jmhodges / howsmyssl

The web app running howsmyssl.com
MIT License
343 stars 57 forks source link

update our cipher suites from IANA data #696

Closed jmhodges closed 3 months ago

jmhodges commented 3 months ago

This patch updates our full list of TLS ciphersuites from the IANA data as described in the comment about allCipherSuites in all_suites.go.

Some ciphersuites that were found in other sources were folded into that list.

That list also includes some controversial ciphersuites required to be used within the national boundaries of China whose security hasn't been evaluated: TLS_SM4_GCM_SM3 (0x00C6), and TLS_SM4_CCM_SM3 (0x00C6). What to report as their security level will come in a future PR.

The IANA data also no longer lists TLS_GOST2001-GOST89-GOST89 (0x0081). I've not yet found the reason for this, but it perhaps only existed within a specific version of OpenSSL and was replaced with other GOST ciphersuites also added here.