I'm setting up EAP-TLS on my wireless router, and am currently generating DH parameters for FreeRADIUS.
First, what do these parameters do? Also, what size should they be?
I've been generating the current parameters for some time:
openssl dhparam -check -text -5 4096 -out dh
The tutorial I was following recommended a 512-bit DH parameter size, but I'm a bit of a tin-foil-hatter. What are the security implications of the size and strength of these parameters?