diff --git a/doc/testssl.1 b/doc/testssl.1 index 822fbbd..e01c65f 100644 --- a/doc/testssl.1 +++ b/doc/testssl.1 @@ -209,7 +209,7 @@ Any single check switch supplied as an argument prevents testssl\.sh from doing \fBAverage grade Ciphers\fR: \'HIGH:MEDIUM:AES:CAMELLIA:ARIA:!IDEA:!CHACHA20:!3DES:!RC2:!RC4:!AESCCM8:!AESCCM:!AESGCM:!ARIAGCM:!aNULL\' . .IP "\(bu" 4 -\fBStrong grade Ciphers\fR (AEAD): \'AESGCM:CHACHA20:AESGCM:CamelliaGCM:AESCCM8:AESCCM\' +\fBStrong grade Ciphers\fR (AEAD): \'AESGCM:CHACHA20:CamelliaGCM:AESCCM\' . .IP "" 0 . diff --git a/doc/testssl.1.html b/doc/testssl.1.html index 56c24d8..80edb8d 100644 --- a/doc/testssl.1.html +++ b/doc/testssl.1.html @@ -240,7 +240,7 @@ ADDITIONAL_CA_FILES is the environment variable for this.

  • LOW (64 Bit + DES ciphers, without EXPORT ciphers): 'LOW:DES:RC2:RC4:!ADH:!EXP:!NULL:!eNULL'
  • 3DES + IDEA Ciphers: '3DES:IDEA:!aNULL:!ADH'
  • Average grade Ciphers: 'HIGH:MEDIUM:AES:CAMELLIA:ARIA:!IDEA:!CHACHA20:!3DES:!RC2:!RC4:!AESCCM8:!AESCCM:!AESGCM:!ARIAGCM:!aNULL'
  • -
  • Strong grade Ciphers (AEAD): 'AESGCM:CHACHA20:AESGCM:CamelliaGCM:AESCCM8:AESCCM'
  • +
  • Strong grade Ciphers (AEAD): 'AESGCM:CHACHA20:CamelliaGCM:AESCCM8:AESCCM'
  • diff --git a/doc/testssl.1.md b/doc/testssl.1.md index d2756b6..cf28c07 100644 --- a/doc/testssl.1.md +++ b/doc/testssl.1.md @@ -162,7 +162,7 @@ Any single check switch supplied as an argument prevents testssl.sh from doing a * `LOW` (64 Bit + DES ciphers, without EXPORT ciphers): 'LOW:DES:RC2:RC4:!ADH:!EXP:!NULL:!eNULL' * `3DES + IDEA Ciphers`: '3DES:IDEA:!aNULL:!ADH' * `Average grade Ciphers`: 'HIGH:MEDIUM:AES:CAMELLIA:ARIA:!IDEA:!CHACHA20:!3DES:!RC2:!RC4:!AESCCM8:!AESCCM:!AESGCM:!ARIAGCM:!aNULL' -* `Strong grade Ciphers` (AEAD): 'AESGCM:CHACHA20:AESGCM:CamelliaGCM:AESCCM8:AESCCM' +* `Strong grade Ciphers` (AEAD): 'AESGCM:CHACHA20:CamelliaGCM:AESCCM8:AESCCM' `-f, --pfs, --fs,--nsa ` Checks robust (perfect) forward secrecy key exchange. "Robust" means that ciphers having intrinsic severe weaknesses like Null Authentication or Encryption, 3DES and RC4 won't be considered here. There shouldn't be the wrong impression that a secure key exchange has been taking place and everything is fine when in reality the encryption sucks. Also this section lists the available elliptical curves and Diffie Hellman groups, as well as FFDHE groups (TLS 1.2 and TLS 1.3).