Weak cryptography

VPN gateways that negotiate weak ciphers or key-exchange parameters, legacy ciphers, small Diffie-Hellman groups, SHA-1, let a positioned attacker select or downgrade to breakable crypto. This enables decryption of captured tunnel traffic or attacks on the key agreement, undermining the confidentiality the VPN exists to provide.

1 min di letturaaggiornato il 7 ott 2026florianamette1 contributore
Chiedi al tuo assistente (MCP)Modifica su GitHub

A VPN's whole purpose is confidentiality, so its negotiated cryptography matters. Gateways that still offer legacy ciphers (DES/3DES or RC4), small Diffie-Hellman groups (768/1024-bit), or SHA-1 integrity permit compatible clients to establish tunnels with obsolete protection. Offering a weak option is evidence of insecure configuration, but it does not by itself prove that an unauthenticated attacker can force a downgrade: IKE and TLS authenticate their completed negotiations. Determine which algorithms a real client negotiates, then assess the algorithm-specific attack conditions, such as the traffic volume required by a 64-bit block-cipher attack or the resources required to attack a finite-field DH group.

bash
# IKE transform sets offered (weak DH groups, DES/3DES, SHA-1?)
ike-scan -M <target>
# TLS-based VPN (SSL-VPN/SSTP/OpenVPN-TLS) cipher grading
nmap -p443 --script ssl-enum-ciphers <target>

Subtopics#

References#

PrecedenteWeak pre-shared keysSuccessiva Key exchange downgrade