Skip to content

Instantly share code, notes, and snippets.

@davidkhala
Created April 21, 2021 13:44
Show Gist options
  • Save davidkhala/a864b0a5eb3d7c1288b9181a34891dda to your computer and use it in GitHub Desktop.
Save davidkhala/a864b0a5eb3d7c1288b9181a34891dda to your computer and use it in GitHub Desktop.
Security Notes
  • 2013 TLS中的CBC块加密算法 被破解
  • 2013 TLS中的RC4流加密 被破解
  • GCM是内涵了加密算法和MAC算法的范式套件

TLS 1.3

  • TLS v1.3草案仅支持ChaCha20、AES-GCM和AES-CCM三种对称加密
  • TLS1.3中已经禁止了使用非AEAD的密码学套件
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment