Re: chacha20 cipher_algbits is 0

2015-05-25 Thread Brent Cook
On Mon, May 25, 2015 at 3:26 PM, Philip Guenther wrote: > On Mon, May 25, 2015 at 6:57 AM, Tim Kuijsten wrote: >> Since I'm running postfix with LibreSSL, some clients encrypt the connection >> using ECDHE-RSA-CHACHA20-POLY1305. Now I'm used to seeing headers like >> "using TLSv1.2 with cipher EC

Re: chacha20 cipher_algbits is 0

2015-05-25 Thread Philip Guenther
On Mon, May 25, 2015 at 6:57 AM, Tim Kuijsten wrote: > Since I'm running postfix with LibreSSL, some clients encrypt the connection > using ECDHE-RSA-CHACHA20-POLY1305. Now I'm used to seeing headers like > "using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)" . But > these ChaCha

Re: chacha20 cipher_algbits is 0

2015-05-25 Thread Tim Kuijsten
ps. this is a cross post from the postfix-users mailing list where they advised me to contact the LibreSSL developers*. recap: > Postfix outputs: > > cipher_usebits/cipher_algbits > > obtained via: > > cipher = SSL_get_current_cipher(ssl); > cipher_usebits = SSL_CIPHER_get_bits(ciphe

chacha20 cipher_algbits is 0

2015-05-25 Thread Tim Kuijsten
Since I'm running postfix with LibreSSL, some clients encrypt the connection using ECDHE-RSA-CHACHA20-POLY1305. Now I'm used to seeing headers like "using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)" . But these ChaCha20 headers look like "using TLSv1.2 with cipher ECDHE-RSA-