SMTP TLS SHA512 Support

Products

• Messaging Gateway

Issue/Introduction

Does Symantec Messaging Gateway (SMG) support SHA512 when negotiating TLS during an SMTP session?

Environment

Symantec Messaging Gateway - Version: 10.9.2

Resolution

As of the latest release, SMG 10.9.2, SHA512 is not supported for TLS cipher negotiation in SMTP.

You can view the currently supported TLS ciphers by running the following command on the SMG command line:

mta-control all set-tls-ciphers

This command returns the full list of ciphers supported by the MTA. At this time, all available cipher suites use hash and MAC algorithms such as SHA256, SHA384, SHA, CHACHA20-POLY1305, CCM, and ARIA, but none include SHA512.

Therefore, SHA512 is not currently supported in SMG TLS SMTP negotiation.

 

Note: If SHA512 support is added in a future release, this article will be updated accordingly.