se.entra.phantom.server.ssl

Class NetPhantomCipherSuites

java.lang.Object

se.entra.phantom.server.ssl.NetPhantomCipherSuites

public class NetPhantomCipherSuites
extends Object

This class builds a table of available cipher (suites) that are used with SSL.

Field Summary

Fields

Modifier and Type	Field and Description
static List<String>	allSuites All supported suites in an unmodifiable list.
static List<String>	strongProtocols List of strong supported protocols: TLSv1.2, ...
static List<String>	strongSuites The strong supported suites in an unmodifiable list.
static String	strongSuitesString The strong cipher suites as a comma separated string.
static List<String>	supportedProtocols Supported protocols: SSLv3, TLSv1, TLSv1.1, TLSv1.2, TLSv1.3 (depends on JVM),...

Constructor Summary

Constructors

Constructor and Description
NetPhantomCipherSuites()

Method Summary

Modifier and Type	Method and Description
static int	getStrength(String s) Gets strength: 256, 128 or less:
static boolean	isStrongProtocol(String protocol) Checks if it's a strong protocol.
static boolean	isStrongSuite(String s) Checks if a suite is strong.
static void	main(String[] args) When called, it will list, for the JVM in question, the cipher suites supported, the strong ones in order of importance.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

strongSuites

public static final List<String> strongSuites

The strong supported suites in an unmodifiable list. The suites depends of the Java version.

strongSuitesString

public static final String strongSuitesString

The strong cipher suites as a comma separated string. The suites depends of the Java version.

allSuites

public static final List<String> allSuites

All supported suites in an unmodifiable list. The suites depends of the Java version.

supportedProtocols

public static final List<String> supportedProtocols

Supported protocols: SSLv3, TLSv1, TLSv1.1, TLSv1.2, TLSv1.3 (depends on JVM),... The protocols depends of the Java version.

strongProtocols

public static final List<String> strongProtocols

List of strong supported protocols: TLSv1.2, ... The protocols depends of the Java version.

Constructor Detail

NetPhantomCipherSuites

public NetPhantomCipherSuites()

Method Detail

isStrongProtocol

public static boolean isStrongProtocol(String protocol)

Checks if it's a strong protocol. It is strong if it's not SSL*, not TLSv1, not TLSv1.1.

Parameters:

protocol - Protocol.

Returns:

true if strong, false otherwise.

isStrongSuite

public static boolean isStrongSuite(String s)

Checks if a suite is strong.

Parameters:

s - The cipher suite.

Returns:

true if strong cipher suite, false if considered weak. true is also returned for the "*_RENEGOTIATION_*" cipher suite.

getStrength

public static int getStrength(String s)

Gets strength: 256, 128 or less:

This is based on the information on effective key lengths in RFC 2246 - The TLS Protocol Version 1.0, Appendix C. CipherSuite definitions:

  Cipher        Type    Key Bits
  ------------  ------- ---------
  3DES_EDE_CBC  Block      168
  RC4_128       Stream     128
  IDEA_CBC      Block      128
  DES_CBC       Block       56
  RC2_CBC_40 *  Block       40
  RC4_40     *  Stream      40
  DES40_CBC  *  Block       40
  NULL       *  Stream       0
 

Parameters:

s - The cipher suite.

Returns:

The effective key entropy bit-length: 256, 168, 128, 56, 40 or 0 if unknown.

main

public static void main(String[] args)

When called, it will list, for the JVM in question, the cipher suites supported, the strong ones in order of importance. The supported protocols and the strong ones are also listed.

Parameters:

args - The arguments, ignored...