I'm wondering if there is a way I can determine if a cipher suite is weak using python code. For example given this cipher suite as input: TLS_RSA_WITH_AES_256_CBC_SHA I would want my code to return the fact that it's bad because there is no forward secrecy. I'm not asking for python code, I'm just wondering if anyone knows of any good resources that I can use in order to do this (i.e an API call that can give me the score of the cipher suite and reason for scoring)


closed as off-topic by schroeder May 14 at 9:26

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – schroeder
If this question can be reworded to fit the rules in the help center, please edit the question.

  • You are asking if there is a public database that lists all the problems that a cipher suite can have that you can call with an API. Requests for products/services are generally off-topic here. – schroeder May 14 at 9:27

There is no library.

You can look at the Qualys SSL Labs rating guide (not fully updated, you need to look at their blog to see latest updates).

You can look at the source code of testssl.sh for inspiration, it tries to do the same thing.

I would just list IETF IANA cipher suite IDs that are "good" and call all the other "bad", or have "good", "ok" and "bad".

Note that testssl.sh works with openssl names, not IETF names. You may need to translate.

Not the answer you're looking for? Browse other questions tagged or ask your own question.