Le jeudi 17 janvier 2013 15:16:52 UTC+1, Lucas Vella a écrit : > Would be of interest to have the eSTREAM selected ciphers (Profile 1, > Software) implemented on NSS? > > There is at least one SSL package, cyaSSL, having two of them four shipped as > extensions, Rabbit and HC-128: > TLS_RSA_WITH_RABBIT_CBC_SHA > TLS_RSA_WITH_HC_128_CBC_SHA
And also TLS_RSA_WITH_HC_128_CBC_MD5. No ciphersuite identifiers have been defined for these ciphersuites, so interoperability isn't guaranteed. They choosed {0x00, 0xFB}, {0x00, 0xFC} and {0x00, 0xFD} as identifiers, without following IANA rules (RFC5246 part 12, RFC2434). > What the "CBC" means in their package I am still to find out, since they are > all stream ciphers, and can be used by simply XORing the algoritmn output > with the plain/cipher-text, pretty much like RC4. The CBC means absolutely nothing and shouldn't be here. > About the cipher security, it is ascertained by the European Union eSTREAM > project process: http://www.ecrypt.eu.org/stream/ It could be nice to have another stream cipher appart from RC4. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto