Re: Since upgrading from V7R1 to V7R3, PC desktop encryption level went from 256 to 128 -- MIDRANGE-L

Couple of things here. 1) You might want to set the list to match what
you have from the 7.1 2) Appears there are many more now than what you had
at 7.1 3) Is the current list the defaults after you did the OS upgrade,
if so then IBM must be setting the list this way post upgrade. 4) Not
sure how changing the order of it now might impact your system overall.

On Fri, Mar 23, 2018 at 1:36 PM, Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
wrote:

Jack,

Below is my previous V7R1 cipher list.
Sequence 10, first in the list was 256.

10 *RSA_AES_256_CBC_SHA256
20 *RSA_AES_128_CBC_SHA256
30 *RSA_AES_128_CBC_SHA
40 *RSA_AES_256_CBC_SHA
50 *RSA_3DES_EDE_CBC_SHA
60 *RSA_DES_CBC_SHA
70 *RSA_RC4_128_SHA

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
Jack Kingsley
Sent: Friday, March 23, 2018 12:56 PM
To: Midrange Systems Technical Discussion
Subject: Re: Since upgrading from V7R1 to V7R3, PC desktop encryption
level went from 256 to 128

Paul, do you have access to any list of the 7.1 system values and what
they were like before the upgrade. If you hit F1 it uses the list in
sequential order to determine which one it will use.

On Thu, Mar 22, 2018 at 9:30 AM, Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
wrote:

Since upgrading from V7R1 to V7R3, PC desktop encryption level went
from
256 to 128.
The little padlock on the bottom left stated 256 at V7R1.
At V7R3, the padlock now states 128.
When I check my Security Encryption level, it shows the below cipher
being used.
*ECDHE_ECDSA_AES_128_GCM_SHA256

Not sure if this is a coincidence, but his is the first cipher listed
in QSSLCSL - Secure sockets layer cipher specification list.
This is the V7R3 default list, no changes were made.

Any thoughts from the group?

Sequence Cipher
number Suite
0
10 *ECDHE_ECDSA_AES_128_GCM_SHA256
20 *ECDHE_ECDSA_AES_256_GCM_SHA384
30 *ECDHE_RSA_AES_128_GCM_SHA256
40 *ECDHE_RSA_AES_256_GCM_SHA384
50 *RSA_AES_128_GCM_SHA256
60 *RSA_AES_256_GCM_SHA384
70 *ECDHE_ECDSA_AES_128_CBC_SHA256
80 *ECDHE_ECDSA_AES_256_CBC_SHA384
90 *ECDHE_RSA_AES_128_CBC_SHA256
100 *ECDHE_RSA_AES_256_CBC_SHA384
110 *RSA_AES_128_CBC_SHA256
120 *RSA_AES_128_CBC_SHA
130 *RSA_AES_256_CBC_SHA256
140 *RSA_AES_256_CBC_SHA
150 *ECDHE_ECDSA_3DES_EDE_CBC_SHA
160 *ECDHE_RSA_3DES_EDE_CBC_SHA
170 *RSA_3DES_EDE_CBC_SHA

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD