New answers tagged

0 votes

Validate HTTPS traffic at later time

TLSv1.3 explicitly prevents this kind of traffic analysis "at later time", i.e. without having the internal state of both sides. This is called "perfect forward secrecy" (PFS). In ...
user avatar
  • 3,395
2 votes
Accepted

Why is there an ASN1 OID and a NIST CURVE reference for the same curve?

Most of the X.509 standards are based on a format called ASN.1 (Abstract Syntax Notation). This is a tag-length-value (TLV) format that describes the structure of data. One of those data structures ...
user avatar
  • 6,655
4 votes

Which cipher is more secure TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA or TLS_RSA_WITH_AES_256_GCM_SHA384?

Neither cipher suite is good. Which one is the least bad depends on your threat model. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA has two problems: It uses SHA-1 to authenticate the server's signature. SHA-1 ...
user avatar
1 vote

Which cipher is more secure TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA or TLS_RSA_WITH_AES_256_GCM_SHA384?

Risks of CBC ciphers To attack an implementation vulnerable to variants of POODLE and Lucky13, one of the sides needs to be vulnerable (not a given, e.g. if SChannel is used on both sides it should be ...
user avatar
  • 7,603
1 vote

Which cipher is more secure TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA or TLS_RSA_WITH_AES_256_GCM_SHA384?

On the cmd line, try: $ openssl ciphers | tr ':' '\n' This would give you the list of ciphers in the decreasing order of "strength". This list should help you evaluate the two ciphers in ...
user avatar
  • 1,136
3 votes

Which cipher is more secure TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA or TLS_RSA_WITH_AES_256_GCM_SHA384?

I agree with @schroeder, I don't think you can do a direct "which is better?" comparison with cipher suites. That said, Mozilla's TLS Recommendations currently lists DHE-RSA-AES256-GCM-...
user avatar
1 vote

Check public key certificate

Since you're using OpenSSL openssl verify -check_ss_sig -CAfile cert.pem cert.pem If you mean you want to do it 'by hand' so that you see the exact data being signed (but still with OpenSSL), the ...
user avatar
0 votes

2 Way SSL for Magento API

What are the changes required in PHP and apache. What are the certificates, the client should pass to the server. What are the certificates, the server should pass to the client. Your questions are ...
user avatar
  • 101

Top 50 recent answers are included