Skip to content

Navigation Menu

Sign in
Appearance settings
Sign up
Appearance settings

RFC 9147 TLS_AES_128_CCM_8_SHA256 must not be used #32509

Copy link
Copy link

Description

@xnox
Issue body actions

In https://www.rfc-editor.org/info/rfc9147/#section-4.5.3

TLS_AES_128_CCM_8_SHA256 MUST NOT be used in DTLS without additional safeguards against forgery. Implementations MUST set usage limits for AEAD_AES_128_CCM_8 based on an understanding of any additional forgery protections that are used.

However currently this cipher is implemented for DTLSv1.3 without additional safeguards against forgery and available to be used.

Either additional safeguards should be implemented, or this cipher should not be marked as available to use with DTLSv1.3.

Reactions are currently unavailable

Metadata

Metadata

Assignees

No one assigned

    Labels

    triaged: bugThe issue/pr is/fixes a bugThe issue/pr is/fixes a bug

    Type

    No type

    Projects

    Status
    Wrangling
    Show more project fields

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

    Morty Proxy This is a proxified and sanitized view of the page, visit original site.