After Applying NSA Security Template, No Shared Cipher on all HTTPS Pages

From: Ian (ianhuggins_at_hotmail.com)
Date: 09/24/04


Date: 24 Sep 2004 11:55:26 -0700

On 4/1/04 Terry (anonymous@discussions.microsoft.com)
posted the following question, I have not been able to find a reply
when searching through the newsgroup. I have the same problem too,
does anyone know where in the security template IE has been thrown off?
Firefox on the same system has no problem getting into the
SSL sites

4/1 posting -

When we applied the NSA Security Template on our Test XP
Machine, we are no longer able to view SSL web pages.

We get the error:
"No Shared Cipher

Your browser is unable to negotiate a security level
which satisfies the requirements of this site. For
security reasons, this Web site may require strong
encryption. To gain access to this site, you may try any
or all of the following:
1) Change your browser's security settings to support the
appropriate level of encryption (the cipher suites
supported by this site are listed above).
2) Update your browser to a version that supports the
appropriate level of encryption.
3) Apply the "strong-encryption" option pack to your
operating system.
4) If in the United States, verify that you are using a
recent domestic version of your browser.
5) Contact this site's administrator for assistance.
Security Details:

Browser ciphers:
DES-CBC3-SHA

Secure Site ciphers:
RC4-MD5
RC4-MD5
RC4-SHA
EXP-RC4-MD5
EXP-RC4-MD5
EXP1024-RC4-MD5
EXP1024-RC2-CBC-MD5
EXP1024-RC4-SHA
NULL-MD5
NULL-SHA"

I checked the browser's security settings, SSL 2 & 3 are
checked. 128-Bit encryption is enabled and shows under
Help-About.

Any ideas on how to enable the rest of the protocols?



Relevant Pages

  • Re: SPES (my new encryption) one of its kind
    ... with provable security properties rather than a system very difficult ... 1- can you name an encryption system which has provable security? ... an AES128 is far more secure than a Vingenere cipher even with a MB ... may not say that a block cypher used in CTR mode is stupid!) ...
    (sci.crypt)
  • Re: Enigma machine strenght using a computer
    ... cipher with rotors that spin backwards, forwards, stop and start based ... Is this a good way to get security on modern ... encryption less error-prone and they were a cost effective way to get ... case) than not since a wider base uses the same algorithm. ...
    (sci.crypt)
  • No Shared Cipher message
    ... 128 encryption) ... No Shared Cipher ... Your browser is unable to negotiate a security level ... Update your browser to a version that supports the ...
    (microsoft.public.windows.inetexplorer.ie6.setup)
  • IE6 - No Shared Cipher Message
    ... 128 encryption) ... No Shared Cipher ... Your browser is unable to negotiate a security level ... Update your browser to a version that supports the ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • SSL - No Shared Cipher
    ... ich nach kurzer Zeit die Nachricht: ... No Shared Cipher ... Your browser is unable to negotiate a security level ... Update your browser to a version that supports the ...
    (microsoft.public.de.german.inetexplorer.ie6)

Loading