210-250 · Question #188
Which statement about the Diffie-Hellman Key Agreement is true?
The correct answer is B. The higher the Diffie-Hellman group number indicates a larger key size. In Diffie-Hellman key exchange, group numbers map to specific key lengths, with higher group numbers using larger keys that require more computational effort but provide stronger security.
Question
Which statement about the Diffie-Hellman Key Agreement is true?
Options
- AThe higher the Diffie-Hellman group number indicates a smaller key size.
- BThe higher the Diffie-Hellman group number indicates a larger key size.
- CThe higher the Diffie-Hellman group number indicates no difference in processing requirements.
- DThe higher the Diffie-Hellman group number indicates a smaller prime number (p).
How the community answered
(21 responses)- A10% (2)
- B86% (18)
- C5% (1)
Why each option
In Diffie-Hellman key exchange, group numbers map to specific key lengths, with higher group numbers using larger keys that require more computational effort but provide stronger security.
Higher DH group numbers indicate larger, not smaller, key sizes - each step up in group number increases the bit length of the underlying key material.
Higher Diffie-Hellman group numbers correspond to larger key sizes and larger prime numbers (p). For example, DH Group 1 uses 768-bit keys, Group 2 uses 1024-bit keys, Group 5 uses 1536-bit keys, and Group 14 uses 2048-bit keys. This increase in key size strengthens security but also increases processing overhead on both endpoints.
Higher group numbers do require greater processing because the mathematical operations involve larger prime numbers and longer key lengths, making this statement false.
Higher group numbers use larger prime numbers (p), not smaller ones - the increased prime size is precisely what drives both the improved security and the added computational cost.
Concept tested: Diffie-Hellman group numbers and key size relationships
Source: https://www.cisco.com/c/en/us/about/security-center/next-generation-cryptography.html
Topics
Community Discussion
No community discussion yet for this question.