{"action":"created","issue":{"url":"https://api.github.com/repos/jvehent/cipherscan/issues/118","repository_url":"https://api.github.com/repos/jvehent/cipherscan","labels_url":"https://api.github.com/repos/jvehent/cipherscan/issues/118/labels{/name}","comments_url":"https://api.github.com/repos/jvehent/cipherscan/issues/118/comments","events_url":"https://api.github.com/repos/jvehent/cipherscan/issues/118/events","html_url":"https://github.com/jvehent/cipherscan/issues/118","id":142113657,"number":118,"title":"*-CHACHA20-POLY1305 not recognised","user":{"login":"osirisinferi","id":14792563,"avatar_url":"https://avatars.githubusercontent.com/u/14792563?v=3","gravatar_id":"","url":"https://api.github.com/users/osirisinferi","html_url":"https://github.com/osirisinferi","followers_url":"https://api.github.com/users/osirisinferi/followers","following_url":"https://api.github.com/users/osirisinferi/following{/other_user}","gists_url":"https://api.github.com/users/osirisinferi/gists{/gist_id}","starred_url":"https://api.github.com/users/osirisinferi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/osirisinferi/subscriptions","organizations_url":"https://api.github.com/users/osirisinferi/orgs","repos_url":"https://api.github.com/users/osirisinferi/repos","events_url":"https://api.github.com/users/osirisinferi/events{/privacy}","received_events_url":"https://api.github.com/users/osirisinferi/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2016-03-20T00:11:58Z","updated_at":"2016-03-20T11:43:15Z","closed_at":null,"body":"My Apache uses `ECDHE-ECDSA-CHACHA20-POLY1305` for most connections, but for some reason I can't understand, `cipherscan` doesn't list it in its output. The local `OpenSSL` does have the CHACHA20-POLY1305 ciphers in the output of `openssl ciphers -v 'ALL:COMPLEMENTOFALL:+aRSA'`, so you'd think `cipherscan` would test for it?"},"comment":{"url":"https://api.github.com/repos/jvehent/cipherscan/issues/comments/198909762","html_url":"https://github.com/jvehent/cipherscan/issues/118#issuecomment-198909762","issue_url":"https://api.github.com/repos/jvehent/cipherscan/issues/118","id":198909762,"user":{"login":"osirisinferi","id":14792563,"avatar_url":"https://avatars.githubusercontent.com/u/14792563?v=3","gravatar_id":"","url":"https://api.github.com/users/osirisinferi","html_url":"https://github.com/osirisinferi","followers_url":"https://api.github.com/users/osirisinferi/followers","following_url":"https://api.github.com/users/osirisinferi/following{/other_user}","gists_url":"https://api.github.com/users/osirisinferi/gists{/gist_id}","starred_url":"https://api.github.com/users/osirisinferi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/osirisinferi/subscriptions","organizations_url":"https://api.github.com/users/osirisinferi/orgs","repos_url":"https://api.github.com/users/osirisinferi/repos","events_url":"https://api.github.com/users/osirisinferi/events{/privacy}","received_events_url":"https://api.github.com/users/osirisinferi/received_events","type":"User","site_admin":false},"created_at":"2016-03-20T11:43:14Z","updated_at":"2016-03-20T11:43:14Z","body":"My OpenSSL can connect with the IETF as wel as the draft version of the ChaCha-cipher. I'm using this patch for OpenSSL: https://github.com/cloudflare/sslconfig\r\n\r\nThe fact it doesn't detect `0xcca9` in your case might also suggest your OpenSSL is \"\"\"outdated\"\"\"? (Does the official OpenSSL already have ChaCha-support? [A mailing list thread](https://mta.openssl.org/pipermail/openssl-users/2015-March/000866.html) suggest it doesn't (but it's a year old) and the ChaCha-code is only implemented in [OpenSSL masters branch](https://github.com/openssl/openssl/blob/master/crypto/chacha/chacha_enc.c), [not in 1.0.2](https://github.com/openssl/openssl/blob/master/crypto/chacha/chacha_enc.c).\r\n\r\nIn any case, I think there might be some tuning required with regard to ChaCha20/Poly1305 :stuck_out_tongue: "}}