ZyXEL Communications Corporation VSG1435B101 Manuel D’Utilisation

Page de 402
Chapter 21 IPSec
VSG1435-B101 Series User’s Guide
268
21.4.9  Diffie-Hellman (DH) Key Groups
Diffie-Hellman (DH) is a public-key cryptography protocol that allows two parties 
to establish a shared secret over an unsecured communications channel. Diffie-
Hellman is used within IKE SA setup to establish session keys. 768-bit, 1024-bit 
1536-bit, 2048-bit, and 3072-bit Diffie-Hellman groups are supported. Upon 
completion of the Diffie-Hellman exchange, the two peers have a shared secret, 
but the IKE SA is not authenticated. For authentication, use pre-shared keys.