<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">I would like to make the following changes in the cipher specs, in the master branch, which is planned for the next release after 1.0.2<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Anything that uses RC4 or MD5 what was in MEDIUM is now moved to LOW<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Anything that was 40-bit encryption is removed:<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 03 "EXP-RC4-MD5" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 06 "EXP-RC2-CBC-MD5" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 08 "EXP-DES-CBC-SHA" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 0B "EXP-DH-DSS-DES-CBC-SHA" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 0E "EXP-DH-RSA-DES-CBC-SHA" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 11 "EXP-DHE-DSS-DES-CBC-SHA" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 14 "EXP-DHE-RSA-DES-CBC-SHA" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 17 "EXP-ADH-RC4-MD5" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 19 "EXP-ADH-DES-CBC-SHA" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 26 "EXP-KRB5-DES-CBC-SHA" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 27 "EXP-KRB5-RC2-CBC-SHA" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 28 "EXP-KRB5-RC4-SHA" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 29 "EXP-KRB5-DES-CBC-MD5" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 2A "EXP-KRB5-RC2-CBC-MD5" removed */<o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in">/* Cipher 2B "EXP-KRB5-RC4-MD5" removed */<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The value of DEFAULT changes to this:<o:p></o:p></p>
<p class="MsoNormal"> ALL:!LOW:!EXPORT:!aNULL:!eNULL<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The combination of the first and last changes means that anyone who wants or needs to use, say RC4 must explicitly say so.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Comments?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-- <o:p></o:p></p>
<p class="MsoNormal">Principal Security Engineer, Akamai Technologies<o:p></o:p></p>
<p class="MsoNormal">IM: <a href="mailto:rsalz@jabber.me">rsalz@jabber.me</a> Twitter: RichSalz<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>