2.4.27. Cipher (encryption suite) listΒΆ
Ciphers (encryption suites) to be set at the SSL/TLS Encryption Level are as the tables below show.
- High
Ciphers (encryption suites) indicated with Yes on the list of High/medium SSL/TLS encryption levels are to be set.
- Medium
Ciphers (encryption suites) indicated with Yes on the lists of High/medium SSL/TLS encryption levels and Medium-only SSL/TLS encryption levels are to be set.
** Custom **
The cipher suites listed as Yes in the list are set to your choice.
High/medium SSL/TLS encryption levels
| Cipher | TLS 1.2 | TLS 1.0/1.1 |
|---|---|---|
| ECDHE-RSA-AES256-GCM-SHA384 | Yes | |
| DHE-RSA-AES256-GCM-SHA384 | Yes | |
| ECDHE-RSA-CHACHA20-POLY1305 | Yes | |
| DHE-RSA-CHACHA20-POLY1305 | Yes | |
| DHE-RSA-AES256-CCM8 | Yes | |
| DHE-RSA-AES256-CCM | Yes | |
| ECDHE-RSA-AES128-GCM-SHA256 | Yes | |
| DHE-RSA-AES128-GCM-SHA256 | Yes | |
| DHE-RSA-AES128-CCM8 | Yes | |
| DHE-RSA-AES128-CCM | Yes | |
| ECDHE-RSA-AES256-SHA384 | Yes | |
| DHE-RSA-AES256-SHA256 | Yes | |
| ECDHE-RSA-CAMELLIA256-SHA384 | Yes | |
| DHE-RSA-CAMELLIA256-SHA256 | Yes | |
| ECDHE-RSA-AES128-SHA256 | Yes | |
| DHE-RSA-AES128-SHA256 | Yes | |
| ECDHE-RSA-CAMELLIA128-SHA256 | Yes | |
| DHE-RSA-CAMELLIA128-SHA256 | Yes | |
| ECDHE-RSA-AES256-SHA | Yes | Yes |
| DHE-RSA-AES256-SHA | Yes | Yes |
| DHE-RSA-CAMELLIA256-SHA | Yes | Yes |
| ECDHE-RSA-AES128-SHA | Yes | Yes |
| DHE-RSA-AES128-SHA | Yes | Yes |
| DHE-RSA-CAMELLIA128-SHA | Yes | Yes |
| AES256-GCM-SHA384 | Yes | |
| AES256-CCM8 | Yes | |
| AES256-CCM | Yes | |
| AES128-GCM-SHA256 | Yes | |
| AES128-CCM8 | Yes | |
| AES128-CCM | Yes | |
| AES256-SHA256 | Yes | |
| CAMELLIA256-SHA256 | Yes | |
| AES128-SHA256 | Yes | |
| CAMELLIA128-SHA256 | Yes | |
| AES256-SHA | Yes | Yes |
| CAMELLIA256-SHA | Yes | Yes |
| AES128-SHA | Yes | Yes |
| CAMELLIA128-SHA | Yes | Yes |
| ECDHE-ECDSA-AES256-GCM-SHA384 | Yes | |
| ECDHE-ECDSA-CHACHA20-POLY1305 | Yes | |
| ECDHE-ECDSA-AES256-CCM8 | Yes | |
| ECDHE-ECDSA-AES256-CCM | Yes | |
| ECDHE-ECDSA-AES128-GCM-SHA256 | Yes | |
| ECDHE-ECDSA-AES128-CCM8 | Yes | |
| ECDHE-ECDSA-AES128-CCM | Yes | |
| ECDHE-ECDSA-AES256-SHA384 | Yes | |
| ECDHE-ECDSA-CAMELLIA256-SHA384 | Yes | |
| ECDHE-ECDSA-AES128-SHA256 | Yes | |
| ECDHE-ECDSA-CAMELLIA128-SHA256 | Yes | |
| ECDHE-ECDSA-AES256-SHA | Yes | Yes |
| ECDHE-ECDSA-AES128-SHA | Yes | Yes |
| DHE-DSS-AES256-GCM-SHA384 | Yes | |
| DHE-DSS-AES128-GCM-SHA256 | Yes | |
| DHE-DSS-AES256-SHA256 | Yes | |
| DHE-DSS-CAMELLIA256-SHA256 | Yes | |
| DHE-DSS-AES128-SHA256 | Yes | |
| DHE-DSS-CAMELLIA128-SHA256 | Yes | |
| DHE-DSS-AES256-SHA | Yes | Yes |
| DHE-DSS-CAMELLIA256-SHA | Yes | Yes |
| DHE-DSS-AES128-SHA | Yes | Yes |
| DHE-DSS-CAMELLIA128-SHA | Yes |
Medium-only SSL/TLS encryption levels
| Cipher | TLS 1.2 | TLS 1.0/1.1 |
|---|---|---|
| DHE-RSA-SEED-SHA | Yes | Yes |
DHE-DSS-SEED-SHA (Note) |
Yes | Yes |
IDEA-CBC-SHA (Note) |
Yes | |
SEED-SHA (Note) |
Yes |
(Note) Cannot be selected with Custom.
** Custom-only SSL / TLS encryption levels **
| Cipher | TLS 1.2 | TLS 1.0/1.1 |
|---|---|---|
| ECDHE-RSA-DES-CBC3-SHA | Yes | Yes |
| DES-CBC3-SHA | Yes | Yes |