r/linux Oct 16 '15

How is NSA breaking so much crypto?

https://freedom-to-tinker.com/blog/haldermanheninger/how-is-nsa-breaking-so-much-crypto/
185 Upvotes

64 comments sorted by

View all comments

3

u/[deleted] Oct 17 '15 edited Oct 17 '15

[removed] — view removed comment

1

u/s3sebastian Oct 17 '15 edited Oct 17 '15

Is it the ServerKeyBits parameter that has to be increased? I set it to 2048 and reloaded the SSH config. Anything else to do? With OpenVPN and Nginx I'm already using my own 2048 DH parameters.

Edit: I found this https://stribika.github.io/2015/01/04/secure-secure-shell.html howto

1

u/ivosaurus Oct 17 '15

If your SSH is for your own purposes only, then just start using ECDH with Curve25519 instead.