File tree Expand file tree Collapse file tree 2 files changed +2
-1
lines changed Expand file tree Collapse file tree 2 files changed +2
-1
lines changed Original file line number Diff line number Diff line change 696
696
* to enable (some of) them with mbedtls_ssl_conf_ciphersuites() by including
697
697
* them explicitly.
698
698
*
699
- * A man-in-the browser attacker can recover authentication tokens sent through
699
+ * A man-in-the- browser attacker can recover authentication tokens sent through
700
700
* a TLS connection using a 3DES based cipher suite (see "On the Practical
701
701
* (In-)Security of 64-bit Block Ciphers" by Karthikeyan Bhargavan and Gaëtan
702
702
* Leurent, see https://sweet32.info/SWEET32_CCS16.pdf). If this attack falls
Original file line number Diff line number Diff line change @@ -62,6 +62,7 @@ FILTER=""
62
62
# avoid plain DES but keep 3DES-EDE-CBC (mbedTLS), DES-CBC3 (OpenSSL)
63
63
# - ARIA: not in default config.h + requires OpenSSL >= 1.1.1
64
64
# - ChachaPoly: requires OpenSSL >= 1.1.0
65
+ # - 3DES: not in default config
65
66
EXCLUDE=' NULL\|DES-CBC-\|RC4\|3DES\|ARCFOUR\|ARIA\|CHACHA20-POLY1305'
66
67
VERBOSE=" "
67
68
MEMCHECK=0
You can’t perform that action at this time.
0 commit comments