3 ms·
Why did Openssl only disable TDES and not Blowfish?
by yalogin 10y ago
Why did Openssl only disable TDES and not Blowfish?
- tptacek 10y agoIs there a browser that supports a Blowfish ciphersuite?
- CiPHPerCoder 10y agoNo, but it's the OpenVPN default, so unencrypted traffic over OpenVPN might be interesting to play with.
- niftich 10y agoThere are no TLS or SSL ciphersuites that use Blowfish. Some sources, some old, some new -- you'd reasonably expect Blowfish to be an older suite if it exists: [1] https://testssl.sh/mapping-rfc.txt https://testssl.sh/mapping-rfc.txt [2] https://testssl.sh/openssl-rfc.mappping.html https://testssl.sh/openssl-rfc.mappping.html [3] https://tls.mbed.org/supported-ssl-ciphersuites https://tls.mbed.org/supported-ssl-ciphersuites [4] http://www.thesprawl.org/research/tls-and-ssl-cipher-suites/ http://www.thesprawl.org/research/tls-and-ssl-cipher-suites/ Also note that Bruce Schneier, Blowfish's creator, has been encouraging people to move off of it for years, since he went on to design two more block ciphers since.