[Ach] Vote for new Cipherstring B [Was: Issue with OpenSSL >0.9.8l]

Aaron Zauner azet at azet.org
Tue May 13 00:22:03 CEST 2014


Argh. I forgot about ECDHE based ciphersuites and the ordering of
CAMELLIA vs. AES and their respective bit-lenghts.

```
EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:DHE-RSA-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-CAMELLIA256-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-CAMELLIA128-SHA:ECDHE-RSA-AES128-SHA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
```

This is an insane cipherstring, but it works.

Compared to the current Cipherstring B this yield the following result
in testing:
http://nopaste.narf.at/compare/p2uTJ8Gi7RGpBktp6nTr/bY1GlbqLyNZhUO27MG5B/

Aaron

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/ach/attachments/20140513/2f2a180b/attachment.sig>


More information about the Ach mailing list