Title

The Cipher setting for Triple DES is not set properly. (Cat II impact)

Discussion

This enables the Triple Des cipher.

Check Content

Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168 Criteria: If the value Enabled is 0xffffffff, this is not a finding. The absence of the key also indicates Not a Finding.

Fix Text

Navigate to the registry key HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168 and change the value to Enabled is 0xffffffff.

Additional Identifiers

Rule ID: SV-6385r1_rule

Vulnerability ID: V-6315

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.