Quantcast
Channel: SCN: Message List - Security
Viewing all articles
Browse latest Browse all 5338

Re: How to audit the in-use encryption algorithm of commoncryptolib?

$
0
0

Hi,

 

I think you are fine. 1. means authentication only (an attacker can see and manipulate data), 2 means integrity protection (attacker can see data  but can't change them) and 3 means privacy protection (attacker can't see anything). Hence this line


resulting = "min=3 (old:3), max=3 (old:3), use=3 (old:3)"

 

should mean that you will always use the highest protection mode available. BTW if you sniff network traffic then you should immediately see if you can see a stream of bytes indistinguishable from random string or plain text.

 

I can't find which cipher suite is actually used. It would be really nice to know.

 

Cheers


Viewing all articles
Browse latest Browse all 5338

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>