RE: QID 38863 - Cryptographically Weak Key Exchange Size

2022-07-21 Thread Saicharan.Burle
Hi Chriss Yeah kind of theoretical question. Recently a new Qualys QID vulnerability was released, QID: 38863 - Cryptographically Weak Key Exchange Size, which deals with weak cipher key exchange key values. So just checking if there is a way to specify a key size for the exchange? Thanks

Re: QID 38863 - Cryptographically Weak Key Exchange Size

2022-07-21 Thread Christopher Schultz
Saicharan, On 7/18/22 10:45, saicharan.bu...@wellsfargo.com.INVALID wrote: Hi All, A new vulnerability has surfaced regarding TLS and Key Exchange agreement (more specifically the key size.) "The SSL/TLS server supports key exchanges that are cryptographically weaker than recommended. Key

QID 38863 - Cryptographically Weak Key Exchange Size

2022-07-18 Thread Saicharan.Burle
Hi All, A new vulnerability has surfaced regarding TLS and Key Exchange agreement (more specifically the key size.) "The SSL/TLS server supports key exchanges that are cryptographically weaker than recommended. Key exchanges should provide at least 224 bits of security, which translates to a