5 ms·
With forward secrecy. Oh, and don't use a block cipher because of attacks. Oh, and don't use RC4 because of .. attacks. Oh bugger.
by willvarfar 13y ago
With forward secrecy.
Oh, and don't use a block cipher because of attacks.
Oh, and don't use RC4 because of .. attacks.
Oh bugger.
- swordswinger12 13y agoUse whatever you want as long as you get an experienced cryptographer to implement it. Even RC4 can be secure if used properly.
- willvarfar 13y agoAnd does TLS use RC4 correctly? Oh...
- lonnyk 13y agoWould you mind elaborating on these problems? I assume all of the 'Oh's mean it is broken?
- agwa 13y agohttp://blog.cryptographyengineering.com/2013/03/attack-of-week-rc4-is-kind-of-broken-in.html http://blog.cryptographyengineering.com/2013/03/attack-of-we... It's possible to implement RC4 "correctly" (as far as we know) by discarding the first several thousand bytes of the keystream, but TLS doesn't do this.
- Hello71 13y agoTurn off SSL 3.0 and TLS 1.0. Problem solved for all known attacks. Unfortunately, that includes your users.