27 May
2015
27 May
'15
10:06 p.m.
For a given computational effort, you get the most bang-for-the-buck by choosing large parameters (and checking very carefully that they are "safe") rather than smaller parameters (and/or checking them less carefully) which you then regenerate.
This discussion (on the OpenSSH mailing list)
http://marc.info/?t=143221614200001
may be helpful to those thinking about this.