diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc index 555cdcc73035..d330dae373f1 100644 --- a/CHANGELOG.asciidoc +++ b/CHANGELOG.asciidoc @@ -55,6 +55,8 @@ https://github.com/elastic/beats/compare/v6.3.0...6.3[Check the HEAD diff] *Packetbeat* +- Updated the TLS protocol parser with new cipher suites added to TLS 1.3. {issue}7455[7455] + *Winlogbeat* ==== Deprecated diff --git a/packetbeat/protos/tls/algos.go b/packetbeat/protos/tls/algos.go index 355843619524..0a53e10ea775 100644 --- a/packetbeat/protos/tls/algos.go +++ b/packetbeat/protos/tls/algos.go @@ -176,6 +176,13 @@ var cipherSuites = map[cipherSuite]string{ 0x00C5: "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256", 0x00FF: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV", + + 0x1301: "TLS_AES_128_GCM_SHA256", + 0x1302: "TLS_AES_256_GCM_SHA384", + 0x1303: "TLS_CHACHA20_POLY1305_SHA256", + 0x1304: "TLS_AES_128_CCM_SHA256", + 0x1305: "TLS_AES_128_CCM_8_SHA256", + 0x5600: "TLS_FALLBACK_SCSV", 0xC001: "TLS_ECDH_ECDSA_WITH_NULL_SHA",