DH Support MODP-2048-256

Mbed TLS Feature Requests
1

Hello !

I am following a specification that needs one of the following algorithm for the key agreement algorithm
DH+MODP-2048-256 (RFC 5114: Additional Diffie-Hellman Groups for Use with IETF Standards)
As far as I can see within mbedtls/dhm.h at master · Mbed-TLS/mbedtls · GitHub mbedTLS does not support this algorithm. (It supports 2048-224: mbedtls/dhm.h at master · Mbed-TLS/mbedtls · GitHub )

Is there any reason why the support has not been added for this algorithm ? I am guessing adding it is not as easy as specifying the corresponding MBEDTLS_DHM_RFC5114_MODP_2048_256_P and MBEDTLS_DHM_RFC5114_MODP_2048_256_G defines from the rfc5114.

2

Hi @Pokitoz,
Thank you for your question!

Note that Mbed TLS supports Diffie-Hellman-Merkle (DHM) algorithm, and your request is not for a dfferent algorithm, but for different groups than what is supported by default by Mbed TLS.
However, you can supply your own set of group parameters to the Mbed TLS DHM API.
To learn how to do it, please follow the guidelines in this article.

Regards,
Mbed TLS Team member
Ron

1 Like
3

Thanks for the clarifications Ron.