Questions tagged [ciphers]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
45 views

How do I get the list of cipher suites supported in a specific TLS version?

Is there any cipher suites supported in one TLS version and not supported in the other? If yes, then is there any documentation that talks about the cipher suites supported in each TLS or SSL versions?...
0
votes
1answer
89 views

Deciphering ciphertext with an unknown key and algorithm [closed]

How can I get started on understanding how to decipher this ciphertext when I don't know the algorithm or key used? TDcbY xqCa NeAA OsWMirK FNFOm bYRUYAkxl,  tqwl  axZU  XTaLrBSFv OI G vWjBZyqhz.  ...
1
vote
2answers
99 views

Is there any CBC based ciphersuite which are secure for known attacks like LUCKY13?

If you select the modern profile in https://mozilla.github.io/server-side-tls/ssl-config-generator/ , you can see it recommends to enable following four cipher suites also. ECDHE-ECDSA-AES256-SHA384 ...
-2
votes
1answer
53 views

aes-128 refers to the block size, key or both

What does the number used in cipher suites next to the symmetric encryption algorithm reefers to? Does it mean each block is divided into 128 bit blocks, the key size or both ?
16
votes
1answer
1k views

How do I know which cipher suites can be disabled?

I have just performed a test on my personal webiste via SSLlabs.com and I'm apparently supporting some weaker ciphers. I've managed to improve several settings (like CAA), but I'm getting stuck at the ...
3
votes
1answer
81 views

How to filter ciphers based on ssl certificate?

I have many ssl certificates. On one of the certificates I run the command openssl x509 -in cert.pem -text -noout it shows: Signature Algorithm: ecdsa-with-SHA256 Public Key Algorithm: id-...
1
vote
3answers
309 views

Losing the Initialization Vector in Cipher Block Chaining

I have written a message and encrypted it using cipher block chaining. What will happen if the receiver loses the Initialization Vector, or doesn't receive at all?
5
votes
1answer
143 views

Do ciphers and encoding schemes make passwords more secure?

I recently came across a tech professional advising a user to take some plaintext of their choice, run it through one of these ciphers, convert it to Base64, and then use the result as their master ...
-1
votes
1answer
69 views

What's the difference between `aes-128-cbf` and `aes-128-gcm`?

We often hear of AES-128-CBF and AES-128-GCM, but what's the difference between them?
-1
votes
1answer
61 views

What's the meaning of cipher's `IV Length`?

What's the meaning of IV length? there provide several stream ciphers, what's the meaning of IV Length? Name Key Size IV Length aes-128-ctr 16 16 aes-192-ctr 24 ...
0
votes
1answer
90 views

For a cipher school challenge I need help breaking this cipher [closed]

[CIPHERTEXTSTARTS]HI wsndtonInehbihs if at t iyoncniegtrf .e noionbpni y,iu.w ahoui hs hroyh!euecsy m.ot ew hrc hb;ntsresnmdma ipMsat ln ts , ryiceg ensh c n byr t k t oe de uhw stiytoer s ...
0
votes
0answers
24 views

Whether cipher suites is related to public key certificate? [duplicate]

I want to use TLS version 1.2 and Authenticated Encryption with Associated Data (AEAD). Can a public key certificate obtained from a certification authority specify which of the ciphers I can use? ...
1
vote
1answer
47 views

OpenSSL Padding Oracle. Specific Ciphers on apache2 seems a little limited

I've seen a lot of articles giving the official explanation on how to prevent OpenSSL Padding Oracles, Usually all of them state that its CBC cipher suites that leave you vulnerable. The following ...
2
votes
1answer
753 views

What is a “non-stitched” ciphersuite?

From the OpenSSL Security Advisory - 0-byte record padding oracle (CVE-2019-1559) In order for this to be exploitable "non-stitched" ciphersuites must be in use. What is a 'non-stitched' ...
0
votes
1answer
74 views

Cipher that does not give confirmation whether decryption is successful

I was reading this question where the author wanted to know whether layered encryption would be better than a long password. The answers to this question all said the same thing: It would be easier ...
-7
votes
1answer
595 views

How to disable obsolete/insecure TLS_RSA ciphers to harden Chrome? [closed]

Multiple vulnerabilities have basically obsoleted TLS_RSA, CBC and QUIC implementations. February 9, 2019: "Seven researchers from all over the world found --yet again-- another way to break RSA ...
0
votes
0answers
20 views

choosing a cipher suite for sending a simple email on embedded systems

Anybody have any input/feedback on this. I've been given the task of researching how to send a 'secure' email using SSL on an embedded system with very limited RAM and Flash ROM. The email is very ...
6
votes
3answers
207 views

What are the 'P' values in some cipher string?

Most of the cipher strings I see are in the format: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ...
0
votes
1answer
152 views

Why are ciphers using DSS being offered when using DH+AES:!DSS?

When I run the following command on Windows 10 with OpenSSL 1.0.2p installed I receive a curious result back (Formatted for readability): openssl ciphers "DH+AES:!DSS:!aDSS:!aNULL" DH-DSS-AES256-GCM-...
4
votes
2answers
462 views

Apache TLS with only ECDHE-RSA-AES128-GCM-SHA256 enabled

Is there anything against this TLS-configuration in Apache: SSLProtocol TLSv1.2 SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256 There are lots of examples that use a more complicated setup, but I believe ...
3
votes
2answers
901 views

Cipher Suite TLS 1.2 - Weak in OHS

I am trying to correct weak encryption in TLS, by doing a test in SSL Labs, it throws weak encryption in the following chpher suite: Current Configuration: SSLCipherSuite HIGH:!MEDIUM:!LOW:!aNULL:!...
4
votes
2answers
166 views

How are ciphers related to cryptographic algorithms like DES or AES?

It looks like I am having a terminology issue here. In cryptography, we have stream ciphers and block ciphers. I understand their difference. We also have cryptographic algorithms like AES (Rijndael). ...
1
vote
1answer
1k views

Why would TLSv1.0 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA still be used?

First, I may be asking a dumb question. I am trying to learn, so please, take it easy on me. Second, if this is not the right place for this question, or you can link me elsewhere, please tell me/ ...
1
vote
1answer
68 views

Could this list of ciphersuites be improved on?

During my self-teaching about trying to find mobile application vulnerabilities, I found a list of cipher suites that are/were considered insecure: md5 sha1 sha-1 md4 rc4 des tripledes 3des If I ...
0
votes
1answer
374 views

How do you find the key domain of the multiplication cipher efficiently?

If the plaintext is made of both letters (a to z) and digits (0 to 9), how do you find the key domain of the multiplication cipher?
0
votes
1answer
143 views

Understanding Cipher suite prefixes

I have been lately reading cipher suites and how it works. I figured how it works in the web servers and there is a doubt regarding the prefixes used in the order. How are RC4-SHA and RC4+SHA ...
0
votes
1answer
1k views

Understanding SSL Cipher suite in Apache

On reading the documentation Apache documentation. A cipher suite example has been given : RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5 I have understood the explanation given by them. My question is ...
2
votes
1answer
122 views

Are the cascading ciphers in Veracrypt susceptible to the meet-in-the-middle attack? (MITM)

Veracrypt offers cascades of ciphers. Are these cascades (at least those comprised of two ciphers) susceptible to the meet-in-the-middle attack? Why not? For example: AES-Twofish Two ciphers ...
3
votes
1answer
1k views

Clarifications regarding ciphers and Nmap scan

I'm running the below Nmap command to test the strength of the cipher suites I have used in my host nmap -sV --script ssl-enum-ciphers -p 443 <host> The Nmap doc says that Each ciphersuite is ...
0
votes
1answer
385 views

Are ciphers with a strength of 112 bits considered weak?

SSL/TLS Ciphers of strength 128 bit is considered strong while ciphers of strength 112 bits is considered weak. Ciphers of 56 bit is understandably weak as they can be easily brute-forced. If it is ...
2
votes
1answer
365 views

SSL - Enabling Forward Secrecy with or without RC4

I'm running an Apache 2 server with Ubuntu 16. Here's my current configuration: SSLProtocol All -SSLv2 -SSLv3 SSLHonorCipherOrder on SSLCipherSuite I'm a bit confused as to what I should use for ...
-4
votes
2answers
430 views

does anyone know how this text is encrypted? [closed]

Im trying to solve a copher challange, but i have no idea on this question. does anyone have any ideas on the encryption method used here? Dvoo wlmv, blf'ev hloevw xrksvi xszoovmtv mfnyvi gdl. Gsrh ...
2
votes
2answers
148 views

How attackers extract data from cipher text using brute force?

Lets take an example. Plain text: HJOU UT Cipher text: IKPV VU Above one just a simple substitution technique. Data is random text. If attackers substitute -1 then they will get GINT TS. Otherwise if ...
6
votes
1answer
2k views

Google Chrome weird random Cipher Suite

This websites gives you information on the SSL cipher suites your browser supports for securing HTTPS connections. If you browse it with Google Chrome, you'll probably see some weird Cipher Suites in ...
1
vote
1answer
522 views

OpenVas remediation cipher suites

This is my first time running a vulnerability scan software like OpenVas. It is really a great tool to found out about vulnerabilities in the network. I have found difficult to troubleshoot the ...
0
votes
1answer
110 views

Is EV (Extended Validation) Certificate Green Bar Affected by Available Cipher Suites?

I am wondering whether Extended Validation (EV) Certificate 'green bar' on the web browser is affected by Cipher Suites. I can't find seem to find a reference that says that apart from this answer. ...
0
votes
1answer
398 views

Is TLS_ECDHE_RSA_WITH_RC4_128_SHA secure?

I was wondering whether TLS_ECDHE_RSA_WITH_RC4_128_SHA is secure. We have added it within the ciphers tag of the Tomcat configuration file.
1
vote
1answer
784 views

How to decrypt a text with substitution cipher? [closed]

I recently got a file which I had encrypted with substitution cipher a long time ago. I went to crack down the key and almost got it. But I encrypted it not just with alphabets but also with numbers ...
1
vote
1answer
550 views

What are the benefits and disadvantage of disabling <TLS1.2 client side (in browser)?

We are considering disabling TLS1.0 and TLS1.1 in the policies for a browser used organization-wide. We already have a primary browser, where >=TLS1.0 is enabled (i.e. SSLv3 is disabled). We do not ...
1
vote
0answers
1k views

SSL/TLS cipher suites order for Windows 2016 hosted https sites

We are SaaS & IaaS provider that predominantly use Windows 2012 (R2) for hosting. We have started evaluating Windows 2016 OS and noticed our sites are no longer accessible via Chrome / Firefox (...
1
vote
1answer
817 views

openssl PSK cipher support

openssl version on ubuntu machine is $ openssl version OpenSSL 1.0.2g 1 Mar 2016 Following is openssl PSK cipher list :- $ openssl ciphers -v 'PSK' PSK-AES256-CBC-SHA SSLv3 Kx=PSK Au=...
1
vote
1answer
2k views

selft signed certificate for AES128-GCM-SHA256 cipher

To generate self signed certificate for AES128-SHA256 cipher using openssl, following commands are used. AES128-SHA256 cipher commands :- openssl genrsa -aes128 -out 1.key 2048 openssl req -...
1
vote
2answers
328 views

What would be a better encryption algorithm then RSA_DES_EDE3_CBC?

First off, please let me explain why I'm asking this at all: The default implementation of EnvelopedCms is using AlgorithmIdentifier which by itself will use RSA_DES_EDE3_CBC or OID 1.2.840.113549.3....
3
votes
2answers
120 views

Using old ciphers in email security

My email provider still supports old SSL_RSA_WITH_RC4_128_SHA ciphers. What does that mean for me? If I use an updated system (Ubuntu 16.04) and an updated client (Thunderbird 52), shouldn't it use ...
4
votes
2answers
2k views

Role of the chosen ciphersuite in an SSL/TLS connection

When it comes to a secure TLS configuration (e.g. for HTTPS), the topic is prominently about the supported cipher suites. I want to fully understand which part of the cipher suite has which role in a ...
2
votes
1answer
563 views

How to disallow specific ssh ciphers and/or MACS (blacklist approach)

I have a report detailing weak ssh ciphers on a system. How can I dis-allow these specific weak ciphers. The common solution which I am aware of is adding the following lines in sshd_config (which is ...
0
votes
2answers
95 views

Given the following yaSSL ciphers, how do I know what's being used?

Scope: I am considerable new on cryptography and only know some basic fundamentals of it. Looking at yaSSL ciphers I am trying to, as an exercise, to figure out which ones are still safe to use by ...
1
vote
1answer
55 views

Secure communication between peers with ANON ciphers and password authentication

Using ANON ciphers (No certificates required/used) while establishing connection and later using the username/password for authentication considered secure communication? Are there any flaws in it, ...
0
votes
1answer
76 views

Changing cipher list of a ctx object after connection establishment

Does changing the cipher list for a CTX object (using SSL_CTX_set_cipher_list), have any effect on the already established connections (connections that had used that very CTX object)?
-1
votes
1answer
268 views

Cipher with mixed case, numbers, hyphen and period [closed]

Given the following cipher text: LE-eheadty.AC2lta oiwyGC24 What possible ciphers could it be?