News for hackers. Stuff that matters.

A comment on Achieving a Perfect SSL Labs Score with Go.

Re:Achieving a Perfect SSL Labs Score with Go by saturncoleus on Sunday May 22, 2016 @04:10AM (#11747744)
> This means I need to take the default CipherSuites and simply remove any that use a cipher smaller than 256bit.

Arguably using a higher bit cipher suite should be considered worse, since it reduces accessibility. 128 bit crypto (specifically the GCM suites) are ridiculously faster, to the point where it is practically free to enable it for all websites. Treating 256bit crypto as better feels like it is missing a key point of security: availability.

[ Parent | on HN ]
Re:Achieving a Perfect SSL Labs Score with Go by xorcist on Sunday May 22, 2016 @07:14AM (#11748128)
It is not at all obvious which of AES-128 and AES-256 is more secure.

See for example this 2009 paper: https://www.schneier.com/blog/archives/2009/07/another_new_a...

[ Parent | on HN ]
Re:Achieving a Perfect SSL Labs Score with Go by bpineau on Sunday May 22, 2016 @04:57AM (#11747850)
Right, and they had to salvage HTTP/2 support (which mandates 128 bit AES) in the process.
[ Parent | on HN ]