Improve the default TLS session ticket key

TJ Saunders tj at castaglia.org
Fri Dec 25 22:27:16 UTC 2015

Previous message: RT link does not work
Next message: OpenSSL 1.0.2e. Failed build due to (possibly) wrong include of dummytest.c
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

The default TLS session ticket key used by OpenSSL uses
AES128-CBC-SHA256; considering the security offered by newer
ciphersuites, the TLS session ticket key algorithm should be
updated/improved, at least to AES256-CBC-SHA256.  See:

  https://github.com/openssl/openssl/issues/514

Cheers,
TJ

Previous message: RT link does not work
Next message: OpenSSL 1.0.2e. Failed build due to (possibly) wrong include of dummytest.c
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the openssl-bugs-mod mailing list