Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Packetbeat] - Unknown Ciphers for TLS 1.3 #7455

Closed
andrewkroh opened this issue Jun 28, 2018 · 0 comments
Closed

[Packetbeat] - Unknown Ciphers for TLS 1.3 #7455

andrewkroh opened this issue Jun 28, 2018 · 0 comments
Labels
Packetbeat

Comments

@andrewkroh
Copy link
Member

There appear to be some new cipher suites in TLS 1.3 that are unknown to Packetbeat.

https://tlswg.github.io/tls13-spec/draft-ietf-tls-tls13.html#rfc.appendix.B.4

      "client_hello": {
        "version": "3.3",
        "session_id": "c13c88f34af11b4363a6b005393650e1f1ea4f2d32457f4341103623900d17b5",
        "supported_ciphers": [
          "(unknown:0x1301)",
          "(unknown:0x1303)",
          "(unknown:0x1302)",
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
          "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
          "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
          "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
          "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
          "TLS_RSA_WITH_AES_128_CBC_SHA",
          "TLS_RSA_WITH_AES_256_CBC_SHA",
          "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
        ]

For confirmed bugs, please report:

  • Version: 7.0.0-alpha1-SNAPSHOT
  • Operating System: Linux/armv7
@adriansr adriansr mentioned this issue Jul 3, 2018
Merged
adriansr added a commit to adriansr/beats that referenced this issue Jul 3, 2018
@adriansr
Packetbeat: Update TLS protocol cipher suites (elastic#7455)
accc772 
The TLS protocol parser has been updated with 5 new cipher suites
introduced in TLS 1.3:

+------------------------------+-------------+
| Description                  | Value       |
+------------------------------+-------------+
| TLS_AES_128_GCM_SHA256       | {0x13,0x01} |
|                              |             |
| TLS_AES_256_GCM_SHA384       | {0x13,0x02} |
|                              |             |
| TLS_CHACHA20_POLY1305_SHA256 | {0x13,0x03} |
|                              |             |
| TLS_AES_128_CCM_SHA256       | {0x13,0x04} |
|                              |             |
| TLS_AES_128_CCM_8_SHA256     | {0x13,0x05} |
+------------------------------+-------------+
andrewkroh pushed a commit that referenced this issue Jul 3, 2018
@adriansr @andrewkroh
Packetbeat: Update TLS protocol cipher suites (#7455) (#7498)
533e026 
The TLS protocol parser has been updated with 5 new cipher suites
introduced in TLS 1.3:

+------------------------------+-------------+
| Description                  | Value       |
+------------------------------+-------------+
| TLS_AES_128_GCM_SHA256       | {0x13,0x01} |
|                              |             |
| TLS_AES_256_GCM_SHA384       | {0x13,0x02} |
|                              |             |
| TLS_CHACHA20_POLY1305_SHA256 | {0x13,0x03} |
|                              |             |
| TLS_AES_128_CCM_SHA256       | {0x13,0x04} |
|                              |             |
| TLS_AES_128_CCM_8_SHA256     | {0x13,0x05} |
+------------------------------+-------------+
@andrewkroh andrewkroh mentioned this issue Jul 3, 2018
Merged
andrewkroh pushed a commit to andrewkroh/beats that referenced this issue Jul 3, 2018
@adriansr @andrewkroh
Packetbeat: Update TLS protocol cipher suites (elastic#7455) (elastic…
778f023 
…#7498)

The TLS protocol parser has been updated with 5 new cipher suites
introduced in TLS 1.3:

+------------------------------+-------------+
| Description                  | Value       |
+------------------------------+-------------+
| TLS_AES_128_GCM_SHA256       | {0x13,0x01} |
|                              |             |
| TLS_AES_256_GCM_SHA384       | {0x13,0x02} |
|                              |             |
| TLS_CHACHA20_POLY1305_SHA256 | {0x13,0x03} |
|                              |             |
| TLS_AES_128_CCM_SHA256       | {0x13,0x04} |
|                              |             |
| TLS_AES_128_CCM_8_SHA256     | {0x13,0x05} |
+------------------------------+-------------+

(cherry picked from commit 533e026)
ruflin pushed a commit that referenced this issue Jul 4, 2018
@andrewkroh @ruflin
Packetbeat: Update TLS protocol cipher suites (#7455) (#7498) (#7501)
0286172 
The TLS protocol parser has been updated with 5 new cipher suites
introduced in TLS 1.3:

+------------------------------+-------------+
| Description                  | Value       |
+------------------------------+-------------+
| TLS_AES_128_GCM_SHA256       | {0x13,0x01} |
|                              |             |
| TLS_AES_256_GCM_SHA384       | {0x13,0x02} |
|                              |             |
| TLS_CHACHA20_POLY1305_SHA256 | {0x13,0x03} |
|                              |             |
| TLS_AES_128_CCM_SHA256       | {0x13,0x04} |
|                              |             |
| TLS_AES_128_CCM_8_SHA256     | {0x13,0x05} |
+------------------------------+-------------+

(cherry picked from commit 533e026)
leweafan pushed a commit to leweafan/beats that referenced this issue Apr 28, 2023
@andrewkroh @ruflin
Packetbeat: Update TLS protocol cipher suites (elastic#7455) (elastic…
72ae89e 
…#7498) (elastic#7501)

The TLS protocol parser has been updated with 5 new cipher suites
introduced in TLS 1.3:

+------------------------------+-------------+
| Description                  | Value       |
+------------------------------+-------------+
| TLS_AES_128_GCM_SHA256       | {0x13,0x01} |
|                              |             |
| TLS_AES_256_GCM_SHA384       | {0x13,0x02} |
|                              |             |
| TLS_CHACHA20_POLY1305_SHA256 | {0x13,0x03} |
|                              |             |
| TLS_AES_128_CCM_SHA256       | {0x13,0x04} |
|                              |             |
| TLS_AES_128_CCM_8_SHA256     | {0x13,0x05} |
+------------------------------+-------------+

(cherry picked from commit b1c422e)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Packetbeat
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@andrewkroh