DES-CBC3-SHA
TLS_RSA_WITH_3DES_EDE_CBC_SHA
3DES-EDE-CBC-SHA (Triple-DES) is broken. 3DES has a 64-bit block size vulnerable to the SWEET32 birthday attack (practical with ~785GB of traffic on the same session key). RFC 8996 (2021) prohibits TLS 1.0/1.1 and deprecated 3DES. SHA-1 is cryptographically weak. Static RSA provides no forward secrecy. Remove from all configurations.
Key Exchange
RSA
Authentication
RSA
Encryption
3DES-EDE-CBC
MAC / Integrity
SHA-1
Details
3DES uses a 64-bit block cipher (originally DES) applied three times. The 64-bit block size creates a birthday-attack vulnerability known as SWEET32 – after ~32GB of data under the same key, collisions occur with 50% probability. At 785GB, a practical attack is feasible. The SWEET32 attack (2016) demonstrated this against HTTPS and VPN connections. TLS 1.3 removed 3DES entirely. PCI-DSS explicitly prohibits 3DES after June 2024.