Stitched vs non-Stitched Ciphersuites

["Short, Todd via openssl-users" <openssl-users@xxxxxxxxxxx>]

The latest security advisory:

https://www.openssl.org/news/secadv/20190226.txt

mentions stitched vs. non-stitched ciphersuites, but doesn’t really elaborate on which ciphersuites are stitched and non-stitched.

"In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites."

Can someone give some examples of both?

--

-Todd Short

// tshort@xxxxxxxxxx

// "One if by land, two if by sea, three if by the Internet."