Collaborate Disseminate
I am trying to learn about cipher lists and how to order them. I am new to this. I have gone through this doc. I don’t get some of the things mentioned in it. Maybe this post can clairfy it.
I want to create a cipher list that doesn’t cont… Continue reading How to create a cipher string that doesn’t contain AES and CAMELLIA ciphers?
I need to know the key exchange of the DHE-DSS cipher suites, will it be the same as mentioned in DHE-RSA?
Continue reading Need to know the key exchange value of the following cipher suites [migrated]
I need to know the key exchange of the DHE-DSS cipher suites, will it be the same as mentioned in DHE-RSA?
Continue reading Need to know the key exchange value of the following cipher suites [migrated]
Forgive my inexperience with encryption, I’ve been researching this for the better part of the morning and still cannot find a smoking gun answer.
A vendor is requesting that we verify a website we utilize is secured using a specific ciphe… Continue reading P-384 vs. SHA384
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA supports forward secrecy but it doesn’t use GCM mode and use SHA1 TLS_RSA_WITH_AES_256_GCM_SHA384 uses GCM mode and SHA2 but it doesn’t support forward secrecy. Which one is more secure?
My test tool uses java and I need it to use TLS_DHE_RSA_WITH_AES_128_CCM.
Does standard java (Oracle) support CCM cipher suites?
I am seeing oracle links mentioning CCM but am not able to make it work.
Will any policy or setting change mak… Continue reading Java support for TLS_DHE_RSA_WITH_AES_128_CCM
I have a postfix mail server that accepts these cipher suites:
tls_high_cipherlist=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:
ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:
ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RS… Continue reading Cipher suite choice on macOS on Apple Silicon
I am trying to understand why TLS only uses hashing algorithm like SHA-384 instead of using an HMAC instance like HMAC-SHA-384.
If I understand correctly, this cipher suite (ECDHE_ECDSA_WITH_AES_128_GCM_SHA256) means:
It uses Elliptic Cur… Continue reading How does TLS use hashing from the negotiated cipher suite
I’m writing Java code for a decentralized network. (Proof of concept code here.) Each node generates its own self-signed certificate, to be used both server-side and client-side in every connection. Current key choice is 4096 bit RSA. … Continue reading Should I manually select protocol and cipher?
In TLS 1.2, the cipher suite lists the algorithms for everything (key exchange, signature, cipher/MAC). So by choosing a suite, all the algorithms will have been negotiated. And I can see them from the Security tab in Chrome DevTools, such… Continue reading How are key exchange and signature algorithms negotiated in TLS 1.3