Apparently some Cisco products might even be using 768-bit DH as default for IPsec!<p>From <a href="http:&#x2F;&#x2F;www.cisco.com&#x2F;en&#x2F;US&#x2F;docs&#x2F;ios-xml&#x2F;ios&#x2F;sec_conn_ikevpn&#x2F;configuration&#x2F;15-2mt&#x2F;sec-key-exch-ipsec.html" rel="nofollow">http:&#x2F;&#x2F;www.cisco.com&#x2F;en&#x2F;US&#x2F;docs&#x2F;ios-xml&#x2F;ios&#x2F;sec_conn_ikevpn&#x2F;...</a>:<p>&lt;&lt;
Diffie-Hellman--A public-key cryptography protocol that allows two parties to establish a shared secret over an unsecure communications channel. Diffie-Hellman is used within IKE to establish session keys. It supports <i></i><i>==&gt; 768-bit (the default) &lt;==</i><i></i>, 1024-bit, 1536-bit, 2048-bit, 3072-bit, and 4096-bit DH groups. It also supports a 2048-bit DH group with a 256-bit subgroup, and 256-bit and 384-bit elliptic curve DH (ECDH). Cisco recommends using 2048-bit or larger DH key exchange, or ECDH key exchange. 
&gt;&gt;<p>Malice or incompetence? (or crappy hardware that needs help to not be slow?)<p>The recommendation is correct so...