Generate a Strong, Unique Diffie Hellman Group. A few fixed groups are used by millions of servers, which makes them an optimal target for precomputation, and potential eavesdropping. Administrators should generate unique, 2048-bit or stronger Diffie-Hellman groups using "safe" primes for each website or server.
suggest: it is time-consuming to create new moduli on every build, so perhaps take a middle road and generate new moduli periodically and add the new moduli to this repo via git commit.
sample commands for a single size of 2047 bits (default) that show wall-clock time needed for the single size:
refs:
This git repo already removes DH-GEX moduli that are smaller than 2000 bits as recommended by https://stribika.github.io/2015/01/04/secure-secure-shell.html and implemented with https://github.com/jumanjihouse/wormhole/commit/83c1f63fbf2ecf6f9b380d8ca3f53e0429748049
suggest: it is time-consuming to create new moduli on every build, so perhaps take a middle road and generate new moduli periodically and add the new moduli to this repo via git commit.
sample commands for a single size of 2047 bits (default) that show wall-clock time needed for the single size: