I am designing a secure protocol (for academic/learning purposes) and I am at the point where I need to (re)design the key exchange step. In my previous implementation, I used to rely on RSA to ...
A few sources state that the DH keylength (bits of the prime) should match the keylength of rsa for TLS. For example SSL_set_tmp_dh(3) from openssl has example code on how to match the dh parameters ...
I often see RSA being recommended as a method of key exchange. However, the Diffie-Hellman key exchange method appears to be secure as well. Is there any considerations one should take into account ...