Questions tagged [rc4]
RC4 (Rivest Cipher 4) is a type of stream cipher.
51 questions
3 votes
0 answers
2k views
Decrypting xls file using John The Ripper
I need to open an excel file and see its contents which is locked with password. As I made some research on the internet, I have found that only way was a brute force attack. So I used John the Ripper ...
1 vote
1 answer
4k views
Way to remove rc4 from Linux Cipher Suites
Running this command resulted with the list of ciphers which supports rc4: /usr/bin/openssl ciphers -v | grep -i "rc4" What's the easiest way and how to remove specifically ciphers that ...
-1 votes
1 answer
6k views
How secure is UltraVNC? [closed]
I've found that UltraVNC Single Click is an interesting alternative to TeamViewer. However it as far I understand uses RC4 to encrypt. Would you recommend this tool to remote desktop bearing in mind ...
1 vote
0 answers
302 views
How does fake authentication work with no other clients connected to the AP? (aireplay-ng)
I was reading a tutorial about how to hack a WEP network that has no other clients connected to the AP. It says that fake authentication must be used and it appears to work, but I don't understand how ...
2 votes
1 answer
537 views
SSL - Enabling Forward Secrecy with or without RC4
I'm running an Apache 2 server with Ubuntu 16. Here's my current configuration: SSLProtocol All -SSLv2 -SSLv3 SSLHonorCipherOrder on SSLCipherSuite I'm a bit confused as to what I should use for ...
1 vote
2 answers
2k views
Why does tls_version "TLS 1.2" from howsmyssl rate "Probably Okay" in Chrome on Windows 10 but "Bad" in IE11 on Windows 7?
I'm implementing an API endpoint based on howsmyssl to check the TLS version of clients then notify those clients about whether or not they passed the test. However, several clients have reported ...
1 vote
1 answer
405 views
Is an RC4 encryption enough for my personal documents?
In the last few weeks I wrote several proposals to the government, to my professor, etc. I want to make a copy of this filled proposals and save them. Instead of scanning it with my printer, making ...
3 votes
2 answers
206 views
Using old ciphers in email security
My email provider still supports old SSL_RSA_WITH_RC4_128_SHA ciphers. What does that mean for me? If I use an updated system (Ubuntu 16.04) and an updated client (Thunderbird 52), shouldn't it use ...
0 votes
3 answers
1k views
Why is it necessary to minimize redundancy in the ciphertext of a stream cipher?
I am utterly confused about this. I understand why you would want to minimize redundancy if you're using a substitution cipher, but why is this necessary when using a stream cipher such as RC4? ...
1 vote
1 answer
405 views
Network scan for vulnerabilities free tool [closed]
I have a huge distributed network with over 1000 servers and network devices. It is mix of operating systems. I'm looking for some free tool to scan network for SSL v2, SSL v3, RC4,TLS v1.0 and older. ...
1 vote
1 answer
2k views
difference between rc4-40 and rc4 in OpenSSL
I was testing rc4-40 out with a 200-bit key (25 bytes) and, to my surprise, the results were the same as they were with rc4: <?php $key_size = 25; $key = ''; for ($i = 0; $i < $key_size; $i++) {...
3 votes
2 answers
398 views
Is RC4 banned from TLS for good?
According to RFC7465 RC4 is banned from TLS and my question is : Is it banned for good, does any site can use it now and if it does, will I get any notification from Chrome?
6 votes
1 answer
15k views
Disable RC4 ciphers best practice
To be compliant with security best practices, we have a requirement to disable RC4 ciphers. I have investigated a way to achieve this and, found that I can disable it by editing the registry keys. [...
0 votes
2 answers
710 views
Which of AES modes are safer and faster for transferring data over the network?
I have using Crypto++ in Qt and use of AES Algorithm for encrypting files. I know about AES modes and their applications. I have use of StreamTransformation method for encrypting files in CBC and EAX ...
4 votes
2 answers
3k views
Can we restrict cipher suites using server certificate?
Can we restrict cipher suites (such as RC4) using server certificate?