[Cryptography] What TLS ciphersuites are still OK?

[Eugen Leitl]

----- Forwarded message from Ben Laurie <ben at links.org> -----

Date: Mon, 9 Sep 2013 17:29:24 +0100
From: Ben Laurie <ben at links.org>
To: Cryptography Mailing List <cryptography at metzdowd.com>
Subject: [Cryptography] What TLS ciphersuites are still OK?

Perry asked me to summarise the status of TLS a while back ... luckily I
don't have to because someone else has:

http://tools.ietf.org/html/draft-sheffer-tls-bcp-00

In short, I agree with that draft. And the brief summary is: there's only
one ciphersuite left that's good, and unfortunately its only available in
TLS 1.2:

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

_______________________________________________
The cryptography mailing list
cryptography at metzdowd.com
http://www.metzdowd.com/mailman/listinfo/cryptography


----- End forwarded message -----
-- 
Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org
AC894EC5: 38A5 5F46 A4FF 59B8 336B  47EE F46E 3489 AC89 4EC5