Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

The tag has no usage guidance.

3
votes
0answers
48 views

Why does TLS 1.3 support two CCM variants?

One of the important improvements introduced in TLS 1.3 is the pruning of the many previously available cipher suites to only five secure options (for symmetric ciphers), that are each supposed to ...
6
votes
1answer
235 views

Cipher suites: same name, different IDs, why?

Sorry if I missed with a community to ask. Recently I stumbled on a fact that the same cipher suite can be designated by two different IDs, and this is not a typo nor single occasion. For instance: ...
1
vote
1answer
80 views

CBC related TLS cipher suites to be disabled in the server side

I understand the TLS cipher suites using CBC mode are susceptible to timing attacks. From that understanding it seems that the cipher suites using GCM (CTR-based) are safe to use considering they don'...
0
votes
1answer
53 views

What is the most popular cipher suite used in TLS 1.2 for HTTPS?

I'm trying to do some performance (time) calculations over TLS. I have the data I need for a variety of cipher suites but in order for the calculations to generalize well, I need to know if there is a ...
0
votes
1answer
155 views

Interpreting the Hash type in a TLS ciphersuite

There are ciphersuites with SHA256, and SHA384. In the following TLS ciphersuite, the SHA types is not specified. Does this always refer to SHA1 (there is SHA0 as well) so which one of them? ...
3
votes
2answers
445 views

How to recognize Authenticated Encryption with Associated Data ciphersuites

I have some doubts regarding AEAD ciphersuites and I need some clarification. In the following ciphersuites list: ...
0
votes
1answer
372 views

Default mode of operation in TLS cipher suites

I've been trying to evaluate the security of a list of cipher suites and I've come across cipher suites, not explicitly featuring a mode of operation. Form this list (openvpn --show-tls), one of such ...
4
votes
1answer
1k views

DSS security in comparison to ECDSA or RSA

OpenVPN allows the users to choose the TLS cipher suite, depending on the deployed SSL/TLS library. With OpenSSL 1.0.2g and OpenVPN 2.3.11 this is a rather long list (Full list). Amongst the many ...
1
vote
2answers
171 views

Picking a cipher suite for embedded system emails

I have an embedded system product that emails out event notifications periodically. I have implemented a non secured email version, but want to use SSL/TLS, if possible. Can I only use 1 cipher ...
0
votes
1answer
246 views

Can you explain what is whitelisting in TLS False Start

In TLS clinet false start mechanism, the standard says the following: The symmetric cipher defined by the cipher suite negotiated in this handshake has been ...
6
votes
2answers
550 views

Explanation of openssl ciphersuites

I'm looking for a detailed explanation of the ciphersuites available in openssl. openssl already offers the ciphers command which can be used to output, for example, the following: ...