[openssl-dev] [openssl.org #3953] Bug: !RSA does not exclude aRSA

Kurt Roeckx via RT rt at openssl.org
Wed Jul 22 20:49:05 UTC 2015


On Wed, Jul 22, 2015 at 07:38:48PM +0000, Lynch, Paul[E] via RT wrote:
> The ciphers documentation page (https://www.openssl.org/docs/apps/ciphers.html) says:
> 
> "kRSA, aRSA, RSA
>    cipher suites using RSA key exchange, authentication or either respectively."
> 
> That sounds like "RSA" should be a superset of kRSA and aRSA, but actually aRSA includes cipher suites not in "RSA", as can be seen from:

I think the problem is that "RSA" does "and" instead of "or", and
ends up being the same as "kRSA".


Kurt




More information about the openssl-dev mailing list