Cipher Suites: Best Practices and Pitfalls

PRESENTED BY: Cipher Suite Practices and Pitfalls : An Overview of Cipher Suite Configuration and Pitfalls on BIG- A Cipher suite is a named combination of authentication, encryption, message authentication code (MAC) and key exchange algorithms used to negotiate the security settings for a network connection using the Transport Layer Security (TLS) / Secure Sockets Layer (SSL) network protocol. WikipediaWhen we talk about configuring cipherson BIG-IP we re really talking about configuring Cipher suites. More specifically the configured list of Cipher suites is a menu of options available to be negotiated. Each Cipher suite specifies the key exchange algorithm, authentication algorithm, Cipher , Cipher mode, and MAC that will be recommend reading K15194: Overview of the BIG-IP SSL/TLS Cipher suitefor more s consider this Cipher suite:ECDHE-RSA-AES256-GCM-SHA384 Key Exchange Algorithm: ECDHE (Elliptic Curve Diffie-Hellman Ephemeral)Authentication Algorithm: RSAC ipher: AES256 (aka AES with a 256-bit key) Cipher Mode: GCM (Galois/Counter Mode)MAC: SHA384 (aka SHA-2 (Secure Hash Algorithm 2) with 384-bit hash)This is arguably the strongest Cipher suite we have on BIG-IP at this about this Cipher suite:AES128-SHAKey Exchange Algorithm: RSA (Implied) When it isn t specified, presume Algorithm: RSA(Implied) When it isn t specified, presume : AES128 (aka AES with a 128-bit key) Cipher Mode: CBC ( Cipher Block Chaining) (Impli)

Symmetric key has only K private. Both ends use the same key, which poses the problem of key distribution. The advantage is higher performance; common key sizes are 128-bit or 256-bit. SSL/TLS uses both systems –the Key Exchange Algorithm is the public key system used to exchange the symmetric key. Examples: ECDHE, DHE, RSA, ECDH, ADH

Loading..

Tags:

  Distribution, Symmetric, Key distribution, Symmetric key

Information

Related search queries