ffdhe2048

FFDHE2048 (Finite Field Diffie-Hellman Ephemeral, 2048-bit) is a standardized DH group providing approximately 112-bit security. FFDHE groups use traditional Diffie-Hellman over finite fields (as opposed to elliptic curves). FFDHE2048 is defined in RFC 7919 and uses well-vetted prime numbers to avoid small-subgroup attacks. While FFDHE is slower than ECDHE, it is considered more conservative and may have better post-quantum resistance. FFDHE2048 is the minimum recommended size, with FFDHE3072 and FFDHE4096 providing higher security. Browser support is universal but ECDHE is strongly preferred.