Questions tagged [ciphersuite]
A cipher suite is a set of algorithms that help secure a network connection that uses Transport Layer Security (TLS) or its now-deprecated predecessor Secure Socket Layer (SSL).
23
questions
3
votes
1
answer
196
views
Is there open-source test tool that operate TLS server/client with unexpected behaviors
I'm working in an embedded system that uses TLS v1.2 protocol for network security and it acts as a client.
Now I want to test some TLS security functions that require connecting with a TLS server and ...
- 31
1
vote
0
answers
31
views
Secure ciphersuite from security-wise sub-optimal unkeyed permutation?
Hypothetically,
IF we were to create a SSL/TLS or QUIC ciphersuite from a single (unkeyed) permutation operating in sponge mode to provide hashing and duplex mode to provide AEAD cipher,
AND IF the ...
- 9,001
3
votes
2
answers
300
views
Are the following ciphersuites vulnerable? if so, what are the vulnerabilities?
Following ciphersuites found to be weak in Qualys(https://www.ssllabs.com/ssltest/analyze.html) tool:
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027) ECDH x25519 (eq. 3072
bits RSA) ...
- 31
7
votes
3
answers
5k
views
What is DES-EDE3-CBC?
I came across DES-EDE3-CBC and a quick search didn't yield a clear explanation of what it is.
Clearly, DES is the Data Encryption Standard and CBC is the Cipher Block Chaining mode.
EDE is probably ...
- 253
0
votes
1
answer
50
views
Generating private keys based on the list of ciphersuites available
I am building my own MQTT based network for which I would generate my own ca/server/client certificates for authentication.
The goal here is to keep the message sizes as small as possible so as to ...
0
votes
1
answer
55
views
Is RSA in ciphersuites secure?
Ciphersuite website says TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 is secure but how do I know which RSA is used for the signature generation? If its the hashed one, where you hash the message before ...
- 1
1
vote
1
answer
348
views
TLS 1.3 Ciphersuite SHA Level
As I like to make my tin-foil hat using only the finest quality metal, I was overjoyed to see that Firefox/NSS (I'm using Arch Linux) has recently added support for the P-521 ECDH group in ...
- 11
1
vote
1
answer
813
views
What does TLS_ECDHE_ECDSA_with_AES_128_CCM means collectively. What is the signature algorithm and keys used here?
Will the signature algorithm be ECDSA and key (i) ECC key or (ii) ECDHE and ECDSA keys?
0
votes
1
answer
689
views
OpenSSL cipher suite support / key requirement for ecdhe_ecdsa_with_aes128_cbc_sha256
I hope this is the right place for that kind of question.
So actually I am trying to test the TLS implementation of some industrial device. I have to write my own TLS implementation for this, for ...
- 3
1
vote
1
answer
115
views
Security of ciphersuite and key
Is anyone able to cite resources that can be based on choosing a cipher suite?
In my case, for a VPN server (OpenVPN) I chose a set of ciphers:
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
It provides 128 ...
- 13
7
votes
1
answer
494
views
Which TLS features are vulnerable to chosen-prefixes collision on SHA-1?
Gaëtan Leurent and Thomas Peyrin's preprint From Collisions to Chosen-Prefix Collisions - Application to Full SHA-1 (in volume 1 of proceedings of the forthcoming Eurocrypt 2019) shows a feasible ...
- 138k
2
votes
1
answer
355
views
Why don't the TLS1.3 cipher suites mention the key exchange and digital signature algorithm in names?
Does it mean both RSA and ECDSA certificates can be used with the same cipher suite?
- 508
18
votes
1
answer
5k
views
Why does TLS 1.3 support two CCM variants?
One of the important improvements introduced in TLS 1.3 is the pruning of the many previously available cipher suites to only five secure options (for symmetric ciphers), that are each supposed to ...
- 283
8
votes
1
answer
813
views
Cipher suites: same name, different IDs, why?
Sorry if I missed with a community to ask.
Recently I stumbled on a fact that the same cipher suite can be designated by two different IDs, and this is not a typo nor single occasion.
For instance:
...
- 183
1
vote
2
answers
2k
views
CBC related TLS cipher suites to be disabled in the server side
I understand the TLS cipher suites using CBC mode are susceptible to timing attacks. From that understanding it seems that the cipher suites using GCM (CTR-based) are safe to use considering they don'...
- 508
0
votes
1
answer
3k
views
What is the most popular cipher suite used in TLS 1.2 for HTTPS?
I'm trying to do some performance (time) calculations over TLS. I have the data I need for a variety of cipher suites but in order for the calculations to generalize well, I need to know if there is a ...
0
votes
1
answer
400
views
Interpreting the Hash type in a TLS ciphersuite
There are ciphersuites with SHA256, and SHA384.
In the following TLS ciphersuite, the SHA types is not specified. Does this always refer to SHA1 (there is SHA0 as well) so which one of them?
...
- 503
3
votes
2
answers
894
views
How to recognize Authenticated Encryption with Associated Data ciphersuites
I have some doubts regarding AEAD ciphersuites and I need some clarification. In the following ciphersuites list:
...
- 503
0
votes
1
answer
1k
views
Default mode of operation in TLS cipher suites
I've been trying to evaluate the security of a list of cipher suites and I've come across cipher suites, not explicitly featuring a mode of operation.
Form this list (openvpn --show-tls), one of such ...
- 289
5
votes
1
answer
4k
views
DSS security in comparison to ECDSA or RSA
OpenVPN allows the users to choose the TLS cipher suite, depending on the deployed SSL/TLS library. With OpenSSL 1.0.2g and OpenVPN 2.3.11 this is a rather long list (Full list).
Amongst the many ...
- 289
1
vote
2
answers
480
views
Picking a cipher suite for embedded system emails
I have an embedded system product that emails out event notifications periodically. I have implemented a non secured email version, but want to use SSL/TLS, if possible. Can I only use 1 cipher ...
0
votes
1
answer
788
views
Can you explain what is whitelisting in TLS False Start
In TLS clinet false start mechanism, the standard says the following:
The symmetric cipher defined by the cipher suite negotiated in this
handshake has been ...
- 503
8
votes
3
answers
3k
views
Explanation of openssl ciphersuites
I'm looking for a detailed explanation of the ciphersuites available in openssl.
openssl already offers the ciphers command which can be used to output, for example, the following:
...
- 4,883