· 2 min read

TLS-ECDH-ECDSA-WITH-3DES-EDE-CBC-SHA Cipher Suite

A breakdown of the Cipher Suite TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, its strengths, and its weaknesses.

Key Exchange Mechanism

Elliptic Curve Diffie Hellman - ECDH

Grade - B

Static Elliptic Curve Diffie Hellman (ECDH) does not use ephemeral (temporary) keys, meaning it violates perfect forward secrecy. ECDHE should be used in preference.

Authentication

Elliptic Curve Digital Signature Algorithm - ECDSA

Grade - A

ECDSA (Elliptic Curve Digital Signature Algorithm) is used in cipher suites for authentication and integrity verification. Its efficiency in generating and verifying digital signatures makes it suitable for secure communication protocols like TLS, ensuring data confidentiality and integrity during exchanges over networks.

Hash

Secure Hash Algorithm - SHA

Grade - D

Chosen prefix attacks for SHA1 are feasible at an accessible cost to a well-funded adversary. This level of expense, while significant, does not pose a substantial barrier to attackers with sufficient resources, making such attacks a credible threat.

Cipher Mode

Cipher Block Chaining - CBC

Grade - D

Cipher Block Chaining (CBC) mode is vulnerable to the Lucky13 and POODLE (in TLS v1.2 and below) attacks. The Lucky13 attack exploits timing discrepancies in padding validation, allowing attackers to gradually reveal plaintext. The POODLE attack leverages padding errors to decrypt ciphertext by repeatedly modifying and sending it to the server, observing the error responses. These vulnerabilities arise from CBC’s handling of padding and error messages, making it less secure than modern encryption modes like Galois Counter Mode (GCM), which offer stronger integrity and confidentiality guarantees.

    Share:
    Back to Blog

    Related Posts

    View All Posts »
    Anti Spam Laws Around the World

    Anti Spam Laws Around the World

    Spam, unsolicited electronic communication, has become a global issue that affects individuals, businesses, and governments alike. Various countries have developed anti-spam laws to protect consumers from unwanted emails, messages, and other forms of digital marketing. These laws vary by region, but they generally focus on requiring consent from recipients, providing clear opt-out mechanisms, and penalizing violators with hefty fines. Below is an overview of key anti-spam regulations from the United States, Canada, New Zealand, Australia, Ireland, and the United Kingdom.

    What is Risk Reduction in Cyber Security - 50 Ways to Reduce Risk

    What is Risk Reduction in Cyber Security - 50 Ways to Reduce Risk

    Explore the essentials of risk reduction in cyber security and learn how to proactively protect your organization. Uncover strategies for minimizing vulnerabilities, strengthening defenses, and implementing best practices to lower potential cyber threats and ensure robust digital security.

    What is Risk Transfer in Cyber Security - 40 Ways to Transfer Risk

    What is Risk Transfer in Cyber Security - 40 Ways to Transfer Risk

    Discover how risk transfer in cyber security can safeguard your organization. Learn about strategies to mitigate potential cyber threats by shifting liability, utilizing insurance, and partnering with third-party experts. Explore effective ways to protect your digital assets.