[Ach] OpenSSL Cipher Strings: kDHE/kECDHE

Aaron Zauner azet at azet.org
Wed Mar 11 00:04:04 CET 2015


Hi Peter,

Peter Ulber wrote:
> Nice tool, thanks. So e.g. kDHE is a notation which is supported by
> OpenSSL 1.0.2 (and newer). Before that we have DHE. So in a nutshell:

Hmm just looked it up again. It's 1.0.1, I guess. And kDHE is used in
0.9.8. See:
http://openssl.6102.n7.nabble.com/Inconsistency-with-handling-preferences-of-Cipherstrings-0-9-7m-1-0-0a-tp50112p50116.html


> DHE = kDHE:!aNULL
> 
> Right? 
> 

To the best of my knowledge: Yes.

Aaron

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/ach/attachments/20150311/d4aca6b4/attachment.sig>


More information about the Ach mailing list