BB Browser Cipher RC4 128 bit Security Concerns

When you check Browserspy from your BlackBerry browser via this link:
http://browserspy.dk/
Then select "Security" from the list
Then select "SSL Encryption Check"
For my Z30 I get RC4 128 bit (see picture.)
I also get the same results using this test:
https://www.fortify.net/
There are security concerns for RC4 128 bit to the extent Microsoft has recommended not using it. See these two links:
http://en.wikipedia.org/wiki/RC4
http://technet.microsoft.com/en-us/library/cc179125.aspx
I do not have any device connecting to the web using RC4 128 bit.
Is there a way to change the cipher strength or order for the BlackBerry browser?
(Just as a side note - because BlackBerry uses WebKit for the browser (Apple uses WebKit) a lot of the browser tester sites pick it up as Safari. I woder if browser testing to determine market share doesn't flag some of Blackberry as Apple due to this "confusion.")
Solved!
Go to Solution.

foryour information, here is what I get for my desktop browsers :
AES128 for Mozilla Firefox 36.0
AES128 for Google Chromium 42.0
AES256 for MS Internet Explorer 11
and also...
AES128 for Mozilla Firefox 35.0.1 APK on my Passport
The search box on top-right of this page is your true friend, and the public Knowledge Base too:

Similar Messages

In trying to set up an online account, a diagnostic informed me that I should update my browser to accept 128 bit security encryption. How do I accomplish this? I already have Firefox 4.

I can't understand why my browser would not be compatible with 128 bit security encryption. Have set up several other accts with no issues. What are possible problems related to this non-compatibility?

Firefox 4 supports AES-256 (256 bit) encryption in addition to 128 bit since Firefox 2 in 2002.
* https://www.fortify.net/cgi/ssl_2.pl
Can you post a link to that page?

Firefox is up to date. need 128 bit security encryption

My firefox is up to date. In order to get paperless statements from credit cards I need to have 128 bit security encryption. Card company checked browser and did not continue to make the change to paperless, due to the fact that 128 bit security encryption was not found; also read that: you need to update your browser.
How do I get this encryption? thank you

Can't you bypass that test? 
There is usually a link on the page to continue anyway and ignore the check for the encryption check.
If websites complain about 128 bit encryption not available then that can be caused by the "U;" that is no longer present in the user agent of Firefox 4+ versions.
* https://developer.mozilla.org/en/User_Agent_Strings_Reference
* http://en.wikipedia.org/wiki/User_agent#Encryption_strength_notations
*[https://bugzilla.mozilla.org/show_bug.cgi?id=572668 bug 572668] - Remove the crypto strength token from the UA string
Firefox supports 256 bit encryption ciphers (AES-256) since 2003 in Firebird 0.6, so all Firefox versions have 128 bit and 256 bit encryption.
* https://www.fortify.net/sslcheck.html

Does firefox 3.6.3 have 128-bit secure sockets layer encryption?

i need to access a government website that requires 128-bit secure sockets layer encryption in my browser. Does firefox 3.6.3 have that feature?

Firefox 4 requires at least OS X 10.5 and an Intel Mac.
* http://www.mozilla.com/firefox/4.0/system-requirements/
For an unofficial Firefox 4 compatible version (TenFourFox) that runs on PowerPC Macs with OS X 10.4.11 or OS X 10.5.8 you can look at:
* http://www.floodgap.com/software/tenfourfox/
Firefox 3.6.x (Mac OS X 10.4 and later) can be found here:
* http://www.mozilla.com/en-US/firefox/all-older.html
* http://www.mozilla.com/firefox/3.6/system-requirements/

Flash player not working on internet explorer 8 cipher strength 128-bit

PLEASE HELP!
I'Mm using Windows XP and Internet Explorer 8 with cipher strength 128-bit and Flash player does not work properly, like when I want to watch a music video or listen to music on You Tube it plays then stops and plays and stops continuously I have installed the latest Flash Player but still have the same problem.
Please please help anyone!

That sounds like you either have a very slow Internet connection, or the server at the other end (providing the video) is slow.
Try clearing your Internet cache; this helps sometimes.

Is the security encryption in Mozilla browser 128 bit or higher? I have a site that requires confirmation before I can use it.

Just an information question, not a problem. A site that I want to use on line securely to transfer funds requires that I confirm that my browser supports or has 128 bit security encryption. The site offers to check my browser, which I did and it comes up saying that I don't meet 128-bit security encryption standard or something to that effect. I believe I have the latest version of Firefox/Mozilla installed -- updated just last week (Sept 8th, 2011).
Does this browser have 128-bit security encryption?

Firefox versions since Firefox 2 in in 2002 support AES-256 as you can see used on this forum.
*https://developer.mozilla.org/en/Security_in_Firefox_2
*https://www.fortify.net/sslcheck.html

SSL 128 bits on OAS 4.0.8.1 for LINUX ?

We used to use the solaris version. To reduce cost, we are moving to Linux. Before, when you needed 128 bits security, you had to order a special patch from tech support.
The linux version we received is the export version and it is NOT 128 bits SSL.
Does 128 bits SSL exist ?
Also, LINUX support from oracle seems REALLY BAD. I'm wondering if we're doing a nice move here... ?
Thanks
null

After I fixed some of the things I broke while searching for the wrksf failure, the PL/SQL Cartridge now works for me too. And, after failing to get the DB Browser to work by loading it into the SCOTT schema, I got it to work by loading it into SYS. (SCOTT can't see the DBA_* views so loading the DB Browser into the database failed.) I haven't tried any Java Servlets yet, but that's next on my list.
If you want to try my wrksf workaround, rather than using Christoph's, here's how you can do it.
1. Backup liborb.so in the $ORACLE_HOME/orb/4.0/lib directory, just in case something goes wrong.
2. Using a hex editor, such as emacs hexl-find-file or ghex, to edit liborb.so, find the string "/proc/stat".
3. Change the directory, "/proc" to something like "/pfoo" and write the shared library file back to liborb.so. You now have the required modified liborb.so.
4. Make the /pfoo directory and cp /proc/stat /pfoo.
5. Edit /pfoo/stat and duplicate the first line, which should be the cpu line. This will let the metrics parser handle it. Make sure that /pfoo/stat has read access.
Of course, the values that the metrics code gets are now bogus, but that does not seem to be a fatal problem.
Hopefully somebody from Oracle is reading this and the real fix will be in the mail soon.

I cannot access the "pay bill" part of the City of Fort Worth Water Department. It tells me that I need 128 bits and won't let me in until I download something with that. Please help me.

The City of Fort Worth water department website for paying bills refuses to give me access, with the message that I must have a browser that supports 128 bits with encryption. I don't know what to do. PLease help me. thank you.

You should really read the manual.
"How do you restore from backup? "
Restore. When given the choice, choose to use backup.
"And how can I check to see if the pics and videos are on my computer somewhere first??"
They would only be where you put them. What program did you use to import them? Pics/vids taken with ipod are not part of the sync process at all. You should be importing them just as you would with any digital camera.
If you did not import them, then they are not on your computer.

I need at least 128 bit encryption to access secure sites. What level of encryption does Firefox have and how do I check it?

Many banking sites require you to confirm that you have at least 128 bit encryption on your browser. I allowed a site to check the encryption on my browser (Firefox/Windows) and was told I didn't have at least 128 bit encryption. I'm not the most computer savvy, so I don't know how to check or increase encryption, so if someone could guide me, I'd really appreciate it.

Right-click on the web page and select '''View Page Info'''. The '''Security''' tab will show the level of encryption being used in "Technical Details" at the bottom of that tab.
Firefox matches the level of encryption used by any secure website, and will easily do more that 128-bit encryption.

I am currently using a desk top imac with firefox as the browser. I need to access a website that requires 128 bit encryption. How do I increase bit encryption?

when I log into view my accounts, a pop up asks me to use either explorer or netscape with 128 bit encryption. since i use a mac, i do not have either. can i up the encryption using firefox?

https://support.mozilla.com/en-US/questions/903234
see also SSL Encryption Report( fortify net) in '''cor-el''' reply, in support.mozilla link inside the above link.
thank you

Does firefox browser support 128-bit SSL?

I am trying to access a bank i work for who just upgraded their system.

Firefox supports 256 bit since 2002 in Firefox 2, so 128 bit is no problem.
* https://www.fortify.net/sslcheck.html
If websites complain about 128 bit encryption not available then that can be caused by the "U;" that is no longer present in the Firefox 4 user agent.
*http://en.wikipedia.org/wiki/User_agent#Encryption_strength_notations
You can see the current user agent on the Help > Troubleshooting Information page.
You can try to add "U;" via variations for the user agent setting like posted below via the pref general.useragent.override to see if that works.
If you update Firefox then you need to adjust the Gecko (rv:) and Firefox version to reflect the currently installed version.
Some examples (Vista is 6.0 - Windows 7 is 6.1):
* Mozilla/5.0 (Windows NT 6.0; U; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
* Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
* User Agent Switcher: https://addons.mozilla.org/firefox/addon/59

How do I prioritize 256 bit encryption over the 128 bit variant?

Hello folks,
been using the fox for ages now. Thanks for the fine product :) .
Up to now I also never had a problem I couldn't find a solution for, but strangely enough, that one gets me, since I seem to be unable to find an option allowing me to deactivate the 128 bit variant of encryption.
The bank whose homepage it concerns already told me that they are offering it, and there was this nice add on that allowed me to deavtivate the rc4 protocol, but I just don't get from AES 128 to AES 256 wich I just like a banking site to have...
Any solution would be much appreciated, thanks in advance.

You can set all 128 bit SSL3 prefs to false on the about:config page to force using stronger ciphers.
Filter: ssl3*128
To open the about:config page, type about:config in the location (address) bar and press the "Enter" key, just like you type the url of a website to open a website. 
If you see a warning then you can confirm that you want to access that page. 
*Use the Filter bar at to top of the about:config page to locate a preference more easily.
*Preferences that have been modified show as bold (user set).
*Preferences can be reset to the default via the right-click context menu if they are user set
*Preferences can be changed via the right-click context menu: Modify (String or Integer) or Toggle (Boolean)
Some websites with old software may require to temporarily set security.ssl3.rsa_rc4_128_md5 to true if you get a cipher overlap error.

Cryptograhpy cipher RC4 2048bit in JDK1.5

I need to use RC4 key size of (256 bytes) 2048 bits. From JCE JavaDoc
http://java.sun.com/j2se/1.5.0/docs/guide/security/jce/JCERefGuide.html#AppE
RC4 can only support 128 bytes/1024 bits
I wonder, does any of the JDK/JCE version support RC4 for 2048 bits key?
Or can you suggest a shareware provider which supports RC4 2048 bits?
I had this topic posted orginaly in
http://forum.java.sun.com/thread.jspa?threadID=757353
Thanks a lot.

Thanks for your reply:
I have downloaded Unlimited Strength Jurisdiction Policy Files and replaced jars in my jre/lib/security. I still have the same problem.
Here is my code: The parameter keyBytes is the same as we use on the other side of the wire implemented in C version of openssl.
private Cipher quickTestRC4(byte[] keyBytes){
SecretKey key = new SecretKeySpec(keyBytes, "RC4");
Cipher cipher = null;
try {
cipher = Cipher.getInstance("RC4");
System.out.println("Testing RC4: initialize by passing keyBytes size = "+keyBytes.length+" bytes");
cipher.init(Cipher.ENCRYPT_MODE, key);
catch (Exception e1){
e1.printStackTrace();
return cipher;
Here is the exception:
Testing RC4: initialize by passing keyBytes size = 256 bytes
java.security.InvalidKeyException: Key length must be between 40 and 1024 bit
at com.sun.crypto.provider.ARCFOURCipher.a(DashoA12275)
at com.sun.crypto.provider.ARCFOURCipher.a(DashoA12275)
at com.sun.crypto.provider.ARCFOURCipher.engineInit(DashoA12275)
at javax.crypto.Cipher.a(DashoA12275)
at javax.crypto.Cipher.a(DashoA12275)
at javax.crypto.Cipher.init(DashoA12275)
at javax.crypto.Cipher.init(DashoA12275)
at com.MyTest.quickTestRC4(MyTest.java:138)
If I pass in 128 bytes keyBytes, it works fine.
I wonder, what could be the problem here and how to solve it?
Thanks a lot.

SSL - 128 bit encryption instead of 40 bit?

Hi,
I setup my Tomcat 4.0.3 server to use SSL as directed in a book on servlets that I bought from sun press. Everything works fine, the server starts with SSL support and you can access it with https:, download the cert, etc. I downloaded jsse 1.0.2 jar files and put them into my /jre/lib/ext/ dir as directed and created the keystore for the key with:
keytool -genkey -alias tomcat -keyalg RSA -validity 730
also directed by the book.
My problem is that the keys generated are using 40 bit encryption instead of strong 128. I want to make the site as secure as possible and I'm wondering how to do that. I followed the directions exactly, downloaded the version of jsse for us/canada and yet my certs still say that they were encrypted with 40 bit not 128 bit encryption.
Mike

My problem is that the keys generated are using 40 bit
encryption instead of 128. What client do you use to connect to Tomcat?
If the client does not support 128 bit keys for RC4, the browser
and SSL 3.0 may negotiate a weaker session encryption key,
in your case 40 bit.
I don't use Tomcat, but with my web server you can configure
the SSL protocol versions it accepts, and the ciphers it accepts;
ie I can switch off everything other than RC4-128. -- Can the same
thing be done in Tomcat, and how can it be done?

WLS (40-bit) to WLS (128 bit) installation

Hopefully this will help shed some light on the subject.
Terry
If you receive the following warning:
 <Security> WARNING: Exportable (weak) WebLogic Server build running and
domestic (full) strength SSL license detected. Only exportable strength SSL
connections will be accepted.
This indicates that you have a full strength certificate but a weak strength
build of the server. For full strength encryption there is a different WLS
build. The generally-available (weak/40-bit) version of WLS 5. 1 supports
512-bit certificates and 40-bit bulk data encryption. The full strength
(128-bit) WLS 5.1 build supports 768-bit and 1024-bit certificates and
128-bit bulk data encryption. Your sales contact can provide the required
forms and a special URL to download the full strength build of WebLogic.
The installation for the 128-bit version is the same as the installation for
the 40-bit version. When converting to the 128-bit version a complete
re-installation is necessary. If you are installing service packs, please
note that although Service Packs 1-5 are the same for both the 40-bit and
128-bit versions, SP6 for the 128-bit version is a controlled release. In
order to obtain SP6 for WLS 5.1 (128-bit), you will need to contact your
sales representative who will be able to provide a URL where it can be
downloaded.
Some other notes concerning the 128-bit installation. First, ensure that
you are using the permanent license that has been updated with the 128-bit
key. Second, for information on setting up WLS SSL (i.e. installing
1024-bit security certificates), please see the documentation at:
http://www.weblogic.com/docs51/classdocs/API_secure.html.
It is my understanding that the difference between the 40-bit and 128-bit
versions of WLS 5.1 is in the encryption/decryption module. Since the
difference is limited to this particular module, transitioning from the
40-bit to the 128-bit version should be transparent as far as WLCS (3.1.1
SP1 & 2.01 SP2) is concerned. This is supported by the fact that there is a
single version of WLCS for both domestic use and export use.
A couple of general notes concerning WLCS 3.1.1/2.0.1 installations running
on top of WLS 5.1 (40-bit or 128-bit) SP6:
WLCS 3.1.1: To date, support cases have not been received with a WLCS
3.1.1 installation running on top of WLS
5.1 (40-bit/128-bit) SP6 where SP6 has been determined to be the
problem.
WLCS 2.0.1: With one minor exception (see Solution S-05838 below),
support cases have not been received with a
WLCS 2.0.1 installation running on top of WLS 5.1 (40-bit/128-bit) SP6
where SP6 has been determined to be the
problem.
A couple of general notes concerning WLCS 2.01 and WLS 5.01 (40- or 128-bit)
Service Packs 1-6:
- There have been problems when using SP1, SP2 and SP3 for WLS 5.
- Therefore, SP4 (minimum) is required.
- To date, support cases have not been received where SP5 has been
determined to be a problem.
- There is one small issue related to SP6 (see Solution S-05838 below).
Otherwise, support cases have not been
received where SP6 has been determined to be a problem.
- Following the SP6 installation, all the JSPs will need to be
recompiled. Due to the custom tags used in WLCS 2.0.1,
the JSPs cannot be pre-compiled. Therefore, recompiling will occur as
the pages are accessed.
Please see the release notes that accompany each service pack downloads for
issues that are resolved with each particular
service pack.
Solution S-05838
A better solution to the problem: WLCS 2.0.1 only: DataLoader script causes
ASCClientException with WLS 5.1 SP6
Old Solution:
Use WLS 5.1 SP5 to run the DataLoader, THEN upgrade to SP6.
New Solution:
You can run the DataLoader without exceptions for WLCS 2.0.1 SP2 and WLS 5.1
SP6 if you modify the script to use t3 socket connections instead of http.
Open the DataLoader script for editing and change the two appearances of
"http://" to "t3://".

You need to contact your sales rep and get the domestic strength version of
WLS.
Michael Girdley
Product Manager, WebLogic Server
BEA Systems Inc.
Ravi Kumar.T <[email protected]> wrote in message
news:8945ju$lu8$[email protected]..
Where to specify the no of bits for encryption for SSL. Is it depend on
verisign certificates installed!!
We are using we weblogic 4.5.1 on Solaris. and my site is having following
encryption
SSL 3.0, RC4 with 40 bit encryption (Low); RSA with 512 bit exchange
and I have seen some other sites are having
SSL 3.0, RC4 with 128 bit encryption (High); RSA with 1024 bit exchange
thanks..
ravi

BB Browser Cipher RC4 128 bit Security Concerns

Similar Messages

Maybe you are looking for