Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [ciphersuite]

A cipher suite is a set of algorithms that help secure a network connection that uses Transport Layer Security (TLS) or its now-deprecated predecessor Secure Socket Layer (SSL).

Filter by
Sorted by
Tagged with
0 votes
1 answer
55 views

Is there a TLS cipher suite with perfect forward secrecy (PFS) but without authentication, i.e. anonymous, ephemeral key exchange?

Is there a TLS cipher suite with perfect forward secrecy (PFS) but without authentication, i.e. anonymous key exchange? I am not asking or wish to discuss the principle question whether an ...
user2690527's user avatar
3 votes
1 answer
417 views

Is there open-source test tool that operate TLS server/client with unexpected behaviors

I'm working in an embedded system that uses TLS v1.2 protocol for network security and it acts as a client. Now I want to test some TLS security functions that require connecting with a TLS server and ...
songoku711's user avatar
1 vote
0 answers
34 views

Secure ciphersuite from security-wise sub-optimal unkeyed permutation?

Hypothetically, IF we were to create a SSL/TLS or QUIC ciphersuite from a single (unkeyed) permutation operating in sponge mode to provide hashing and duplex mode to provide AEAD cipher, AND IF the ...
DannyNiu's user avatar
  • 9,361
3 votes
2 answers
531 views

Are the following ciphersuites vulnerable? if so, what are the vulnerabilities?

Following ciphersuites found to be weak in Qualys(https://www.ssllabs.com/ssltest/analyze.html) tool: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027) ECDH x25519 (eq. 3072 bits RSA) ...
user105523's user avatar
7 votes
3 answers
6k views

What is DES-EDE3-CBC?

I came across DES-EDE3-CBC and a quick search didn't yield a clear explanation of what it is. Clearly, DES is the Data Encryption Standard and CBC is the Cipher Block Chaining mode. EDE is probably ...
Erwin's user avatar
  • 253
0 votes
1 answer
56 views

Generating private keys based on the list of ciphersuites available

I am building my own MQTT based network for which I would generate my own ca/server/client certificates for authentication. The goal here is to keep the message sizes as small as possible so as to ...
user1398593's user avatar
0 votes
1 answer
55 views

Is RSA in ciphersuites secure?

Ciphersuite website says TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 is secure but how do I know which RSA is used for the signature generation? If its the hashed one, where you hash the message before ...
miklo009's user avatar
1 vote
1 answer
451 views

TLS 1.3 Ciphersuite SHA Level

As I like to make my tin-foil hat using only the finest quality metal, I was overjoyed to see that Firefox/NSS (I'm using Arch Linux) has recently added support for the P-521 ECDH group in ...
hut_rudder's user avatar
1 vote
1 answer
922 views

What does TLS_ECDHE_ECDSA_with_AES_128_CCM means collectively. What is the signature algorithm and keys used here?

Will the signature algorithm be ECDSA and key (i) ECC key or (ii) ECDHE and ECDSA keys?
wanglen soram's user avatar
0 votes
1 answer
814 views

OpenSSL cipher suite support / key requirement for ecdhe_ecdsa_with_aes128_cbc_sha256

I hope this is the right place for that kind of question. So actually I am trying to test the TLS implementation of some industrial device. I have to write my own TLS implementation for this, for ...
seesharp's user avatar
1 vote
1 answer
124 views

Security of ciphersuite and key

Is anyone able to cite resources that can be based on choosing a cipher suite? In my case, for a VPN server (OpenVPN) I chose a set of ciphers: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 It provides 128 ...
Sebeusz's user avatar
  • 13
7 votes
1 answer
513 views

Which TLS features are vulnerable to chosen-prefixes collision on SHA-1?

Gaëtan Leurent and Thomas Peyrin's preprint From Collisions to Chosen-Prefix Collisions - Application to Full SHA-1 (in volume 1 of proceedings of the forthcoming Eurocrypt 2019) shows a feasible ...
fgrieu's user avatar
  • 142k
2 votes
1 answer
454 views

Why don't the TLS1.3 cipher suites mention the key exchange and digital signature algorithm in names?

Does it mean both RSA and ECDSA certificates can be used with the same cipher suite?
Saptarshi Basu's user avatar
18 votes
1 answer
5k views

Why does TLS 1.3 support two CCM variants?

One of the important improvements introduced in TLS 1.3 is the pruning of the many previously available cipher suites to only five secure options (for symmetric ciphers), that are each supposed to ...
AardvarkSoup's user avatar
8 votes
1 answer
916 views

Cipher suites: same name, different IDs, why?

Sorry if I missed with a community to ask. Recently I stumbled on a fact that the same cipher suite can be designated by two different IDs, and this is not a typo nor single occasion. For instance: ...
Yury Schkatula's user avatar
1 vote
2 answers
2k views

CBC related TLS cipher suites to be disabled in the server side

I understand the TLS cipher suites using CBC mode are susceptible to timing attacks. From that understanding it seems that the cipher suites using GCM (CTR-based) are safe to use considering they don'...
Saptarshi Basu's user avatar
0 votes
1 answer
3k views

What is the most popular cipher suite used in TLS 1.2 for HTTPS?

I'm trying to do some performance (time) calculations over TLS. I have the data I need for a variety of cipher suites but in order for the calculations to generalize well, I need to know if there is a ...
Peter Sanchez's user avatar
0 votes
1 answer
430 views

Interpreting the Hash type in a TLS ciphersuite

There are ciphersuites with SHA256, and SHA384. In the following TLS ciphersuite, the SHA types is not specified. Does this always refer to SHA1 (there is SHA0 as well) so which one of them? ...
user6875880's user avatar
3 votes
2 answers
915 views

How to recognize Authenticated Encryption with Associated Data ciphersuites

I have some doubts regarding AEAD ciphersuites and I need some clarification. In the following ciphersuites list: ...
user6875880's user avatar
0 votes
1 answer
1k views

Default mode of operation in TLS cipher suites

I've been trying to evaluate the security of a list of cipher suites and I've come across cipher suites, not explicitly featuring a mode of operation. Form this list (openvpn --show-tls), one of such ...
SaAtomic's user avatar
  • 289
5 votes
1 answer
5k views

DSS security in comparison to ECDSA or RSA

OpenVPN allows the users to choose the TLS cipher suite, depending on the deployed SSL/TLS library. With OpenSSL 1.0.2g and OpenVPN 2.3.11 this is a rather long list (Full list). Amongst the many ...
SaAtomic's user avatar
  • 289
1 vote
2 answers
504 views

Picking a cipher suite for embedded system emails

I have an embedded system product that emails out event notifications periodically. I have implemented a non secured email version, but want to use SSL/TLS, if possible. Can I only use 1 cipher ...
Sutton Mehaffey's user avatar
0 votes
1 answer
832 views

Can you explain what is whitelisting in TLS False Start

In TLS clinet false start mechanism, the standard says the following: The symmetric cipher defined by the cipher suite negotiated in this handshake has been ...
user6875880's user avatar
8 votes
3 answers
3k views

Explanation of openssl ciphersuites

I'm looking for a detailed explanation of the ciphersuites available in openssl. openssl already offers the ciphers command which can be used to output, for example, the following: ...
Elias's user avatar
  • 4,913