From fb2fc62a0b8d30b2a3a151c7d7e46b2569270696 Mon Sep 17 00:00:00 2001 From: nnposter Date: Wed, 24 Aug 2016 14:56:25 +0000 Subject: [PATCH] Penalizes 3DES for SWEET32 attack (CVE-2016-2183) --- scripts/ssl-enum-ciphers.nse | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/ssl-enum-ciphers.nse b/scripts/ssl-enum-ciphers.nse index cdabd71fe..663fa8f7d 100644 --- a/scripts/ssl-enum-ciphers.nse +++ b/scripts/ssl-enum-ciphers.nse @@ -549,7 +549,7 @@ local function score_cipher (kex_strength, cipher_info) if cipher_info.size == 0 then return 0 - elseif cipher_info.size < 112 then + elseif cipher_info.size < 128 then cipher_score = 0.2 elseif cipher_info.size < 256 then cipher_score = 0.8