TLS/SSL Encryption

Robo-FTP supports the following versions of SSL/TLS when connecting with the FTPS or HTTPS protocols:

Perfect Forward Secrecy

Without Perfect Forward Secrecy (PFS), if an adversary manages to compromise a server's private key, he will be able to decrypt any secure communications that were previously monitored and recorded by that adversary at any time in the past. Perfect Forward Secrecy is a property of certain modern ciphers which fully eliminates this risk through the use of additional, temporary keys that cannot be obtained by any eavesdropper. Robo-FTP supports Perfect Forward Secrecy by providing a large collection of PFS-enabled ciphers, including:

Supported HMACs (hash-based message authentication code)

Robo-FTP includes support for several different HMAC algorithms. A particular HMAC may only be available for certain ciphers, and vice-versa. The complete list of HMAC algorithms is as follows:

Supported Ciphers

Robo-FTP includes support for all 106 separate ciphers provided by OpenSSL 1.0.2l for use with TLS. Each of these ciphers can be paired with a limited number of HMAC algorithms, making for a total of 130 cipher + HMAC combinations. The complete cipher list is as follows:

SSL/TLS Implementation

Robo-FTP's SSL/TLS implementation is OpenSSL 1.0.2, which is the most current version as of this writing. Implementation details of OpenSSL are beyond the scope of this document. Please visit openssl.org for any further details you might need.

See also: Connecting to Secure Sites