testssl.sh icon indicating copy to clipboard operation
testssl.sh copied to clipboard

[BUG / possible BUG] Cipher hex code incomplete

Open michael-o opened this issue 5 months ago • 4 comments

Running testssl.sh version 3.0.9. The hexcode is weird:

 Testing 370 ciphers via OpenSSL plus sockets against the server, ordered by encryption strength

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (IANA/RFC)
-----------------------------------------------------------------------------------------------------------------------------
 x1302   TLS_AES_256_GCM_SHA384            ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384                             available
 x1303   TLS_CHACHA20_POLY1305_SHA256      ECDH 253   ChaCha20    256      TLS_CHACHA20_POLY1305_SHA256                       available
 xcc14   ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDH       ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256_OLD  not a/v
 xcc13   ECDHE-RSA-CHACHA20-POLY1305-OLD   ECDH       ChaCha20    256      TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256_OLD    not a/v

Isn't a hex number expected to be 0x1302, so a zero prepended? At least that is the convention...

Running on:

$ bash --version
GNU bash, Version 5.2.26(1)-release (amd64-portbld-freebsd13.2)
$ freebsd-version
13.4-STABLE

michael-o avatar Sep 23 '24 08:09 michael-o