Open Information Security Foundation

01/31/2025

07:56 PM Suricata Bug #7476: Suricata tls.sni check fails when PQC KEMs like kyber

Pass rule is
pass tls $src_ip any -> any 443 (msg:"Allow terraform binaries from releases.hashicorp.com"; flow:to_se... Shashank Gugalia

07:54 PM Suricata Bug #7476: Suricata tls.sni check fails when PQC KEMs like kyber

Another pcap for releases.hashicorp.com where we are getting connection reset Shashank Gugalia

01/16/2025

07:29 PM Suricata Bug #7476: Suricata tls.sni check fails when PQC KEMs like kyber

Hi Victor,
Please let me know if you need info/data from my end
Thanks
Shashank Shashank Gugalia

01/08/2025

08:24 PM Suricata Bug #7476: Suricata tls.sni check fails when PQC KEMs like kyber

We using IPS mode with these config overwritten
runmode: workers
nfq:
mode: accept
b... Shashank Gugalia

01/07/2025

10:07 PM Suricata Bug #7476: Suricata tls.sni check fails when PQC KEMs like kyber

Attaching pcap where its working.
Also was not clear with your comment "The current pcap appears to work correctly... Shashank Gugalia

01/06/2025

08:00 PM Suricata Bug #7476: Suricata tls.sni check fails when PQC KEMs like kyber

Attaching the pcap captured at the client host Shashank Gugalia

01/03/2025

05:17 PM Suricata Bug #7476 (Feedback): Suricata tls.sni check fails when PQC KEMs like kyber

As clients begin migrating to PQC, such as the latest versions of Chrome and Golang which now use the Kyber KEM, many... Shashank Gugalia