31689 - Unknown Cyphersuites

Status: VERIFIED INVALID

(Core Graveyard :: Security: UI, defect, P3)

Description

[Michael Baffoni]

Going to the smoketest site above, looking at the output I see a couple of lines
that say (under cyphers supported by your client):
SSL_RSA_WITH_RC4_128_MD5
Unknown Ciphersuite with ID 0xFE:FF
SSL_RSA_WITH_3DES_EDE_CBC_SHA
Unknown Ciphersuite with ID 0xFE:FE

Are the "unknown ciphersuites" newer ciphers or are they (if "unknown" refers to
the cipher name preceding it) mis-named ciphers and refer to similarly-named
ciphers that are under the section "ciphersuites NOT supported by your client":
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA
etc.

Comment 1

[John G. Myers]

Those ciphersuites are for FIPS compliance.  It's a US Government thing, it 
doesn't have to make sense.

Comment 2

[John Unruh]

Verified.