Intent to deprecate: RC4

[Adam Langley]

(The discussion of this topic is intended to be on the
securi...@chromium.org mailing list. This message has also been
cc'ed to the net-dev mailing list in an attempt to ensure that
interested parties are aware of it.)

RC4 is a 28 year old cipher that has done remarkably well, but it is
now the subject of several, significant attacks[1][2][3]. The IETF has
decided that RC4 is sufficiently bad to warrant a statement that it
must no longer be used[4].

When Chrome makes an HTTPS connection it has an implicit duty to do
what it can to ensure that the connection is secure. At this point,
the use of RC4 in an HTTPS connection is falling below that bar and
thus we plan to disable support for RC4 in a future Chrome release.
That release is likely to reach the stable channel around January or
February 2016. At that time, HTTPS servers that only support RC4 will
stop working.

Measurements show that only 0.13% of HTTPS connections made by Chrome
users (who have opted into statistics collection) currently use RC4.
Even then, affected server operators can very likely simply tweak
their configuration to enable a better cipher suite in order to ensure
continued operation. (Chrome has long implemented 1/n-1 record
splitting and is thus protected against the BEAST attack even with CBC
modes and TLS 1.0.)

Server operators who don’t wish to have to tweak configurations again
in the foreseeable future should check that they support TLS 1.2 with
ECDHE_RSA_WITH_AES_128_GCM and use the tool at
https://ssllabs.com/ssltest to find any other obvious problems.

Current versions of Chrome don't advertise support for RC4 on an HTTPS
connection unless the first connection attempt fails, so servers that
already support a non-RC4 cipher suite will not see any change.

AGL


[1] http://www.isg.rhul.ac.uk/tls/
[2] https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/vanhoef
[3] https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/garman
[4] https://tools.ietf.org/html/rfc7465

[Adam Langley]

Mozilla and Microsoft have also announced similar plans to deprecate RC4 [1][2].

AGL


[1] https://groups.google.com/d/msg/mozilla.dev.platform/JIEFcrGhqSM/CIjtpwxoLQAJ
[2] http://blogs.windows.com/msedgedev/2015/09/01/ending-support-for-the-rc4-cipher-in-microsoft-edge-and-internet-explorer-11/

[David Benjamin]

As a reminder, RC4 is still expected to be removed around January or February 2016. This clocks it at Chrome 48. Please revisit your server configuration if you're still using RC4 (see notes quoted below).

David

--
You received this message because you are subscribed to the Google Groups "net-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to net-dev+u...@chromium.org.
To post to this group, send email to net...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/net-dev/CAL9PXLz-59%3DsxtnGd7frF%2BcmLHyi1bxaCx%2BcTRj9-U35%3Dw%3DODw%40mail.gmail.com.

[carlywo...@gmail.com]

help me with error: uses an unsupported protocol.

[carlywo...@gmail.com]

[hasmukhk...@gmail.com]

[hzama...@gmail.com]

1 Eylül 2015 Salı 19:56:42 UTC+3 tarihinde Adam Langley yazdı:

[booper...@gmail.com]

[cscel...@gmail.com]

On Tuesday, September 1, 2015 at 10:26:42 PM UTC+5:30, Adam Langley wrote:

[wodot...@gmail.com]

[buddhab...@gmail.com]

On Tuesday, September 1, 2015 at 10:26:42 PM UTC+5:30, Adam Langley wrote:

[mzjr...@gmail.com]

On Tuesday, September 1, 2015 at 12:56:42 PM UTC-4, Adam Langley wrote:

[01kr.p...@gmail.com]

On Tuesday, September 1, 2015 at 12:56:42 PM UTC-4, Adam Langley wrote:

[kayl...@gmail.com]

[w681...@gmail.com]