Jump to content
Not connected, Your IP: 44.205.5.65
tiger83052

why AIRVPN not using sha2 instead of sha1 ?

Recommended Posts

Hello,

 

OpenVPN does not use SHA-1 as packets authentication cipher.

 

It uses HMAC SHA1, so you just don't care about collisions. In the Control Channel you can also have HMAC SHA384. See also https://airvpn.org/specs

 

For a more thorough discussion see https://airvpn.org/topic/14837-control-channel-cipher-satisfactory/page-2?do=findComment&comment=33173

 

Kind regards

 

does Eddie by default use HMAC SHA384 ? or it should be added manually ? if yes , then how to do it ?

Share this post


Link to post

 

Hello,

 

OpenVPN does not use SHA-1 as packets authentication cipher.

 

It uses HMAC SHA1, so you just don't care about collisions. In the Control Channel you can also have HMAC SHA384. See also https://airvpn.org/specs

 

For a more thorough discussion see https://airvpn.org/topic/14837-control-channel-cipher-satisfactory/page-2?do=findComment&comment=33173

 

Kind regards

 

does Eddie by default use HMAC SHA384 ? or it should be added manually ? if yes , then how to do it ?

 

Hello!

 

It does not depend on Eddie, it's on OpenVPN. Eddie comes packaged with an OpenVPN version that supports it and will pick it by default. Otherwise make sure that OpenVPN in your system is up to date.

 

Kind regards

Share this post


Link to post

 

 

 

Hello,

 

OpenVPN does not use SHA-1 as packets authentication cipher.

 

It uses HMAC SHA1, so you just don't care about collisions. In the Control Channel you can also have HMAC SHA384. See also https://airvpn.org/specs

 

For a more thorough discussion see https://airvpn.org/topic/14837-control-channel-cipher-satisfactory/page-2?do=findComment&comment=33173

 

Kind regards

does Eddie by default use HMAC SHA384 ? or it should be added manually ? if yes , then how to do it ?

Hello!

 

It does not depend on Eddie, it's on OpenVPN. Eddie comes packaged with an OpenVPN version that supports it and will pick it by default. Otherwise make sure that OpenVPN in your system is up to date.

 

Kind regards

2.3.3 and newer will look for SHA384 , and eddie comes with 2.3.8 which mean i'm good

thank you

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...