Collaborate Disseminate
I have been studying to learn about various cipher suites and their performance; I’m wondering about the difference between DHE_DSS_AES256_CBC ciphersuites and DHE_RSA_AES256_CBC ciphersuites. I gathered that DSS is efficient when compared… Continue reading DHE_DSS vs. DHE_RSA
My goal was to create a private key and to encrypt it with a strong cipher. That key would be used as a root certificate for an internal Certification Authority.
However, eventhough openssl supports AES 128 GCM, I cannot gen… Continue reading Creating a private key with OpenSSL and encrypting it with AES GCM
Is TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 a safe cipher suite to use for a TLS 1.2 connection to a Tomcat server? What are potential weaknesses or better alternatives? I am looking for a cipher supported by Java 8.
Continue reading Is TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 a safe cipher suite to use?
In the wake of POODLE I am reviewing the configuration of a number of Tomcat servers running on the JSSE connector.
In order to work out what ciphers JSSE supported I wrote a little snippet that emitted all the available ciphers, the resu… Continue reading JSSE recommended cipher suites
As per PCI-DSS 3.4 requirement:
For storing Credit Card Data Strong Cryptography should be used.
I decided to use AES Encryption which is a strong and mostly recommended crypto for encrypting Credit Card Details.
I saw that AES has … Continue reading Which is the Best Cipher Mode and Padding Mode for AES Encryption? [closed]
Over the last couple of years there have been a number of changes in what would be considered an optimal SSL cipher suite configuration (e.g. the BEAST and CRIME attacks, the weaknesses in RC4)
My question is, what would currently be cons… Continue reading "Optimal" Web Server SSL Cipher Suite Configuration
A security scan result prior to the deployment of a web application on Windows Server 2008 R2 has raised the below message :
Weak SSL Cipher Suites are Supported
Reconfigure the server to avoid the use of weak cipher… Continue reading Identify and disable weak cipher suites
In addition to achieving PFS with DHE, we want as little as possible to be revealed when the server’s private key is revealed. So, what is RSA used for in DHE_RSA cipher suites? What does the server sign during the key exchange?
Continue reading For DHE_RSA_.. Cipher Suites what is RSA used for?
When using OpenSSH server (sshd) and client (ssh), what are all of the default / program preferred ciphers, hash, etc. (security related) and their default options (such as key length)?
So, what are the defaults for symmetri… Continue reading OpenSSH default/preferred ciphers, hash, etc for SSH2
When using OpenSSH server (sshd) and client (ssh), what are all of the default / program preferred ciphers, hash, etc. (security related) and their default options (such as key length)?
So, what are the defaults for symmetric key, MAC, ke… Continue reading OpenSSH default/preferred ciphers, hash, etc for SSH2