diff --git a/crypto/crypto_algorithms.md b/crypto/crypto_algorithms.md new file mode 100644 index 0000000..40eca2e --- /dev/null +++ b/crypto/crypto_algorithms.md @@ -0,0 +1,279 @@ +# Cryptographic Algorithms + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
AlgorithmOperationStatusAlternativeQCR1Mitigation
DESEncryptionAvoidAES
3DESEncryptionLegacyAESShort key lifetime
RC4EncryptionAvoidAES
+

AES-CBC mode

+

AES-GCM mode

+
+

Encryption

+

Authenticated encryption

+
+

Acceptable

+

NGE2

+
+

AES-GCM

+

+
+

✓ (256-bit)

+

✓ (256-bit)

+
+

+

+
+

DH-768, -1024

+

RSA-768, -1024

+DSA-768, -1024
+

Key exchange

+

Encryption

+

Authentication

+
+

Avoid

+
+

DH-3072 (Group 15)

+

RSA-3072

+DSA-3072
+

+

+

+
+

+

+

+
+

DH-2048

+

RSA-2048

+DSA-2048
+

Key exchange

+

Encryption

+

Authentication

+
+

Acceptable

+
+

ECDH-256

+

+ECDSA-256
+

+

+

+
+

+

+

+
+

DH-3072

+

RSA-3072

+

DSA-3072

+
+

Key exchange

+

Encryption

+

Authentication

+
Acceptable +

ECDH-256

+

+ECDSA-256
+

+

+

+
+

+

+

+
MD5IntegrityAvoidSHA-256
+

SHA-1

+
+

Integrity

+
+

Legacy

+
+

SHA-256

+
+

+
+

SHA-256

+

SHA-384

+

SHA-512

+
+

Integrity

+
+

NGE

+
+

SHA-384

+

+

+
+

+

+

+
+

+

+

+
HMAC-MD5IntegrityLegacyHMAC-SHA-256Short key lifetime
HMAC-SHA-1IntegrityAcceptableHMAC-SHA-256
HMAC-SHA-256IntegrityNGE
+

ECDH-256

+ECDSA-256
+

Key exchange

+

Authentication

+
+

Acceptable

+
+

ECDH-384

+ECDSA-384
+

+

+
+

+

+
+

ECDH-384

+ECDSA-384
+

Key exchange

+

Authentication

+
+

NGE

+
+

+

+
+

+

+
+

+

+
+

1. QCR = quantum computer resistant.

+ +

2. NGE = next generation encryption.

+