Description
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec
protocols and other protocols and products, have a birthday bound of
approximately four billion blocks, which makes it easier for remote
attackers to obtain cleartext data via a birthday attack against a
long-duration encrypted session, as demonstrated by an HTTPS session using
Triple DES in CBC mode, aka a "Sweet32" attack.
Notes
| mdeslaur | DES ciphers aren't typically selected as there are other
stronger ciphers placed earlier in default cipher lists
gnutls puts AES before 3DES in the cipher list |
Package
| Upstream: | not-affected
|
| Ubuntu 12.04 ESM (Precise Pangolin): | not-affected
|
| Ubuntu 14.04 ESM (Trusty Tahr): | not-affected
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was released [6b41-1.13.13-0ubuntu0.12.04.1])
|
| Ubuntu 14.04 ESM (Trusty Tahr): | DNE
(trusty was released [6b41-1.13.13-0ubuntu0.14.04.1])
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was released [7u121-2.6.8-1ubuntu0.12.04.3])
|
| Ubuntu 14.04 ESM (Trusty Tahr): | DNE
(trusty was released [7u121-2.6.8-1ubuntu0.14.04.3])
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was needs-triage)
|
| Ubuntu 14.04 ESM (Trusty Tahr): | DNE
(trusty was needs-triage)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
Updated: 2020-09-10 05:08:28 UTC (commit 81a23a978c4436cd99e1d040e9e73e9146876281)