Which RSA Key Exchange or/and RSA Signature algorithms do Openssl 1.1.1 use for ciphers AES256-GCM-SHA384 and ECDHE-RSA-CAMELLIA128-SHA256? Thanks.

Viktor Dukhovni openssl-users at dukhovni.org
Tue Aug 15 21:23:46 UTC 2023


On Tue, Aug 15, 2023 at 06:47:36PM +0000, Ma Zhenhua wrote:

> I know that both key exchange and authenticate methods of
> AES256-GCM-SHA384 is RSA, the authentication method of
> ECDHE-RSA-CAMELLIA128-SHA256 is RSA.
> 
> I'm using 1_1_1_stable branch and would like to figure out which RSA
> key exchange or/and RSA signature algorithm 1_1_1_stable is using for
> ciphers AES256-GCM-SHA384 and ECDHE-RSA-CAMELLIA128-SHA256. Thanks in
> advance.

RSA key exchange is defined in RFC2246:

    https://datatracker.ietf.org/doc/html/rfc2246#section-7.4.7.1
    https://datatracker.ietf.org/doc/html/rfc2246#section-8.1.1

> RSA-PKCS#1 v1.5

This is of course independent of the OpenSSL version, and indeed of
OpenSSL, since it is a matter of TLS protocol interoperability and needs
to be compatible across all TLS 1.0–1.2 implementations.

-- 
    Viktor.


More information about the openssl-users mailing list