The AES question (was Re: Stronger SSL Encryption)

2001-04-27 Thread Joseph Ashwood
- Original Message - From: "Francis DeLaMaza" <[EMAIL PROTECTED]> > BTW, what is AES? - Original Message - From: "Francis DeLaMaza" <[EMAIL PROTECTED]> > Any disadvantages to AES? Who is > developing it? Opensource? AES is the soon to be government standard titled "Advanced Enc

Re: Stronger SSL Encryption

2001-04-27 Thread Francis DeLaMaza
Hi, > Well the key sizes are fixed in the TLS/SSL standards. If you change > them the server and client is broken and no longer compliant. True. But just to test the proof of concept, it would be O.K. > You could use an experimental ciphersuite number for a new ciphersuite > which would then on

Re: Stronger SSL Encryption

2001-04-27 Thread Dr S N Henson
Francis DeLaMaza wrote: > > Greg, > > Based on what I've discovered so far, and your feedback, it seems that the > best approach is to tweek the default keylegth of the RC4/SHA ciphersuite. > This cipher method comes standard under SSL v3/TLS1 at 56-bit and 128-bit > functionality. > > It doe

Re: Stronger SSL Encryption

2001-04-26 Thread Eric Rescorla
Francis DeLaMaza <[EMAIL PROTECTED]> writes: > Greg, > > Based on what I've discovered so far, and your feedback, it seems that the > best approach is to tweek the default keylegth of the RC4/SHA ciphersuite. > This cipher method comes standard under SSL v3/TLS1 at 56-bit and 128-bit > functiona

Re: Stronger SSL Encryption

2001-04-26 Thread Francis DeLaMaza
Greg, Based on what I've discovered so far, and your feedback, it seems that the best approach is to tweek the default keylegth of the RC4/SHA ciphersuite. This cipher method comes standard under SSL v3/TLS1 at 56-bit and 128-bit functionality. It doesn't seem that it should take much more than

Stronger SSL Encryption

2001-04-25 Thread Francis DeLaMaza
Hi, I have been experimenting with trying to increase the encryption that my browser negotiates to my web-server. So far I've successfully generated, self-signed and deployed a 2048 (256-bit) length certificate. I understand that in order to achieve the desired results I must also modify the br