-
Notifications
You must be signed in to change notification settings - Fork 57
/
insecure_suites.go
166 lines (160 loc) · 7.37 KB
/
insecure_suites.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
package main
var (
fewBitReason = "uses keys smaller than 128 bits in its encryption"
nullReason = "specifies no encryption at all for the connection"
nullAuthReason = "is open to man-in-the-middle attacks because it does not authenticate the server"
weirdNSSReason = "was meant to die with SSL 3.0 and is of unknown safety"
rc4Reason = "uses RC4 which has insecure biases in its output"
)
// Cipher suites with less than 128-bit encryption.
// Generated with (on an OpenSSL build newer than 1.0.1e with the enable-ssl-trace option):
// ./openssl ciphers -v -stdname LOW:EXPORT | awk '{ print "\""$1"\": true," }' | grep -v UNKNOWN | sed 's/SSL/TLS/' | sort
//
// plus the manual addition of:
// TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5 40-bit encryption, export grade
// TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA 40-bit encryption, export grade
// TLS_KRB5_EXPORT_WITH_RC4_40_MD5 40-bit encryption, export grade
// TLS_KRB5_EXPORT_WITH_RC4_40_SHA 40-bit encryption, export grade
// TLS_KRB5_WITH_DES_CBC_MD5 56-bit encryption
// TLS_KRB5_WITH_DES_CBC_SHA 56-bit encryption
//
// and, from https://tools.ietf.org/html/draft-ietf-tls-56-bit-ciphersuites-01:
//
// TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA 56-bit encryption, export grade
// TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA 56-bit encryption, export grade
// TLS_RSA_EXPORT1024_WITH_RC4_56_SHA 56-bit encryption, export grade
// TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA 56-bit encryption, export grade
//
// These last, I believe, are IE only.
var fewBitCipherSuites = map[string]bool{
"TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA": true,
"TLS_DHE_DSS_WITH_DES_CBC_SHA": true,
"TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA": true,
"TLS_DHE_RSA_WITH_DES_CBC_SHA": true,
"TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA": true,
"TLS_DH_DSS_WITH_DES_CBC_SHA": true,
"TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA": true,
"TLS_DH_RSA_WITH_DES_CBC_SHA": true,
"TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA": true,
"TLS_DH_anon_EXPORT_WITH_RC4_40_MD5": true,
"TLS_DH_anon_WITH_DES_CBC_SHA": true,
"TLS_RSA_EXPORT_WITH_DES40_CBC_SHA": true,
"TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5": true,
"TLS_RSA_EXPORT_WITH_RC4_40_MD5": true,
"TLS_RSA_WITH_DES_CBC_SHA": true,
"TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5": true,
"TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA": true,
"TLS_KRB5_EXPORT_WITH_RC4_40_MD5": true,
"TLS_KRB5_EXPORT_WITH_RC4_40_SHA": true,
"TLS_KRB5_WITH_DES_CBC_MD5": true,
"TLS_KRB5_WITH_DES_CBC_SHA": true,
"TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA": true,
"TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA": true,
"TLS_RSA_EXPORT1024_WITH_RC4_56_SHA": true,
"TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA": true,
}
// Cipher suites that offer no encryption.
// Generated with:
// grep NULL all_suites.go
//
// A smaller subset can be found with (on an OpenSSL build newer than 1.0.1e
// with the enable-ssl-trace option):
// ./openssl ciphers -v -stdname NULL | awk '{ print "\""$1"\": true," }' | sed 's/SSL/TLS/' | sort
var nullCipherSuites = map[string]bool{
"TLS_DHE_PSK_WITH_NULL_SHA": true,
"TLS_DHE_PSK_WITH_NULL_SHA256": true,
"TLS_DHE_PSK_WITH_NULL_SHA384": true,
"TLS_ECDHE_ECDSA_WITH_NULL_SHA": true,
"TLS_ECDHE_PSK_WITH_NULL_SHA": true,
"TLS_ECDHE_PSK_WITH_NULL_SHA256": true,
"TLS_ECDHE_PSK_WITH_NULL_SHA384": true,
"TLS_ECDHE_RSA_WITH_NULL_SHA": true,
"TLS_ECDH_ECDSA_WITH_NULL_SHA": true,
"TLS_ECDH_RSA_WITH_NULL_SHA": true,
"TLS_ECDH_anon_WITH_NULL_SHA": true,
"TLS_NULL_WITH_NULL_NULL": true,
"TLS_PSK_WITH_NULL_SHA": true,
"TLS_PSK_WITH_NULL_SHA256": true,
"TLS_PSK_WITH_NULL_SHA384": true,
"TLS_RSA_PSK_WITH_NULL_SHA": true,
"TLS_RSA_PSK_WITH_NULL_SHA256": true,
"TLS_RSA_PSK_WITH_NULL_SHA384": true,
"TLS_RSA_WITH_NULL_MD5": true,
"TLS_RSA_WITH_NULL_SHA": true,
"TLS_RSA_WITH_NULL_SHA256": true,
}
// Cipher suites that offer encryption, but no authentication, opening them up
// to MITM attacks.
//
// Generated by combining
// grep anon all_suites.go | awk '{ print $2 }' | sed 's/,/: true,/' | sort
var nullAuthCipherSuites = map[string]bool{
"TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA": true,
"TLS_DH_anon_EXPORT_WITH_RC4_40_MD5": true,
"TLS_DH_anon_WITH_3DES_EDE_CBC_SHA": true,
"TLS_DH_anon_WITH_AES_128_CBC_SHA": true,
"TLS_DH_anon_WITH_AES_128_CBC_SHA256": true,
"TLS_DH_anon_WITH_AES_128_GCM_SHA256": true,
"TLS_DH_anon_WITH_AES_256_CBC_SHA": true,
"TLS_DH_anon_WITH_AES_256_CBC_SHA256": true,
"TLS_DH_anon_WITH_AES_256_GCM_SHA384": true,
"TLS_DH_anon_WITH_ARIA_128_CBC_SHA256": true,
"TLS_DH_anon_WITH_ARIA_128_GCM_SHA256": true,
"TLS_DH_anon_WITH_ARIA_256_CBC_SHA384": true,
"TLS_DH_anon_WITH_ARIA_256_GCM_SHA384": true,
"TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA": true,
"TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256": true,
"TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256": true,
"TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA": true,
"TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256": true,
"TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384": true,
"TLS_DH_anon_WITH_DES_CBC_SHA": true,
"TLS_DH_anon_WITH_RC4_128_MD5": true,
"TLS_DH_anon_WITH_SEED_CBC_SHA": true,
"TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA": true,
"TLS_ECDH_anon_WITH_AES_128_CBC_SHA": true,
"TLS_ECDH_anon_WITH_AES_256_CBC_SHA": true,
"TLS_ECDH_anon_WITH_NULL_SHA": true,
"TLS_ECDH_anon_WITH_RC4_128_SHA": true,
}
// Cipher suites that use RC4 which has biases in its output, and has
// been marked as insecure by the IETF. See https://tools.ietf.org/html/rfc7465
//
// Generated with:
// grep RC4 all_suites.go
//
// and confirmed against
// https://tools.ietf.org/html/rfc7465#appendix-A which is missing 4
// cipher suites included here.
var rc4CipherSuites = map[string]bool{
"TLS_RSA_EXPORT_WITH_RC4_40_MD5": true,
"TLS_RSA_WITH_RC4_128_MD5": true,
"TLS_RSA_WITH_RC4_128_SHA": true,
"TLS_DH_anon_EXPORT_WITH_RC4_40_MD5": true,
"TLS_DH_anon_WITH_RC4_128_MD5": true,
"TLS_KRB5_WITH_RC4_128_SHA": true,
"TLS_KRB5_WITH_RC4_128_MD5": true,
"TLS_KRB5_EXPORT_WITH_RC4_40_SHA": true,
"TLS_KRB5_EXPORT_WITH_RC4_40_MD5": true,
"TLS_PSK_WITH_RC4_128_SHA": true,
"TLS_DHE_PSK_WITH_RC4_128_SHA": true,
"TLS_RSA_PSK_WITH_RC4_128_SHA": true,
"TLS_ECDH_ECDSA_WITH_RC4_128_SHA": true,
"TLS_ECDHE_ECDSA_WITH_RC4_128_SHA": true,
"TLS_ECDH_RSA_WITH_RC4_128_SHA": true,
"TLS_ECDHE_RSA_WITH_RC4_128_SHA": true,
"TLS_ECDH_anon_WITH_RC4_128_SHA": true,
"TLS_ECDHE_PSK_WITH_RC4_128_SHA": true,
"TLS_RSA_EXPORT1024_WITH_RC4_56_SHA": true,
"TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA": true,
"TLS_DHE_DSS_WITH_RC4_128_SHA": true,
}
// Obsolete cipher suites in NSS that were meant to die with SSL 3.0 but
// 0xFEFF is still emitted by Firefox 25.0. Discussed here:
// https://groups.google.com/forum/#!topic/mozilla.dev.tech.crypto/oWk0FkKsek4
// and
// http://www-archive.mozilla.org/projects/security/pki/nss/ssl/fips-ssl-ciphersuites.html
var weirdNSSSuites = map[uint16]string{
0xFEFE: "SSL_RSA_FIPS_WITH_DES_CBC_SHA",
0xFEFF: "SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA",
}