Comments on: How to configure mod_gnutls to use the RC4 cipher to mitigate the SSL/TLS vulnerability http://www.g-loaded.eu/2011/09/27/mod_gnutls-rc4-cipher-beast/ An open-source software and technology related journal Tue, 18 Jun 2013 13:13:01 +0000 hourly 1 By: Aeomer http://www.g-loaded.eu/2011/09/27/mod_gnutls-rc4-cipher-beast/#comment-18983 Aeomer Mon, 10 Oct 2011 15:37:54 +0000 http://www.g-loaded.eu/?p=2471#comment-18983 What worries me about replacing the chosen CBC mode cipher with RC4 is the use of the MD5 hash algol. Some of the serious issues with lower versions of SSL came about because of the statistically frequent hash collisions when using MD5. I’d expect everyone to be worried the same thing could happen again with RC4/MD5 – surely memories are not that short!

What are the options for, say, RC4/SHA256 ?

]]>