The dhparam command has mostly been used with Apache, as far as I know; ssh provides its own commands as part of ssh-keygen, which are described in the man page you just mentioned.<p>However, the paper authors say<p>&quot;If you use SSH, you should upgrade both your server and client installations to the most recent version of OpenSSH, which prefers Elliptic-Curve Diffie-Hellman Key Exchange.&quot;<p>That might ultimately be a simpler and safer course unless you have to deal with old clients that you don&#x27;t have the ability to upgrade.