Birthday attacks against TLS ciphers with 64bit (Sweet32) - Microsoft Q&A

  • 12,000
  • Tác giả: admin
  • Ngày đăng:
  • Lượt xem: 12
  • Tình trạng: Còn hàng

Hello @Gangi Reddy,

Thank you for posting here.

We can kiểm tra all TLS Cipher Suites by running command below.

Get-TlsCipherSuite

OR

Get-TlsCipherSuite >C:\machinename.txt

For example:
117324-ci2.png

Or you can kiểm tra DES, 3DES, IDEA or RC2 cipher Suites as below.
Get-TlsCipherSuite -Name "DES"
Get-TlsCipherSuite -Name "3DES"
Get-TlsCipherSuite -Name "IDEA"
Get-TlsCipherSuite -Name "RC2"

For example:
117298-ci1.png

You can disable certain specific ciphers by removing them from HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Configuration\Local\SSL\00010002

117334-ci3.png

Then restart the machine vĩ đại see if it helps.

For more information, please refer vĩ đại the part "Enabling or Disabling additional cipher suites" in the following liên kết.

Managing SSL/TLS Protocols and Cipher Suites for AD FS
https:///en-us/windows-server/identity/ad-fs/operations/manage-ssl-protocols-in-ad-fs

Hope the information above is helpful vĩ đại you.

Should you have any question or concern, please feel không tính phí vĩ đại let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.