Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-95253

NSS server group selection is inconsistent

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • No
    • Low
    • 2
    • rhel-security-crypto-clubs
    • ssg_security
    • 28
    • 1
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • Crypto25August, Crypto25September
    • Hide

      AC1) NSS server prioritizes x25519lkem768 and secp256r1mlkem768 over x25519 when clients sends x25519 key share

      Show
      AC1) NSS server prioritizes x25519lkem768 and secp256r1mlkem768 over x25519 when clients sends x25519 key share
    • Pass
    • Enabled
    • Automated
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      nss-3.101.0-13.el10.x86_64

      NSS server group selection is weird, on RHEL-10.1, when client advertises the following groups (with '*' meaning send a key_share for it too), we get the following results:

      *X25519MLKEM768:SECP256R1MLKEM768:SECP384R1MLKEM1024:*P-256:P-384:*X25519:ffdhe2048:ffdhe3072 = X25519MLKEM768 (GOOD)
*X25519MLKEM768:SECP256R1MLKEM768:SECP384R1MLKEM1024:*P-256:P-384:*X25519 = X25519MLKEM768 (GOOD)
X25519MLKEM768:*SECP256R1MLKEM768:SECP384R1MLKEM1024:*P-256:P-384:*X25519 = X25519 (BAD)
X25519MLKEM768:*SECP256R1MLKEM768:SECP384R1MLKEM1024:*P-256:P-384:X25519 = X25519MLKEM768 (OK, but suboptimal, means a HRR)
*SECP256R1MLKEM768:SECP384R1MLKEM1024:*P-256:P-384:X25519 = SecP256r1MLKEM768 (GOOD)
*SECP256R1MLKEM768:SECP384R1MLKEM1024:*P-256:P-384:*X25519 = X25519 (BAD, worst)
X25519MLKEM768:SECP256R1MLKEM768:SECP384R1MLKEM1024:*P-256:P-384:X25519 = X25519MLKEM768 (GOOD)
*SECP256R1MLKEM768:SECP384R1MLKEM1024:*P-256:P-384 = SecP256r1MLKEM768 (GOOD)
*SECP256R1MLKEM768:SECP384R1MLKEM1024:*P-256:P-384:ffdhe2048:*ffdhe3072 = SecP256r1MLKEM768 (GOOD)
X25519MLKEM768:SECP256R1MLKEM768:SECP384R1MLKEM1024:*P-256:P-384 = X25519MLKEM768 (GOOD)

              rrelyea Robert Relyea
              hkario@redhat.com Alicja Kario
              Robert Relyea Robert Relyea
              Ondrej Moris Ondrej Moris
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: