jvehent/cipherscan — pull request #11 by tomato42 (2014-04-06 12:38:15+00:00)
Title: Reporting improvements 02

Extend and fix reporting of Protocols, ciphers and PFS suites.

New report:

SSL/TLS survey of 79846 websites from Alexa's top 1 million
Stats only from connections that did provide valid certificates
(or anonymous DH from servers that do also have valid certificate installed)

Supported Ciphers Count Percent
-------------------------+---------+-------
3DES 73668 92.2626
3DES Only 2253 2.8217
AES 74197 92.9251
AES Only 119 0.149
AES-CBC Only 91 0.114
AES-GCM 22569 28.2657
AES-GCM Only 2 0.0025
CAMELLIA 26764 33.5195
CHACHA20 1984 2.4848
RC4 69010 86.4289
RC4 Only 1330 1.6657
RC4 Preferred 17462 21.8696
RC4 forced in TLS1.1+ 9218 11.5447
z:ADH-DES-CBC-SHA 264 0.3306
z:ADH-SEED-SHA 173 0.2167
z:AECDH-NULL-SHA 3 0.0038
z:DES-CBC-MD5 41 0.0513
z:DES-CBC-SHA 17311 21.6805
z:DHE-RSA-SEED-SHA 11320 14.1773
z:ECDHE-RSA-NULL-SHA 3 0.0038
z:EDH-RSA-DES-CBC-SHA 12167 15.2381
z:EXP-ADH-DES-CBC-SHA 196 0.2455
z:EXP-DES-CBC-SHA 13819 17.3071
z:EXP-EDH-RSA-DES-CBC-SHA 8195 10.2635
z:EXP-RC2-CBC-MD5 12963 16.235
z:IDEA-CBC-MD5 15 0.0188
z:IDEA-CBC-SHA 11268 14.1122
z:NULL-MD5 138 0.1728
z:NULL-SHA 137 0.1716
z:NULL-SHA256 1 0.0013
z:RC2-CBC-MD5 56 0.0701
z:SEED-SHA 13787 17.267

Supported Handshakes Count Percent
-------------------------+---------+-------
DHE 36730 46.0011
ECDHE 25769 32.2734

Supported PFS Count Percent PFS Percent
-------------------------+---------+--------+-----------
DH,1024bits 35488 44.4456 96.6186
DH,2048bits 953 1.1935 2.5946
DH,3072bits 1 0.0013 0.0027
DH,3248bits 1 0.0013 0.0027
DH,4096bits 64 0.0802 0.1742
DH,512bits 26 0.0326 0.0708
DH,768bits 200 0.2505 0.5445
ECDH,B-571,570bits 89 0.1115 0.3454
ECDH,P-224,224bits 2 0.0025 0.0078
ECDH,P-256,256bits 25583 32.0404 99.2782
ECDH,P-384,384bits 39 0.0488 0.1513
ECDH,P-521,521bits 71 0.0889 0.2755
Prefer DH,1024bits 25481 31.9127 69.3738
Prefer DH,2048bits 408 0.511 1.1108
Prefer DH,4096bits 5 0.0063 0.0136
Prefer DH,512bits 1 0.0013 0.0027
Prefer DH,768bits 22 0.0276 0.0599
Prefer ECDH,B-571,570bits 62 0.0776 0.2406
Prefer ECDH,P-256,256bits 16862 21.1182 65.4352
Prefer ECDH,P-384,384bits 19 0.0238 0.0737
Prefer ECDH,P-521,521bits 65 0.0814 0.2522
Prefer PFS 42925 53.7597 0
Support PFS 54997 68.8788 0

Certificate sig alg Count Percent
-------------------------+---------+--------
None 2506 3.1385
sha1WithRSAEncryption 77201 96.6874
sha256WithRSAEncryption 2659 3.3302

Certificate key size Count Percent
-------------------------+---------+--------
RSA 1024 418 0.5235
RSA 2047 3 0.0038
RSA 2048 77506 97.0694
RSA 2049 1 0.0013
RSA 2056 1 0.0013
RSA 2058 1 0.0013
RSA 2080 2 0.0025
RSA 2084 2 0.0025
RSA 2432 50 0.0626
RSA 3072 9 0.0113
RSA 3248 1 0.0013
RSA 4048 1 0.0013
RSA 4086 1 0.0013
RSA 4096 1853 2.3207
RSA 4192 1 0.0013
RSA/ECDSA Dual Stack 0 0.0

Supported Protocols Count Percent
-------------------------+---------+-------
SSL2 176 0.2204
SSL2 Only 5 0.0063
SSL3 79157 99.1371
SSL3 Only 1488 1.8636
SSL3 or TLS1 Only 42282 52.9544
TLS1 78184 97.9185
TLS1 Only 198 0.248
TLS1.1 33701 42.2075
TLS1.1 Only 1 0.0013
TLS1.1 or up Only 9 0.0113
TLS1.2 35960 45.0367
TLS1.2 Only 6 0.0075
TLS1.2, 1.0 but not 1.1 3663 4.5876