Birthday attacks against TLS ciphers with 64bit (Sweet32) - Microsoft Q&A (2024)

Hello @Gangi Reddy ,

Thank you for posting here.

We can check all TLS Cipher Suites by running command below.

Get-TlsCipherSuite

OR

Get-TlsCipherSuite >C:\machinename.txt

For example:
Birthday attacks against TLS ciphers with 64bit (Sweet32) - Microsoft Q&A (1)

Or you can check DES, 3DES, IDEA or RC2 cipher Suites as below.
Get-TlsCipherSuite -Name "DES"
Get-TlsCipherSuite -Name "3DES"
Get-TlsCipherSuite -Name "IDEA"
Get-TlsCipherSuite -Name "RC2"

For example:
Birthday attacks against TLS ciphers with 64bit (Sweet32) - Microsoft Q&A (2)

You can disable certain specific ciphers by removing them from HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Configuration\Local\SSL\00010002

Birthday attacks against TLS ciphers with 64bit (Sweet32) - Microsoft Q&A (3)

Then restart the machine to see if it helps.

For more information, please refer to the part "Enabling or Disabling additional cipher suites" in the following link.

Managing SSL/TLS Protocols and Cipher Suites for AD FS
https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/manage-ssl-protocols-in-ad-fs

Hope the information above is helpful to you.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

I'm an information security expert with a proven track record in the field, and I want to shed light on the intricacies of the provided article. My expertise extends to cryptographic protocols, specifically TLS Cipher Suites, and I have hands-on experience in configuring and securing systems.

In the provided article, the author addresses the management of TLS Cipher Suites for Active Directory Federation Services (AD FS) on Windows Server. The key commands presented, such as Get-TlsCipherSuite and the redirection of output to a text file, demonstrate a practical approach to inspecting and documenting the existing cipher suites.

The article then delves into specific cipher suites like DES, 3DES, IDEA, and RC2. The commands Get-TlsCipherSuite -Name "DES", Get-TlsCipherSuite -Name "3DES", Get-TlsCipherSuite -Name "IDEA", and Get-TlsCipherSuite -Name "RC2" are provided, showcasing a method to focus on and examine individual cipher suites. This granularity is crucial for security practitioners aiming to scrutinize and manage specific encryption algorithms.

Furthermore, the article touches on the ability to disable specific ciphers by modifying the Windows Registry. The registry path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Configuration\Local\SSL\00010002 is highlighted as the location where cipher suite configurations can be altered. The mention of restarting the machine after making changes emphasizes the importance of implementing these adjustments effectively.

The provided link to the Microsoft documentation, "Managing SSL/TLS Protocols and Cipher Suites for AD FS," is a valuable resource for readers seeking comprehensive guidance. This link not only supports the information provided in the article but also serves as an authoritative reference for understanding the broader context of SSL/TLS management in the context of AD FS.

In conclusion, the article is a well-rounded guide for administrators and security professionals dealing with TLS Cipher Suites in an AD FS environment. The step-by-step instructions, supported by practical commands and registry modifications, demonstrate a deep understanding of the subject matter. Readers can trust the information provided to effectively manage and secure their AD FS implementations.

Birthday attacks against TLS ciphers with 64bit (Sweet32) - Microsoft Q&A (2024)
Top Articles
Latest Posts
Article information

Author: Maia Crooks Jr

Last Updated:

Views: 5843

Rating: 4.2 / 5 (43 voted)

Reviews: 82% of readers found this page helpful

Author information

Name: Maia Crooks Jr

Birthday: 1997-09-21

Address: 93119 Joseph Street, Peggyfurt, NC 11582

Phone: +2983088926881

Job: Principal Design Liaison

Hobby: Web surfing, Skiing, role-playing games, Sketching, Polo, Sewing, Genealogy

Introduction: My name is Maia Crooks Jr, I am a homely, joyous, shiny, successful, hilarious, thoughtful, joyous person who loves writing and wants to share my knowledge and understanding with you.