OpenSSL ciphers - Revision history

Sam: Corrected SEED capitalisation

2023-04-03T01:12:01Z

Corrected SEED capitalisation

← Older revision		Revision as of 01:12, 3 April 2023
Line 8:		Line 8:
	\|DES3\|\|168 bits\|\|-des3		\|DES3\|\|168 bits\|\|-des3
	\|-		\|-
	\|~~Seed~~\|\|128 bits\|\|-seed		\|SEED\|\|128 bits\|\|-seed
	\|-		\|-
	\|AES-128\|\|128 bits\|\|-aes128		\|AES-128\|\|128 bits\|\|-aes128
Line 27:		Line 27:
	* DES is an old, very weak standard. It was one of the original Export Ciphers that could easily be broken by the US Government. It is not recommended to use DES unless you have a specific need to as all modern ciphers surpass the security of DES, with modest compatibility. In this day and age, DES is easily broken in a modest amount of time. Disabled in most modern browsers.		* DES is an old, very weak standard. It was one of the original Export Ciphers that could easily be broken by the US Government. It is not recommended to use DES unless you have a specific need to as all modern ciphers surpass the security of DES, with modest compatibility. In this day and age, DES is easily broken in a modest amount of time. Disabled in most modern browsers.
	* DES3 is DES run 3 times with a key whitener. It is slightly more secure than DES, but is still considered susceptible to attack. Used in Payment Card EV terminals but it is being recommended to phase out this cipher.		* DES3 is DES run 3 times with a key whitener. It is slightly more secure than DES, but is still considered susceptible to attack. Used in Payment Card EV terminals but it is being recommended to phase out this cipher.
	* ~~Seed~~ is an older, more obscure cipher that originated in South Korea when export ciphers were considered too weak. There is little support for this outside South Korea and should only be used if you have a specific need.		* SEED is an older, more obscure cipher that originated in South Korea when export ciphers were considered too weak. There is little support for this outside South Korea and should only be used if you have a specific need.
	* AES is currently the strongest security available, used by NSA for up to top secret information. Modern processors can accelerate encryption/decryption with hardware and program support (OpenSSL will use acceleration if the processor supports AES-NI extensions). 256-bit keys provide the best security.		* AES is currently the strongest security available, used by NSA for up to top secret information. Modern processors can accelerate encryption/decryption with hardware and program support (OpenSSL will use acceleration if the processor supports AES-NI extensions). 256-bit keys provide the best security.
	* Camellia was a runner up behind AES. It is a strong cipher although a little more obscure than AES so expect less support. Although secure, it has recently been disabled in modern browsers.		* Camellia was a runner up behind AES. It is a strong cipher although a little more obscure than AES so expect less support. Although secure, it has recently been disabled in modern browsers.

Sam: Clarified a few statements

2023-04-03T01:11:08Z

Clarified a few statements

← Older revision		Revision as of 01:11, 3 April 2023
Line 27:		Line 27:
	* DES is an old, very weak standard. It was one of the original Export Ciphers that could easily be broken by the US Government. It is not recommended to use DES unless you have a specific need to as all modern ciphers surpass the security of DES, with modest compatibility. In this day and age, DES is easily broken in a modest amount of time. Disabled in most modern browsers.		* DES is an old, very weak standard. It was one of the original Export Ciphers that could easily be broken by the US Government. It is not recommended to use DES unless you have a specific need to as all modern ciphers surpass the security of DES, with modest compatibility. In this day and age, DES is easily broken in a modest amount of time. Disabled in most modern browsers.
	* DES3 is DES run 3 times with a key whitener. It is slightly more secure than DES, but is still considered susceptible to attack. Used in Payment Card EV terminals but it is being recommended to phase out this cipher.		* DES3 is DES run 3 times with a key whitener. It is slightly more secure than DES, but is still considered susceptible to attack. Used in Payment Card EV terminals but it is being recommended to phase out this cipher.
	* Seed is an older, more obscure cipher that should only be used if you have a specific need.		* Seed is an older, more obscure cipher that originated in South Korea when export ciphers were considered too weak. There is little support for this outside South Korea and should only be used if you have a specific need.
	* AES is currently the strongest security available, used by NSA for up to top secret information. Modern processors can accelerate encryption/decryption with hardware and program support (OpenSSL will use acceleration). 256-bit keys provide the best security.		* AES is currently the strongest security available, used by NSA for up to top secret information. Modern processors can accelerate encryption/decryption with hardware and program support (OpenSSL will use acceleration if the processor supports AES-NI extensions). 256-bit keys provide the best security.
	* Camellia was a runner up behind AES. It is a strong cipher although a little more obscure than AES so expect less support. Although secure, it has recently been disabled in modern browsers.		* Camellia was a runner up behind AES. It is a strong cipher although a little more obscure than AES so expect less support. Although secure, it has recently been disabled in modern browsers.

Sam: Changed information to make more sense

2015-10-13T00:48:55Z

Changed information to make more sense

← Older revision		Revision as of 00:48, 13 October 2015
Line 23:		Line 23:
	\|}		\|}

	* DES is an old, very weak standard. It is not recommended to use DES unless you have a specific need to as all modern ciphers ~~way~~ surpass the security of DES, with modest compatibility. Disabled in most modern browsers.		== Infomation ==
	* DES3 is DES run 3 times with a key whitener. It is slightly more secure than DES, but is still susceptible to attack. ~~It just takes longer~~ to ~~break. Treat the same as legacy DES~~.
			* DES is an old, very weak standard. It was one of the original Export Ciphers that could easily be broken by the US Government. It is not recommended to use DES unless you have a specific need to as all modern ciphers surpass the security of DES, with modest compatibility. In this day and age, DES is easily broken in a modest amount of time. Disabled in most modern browsers.
			* DES3 is DES run 3 times with a key whitener. It is slightly more secure than DES, but is still considered susceptible to attack. Used in Payment Card EV terminals but it is being recommended to phase out this cipher.
	* Seed is an older, more obscure cipher that should only be used if you have a specific need.		* Seed is an older, more obscure cipher that should only be used if you have a specific need.
	* AES is currently the strongest security available, used by NSA for ~~upto~~ top secret ~~documents~~. Modern processors can accelerate encryption/decryption with program support (OpenSSL will use acceleration). ~~Using it at~~ 256 bit ~~will~~ provide ~~you with~~ the best security.		* AES is currently the strongest security available, used by NSA for up to top secret information. Modern processors can accelerate encryption/decryption with hardware and program support (OpenSSL will use acceleration). 256-bit keys provide the best security.
	* Camellia was a runner up behind AES. It is ~~just as secure,~~ although a little more obscure than AES. ~~However~~, ~~most browsers that support AES support Camellia too. Recently~~ disabled in modern browsers.		* Camellia was a runner up behind AES. It is a strong cipher although a little more obscure than AES so expect less support. Although secure, it has recently been disabled in modern browsers.

Sam: Added more info to cipher statements

2015-02-13T04:46:59Z

Added more info to cipher statements

← Older revision		Revision as of 04:46, 13 February 2015
Line 23:		Line 23:
	\|}		\|}

	* DES is an old, very weak standard. It is not recommended to use DES unless you have a specific need to as all modern ciphers way surpass the security of DES, with modest compatibility.		* DES is an old, very weak standard. It is not recommended to use DES unless you have a specific need to as all modern ciphers way surpass the security of DES, with modest compatibility. Disabled in most modern browsers.
	* DES3 is DES run 3 times with a key whitener. It is slightly more secure than DES, but is still susceptible to attack. It just takes longer to break. Treat the same as legacy DES.		* DES3 is DES run 3 times with a key whitener. It is slightly more secure than DES, but is still susceptible to attack. It just takes longer to break. Treat the same as legacy DES.
	* Seed is an older, more obscure cipher that should only be used if you have a specific need.		* Seed is an older, more obscure cipher that should only be used if you have a specific need.
	* AES is currently the strongest security available, used by NSA for upto top secret documents. Using it at 256 bit will provide you with the best security.		* AES is currently the strongest security available, used by NSA for upto top secret documents. Modern processors can accelerate encryption/decryption with program support (OpenSSL will use acceleration). Using it at 256 bit will provide you with the best security.
	* Camellia was a runner up behind AES. It is just as secure, although a little more obscure than AES. However, most browsers that support AES support Camellia too.		* Camellia was a runner up behind AES. It is just as secure, although a little more obscure than AES. However, most browsers that support AES support Camellia too. Recently disabled in modern browsers.

>Samthecrazyman: Created, from Dokuwiki

2012-02-29T02:10:19Z

Created, from Dokuwiki

New page

This is a list of the ciphers that OpenSSL supports to generate an RSA key. (<code>openssl genrsa...</code>)

{| border="1"
!Cipher!!Bits!!Switch
|-
|DES||56 bits||-des
|-
|DES3||168 bits||-des3
|-
|Seed||128 bits||-seed
|-
|AES-128||128 bits||-aes128
|-
|AES-192||192 bits||-aes192
|-
|AES-256||256 bits||-aes256
|-
|Camellia-128||128 bits||-camellia128
|-
|Camellia-192||192 bits||-camellia192
|-
|Camellia-256||256 bits||-camellia256
|}

* DES is an old, very weak standard. It is not recommended to use DES unless you have a specific need to as all modern ciphers way surpass the security of DES, with modest compatibility.
* DES3 is DES run 3 times with a key whitener. It is slightly more secure than DES, but is still susceptible to attack. It just takes longer to break. Treat the same as legacy DES.
* Seed is an older, more obscure cipher that should only be used if you have a specific need.
* AES is currently the strongest security available, used by NSA for upto top secret documents. Using it at 256 bit will provide you with the best security.
* Camellia was a runner up behind AES. It is just as secure, although a little more obscure than AES. However, most browsers that support AES support Camellia too.