tls-tris

Filippo Valsorda b5fd625da3 crypto/tls: disable CBC cipher suites with SHA-256 by default As is, they were fully vulnerable to the Lucky13 attack. The SHA1 variants implement limited countermeasures (see f28cf8346c4) but the SHA256 ones are apparently used rarely enough (see 8741504888b) that it's not worth the extra code. Instead, disable them by default and update the warning. Updates #13385 Updates #15487 Change-Id: I45b8b716001e2fa0811b17e25be76e2512e5abb2 Reviewed-on: https://go-review.googlesource.com/35290 Reviewed-by: Adam Langley <alangley@gmail.com> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Run-TryBot: Matt Layher <mdlayher@gmail.com> TryBot-Result: Gobot Gobot <gobot@golang.org>		7年前
testdata	crypto/tls: enable ChaCha20-Poly1305 cipher suites by default.	8年前
alert.go	crypto/tls: switch to OpenSSL 1.1.0 for test data.	8年前
cipher_suites.go	crypto/tls: disable CBC cipher suites with SHA-256 by default	7年前
common.go	crypto/{cipher,tls,internal/cryptohw}: prioritise AES-GCM when hardware support is present.	8年前
conn.go	crypto/tls: fix a typo	7年前
conn_test.go	crypto/tls: implement countermeasures against CBC padding oracles	8年前
example_test.go	crypto/tls: add example for Config KeyLogWriter	8年前
generate_cert.go	crypto/tls: Support ECDSA keys in generate_cert.go	10年前
handshake_client.go	cmd/gofmt, crypto/tls: fix typos	8年前
handshake_client_test.go	cmd/gofmt, crypto/tls: fix typos	8年前
handshake_messages.go	crypto/tls: reject zero-length SCTs.	8年前
handshake_messages_test.go	crypto/tls: reject zero-length SCTs.	8年前
handshake_server.go	crypto/tls: add a SignatureScheme type.	8年前
handshake_server_test.go	all: don't call t.Fatal from a goroutine	8年前
handshake_test.go	crypto/tls: switch to OpenSSL 1.1.0 for test data.	8年前
key_agreement.go	crypto/tls: support X25519.	8年前
prf.go	all: standardize RFC mention format	8年前
prf_test.go	crypto/tls: decouple handshake signatures from the handshake hash.	9年前
ticket.go	crypto/tls: minor refactors for readability	8年前
tls.go	crypto/tls: disable CBC cipher suites with SHA-256 by default	7年前
tls_test.go	all: don't call t.Fatal from a goroutine	8年前