Features

Protocol-independent

Algorithms

• public key

• digital signature

• key exchange

• block cipher

• stream cipher

• cryptographic hash

• elliptic-curve

• message authentication code

• key encapsulation mechanism (KEM), including the post-quantum ones supported by the Open Quantum Safe project

Vulnerabilities

• D(HE)at

• Logjam

• Sweet32

• Shatter

• Weak DH

Parameters

• Diffie-Hellman (finite field)

  • defined by standard

    • RFC 2539 (a.k.a MODP, Oakley Group)

    • RFC 3526 (a.k.a MODP for IKE)

    • RFC 5114

    • RFC 7919 (a.k.a FFDH)

  • software built-in

    • Apache HTTP Server

    • HAProxy

    • Postfix

    • ProFTPD

    • SOcket CAT (socat)

• Elliptic curve (domain parameters, object identifiers and field sizes)

  • defined by standard

    • ANSI X9.62 and ANSI X9.63

    • SEC 2

    • NIST SP 800-186

    • Brainpool

    • Curve25519 and Curve448

    • GOST

    • ShangMi

  • defined by research paper

    • SafeCurves

    • Nothing Up My Sleeve (NUMS) curves

    • BADA55 curves

    • pairing-friendly curves

  • parameter forms

    • short Weierstrass over prime, binary and extension fields, the binary one both in polynomial and in optimal normal basis representation

    • Montgomery

    • twisted Edwards over prime and extension fields

Registries

• IANA Assigned Internet Protocol Numbers

Stores

• Trusted root CA certificate trust stores

  • Android

  • Apple

  • Google Chrome

  • Microsoft

  • Mozilla

  • OpenJDK

  • Oracle

• Certificate Transparency (CT) Logs

  • Cloudflare

  • DigiCert

  • Google

  • Let’s Encrypt

  • Sectigo

  • TrustAsia

  • …

Protocol-dependent

Attributes

• Internet Key Exchange (IKE)

  • Vendor ID

  • IKEv1

    • Encryption Algorithm

    • Hash Algorithm

    • Authentication Method

    • Group Description

    • Life Type

    • Pseudorandom Function

    • Certificate Type

    • Identification Type

  • IKEv2

    • Encryption Algorithm

    • Pseudorandom Function

    • Integrity Algorithm

    • Diffie-Hellman Group

    • Extended Sequence Numbers

    • Certificate Type

    • Identification Type

    • Authentication Method

    • Hash Algorithm

• Secure Socket Layer (SSL)

  • cipher kind

• Transport Layer Security (TLS)

  • application-layer protocol name

  • certificate compression algorithm

  • cipher suite

  • compression method

  • elliptic-curve point format

  • extension type

  • fallback SCSV

  • hash and signature algorithm

  • named curve

  • next protocol name

  • psk key exchange mode

  • renegotiation indication

  • token binding parameter

• Secure Shell (SSH)

  • key exchange

  • public key

  • encryption

  • message authentication code

  • compression

  • elliptic curve domain parameter identifier

• Domain Name System

  • DNS resource record (RR) types

  • DNSSEC algorithm types

  • DNSSEC digest types

  • SSHFP algorithm types

  • SSHFP fingerprint types

Client Capabilities

• Transport Layer Security (TLS)

  • Hypertext Transfer Protocol Secure (HTTPS)

    • Chromium

    • Firefox

    • Opera

Vulnerabilities

• Transport Layer Security (TLS)

  • CRIME

  • DROWN

  • Export-grade

  • FREAK

  • Lucky13

  • POODLE

  • RC4 NOMORE