Better consistency (cipher coloring)

Especially for yellow=low the key exchange is considered
to be equal now. That needs to be subject to reconsideration.
This commit is contained in:
Dirk 2017-12-04 21:53:39 +01:00
parent cf89488ab9
commit f92d3988af

View File

@ -4877,18 +4877,18 @@ pr_cipher_quality() {
pr_svrty_high "$text" pr_svrty_high "$text"
return 2 return 2
;; ;;
*CBC*)
pr_svrty_medium "$text"
return 3
;; # FIXME BEAST: We miss some CBC ciphers here, need to work w/ a list
*GCM*|*CHACHA20*) *GCM*|*CHACHA20*)
pr_done_best "$text" pr_done_best "$text"
return 7 return 7
;; #best ones ;; #best ones
ECDHE*AES*) ECDHE*AES*|DHE*AES*SHA*|*CAMELLIA*SHA)
pr_svrty_low "$text" pr_svrty_low "$text"
return 4 return 4
;; # it's CBC. --> lucky13 ;; # it's CBC. --> lucky13
*CBC*)
pr_svrty_medium "$text"
return 3
;; # FIXME BEAST: We miss some CBC ciphers here, need to work w/ a list
*) *)
out "$text" out "$text"
return 5 return 5
@ -4907,7 +4907,7 @@ pr_cipher_quality() {
pr_svrty_high "$text" pr_svrty_high "$text"
return 2 return 2
;; ;;
*ECDHE*AES*CBC*) *ECDHE*AES*CBC*|*DHE*AES*SHA*|*RSA*AES*SHA*|*CAMELLIA*SHA*)
pr_svrty_low "$text" pr_svrty_low "$text"
return 4 return 4
;; ;;