AES 128-bit data encryption

[mrustigu]

Hi,

A customer would like to know if it's possible to change the AES 128-bit data encryption to AES 256-bit instead while transferring data from CSPC to Cisco Backend.

It's a security requirement for them.

Regards,

Marcus

[mrustigu]

Hey guys, any idea about this issue?

[CC Cisco]

Hello, we've inquired with the CSPC team to provide an update regarding the latest details (CSPC 2.7).

We're pending their response.

We'll update you as soon as we hear back!

Regards,

Cesard

[mrustigu]

Cesar, how is going?

Thanks a lot for your help.

Do you have any answer from them?

Regards,

Marcus

[CC Cisco]

Good morning Marcus,

I am pending an official update from the security team. It looks like new documentation is under review and will be posted when it's ready. However, I believe that the latest CSPC uploads using 256-bit encryption, pending official documentation to confirm this.

Regards,

Cesar

[mrustigu]

Cesar,

Thanks a lot for your help!

Were you able to confirm it? Do you have the official documentation link?

Regards,

Marcus

[mrustigu]

Hello Cesar, how is going?

Do you have an update for this question?

Regards,

Marcus

[CC Cisco]

Hello Marcus,

We have engaged with the security team, however no ETA has been provided for an updated document. I am following up and trying to get an official response.

Regards,

Cesar

[mrustigu]

I have accessed SSH session on CSPC 2.7 and got the following:

openssl s_client -connect concsoweb-prd.cisco.com:443

New, TLSv1/SSLv3, Cipher is AES128-GCM-SHA256
Server public key is 1024 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : AES128-GCM-SHA256

Then, It's still using AES128... Now I am wondering that if it's possible to change it manually or not?

If you have any suggestion I will be glad to hear.

Thanks,

Marcus

[mrustigu]

Hey guys, how is going?

Do you have any answer for it?

Regards,

Marcus

[MarcosValente]

Hi all

I need to confirm if the CSPC has support to sha-256 over SSH and GUI sessions to management purposes and for connection to Cisco Cloud. Do you know?

Best regards,

Marcos Valente.