Devicemaster Lt Supported Cipher Suites; Ssl Resources - Comtrol DeviceMaster LT User Manual

Table of Contents

DeviceMaster LT

Supported Cipher

Suites

SSL Resources

DeviceMaster LT User Guide: 2000586 Rev. B

Message Authentication Code

• hash function (checksum) used to verify that each message frame has

not be corrupted or changed while in transit.

• typical options include MD5, SHA, MD2, MD4

• DeviceMaster LT supports MD5, SHA

•

In the design of the SSL/TLS protocols the choices of four of the above are not

independent of each other: only certain combinations are defined by the

standards. The standard combinations of protocol (SSL or TLS) and cipher

suites support by DeviceMaster LT are shown in the attached table.

The DeviceMaster LT supports the cipher suites:

Protocol Public Key Authentication

SSL

RSA

SSL

RSA

SSL

RSA

SSL

DHE

SSL

DHA

SSL

RSA

SSL

RSA

TLS

RSA

TLS

RSA

TLS

DHE

TLS

DHE

TLS

DHA

TLS

DHA

You can refer to the following SSL resources for more information:

•

Standard reference book is SSL and TLS by Eric Rescorla

•

Wikipedia page on SSL/TLS provides a good overview:

wiki/TLS

•

openssl contains command-line tools to do the following. More information is

available at:

http://www.openssl.org/

Create/examine keys/certificates

Act as client or server

•

ssldump is a -command line tool that displays a human-readable dump of an

SSL connection's handshaking and traffic:. More information can be found at:

http://www.rtfm.com/ssldump/.

If provided with server's private key, can decrypt data stream

Can display decoded data stream in ASCII/hex

Can display contents of handshaking packets (including ID certificates)