Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

With forward secrecy.

Oh, and don't use a block cipher because of attacks.

Oh, and don't use RC4 because of .. attacks.

Oh bugger.



Turn off SSL 3.0 and TLS 1.0.

Problem solved for all known attacks.

Unfortunately, that includes your users.


Use whatever you want as long as you get an experienced cryptographer to implement it. Even RC4 can be secure if used properly.


And does TLS use RC4 correctly? Oh...


Would you mind elaborating on these problems? I assume all of the 'Oh's mean it is broken?


http://blog.cryptographyengineering.com/2013/03/attack-of-we...

It's possible to implement RC4 "correctly" (as far as we know) by discarding the first several thousand bytes of the keystream, but TLS doesn't do this.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: