Project

General

Profile

Actions
Copy link

Feature #14047

closed

Add support for SMB 3.1.1 AES-256

Added by Andy Fiddaman about 2 years ago. Updated 9 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Alexander Stetsenko
Category:
smb - SMB server and client
Start date:
Due date:
% Done:

100%

Estimated time:
Difficulty:
Medium
Tags:
Gerrit CR:
1980
External Bug:

Description

Windows Server 2022 and Windows 11 introduce AES-256-GCM and AES-256-CCM cryptographic suites for SMB 3.1.1 which we do not yet support.

Related issues

Related to illumos gate - Bug #14046: Windows Server 2022 and Windows 11 cannot connect to SMB shareClosedAndy Fiddaman

Actions
Related to illumos gate - Bug #15214: SMB should allow 256 bit ciphersClosedToomas Soome

Actions
Has duplicate illumos gate - Feature #14059: SMB server needs 256bit cipher for Windows 2022 /Windows 11?Duplicate

Actions
Blocked by illumos gate - Feature #13914: smbd encrypt_cipher property should list enabled ciphers explicitlyClosedAlexander Stetsenko2021-06-29

Actions
Actions
Copy link
 #1

Updated by Andy Fiddaman about 2 years ago

  • Related to Bug #14046: Windows Server 2022 and Windows 11 cannot connect to SMB share added
Actions
Copy link
 #2

Updated by Andy Fiddaman about 2 years ago

  • Subject changed from Add support for SMB 3.11 AES-256 to Add support for SMB 3.1.1 AES-256
Actions
Copy link
 #3

Updated by Andy Fiddaman about 2 years ago

  • Has duplicate Feature #14059: SMB server needs 256bit cipher for Windows 2022 /Windows 11? added
Actions
Copy link
 #4

Updated by Alexander Stetsenko about 2 years ago

  • Status changed from New to In Progress
  • Assignee set to Alexander Stetsenko
  • % Done changed from 0 to 50
Actions
Copy link
 #5

Updated by Alexander Stetsenko about 2 years ago

  • % Done changed from 50 to 70
Actions
Copy link
 #7

Updated by Joshua M. Clulow about 2 years ago

  • Blocked by Feature #13914: smbd encrypt_cipher property should list enabled ciphers explicitly added
Actions
Copy link
 #8

Updated by Alexander Stetsenko about 2 years ago

  • % Done changed from 70 to 80

AES-256 ciphers work - now waiting for 13914

Actions
Copy link
 #9

Updated by Electric Monk almost 2 years ago

  • Gerrit CR set to 1980
Actions
Copy link
 #10

Updated by Guenther Alka over 1 year ago

Any news on this?

Support for Windows 11 (and OSX 12) is quite urgent

Actions
Copy link
 #11

Updated by Gordon Ross over 1 year ago

This is "queued up" after a bunch of other work. See:
https://github.com/gwr/illumos-gate/commits/il-bsrup5
patience...

Actions
Copy link
 #12

Updated by Guenther Alka about 1 year ago

Many thanks and glad to see your commit about the Cipher problem and hope to see it in Illumos.

Actions
Copy link
 #13

Updated by Gordon Ross 12 months ago

  • Related to Bug #15214: SMB should allow 256 bit ciphers added
Actions
Copy link
 #14

Updated by Electric Monk 9 months ago

  • Status changed from In Progress to Closed
  • % Done changed from 80 to 100

git commit a4568e19224dbd8e405999c57ff8d4e4fd0d877f

commit  a4568e19224dbd8e405999c57ff8d4e4fd0d877f
Author: Alexander Stetsenko <alex.stetsenko@gmail.com>
Date:   2023-03-15T09:52:33.000Z

    15214 SMB should allow 256 bit ciphers
    14047 Add support for SMB 3.1.1 AES-256
    Portions contributed by: Matt Barden <mbarden@racktopsystems.com>
    Reviewed by: Garrett D'Amore <garrett@damore.org>
    Reviewed by: Gordon Ross <gwr@racktopsystems.com>
    Approved by: Robert Mustacchi <rm@fingolfin.org>

Actions
Copy link

Also available in: Atom PDF