Hello Zoom is deprecating ciphers
- DHE-RSA-AES256-GCM-SHA384
- DHE-RSA-CHACHA20-POLY1305
- DHE-RSA-AES128-GCM-SHA256
We have customers who use the Codec Plus to call into Zoom but we can find no documentation online, or on Cisco.com on which cipher suites the Codec Plus uses. Please update us.
Their message is below...
Dear Valued Customer,
We are writing to inform you about an upcoming change to the Zoom CRC (Conference Room Connector) service.
In our continuous effort to maintain high security standards, we have identified certain weak cipher suites supported by Zoom CRC for Session Initiation Protocol (SIP) connections using Transport Layer Security (TLS) that must be retired from service. The discontinued cipher suites have been identified as vulnerable to potential security risks and are no longer recommended by industry standards. Removing them will help enhance the security of your data transmissions and help protect the confidentiality, integrity, and authenticity of your communications. As a result, the following Zoom CRC SIP TLS cipher suite changes will take place as part of the next Zoom CRC software release, scheduled September 29, 2023.
Discontinued ciphers
- DHE-RSA-AES256-GCM-SHA384
- DHE-RSA-CHACHA20-POLY1305
- DHE-RSA-AES128-GCM-SHA256
Supported ciphers
- TLS_AES_256_GCM_SHA384
- TLS_AES_128_GCM_SHA256
- TLS_CHACHA20_POLY1305_SHA256
- ECDHE-ECDSA-AES256-GCM-SHA384
- ECDHE-ECDSA-AES128-GCM-SHA256
- ECDHE-RSA-AES256-GCM-SHA384
- ECDHE-RSA-AES128-GCM-SHA256
- ECDHE-ECDSA-CHACHA20-POLY1305
- ECDHE-RSA-CHACHA20-POLY1305
We understand that this change may have an impact on your systems or integrations. Therefore, we encourage you to review your applications, devices, or platforms to ensure they support modern and secure cipher suites. We recommend updating your configurations to include stronger cipher suites such as those recommended by industry best practices and supported by Zoom CRC.
If you have any questions or concerns regarding this change, please consult our support page or feel free to reach out to your dedicated Zoom Account Team or Zoom Support.
We appreciate your understanding and cooperation in this matter. Ensuring the security of your data is of utmost importance to us, and we remain committed to providing you with a secure and reliable service.
Thank you for your continued trust in our services.
Team Zoom
