Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

questions around cipher suites ranges #151

Open
kylak opened this issue Aug 6, 2024 · 4 comments
Open

questions around cipher suites ranges #151

kylak opened this issue Aug 6, 2024 · 4 comments
Labels

Comments

@kylak
Copy link

kylak commented Aug 6, 2024

Hello.

I have several questions concerning the cipher suites ranges (I didn't find answers in the doc) :

a. why the iana range contains only 24 cipher suites since on the iana website they have more than 300 cipher suites.
b. why the "TLSv10" and "TLSv11" ranges have no cipher suites ?
c. to what meaning correspond the ranges "huge" and "safe" ?
d. could you explain the meaning of "some shifted by 64 bytes to the right" ("shifted" range) ?
e. the "rfc" range gives 2064 cipher suites which seems a lot since for example rustls has no more than 400 cipher suites taken from the various RFCs covering TLS, so where does the rfc range find its 2064 cipher suites?

Regards.

@EnDe
Copy link
Member

EnDe commented Aug 7, 2024

Description of ranges for --cipherrange=RANGE have been updated in help.txt, see o-saft.pl --help=options.
Thanks.

@kylak
Copy link
Author

kylak commented Aug 7, 2024

Sorry, it doesn't answer the questions a, c, d, and e.

@EnDe
Copy link
Member

EnDe commented Aug 7, 2024

Sorry, a, and d. see the documentation.
According c.: huge and safe are just a ranges.
According e. "rfc": definition of the range is a bit lazy, as it also includes some unassigned cipher constants, updated in help.txt

@kylak
Copy link
Author

kylak commented Aug 8, 2024

Ok, thanks, I didn't realize the "recommended" for the iana.
So I presume that the 'rfc' range contains (at least) all the iana and rfc cipher suites, right ?

@EnDe EnDe added question and removed enhancement labels Aug 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants