提交 #229016: Microsoft Windows SWEET32 information disclosure

Microsoft Windows operating systems have DES and 3DES enabled in SCHANNEL. This allows attackers to decrypt the communication using the SWEET32 attack (CVE-2016-2183). Disabling the problematic ciphers is recommended:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56]
"Enabled"=dword:00000000

• 来源: ⚠️ https://sweet32.info/
• 用户: lywand (UID 17074)
• 提交: 2023-10-27 12時13分 (3 年前)
• 管理: 2023-10-27 15時56分 (4 hours later)
• 状态: 重复
• VulDB条目: 90939 [OpenSSL 1.0.1/1.0.2/1.1.0 64-bit Block Cipher SWEET32 信息公开]
• 积分: 0