Version 2015 R3.1: File Server compatibility fixes

This release fixes two issues in Rebex File Server and disables "arcfour" cipher in our SSH implemention. Otherwise, there are no changes. If you don't use Rebex File Server or any of our SSH-based components, there is no need to upgrade. File Server fixes Last week, we released Rebex File…

New component: SFTP/SCP/SSH File Server

Rebex File Server is an SFTP, SCP and SSH server library for .NET developers. It provides secure remote file system access over an SSH channel using SFTP or SCP protocols and makes it simple create an SFTP server that can be used by Rebex SFTP or any third-party SFTP, SCP…

Version 2015 R3: New component and security enhancements

This year's third release brings the long-awaited File Server component. Additionally, it disables RC4-based ciphers in TLS/SSL because they are no longer considered secure. New File Server component Rebex File Server is an SFTP, SCP and SSH server library. It provides secure remote file system access over an SSH…

RC4 no longer considered secure

The security of RC4 encryption algorithm has been questionable for many years. But despite well-founded concerns, this has remained a popular TLS/SSL cipher not only due to its speed, but also as a countermeasure against "BEAST" attack targeting block ciphers using CBC mode in SSL 3.0 and TLS…

Version 2015 R2: FREAK fix and TLS 1.2 support

This release is mostly a security upgrade that adds TLS 1.2 support and fixes vulnerability to FREAK exploit. FREAK fix FREAK ("Factoring RSA Export Keys") is yet another security exploit targeting a cryptographic weakness in the TLS/SSL protocol. It misuses the purposely weak "exportable" ciphers that were added…