From 341f657e832780da3647df451669f865b26046f4 Mon Sep 17 00:00:00 2001 From: Hubert Kario Date: Tue, 11 Nov 2014 03:05:54 +0100 Subject: [PATCH] better detection for EXP and low grade ciphers in stats EXP is self explanatory - export grade DES-CBC3-MD5 is available only in SSLv2 - not secure RC4-64-MD5 is also a weakened version (though not marked as export grade) --- top1m/parse_results.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/top1m/parse_results.py b/top1m/parse_results.py index 6c5326a..09766a3 100644 --- a/top1m/parse_results.py +++ b/top1m/parse_results.py @@ -187,7 +187,10 @@ for r,d,flist in os.walk(path): temp_client_incompat[client_name][entry['cipher']] = 1 """ store the ciphers supported """ - if 'ADH' in entry['cipher'] or 'AECDH' in entry['cipher']: + if 'ADH' in entry['cipher'] or 'AECDH' in entry['cipher'] or \ + 'EXP' in entry['cipher'] or \ + 'DES-CBC3-MD5' in entry['cipher'] or \ + 'RC4-64-MD5' in entry['cipher']: ciphertypes += 1 name = "z:" + entry['cipher'] tempcipherstats[name] = 1