[gnutls-help] Forcing chacha20-poly1305

Nikos Mavrogiannopoulos nmav at gnutls.org
Fri Nov 4 09:11:56 CET 2016


On Thu, Nov 3, 2016 at 9:43 PM, James Cloos <cloos at jhcloos.com> wrote:
> I've tried quite a few priority strings to force chacha20-poly1305.
>
> It seems like it should be easier than:
>   SECURE256:+CHACHA20-POLY1305:-CAMELLIA-256-CBC:-CAMELLIA-256-GCM:-AES-256-CBC:-AES-256-GCM:-AES-256-CCM

A simpler version is: "SECURE256:-CIPHER-ALL:+CHACHA20-POLY1305"

> First, CHACHA20-POLY1305 ought to be part of SECURE256.

Right, it seems it was only part of normal and performance strings.
I'll check it.

regards,
Nikos



More information about the Gnutls-help mailing list