AnsweredAssumed Answered

Why are poor implementations resulting in a "weak" label for TLS_RSA_WITH_AES_256_GCM_SHA384?

Question asked by Ken Peirce on Mar 5, 2018
Latest reply on Mar 5, 2018 by Rob_T
  • Comment • 1

I would like to understand why Qualys is identifying this SSL ciphersuite as weak: TLS_RSA_WITH_AES_256_GCM_SHA384. I am aware of the Bleichenbacher Weak Oracle attack. There are implementations of the ciphersuite that are weak/deficient and many others that are not. The deficient implementations need to be identified and patched. This is not the same as having an algorithmic design weakness. It is a software bug.   

Rob_T
Rob_T Mar 5, 2018 11:49 AM
Correct Answer

Hi
cause these are static ciphers which do not support FS.
As well these chiphers will be not supported by TLS 1.3 anymore
BR,
Rob

See the reply in context
No one else had this question

Outcomes