1. Home
2. All questions
3. Question 40

CISSP study material · question 40 of 500

A vendor is certifying a TLS 1.3 stack for a government customer and must document the minimum algorithm support a conforming implementation owes. To save code space the team proposes shipping ChaCha20-Poly1305 as the only bulk option. Which cipher suite does a conforming implementation have to support?

• Network security
• Security engineering

1. TLS_AES_128_GCM_SHA256 is required, while AES-256-GCM and ChaCha20-Poly1305 are recommended rather than mandatory.
2. TLS_AES_128_CCM_SHA256 is required, while the GCM and ChaCha20 suites are recommended rather than mandatory.
3. TLS_CHACHA20_POLY1305_SHA256 is required, while both AES-GCM suites are recommended rather than mandatory.
4. TLS_AES_256_GCM_SHA384 is required, while AES-128-GCM and ChaCha20-Poly1305 are recommended rather than mandatory.

Challenge yourself on this topic → Study as cards