Skip to content

TLS cipher-suite map mislabels six ARIA/Camellia suites (GCM vs CBC, wrong key exchange) #403

@0xghost42

Description

@0xghost42

Six entries in crates/rustnet-core/src/network/dpi/cipher_suites.rs carry the wrong IANA name, so the TUI reports an incorrect cipher for those TLS handshakes.

ARIA (RFC 6209):

  • 0xC03C is mapped to TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256, but IANA 0xC03C = TLS_RSA_WITH_ARIA_128_CBC_SHA256. The ECDHE_ECDSA ARIA 128 GCM suite is 0xC05C.
  • 0xC03D is mapped to TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384, but IANA 0xC03D = TLS_RSA_WITH_ARIA_256_CBC_SHA384 (GCM variant is 0xC05D).

Camellia (RFC 6367):

  • 0xC072/0xC073/0xC076/0xC077 are mapped to ..._CAMELLIA_*_GCM_*, but IANA marks these as the CBC suites. The matching Camellia GCM suites are 0xC086/0xC087/0xC08A/0xC08B.

0xC060/0xC061 (ECDHE_RSA ARIA GCM) are already correct.

The Camellia section comment also cites RFC 5932; these ECDHE Camellia suites are defined in RFC 6367.

References: IANA TLS Cipher Suites registry, RFC 6209 (ARIA), RFC 6367 (ECDHE Camellia).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions