A SERVICE OF

logo

Open as PDF
next previous
Chapter 21 IPSec
VSG1435-B101 Series User’s Guide
268
21.4.9 Diffie-Hellman (DH) Key Groups
Diffie-Hellman (DH) is a public-key cryptography protocol that allows two parties
to establish a shared secret over an unsecured communications channel. Diffie-
Hellman is used within IKE SA setup to establish session keys. 768-bit, 1024-bit
1536-bit, 2048-bit, and 3072-bit Diffie-Hellman groups are supported. Upon
completion of the Diffie-Hellman exchange, the two peers have a shared secret,
but the IKE SA is not authenticated. For authentication, use pre-shared keys.