg+lzNt7HT2hMbeAjwtnXjalYAzxlTOLAgECAgIA4Q==
-----END DH PARAMETERS-----
Download dhparam-small.pem
Copy to clipboard

PARI/GP

powermod(x, k, m) = lift(Mod(x, m) ^ k);

g = 0x2;
p = 0xfaf92a222aa77fe1674e53f75613c3b1e3296b66316a7fb3c2686bcb1d57391d1fff1cc9a6a49882315d25ff8ae0739681c88379c15a04f8370da83dae74bcdbb6a475d9718aa0179e2dc8a8df2c5f8295f8929ba7335f8971c82d6b1886c49422a5528df6f6d237920fa5ccdb7b1d3da131b7808f0b675e36a5600cf195338b;
s = 256;

a = 2 ^ (s - 1) + random(2 ^ (s - 1));
A = powermod(g, a, p);

b = 2 ^ (s - 1) + random(2 ^ (s - 1));
B = powermod(g, b, p);

S = powermod(B, a, p);
Copy to clipboard

LaTeX

$\begin{eqnarray}
p \equiv 0xfaf92a222aa77fe1674e53f75613c3b1e3296b66316a7fb3c2686bcb1d57391d1fff1cc9a6a49882315d25ff8ae0739681c88379c15a04f8370da83dae74bcdbb6a475d9718aa0179e2dc8a8df2c5f8295f8929ba7335f8971c82d6b1886c49422a5528df6f6d237920fa5ccdb7b1d3da131b7808f0b675e36a5600cf195338b \\
g \equiv 0x2 \\
\\
a \in \mathbb{Z}_q \\
b \in \mathbb{Z}_q \\
\\
A \equiv g^a \pmod{p} \\
B \equiv g^b \pmod{p} \\
\\
S \equiv {(g^{a})}^{b}={(g^{b})}^{a}=g^{ab} \pmod{p}
\end{eqnarray}$
Copy to clipboard