4 ms·
Is TLS w/3DES still considered safe (TLS_RSA_WITH_3DES_EDE_CBC_SHA)? My guess is that it's the next to "go", but is it a risk currently?
by windexh8er 11y ago
Is TLS w/3DES still considered safe (TLS_RSA_WITH_3DES_EDE_CBC_SHA)? My guess is that it's the next to "go", but is it a risk currently?
- agwa 11y ago3DES (the cipher) is secure but incredibly slow. It's often included in server ciphersuites to support old clients (the alternative for old clients is RC4, which is not secure). Edit: I should mention though that 3DES as used in TLS is vulnerable to BEAST if not mitigated client-side and possibly Lucky 13 too, so the ciphersuite ought to be the next to "go" along with the other CBC ciphersuites. Still better than RC4 though.
- windexh8er 11y agoThank you I had an idea of the performance delta. But, comparatively (to something like TLS_RSA_WITH_AES_[256|128]_CBC_SHA) how does it compare? Edit: Thanks for the edit! What I was looking for.
- cnt0 11y agoVery poorly: http://zombe.es/post/4078724716/openssl-cipher-selection http://zombe.es/post/4078724716/openssl-cipher-selection
- windexh8er 11y agoThank you for the reference!