ECDHE
Elliptic-curve Diffie-Hellman ephemeral
A key exchange in which each side generates a fresh elliptic-curve key pair for every handshake, as with X25519 in TLS 1.3 (RFC 9846), so the session keys have forward secrecy; a signature with the server’s certificate key authenticates the exchange.
- Defined in
- RFC 9846
Covered in
Guide
Operate TLS and certificates: configuration, renewal and verification
Configure a modern TLS profile with hybrid post-quantum key exchange, automate renewal for certificate lifetimes that fall to 47 days, and verify every termination point with a fresh handshake.
Case study
FREAK and Logjam: export-grade key exchange
Trace two export-grade downgrade paths and separate RSA factorization from finite-field Diffie–Hellman discrete logarithms.