blob: 2b1aadbb8d7dfe27134eaffac766c1a5c4b9babe (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
|
= Standards that define ciphersuites
Stefan Schumacher <public@cryptomancer.de>
v0.0.1, 2026/04/17, draft
// :doctype: book
:experimental:
:source-highlighter: rouge
:rouge-style: github
:stem: latexmath
:toc: macro
:sectnums: all
:toclevels: 4
:sectnumlevels: 3
:html5s-image-default-link: self
:icons: image
:note-caption: ℹ️
:tip-caption: 💡
:important-caption: ❗
:caution-caption: 🔥
:warning-caption: ⚠️
// ☢️
ifdef::backend-pdf[]
:icons: font
endif::backend-pdf[]
*{author}* <{email}>
toc::[]
* compiled at {localdate} {localtime} Version {revnumber} of {revdate}
* *Datei*: {docname}
Scope: This document will list all standards that define the properties of ciphersuites (algorithm, key length, mode)
etc. The aim is to generate an exhaustive list of cryptographic material to be used as a database for CBOMs.
== Taxonomy Dimensions
=== Braindump list
.Braindump
. Status
.. Approved
.. Obsolete / Deprecated
.. Legacy
.. Broken
. Protocols
.. TLS
... TLS 1.3
... TLS 1.2
... TLS 1.1
... TLS 1.0
... SSL 3
... SSL 2
.. Secure Shell
... SSH1 (deprecated)
... SSH2
.... OpenSSH
.... Dropbear
.... SSH Tectia Client/Server
.. Internet Key Exchange IKE
... IKEv1
... IKEv2
.. PPTP
.. Radius
.. MS-CHAP
.. IPSec
... OpenVPN
... FreeSWAN/StrongSWAN
... Wireguard
.. Online Certificate Status Protocol
.. OpenPGP
... LibrePGP
... GnuPG
... age
.. Kerberos
.. JWT
... JOSE
.. FIDO2 Passkeys
. .PKI
... X.509
... Cryptographic Message Syntax
. Symmetric
. Asymmetric
. Key Exchange
. Key Length
.. 56, 128, 196, 256
. Operation Mode
.. Streamcipher
.. Blockcipher
.. Electronic Codebook Mode (ECB)
.. Cipher Block Chaining Mode (CBC)
.. Counter Mode (CTR)
.. Galois Counter Mode (GCM)
.. XOR-Encrypt-XOR (XEX)
.. XEX-based Tweaked-Codebook mode with ciphertext stealing (XTS)
.. Synthetic Initialization Vector (SIV)
.. Encrypt Mix Encrypt (EME)
.. Cipher Feedback Mode (CFB)
. IANA CipherSuite
. Hash
.. Message Authentication Code (MAC)
.. HMAC
. PQC
. PQC-Hybrid
. One Time Password (OTP)
.. Hash based OTP
.. Time based OTP
. Cryptographically Secure Pseudorandom Number Generator (CSPRNG)
.. Dual_EC_DRBG
. WIFI
.. WEP
.. WPA
.. WPA2
.. WPA3
=== Taxonomy Categories (1st Level)
==== German BSI
.Sources:
. BSI TR-02102-x (Kryptographische Verfahren: Empfehlungen und Schlüssellängen)
. BSI AIS 20/31 (A proposal for: Functionality classes for random number generators - Version 3.0)
. BSI TR-03116
. BSI TR-03111 Elliptic Curve Cryptography, Version 2.10
* Asymmetric Algorithms
** Digital Signature
** Key Exchange
* Symmetric Algorithms
* Hash Functions
* Message Authentication Codes (MACs)
* Random Number Generators
==== USA NIST
.sources:
. NIST SP 800-57
. NIST SP 800-56A - KEX
. NIST FIPS 186-5 - Signatures
. NIST SP 800-38 - Symmetric
. NIST SP 800-185 - Hash/KDF
. NIST SP 800-90A - RNG
. NIST SP 800-208 - PQC Signatures
* Key Exchange / Key Establishment
* Public-Key Encryption
* Digital Signatures
* Symmetric Encryption
* Hash Functions
* MAC / AEAD
* Key Derivation Functions (KDFs)
* Random Number Generation
=== Attributes
. Protocoll
. Library/Program/Implementation
.. Version
. State
.. Data at rest
.. Data in transit
.. Data in Use
|
