29 Jan
2014
29 Jan
'14
8:45 a.m.
On Wed, Jan 29, 2014 at 9:21 AM, Joachim Strömbergson joachim@secworks.se wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aloha! Niels Möller wrote:
Does anyone here know what applications or protocols use arctwo, and with which key sizes?
There are cipher suites in both SSLv3 and TLS 1.0 that uses RC2 as session cipher. These are part of the EXPORT ciphers with 40 bit keys.
Indeed. In gnutls, however, we never used RC2-40, we had support for RC4-40 only. Nowdays the export ciphersuites have been dropped so we don't have either.
However, RC2-40 is used in gnutls to decrypt PKCS #12 files, so it would be good for RC2-40 to remain so that decryption of any existing files will remain possible.
regards, Nikos