How to Protect Yourself from NSA Attacks on 1024-bit DH

Re:How to Protect Yourself from NSA Attacks on 1024-bit DH by windexh8er on Friday October 16, 2015 @01:58PM (#10400975)

Is TLS w/3DES still considered safe (TLS_RSA_WITH_3DES_EDE_CBC_SHA)? My guess is that it's the next to "go", but is it a risk currently?

[ Parent | on HN ]

Re:How to Protect Yourself from NSA Attacks on 1024-bit DH by agwa on Friday October 16, 2015 @02:00PM (#10400985)

3DES (the cipher) is secure but incredibly slow. It's often included in server ciphersuites to support old clients (the alternative for old clients is RC4, which is not secure).

Edit: I should mention though that 3DES as used in TLS is vulnerable to BEAST if not mitigated client-side and possibly Lucky 13 too, so the ciphersuite ought to be the next to "go" along with the other CBC ciphersuites. Still better than RC4 though.

[ Parent | on HN ]

Re:How to Protect Yourself from NSA Attacks on 1024-bit DH by windexh8er on Friday October 16, 2015 @02:05PM (#10401017)

Thank you I had an idea of the performance delta. But, comparatively (to something like TLS_RSA_WITH_AES_[256|128]_CBC_SHA) how does it compare?

Edit: Thanks for the edit! What I was looking for.

[ Parent | on HN ]

Re:How to Protect Yourself from NSA Attacks on 1024-bit DH by cnt0 on Friday October 16, 2015 @02:59PM (#10401361)

Very poorly: http://zombe.es/post/4078724716/openssl-cipher-selection

[ Parent | on HN ]

Re:How to Protect Yourself from NSA Attacks on 1024-bit DH by windexh8er on Friday October 16, 2015 @03:35PM (#10401533)

Thank you for the reference!

[ Parent | on HN ]