2.3.25. Cipher (encryption suite) listΒΆ

Ciphers (encryption suites) to be set at the SSL/TLS Encryption Level are as the tables below show.

  • High
    • Ciphers (encryption suites) indicated with Yes on the list of High/medium SSL/TLS encryption levels are to be set.

  • Medium
    • Ciphers (encryption suites) indicated with Yes on the lists of High/medium SSL/TLS encryption levels and Medium-only SSL/TLS encryption levels are to be set.


High/medium SSL/TLS encryption levels

Cipher TLS 1.2 TLS 1.0/1.1 SSL 3.0
ECDHE-RSA-AES256-GCM-SHA384 Yes    
ECDHE-RSA-AES256-SHA384 Yes    
ECDHE-RSA-AES256-SHA Yes Yes  
DHE-RSA-AES256-GCM-SHA384 Yes    
DHE-RSA-AES256-SHA256 Yes    
DHE-RSA-AES256-SHA Yes Yes Yes
DHE-RSA-CAMELLIA256-SHA Yes Yes Yes
AES256-GCM-SHA384 Yes    
AES256-SHA256 Yes    
AES256-SHA Yes Yes Yes
CAMELLIA256-SHA Yes Yes Yes
ECDHE-RSA-AES128-GCM-SHA256 Yes    
ECDHE-RSA-AES128-SHA256 Yes    
ECDHE-RSA-AES128-SHA Yes Yes  
DHE-RSA-AES128-GCM-SHA256 Yes    
DHE-RSA-AES128-SHA256 Yes    
DHE-RSA-AES128-SHA Yes Yes Yes
DHE-RSA-CAMELLIA128-SHA Yes Yes Yes
AES128-GCM-SHA256 Yes    
AES128-SHA256 Yes    
AES128-SHA Yes Yes Yes
CAMELLIA128-SHA Yes Yes Yes
ECDHE-RSA-DES-CBC3-SHA Yes Yes  
EDH-RSA-DES-CBC3-SHA Yes Yes Yes
DES-CBC3-SHA Yes Yes Yes

Medium-only SSL/TLS encryption levels

Cipher TLS 1.2 TLS 1.0/1.1 SSL 3.0
DHE-RSA-SEED-SHA Yes Yes Yes
SEED-SHA Yes Yes Yes
IDEA-CBC-SHA Yes Yes Yes
ECDHE-RSA-RC4-SHA Yes Yes  
RC4-SHA Yes Yes Yes
RC4-MD5 Yes Yes Yes