Key exchange (DH) Groups Supported - Site to Site VPN
03/26/2020 23 11736
Diffie-Hellman key exchange, also called exponential key exchange, is an asymmetric key algorithm used for public key cryptography. A protocol for creating a shared secret between two sides of a communication, whether IKE, TLS, SSH and some others. Both sides first have to agree on a "group" (in the mathematical sense), usually a multiplicative group modulo a prime. Basically it is a method of digital encryption that uses numbers raised to specific powers to produce decryption keys on the basis of components that are never directly transmitted, making the task of a would-be code breaker mathematically overwhelming. The Diffie-Hellman algorithm was created to address the issue of secure encrypted keys from being attacked over the internet when in transmission, though using the Diffie-Hellman algorithm in distributing symmetric keys securely over the internet
Here is the list of Key Exchange Groups (DH) SonicWALL Site to Site VPN supports:
IANA assigned the ID values to these Diffie-Hellman groups.
NOTE: Groups 1-14 are available on SonicOS 5.9 firmware. Groups 1-26 are available on SonicOS 6.2 and above firmware.