DH Parameters Length question

Started by Julien, November 27, 2017, 04:02:09 PM

Previous topic - Next topic
Hi guys,
I am trying to understand the user of  DH Parameters Length on the VPN server and Key length (bits) on the certificate.
I see the Key length (bits) on the  certificate  has 4096 and 8192
and also the DH Parameters Length 4096 and 2048.
using the high number would affect the speed of the tunnel ?would provide a high encryption ?
DEC4240 – OPNsense Owner

My understanding is that the DH key length will only impact the initial negotiation and not the average speed.

However in general AES 128 should be faster than AES 256 and if there were available 512 and 1024 versions, those would be progressively slower. 

Unless you have lots of people on the server, you should be hurt by using 4096 or greater DH parameters.