michael luch wrote:
>
> Hello,
>
> I'm using openssl 0.96b (in the EU/ US) and have a question regarding
> ciphers and current export controls. When I create two peers and establish a
> connection the cipher seems to be EXP1024-RC4-SHA with the actual strength
> at 56 bits. This seems to be export constrained somehow in the build/
> configuration step.
> Can I build openssl so that is uses an actual strength of 128 bits? Is this
> allowable/ possible?
>
OpenSSL always supports 128 bit ciphers unless you specifically disable
them in the cipher string setting. Are you using OpenSSL for both sides
of the connection? If not then its possible the other side is export
crippled.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
