%% You should probably cite rfc8270 instead of this I-D. @techreport{ietf-curdle-ssh-dh-group-exchange-00, number = {draft-ietf-curdle-ssh-dh-group-exchange-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-curdle-ssh-dh-group-exchange/00/}, author = {Loganaden Velvindron and Mark D. Baushke}, title = {{Increase minimum recommended modulus size to 2048 bits}}, pagetotal = 3, year = ** No value found for 'doc.pub_date.year' **, month = ** No value found for 'doc.pub_date' **, day = ** No value found for 'doc.pub_date.day' **, abstract = {The Diffie-Hellman (DH) Group Exchange for the Secure Shell (SSH) Transport layer Protocol specifies that servers and clients should support groups with a modulus length of k bits, where the recommended minumum value is 1024 bits. Recent security research has shown that a minimum value of 1024 bits is insufficient against state-sponsored actors. As such, this document formally updates RFC 4419 {[}RFC4419{]} such that the minimum recommended value for k is 2048 bits and the group size is 2048 bits at minimum.}, }