CipherPunk

Library & UI for Windows Schannel CipherSuite and Elliptic Curve configuration and remote server probing. Inspired by IISCrypto

Features

• Supports SSL2.0, SSL3.0, TLS1.0, TLS1.1, TLS1.2 & TLS1.3
• Remote server probing
• Protocol configuration
• Cipher Suite configuration
• Elliptic Curve configuration
• Schannel configuration
• Windows 7 to 11 & Windows Server 2008 to 2025
• Configuration using local Group Policy (IISCrypto style)
• Configuration using Schannel API

Available as a standalone Windows application (UI) and as a NuGet package (API).

Note: not all applications use Schannel, most browsers for example require separate configuration.

CipherPunk.UI

A Windows .NET WPF application for x86, x64 and ARM64.

• Releases

CipherPunk

A NuGet package to manage Windows Schannel.

https://www.nuget.org/packages/CipherPunk

Services

• ICipherSuiteService
  • GetLocalCngConfigurationContextIdentifiers
  • GetOperatingSystemDocumentationDefaultCipherSuiteList
  • GetOperatingSystemConfiguredCipherSuiteList
  • GetOperatingSystemActiveCipherSuiteList
  • GetOperatingSystemDefaultCipherSuiteList
  • ResetCipherSuiteListToOperatingSystemDefault
  • RemoveCipherSuite
  • AddCipherSuite
  • UpdateCipherSuiteOrder
• IEllipticCurveIdentifierService
  • GetEllipticCurveIdentifiers
  • GetIdentifier
• IEllipticCurveService
  • GetOperatingSystemDefaultEllipticCurveList
  • GetOperatingSystemAvailableEllipticCurveList
  • GetOperatingSystemActiveEllipticCurveList
  • GetOperatingSystemConfiguredEllipticCurveList
  • ResetEllipticCurveListToOperatingSystemDefault
  • UpdateEllipticCurveOrder
• IGroupPolicyService
  • GetSslCipherSuiteOrderPolicyWindowsDefaultsAsync
  • GetSslCurveOrderPolicyWindowsDefaultsAsync
  • UpdateSslCipherSuiteOrderPolicy
  • UpdateEccCurveOrderPolicy
  • GetSslCipherSuiteOrderPolicy
  • GetEccCurveOrderPolicy
• ISchannelLogService
  • GetSchannelLogs
• ISchannelService
  • GetProtocolSettings
  • UpdateProtocolSettings
  • ResetProtocolSettings
  • GetKeyExchangeAlgorithmSettings
  • UpdateKeyExchangeAlgorithmSettings
  • ResetKeyExchangeAlgorithmSettings
  • GetSchannelHashSettings
  • UpdateSchannelHashSettings
  • ResetSchannelHashSettings
  • GetSchannelCipherSettings
  • UpdateSchannelCipherSettings
  • ResetSchannelCipherSettings
  • GetSchannelSettings
  • UpdateSchannelSettings
  • ResetSchannelSettings
• ITlsService
  • GetRemoteServerCipherSuitesAsync
• IWindowsDocumentationService
  • GetProtocolConfigurations
  • GetCipherSuiteConfigurations
  • GetEllipticCurveConfigurations
• IWindowsVersionService
  • WindowsVersion

Usage Examples

using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Hosting;
using CipherPunk;

// Register the CipherPunk services in the dependency container using AddCipherPunk()
using IHost host = Host.CreateDefaultBuilder(args)
    .ConfigureServices((_, services) => services.AddCipherPunk())
    .Build();

using IServiceScope serviceScope = host.Services.CreateScope();
ICipherSuiteService cipherSuiteService = serviceScope.ServiceProvider.GetRequiredService<ICipherSuiteService>();
IEllipticCurveService ellipticCurveService = serviceScope.ServiceProvider.GetRequiredService<IEllipticCurveService>();

// Retrieve the currently active cipher suites ordered by priority
var cipherSuites = cipherSuiteService.GetOperatingSystemActiveCipherSuiteList();
cipherSuites.ToList().ForEach(q => Console.WriteLine(q.CipherSuiteName));

// Retrieve the currently active elliptic curves ordered by priority
var ellipticCurves = ellipticCurveService.GetOperatingSystemActiveEllipticCurveList();
ellipticCurves.ToList().ForEach(q => Console.WriteLine(q.pwszName));

// Retrieve the default cipher suites ordered by priority for the current OS
var defaultCipherSuites = cipherSuiteService.GetOperatingSystemDocumentationDefaultCipherSuiteList();
defaultCipherSuites.ToList().ForEach(q => Console.WriteLine(q.CipherSuite));

// Retrieve the default elliptic curves ordered by priority for the current OS
var defaultEllipticCurves = ellipticCurveService.GetOperatingSystemDefaultEllipticCurveList();
defaultEllipticCurves.ToList().ForEach(q => Console.WriteLine(q.Name));

// Add a cipher suite
cipherSuiteService.AddCipherSuite("TLS_AES_256_GCM_SHA384");

await host.RunAsync();