File crypto-policies-BSI-Update-BSI-policy-for-new-2024-minimum-recommend.patch of Package crypto-policies.39697
From 64b9dddd7c8355e7dfb270c5f90835f1b669418c Mon Sep 17 00:00:00 2001 From: Marcus Meissner <marcus@jet.franken.de> Date: Sun, 16 Jun 2024 11:40:49 +0200 Subject: [PATCH 584/664] BSI: Update BSI policy for new 2024 minimum recommendations The ffdhe2048 group is also not recommended anymore Index: fedora-crypto-policies-20230920.570ea89/policies/BSI.pol =================================================================== --- fedora-crypto-policies-20230920.570ea89.orig/policies/BSI.pol +++ fedora-crypto-policies-20230920.570ea89/policies/BSI.pol @@ -17,7 +17,7 @@ mac@Kerberos = HMAC-SHA2-384 HMAC-SHA2-2 # BSI TR 02102-2 / revision 2023.1, Table 4 "Empfohlene Diffie-Hellman-Gruppen für TLS 1.2" # not listed in BSI TR, but could be included: FFDHE-6144 FFDHE-8192 -group = SECP256R1 SECP384R1 SECP521R1 FFDHE-2048 FFDHE-3072 FFDHE-4096 BRAINPOOL-P512R1 BRAINPOOL-P384R1 BRAINPOOL-P256R1 +group = SECP256R1 SECP384R1 SECP521R1 FFDHE-3072 FFDHE-4096 BRAINPOOL-P512R1 BRAINPOOL-P384R1 BRAINPOOL-P256R1 # BSI TR 02102 / revision 2023.1, Table 5.1 "Empfohlene Hashfunktionen." hash = SHA2-256 SHA2-384 SHA2-512 SHA3-256 SHA3-384 SHA3-512 @@ -70,6 +70,7 @@ protocol@IKE = IKEv2 # BSI TR 02102-2 / revision 2023.1: 3k recommended (actually BSI refers to 3000, but lets make it a 2 exponent) min_dh_size = 3072 min_dsa_size = 3072 +# BSI TR 02102-2 / revision 2023.1: RSA 2k was still allowed until end of 2023, starting 2024 its 3k. min_rsa_size = 3072 # GnuTLS only for now Index: fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-gnutls.txt =================================================================== --- fedora-crypto-policies-20230920.570ea89.orig/tests/outputs/BSI-gnutls.txt +++ fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-gnutls.txt @@ -13,7 +13,6 @@ tls-enabled-mac = SHA512 tls-enabled-group = GROUP-SECP256R1 tls-enabled-group = GROUP-SECP384R1 tls-enabled-group = GROUP-SECP521R1 -tls-enabled-group = GROUP-FFDHE2048 tls-enabled-group = GROUP-FFDHE3072 tls-enabled-group = GROUP-FFDHE4096 secure-sig = ECDSA-SHA3-256 Index: fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-libreswan.txt =================================================================== --- fedora-crypto-policies-20230920.570ea89.orig/tests/outputs/BSI-libreswan.txt +++ fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-libreswan.txt @@ -1,6 +1,6 @@ conn %default ikev2=insist pfs=yes - ike=aes_gcm256-sha2_512+sha2_256-dh19+dh14+dh20+dh21+dh15+dh16,aes256-sha2_512+sha2_256-dh19+dh14+dh20+dh21+dh15+dh16,aes_gcm128-sha2_512+sha2_256-dh19+dh14+dh20+dh21+dh15+dh16,aes128-sha2_256-dh19+dh14+dh20+dh21+dh15+dh16 + ike=aes_gcm256-sha2_512+sha2_256-dh19+dh20+dh21+dh15+dh16,aes256-sha2_512+sha2_256-dh19+dh20+dh21+dh15+dh16,aes_gcm128-sha2_512+sha2_256-dh19+dh20+dh21+dh15+dh16,aes128-sha2_256-dh19+dh20+dh21+dh15+dh16 esp=aes_gcm256,aes256-sha2_512+sha2_256,aes_gcm128,aes128-sha2_256 authby=ecdsa-sha2_256,ecdsa-sha2_384,ecdsa-sha2_512,rsa-sha2_256,rsa-sha2_384,rsa-sha2_512 Index: fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-libssh.txt =================================================================== --- fedora-crypto-policies-20230920.570ea89.orig/tests/outputs/BSI-libssh.txt +++ fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-libssh.txt @@ -1,5 +1,5 @@ Ciphers aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512 -KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512 +KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512 HostKeyAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com PubkeyAcceptedKeyTypes ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com Index: fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-openssh.txt =================================================================== --- fedora-crypto-policies-20230920.570ea89.orig/tests/outputs/BSI-openssh.txt +++ fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-openssh.txt @@ -1,7 +1,7 @@ Ciphers aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr MACs hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,umac-128@openssh.com,hmac-sha2-512 -GSSAPIKexAlgorithms gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512- -KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512 +GSSAPIKexAlgorithms gss-nistp256-sha256-,gss-group16-sha512- +KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512 PubkeyAcceptedAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com HostbasedAcceptedAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com CASignatureAlgorithms ecdsa-sha2-nistp256,sk-ecdsa-sha2-nistp256@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-256,rsa-sha2-512 Index: fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-opensshserver.txt =================================================================== --- fedora-crypto-policies-20230920.570ea89.orig/tests/outputs/BSI-opensshserver.txt +++ fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-opensshserver.txt @@ -1,7 +1,7 @@ Ciphers aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr MACs hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,umac-128@openssh.com,hmac-sha2-512 -GSSAPIKexAlgorithms gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512- -KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512 +GSSAPIKexAlgorithms gss-nistp256-sha256-,gss-group16-sha512- +KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512 HostKeyAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com PubkeyAcceptedAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com HostbasedAcceptedAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com Index: fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-opensslcnf.txt =================================================================== --- fedora-crypto-policies-20230920.570ea89.orig/tests/outputs/BSI-opensslcnf.txt +++ fedora-crypto-policies-20230920.570ea89/tests/outputs/BSI-opensslcnf.txt @@ -5,4 +5,4 @@ TLS.MaxProtocol = TLSv1.3 DTLS.MinProtocol = DTLSv1.2 DTLS.MaxProtocol = DTLSv1.2 SignatureAlgorithms = ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:ed25519:ed448:rsa_pss_pss_sha256:rsa_pss_pss_sha384:rsa_pss_pss_sha512:rsa_pss_rsae_sha256:rsa_pss_rsae_sha384:rsa_pss_rsae_sha512:RSA+SHA256:RSA+SHA384:RSA+SHA512 -Groups = secp256r1:secp384r1:secp521r1:ffdhe2048:ffdhe3072:ffdhe4096:brainpoolP512r1:brainpoolP384r1:brainpoolP256r1 +Groups = secp256r1:secp384r1:secp521r1:ffdhe3072:ffdhe4096:brainpoolP512r1:brainpoolP384r1:brainpoolP256r1
