summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJulien Vehent <julien@linuxwall.info>2015-11-18 09:07:34 -0500
committerJulien Vehent <julien@linuxwall.info>2015-11-18 09:07:34 -0500
commitb682c7b33c0d580361e07c10045f5e9b2a53b8b7 (patch)
treeaf29c000b6e984e738369691207a2b968d0eda75
parent30e3a4c8b7127ce5b0a8785654ea9ee384d7377c (diff)
downloadserver-side-tls-b682c7b33c0d580361e07c10045f5e9b2a53b8b7.zip
server-side-tls-b682c7b33c0d580361e07c10045f5e9b2a53b8b7.tar.gz
server-side-tls-b682c7b33c0d580361e07c10045f5e9b2a53b8b7.tar.bz2
Typo in RC4 weaknesses, fixes #83
-rw-r--r--Server_Side_TLS.mediawiki2
1 files changed, 1 insertions, 1 deletions
diff --git a/Server_Side_TLS.mediawiki b/Server_Side_TLS.mediawiki
index e83f5ac..914f114 100644
--- a/Server_Side_TLS.mediawiki
+++ b/Server_Side_TLS.mediawiki
@@ -980,7 +980,7 @@ It has been proven that RC4 biases in the first 256 bytes of a cipherstream can
In a public discussion ([https://bugzilla.mozilla.org/show_bug.cgi?id=927045 bug 927045]), it has been recommended to replace RC4 with 3DES. This would impact Internet Explorer 7 and 8 users that, depending on the OS, do not support AES, and will negotiate only RC4 or 3DES ciphers. Internet Explorer uses the cryptographic library “schannel”, which is OS dependent. schannel supports AES in Windows Vista, but not in Windows XP.
-While 3DES provides more resistant cryptography, it is also 30 times slower and more cpu intensive than RC4. For large web infrastructure, the CPU cost of replacing 3DES with RC4 is non-zero. For this reason, we recommend that administrators evaluate their traffic patterns, and make the decision of replacing RC4 with 3DES on a per-case basis. At Mozilla, we evaluated that the impact on CPU usage is minor, and thus decided to replace RC4 with 3DES where backward compatibility is required.
+While 3DES provides more resistant cryptography, it is also 30 times slower and more cpu intensive than RC4. For large web infrastructure, the CPU cost of replacing RC4 with 3DES is non-zero. For this reason, we recommend that administrators evaluate their traffic patterns, and make the decision of replacing RC4 with 3DES on a per-case basis. At Mozilla, we evaluated that the impact on CPU usage is minor, and thus decided to replace RC4 with 3DES where backward compatibility is required.
=== CRIME (CVE-2012-4929) ===