OpenSSL ciphers: Difference between revisions
>Samthecrazyman Created, from Dokuwiki |
m Added more info to cipher statements |
||
| Line 23: | Line 23: | ||
|} | |} | ||
* DES is an old, very weak standard. It is not recommended to use DES unless you have a specific need to as all modern ciphers way surpass the security of DES, with modest compatibility. | * DES is an old, very weak standard. It is not recommended to use DES unless you have a specific need to as all modern ciphers way surpass the security of DES, with modest compatibility. Disabled in most modern browsers. | ||
* DES3 is DES run 3 times with a key whitener. It is slightly more secure than DES, but is still susceptible to attack. It just takes longer to break. Treat the same as legacy DES. | * DES3 is DES run 3 times with a key whitener. It is slightly more secure than DES, but is still susceptible to attack. It just takes longer to break. Treat the same as legacy DES. | ||
* Seed is an older, more obscure cipher that should only be used if you have a specific need. | * Seed is an older, more obscure cipher that should only be used if you have a specific need. | ||
* AES is currently the strongest security available, used by NSA for upto top secret documents. Using it at 256 bit will provide you with the best security. | * AES is currently the strongest security available, used by NSA for upto top secret documents. Modern processors can accelerate encryption/decryption with program support (OpenSSL will use acceleration). Using it at 256 bit will provide you with the best security. | ||
* Camellia was a runner up behind AES. It is just as secure, although a little more obscure than AES. However, most browsers that support AES support Camellia too. | * Camellia was a runner up behind AES. It is just as secure, although a little more obscure than AES. However, most browsers that support AES support Camellia too. Recently disabled in modern browsers. | ||