Commit 61094cf3 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

128 bit AES ciphersuites should be classified as HIGH.

parent 6d00101e

ssl/s3_lib.c

+10 −10
Original line number Diff line number Diff line
@@ -749,7 +749,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={ 
	TLS1_TXT_RSA_WITH_AES_128_SHA,

	TLS1_CK_RSA_WITH_AES_128_SHA,

	SSL_kRSA|SSL_aRSA|SSL_AES|SSL_SHA |SSL_TLSV1,

	SSL_NOT_EXP|SSL_MEDIUM,

	SSL_NOT_EXP|SSL_HIGH,

	0,

	128,

	128,
@@ -762,7 +762,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={ 
	TLS1_TXT_DH_DSS_WITH_AES_128_SHA,

	TLS1_CK_DH_DSS_WITH_AES_128_SHA,

	SSL_kDHd|SSL_aDH|SSL_AES|SSL_SHA|SSL_TLSV1,

	SSL_NOT_EXP|SSL_MEDIUM,

	SSL_NOT_EXP|SSL_HIGH,

	0,

	128,

	128,
@@ -775,7 +775,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={ 
	TLS1_TXT_DH_RSA_WITH_AES_128_SHA,

	TLS1_CK_DH_RSA_WITH_AES_128_SHA,

	SSL_kDHr|SSL_aDH|SSL_AES|SSL_SHA|SSL_TLSV1,

	SSL_NOT_EXP|SSL_MEDIUM,

	SSL_NOT_EXP|SSL_HIGH,

	0,

	128,

	128,
@@ -788,7 +788,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={ 
	TLS1_TXT_DHE_DSS_WITH_AES_128_SHA,

	TLS1_CK_DHE_DSS_WITH_AES_128_SHA,

	SSL_kEDH|SSL_aDSS|SSL_AES|SSL_SHA|SSL_TLSV1,

	SSL_NOT_EXP|SSL_MEDIUM,

	SSL_NOT_EXP|SSL_HIGH,

	0,

	128,

	128,
@@ -801,7 +801,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={ 
	TLS1_TXT_DHE_RSA_WITH_AES_128_SHA,

	TLS1_CK_DHE_RSA_WITH_AES_128_SHA,

	SSL_kEDH|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,

	SSL_NOT_EXP|SSL_MEDIUM,

	SSL_NOT_EXP|SSL_HIGH,

	0,

	128,

	128,
@@ -814,7 +814,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={ 
	TLS1_TXT_ADH_WITH_AES_128_SHA,

	TLS1_CK_ADH_WITH_AES_128_SHA,

	SSL_kEDH|SSL_aNULL|SSL_AES|SSL_SHA|SSL_TLSV1,

	SSL_NOT_EXP|SSL_MEDIUM,

	SSL_NOT_EXP|SSL_HIGH,

	0,

	128,

	128,
@@ -963,7 +963,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={ 
            TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA,

            TLS1_CK_ECDH_ECDSA_WITH_AES_128_CBC_SHA,

            SSL_kECDH|SSL_aECDSA|SSL_AES|SSL_SHA|SSL_TLSV1,

            SSL_NOT_EXP|SSL_MEDIUM,

            SSL_NOT_EXP|SSL_HIGH,

            0,

            128,

            128,
@@ -1047,7 +1047,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={ 
            TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA,

            TLS1_CK_ECDH_RSA_WITH_AES_128_CBC_SHA,

            SSL_kECDH|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,

            SSL_NOT_EXP|SSL_MEDIUM,

            SSL_NOT_EXP|SSL_HIGH,

            0,

            128,

            128,
@@ -1321,7 +1321,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={ 
            TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,

            TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,

            SSL_kECDHE|SSL_aECDSA|SSL_AES|SSL_SHA|SSL_TLSV1,

            SSL_NOT_EXP|SSL_MEDIUM,

            SSL_NOT_EXP|SSL_HIGH,

            0,

            128,

            128,
@@ -1337,7 +1337,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={ 
            TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA,

            TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA,

            SSL_kECDHE|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,

            SSL_NOT_EXP|SSL_MEDIUM,

            SSL_NOT_EXP|SSL_HIGH,

            0,

            128,

            128,