2013-03-03, 14:23
#4705
Citat:
Ursprungligen postat av TorrentLover
Installerade Windows i en virtuell maskin och provade:
Mullvad är att lita på.

Mullvad är att lita på.
Nja.
Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
128 bitars kryptering av data
Sun Mar 03 10:52:53 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
160 bitar för autentisering
Sun Mar 03 10:52:53 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
kontroll-kanalen som bland annat förhandlar om krypteringen, använder 256 bitar (AES256), men när denna kryptering förhandlas fram förmedlas den med ett 2048 bitars asymmetrisk nyckel. En gång. Sedan är all trafik på denna kanal krypterad med 256 bitar.
Jag är ingen expert på dessa saker, och kan inte förklara bättre, men intresserade kan läsa detta:
"The 256-bit is about SSL. In SSL, the server key is used only to transmit a random 256-bit key (that one does not have mathematical structure, it is just a bunch of bits); roughly speaking, the client generates a random 256-bit key, encrypts it with the server's RSA public key (the one which is in the server's certificate and is a "2048-bit key"), and sends the result to the server. The server uses its private RSA key to reverse the operation, and thus obtain the 256-bit key chosen by the client. Afterwards, client and server use the 256-bit to do symmetric encryption and integrity checks, and RSA is not used any further for that connection."
http://security.stackexchange.com/qu...bit-encryption
"The 256-bit is about SSL. In SSL, the server key is used only to transmit a random 256-bit key (that one does not have mathematical structure, it is just a bunch of bits); roughly speaking, the client generates a random 256-bit key, encrypts it with the server's RSA public key (the one which is in the server's certificate and is a "2048-bit key"), and sends the result to the server. The server uses its private RSA key to reverse the operation, and thus obtain the 256-bit key chosen by the client. Afterwards, client and server use the 256-bit to do symmetric encryption and integrity checks, and RSA is not used any further for that connection."
http://security.stackexchange.com/qu...bit-encryption