SSL/TLS Supported CipherSuites

SSL Server (Web Server, Application Server) SSL Server (Web Server, Application Server)

SSL Client (Web Browser) SSL Client (Web Browser)

Sun(Oracle) Java JCA

Web Server

Apache

s_server

Apache

IIS

Apache

Browser

Chrome

IE

IE9beta

Firefox

Opera

Bundle

Safari

J2SE

Server Version

2.2.15

2.3.5a

2.2.15

2.2.14

6.0

7.0

7.5

2.2.15

Version

4.0.249

6.0.472

8.0.6001

7.0.6000

9.0.7930

3.6

10.10

beta5

1.4

1.4.1/2

5.0

6

7

Module

mod_ssl

mod_gnutls

mod_nss

OS

WinXP

VistaUlt

WinXP

VistaUlt

Win7Pro

WinXP

VistaUlt

WinXP

VistaUlt

Xperia

iPhone

Module Version

2.2.15

2.3.5a

0.5.5

1.0.8

Bundle

OS Version

SP3

-

SP3

-

SP3

-

SP3

-

And1.6

3.1.3

TLS1.2

-

OFF

ON

-

Crypto Engine

OpenSSL

GnuTLS

NSS

OpenSSL

TLS1.1

-

OFF

ON

-

ON

-

Engine Version

0.9.8m

1.0.0

0.9.8m

1.0.0

2.8.6

1.0.0

TLS.1.0

-

ON

-

OS

Ubuntu

Fedora

Windows

Ubuntu

SSL3.0

-

ON

-

OS Version

10.04

12

2003

2008

2008 R2

9.10

SSL2.0

OFF

ON

-

ao100def

Num Suites

11

12

36

11

12

21

35

27

18

19

13

Code

Cihper Suite Name

SSL 2.0

SSL 3.0

SSL version

TLS1.0

TLS1.2

TLS1.0

TLS1.2

OpenSSL CipherSuite Short Name

KeyExch

Authn

Enc

Mac

0000

TLS_NULL_WITH_NULL_NULL

-

None

0001

TLS_RSA_WITH_NULL_MD5

v

-

v

-

x

NULL-MD5

RSA

None

MD5

0002

TLS_RSA_WITH_NULL_SHA

v

-

v

-

x

NULL-SHA

RSA

None

SHA1

0003

TLS_RSA_EXPORT_WITH_RC4_40_MD5

v

-

v

-

v

-

v

x

EXP-RC4-MD5

RSAex

RC4.40

MD5

0004

TLS_RSA_WITH_RC4_128_MD5

v

-

v

v (1)

v

v (1)

-

v

o

RC4-MD5

RSA

RC4.128

MD5

0005

TLS_RSA_WITH_RC4_128_SHA

v

-

v

o

RC4-SHA

RSA

RC4.128

SHA1

0006

TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5

v

-

v

-

v

-

v

-

v

-

EXP-RC2-CBC-MD5

RSAex

RC2.40

MD5

0007

TLS_RSA_WITH_IDEA_CBC_SHA

v

-

v

-

IDEA-CBC-SHA

RSA

IDEA.128

SHA1

0008

TLS_RSA_EXPORT_WITH_DES40_CBC_SHA

v

-

v

-

v

-

x

EXP-DES-CBC-SHA

RSAex

DES.40

SHA1

0009

TLS_RSA_WITH_DES_CBC_SHA

v

-

v

-

v

-

v

-

v

x

DES-CBC-SHA

RSA

DES.56

SHA1

000a

TLS_RSA_WITH_3DES_EDE_CBC_SHA

v

-

v

o

DES-CBC3-SHA

RSA

3DES.168

SHA1

000b

TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA

-

DH

DSS

DES.40

SHA1

000c

TLS_DH_DSS_WITH_DES_CBC_SHA

-

DH

DSS

DES.56

SHA1

000d

TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA

-

v

-

DH

DSS

3DES.168

SHA1

000e

TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA

-

DH

RSA

DES.40

SHA1

000f

TLS_DH_RSA_WITH_DES_CBC_SHA

-

DH

RSA

DES.56

SHA1

0010

TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA

-

v

-

DH

RSA

3DES.168

SHA1

0011

TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA

v

-

v

-

x

EXP-EDH-DSS-DES-CBC-SHA

DHE.512

DSS

DES.40

SHA1

0012

TLS_DHE_DSS_WITH_DES_CBC_SHA

v

-

v

-

v

-

v

-

v

-

x

EDH-DSS-CBC-SHA

DHE

DSS

DES.56

SHA1

0013

TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA

v

-

v

-

v

-

o

EDH-DSS-DES-CBC3-SHA

DHE

DSS

3DES.168

SHA1

0014

TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA

v

-

v

-

v

-

x

EXP-EDH-RSA-DES-CBC-SHA

DHE.512

RSA

DES.40

SHA1

0015

TLS_DHE_RSA_WITH_DES_CBC_SHA

v

-

v

-

v

-

x

EDH-RSA-DES-CBC-SHA

DHE

RSA

DES.56

SHA1

0016

TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA

v

-

v

-

v

-

v

-

o

EDH-RSA-DES-CBC3-SHA

DHE

RSA

3DES.168

SHA1

0017

TLS_DH_anon_EXPORT_WITH_RC4_40_MD5

v

-

x

EXP-ADH-RC4-MD5

DH.512

None

RC4.40

MD5

0018

TLS_DH_anon_WITH_RC4_128_MD5

v

-

x

ADH-RC4-MD5

DH

None

RC4.128

MD5

0019

TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA

v

-

x

EXP-ADH-DES-CBC-SHA

DH.512

None

DES.40

SHA1

001a

TLS_DH_anon_WITH_DES_CBC_SHA

v

-

x

ADH-DES-CBC-SHA

DH

None

DES.56

SHA1

001b

TLS_DH_anon_WITH_3DES_EDE_CBC_SHA

v

-

x

ADH-DES-CBC3-SHA

DH

None

3DES.168

SHA1

001c

SSL_FORTEZZA_KEA_WITH_NULL_SHA

-

v

-

FRTZA

KEA

None

SHA1

001d

SSL_FORTEZZA_KEA_WITH_FORTEZZA_CBC_SHA

-

v

-

FRTZA

KEA

FRTZA

SHA1

001e

SSL_FORTEZZA_KEA_WITH_RC4_128_SHA

-

v

-

FRTZA

KEA

RC4.128

SHA1

001e

TLS_KRB5_WITH_DES_CBC_SHA

-

v

-

x

KRB5

DES.56

SHA1

001f

TLS_KRB5_WITH_3DES_EDE_CBC_SHA

-

v

-

x

KRB5

3DES.168

SHA1

0020

TLS_KRB5_WITH_RC4_128_SHA

-

v

-

x

KRB5

RC4.128

SHA1

0021

TLS_KRB5_WITH_IDEA_CBC_SHA

-

v

-

KRB5

IDEA.128

SHA1

0022

TLS_KRB5_WITH_DES_CBC_MD5

-

v

-

x

KRB5

DES.56

MD5

0023

TLS_KRB5_WITH_3DES_EDE_CBC_MD5

-

v

-

x

KRB5

3DES.168

MD5

0024

TLS_KRB5_WITH_RC4_128_MD5

-

v

-

x

KRB5

RC4.128

MD5

0025

TLS_KRB5_WITH_IDEA_CBC_MD5

-

v

-

KRB5

IDEA.128

MD5

0026

TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA

-

v

-

x

KRB5

DES.40

SHA1

0027

TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA

-

v

-

KRB5

RC2.40

SHA1

0028

TLS_KRB5_EXPORT_WITH_RC4_40_SHA

-

v

-

x

KRB5

RC4.40

SHA1

0029

TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5

-

v

-

x

KRB5

DES.40

MD5

002a

TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5

-

v

-

KRB5

RC2.40

MD5

002b

TLS_KRB5_EXPORT_WITH_RC4_40_MD5

-

v

-

x

KRB5

RC4.40

MD5

002c

TLS_PSK_WITH_NULL_SHA

-

PSK

None

SHA1

002d

TLS_DHE_PSK_WITH_NULL_SHA

-

DHE

PSK

None

SHA1

002e

TLS_RSA_PSK_WITH_NULL_SHA

-

RSA

PSK

None

SHA1

002f

TLS_RSA_WITH_AES_128_CBC_SHA

v

-

v

-

v

-

v

-

v

v (1)

-

o

AES128-SHA

RSA

AES.128

SHA1

0030

TLS_DH_DSS_WITH_AES_128_CBC_SHA

-

v

-

DH

DSS

AES.128

SHA1

0031

TLS_DH_RSA_WITH_AES_128_CBC_SHA

-

v

-

DH

RSA

AES.128

SHA1

0032

TLS_DHE_DSS_WITH_AES_128_CBC_SHA

v

-

v

-

v

-

v

-

o

DHE-DSS-AES128-SHA

DHE

DSS

AES.128

SHA1

0033

TLS_DHE_RSA_WITH_AES_128_CBC_SHA

v

-

v

-

v

-

v

-

o

DHE-RSA-AES128-SHA

DHE

RSA

AES.128

SHA1

0034

TLS_DH_anon_WITH_AES_128_CBC_SHA

v

-

x

ADH-AES128-SHA

DH

None

AES.128

SHA1

0035

TLS_RSA_WITH_AES_256_CBC_SHA

v

-

v

-

v

-

v

-

v

-

o

AES256-SHA

RSA

AES.256

SHA1

0036

TLS_DH_DSS_WITH_AES_256_CBC_SHA

-

v

-

DH

DSS

AES.256

SHA1

0037

TLS_DH_RSA_WITH_AES_256_CBC_SHA

-

v

-

DH

RSA

AES.256

SHA1

0038

TLS_DHE_DSS_WITH_AES_256_CBC_SHA

v

-

v

-

v

-

v

-

o

DHE-DSS-AES256-SHA

DHE

DSS

AES.256

SHA1

0039

TLS_DHE_RSA_WITH_AES_256_CBC_SHA

v

-

v

-

v

-

v

v (1)

v

-

o

DHE-RSA-AES256-SHA

DHE

RSA

AES.256

SHA1

003a

TLS_DH_anon_WITH_AES_256_CBC_SHA

v

-

x

ADH-AES256-SHA

DH

None

AES.256

SHA1

003b

TLS_RSA_WITH_NULL_SHA256

-

x

RSA

None

SHA256

003c

TLS_RSA_WITH_AES_128_CBC_SHA256

-

v

-

v

-

v

-

o

RSA

AES.128

SHA256

003d

TLS_RSA_WITH_AES_256_CBC_SHA256

-

v

-

v

-

v

-

o

RSA

AES.256

SHA256

003e

TLS_DH_DSS_WITH_AES_128_CBC_SHA256

-

v

-

DH

DSS

AES.128

SHA256

003f

TLS_DH_RSA_WITH_AES_128_CBC_SHA256

-

v

-

DH

RSA

AES.128

SHA256

0040

TLS_DHE_DSS_WITH_AES_128_CBC_SHA256

-

v

-

v

-

v

-

o

DHE

DSS

AES.128

SHA256

0041

TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

v

-

v

-

v

-

v

-

CAMELLIA128-SHA

RSA

Camla.128

SHA1

0042

TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA

-

DH

DSS

Camla.128

SHA1

0043

TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA

-

DH

RSA

Camla.128

SHA1

0044

TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA

v

-

v

-

v

-

DHE-DSS-CAMELLIA128-SHA

DHE

DSS

Camla.128

SHA1

0045

TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA

v

-

v

-

v

-

v

-

DHE-RSA-CAMELLIA128-SHA

DHE

RSA

Camla.128

SHA1

0046

TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA

v

-

ADH-CAMELLIA128-SHA

DH

None

Camla.128

SHA1

0062

TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA

v

-

v

-

v

-

v

-

EXP1024-DES-CBC-SHA

RSAex1k

DES.56

SHA1

0063

TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA

v

-

v

-

v

-

v

-

EXP1024-DHE-DSS-DES-CBC-SHA

RSAex1k

RC4.56

SHA1

0064

TLS_RSA_EXPORT1024_WITH_RC4_56_SHA

v

-

v

-

v

-

v

-

EXP1024-RC4-SHA

RSAex1k

RC4.56

SHA1

0065

TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA

v

-

EXP1024-DHE-DSS-RC4-SHA

RSAex1k

RC4.56

SHA1

0066

TLS_DHE_DSS_WITH_RC4_128_SHA

v

-

v

-

DHE-DSS-RC4-SHA

DHE

DSS

RC4.128

SHA1

0067

TLS_DHE_RSA_WITH_AES_128_CBC_SHA256

-

v

-

o

DHE

RSA

AES.128

SHA256

0068

TLS_DH_DSS_WITH_AES_256_CBC_SHA256

-

v

-

DH

DSS

AES.256

SHA256

0069

TLS_DH_RSA_WITH_AES_256_CBC_SHA256

-

v

-

DH

RSA

AES.256

SHA256

006a

TLS_DHE_DSS_WITH_AES_256_CBC_SHA256

-

v

-

v

-

o

DHE

DSS

AES.256

SHA256

006b

TLS_DHE_RSA_WITH_AES_256_CBC_SHA256

-

v

-

o

DHE

RSA

AES.256

SHA256

006c

TLS_DH_anon_WITH_AES_128_CBC_SHA256

-

x

DH

None

AES.128

SHA256

006d

TLS_DH_anon_WITH_AES_256_CBC_SHA256

-

x

DH

None

AES.256

SHA256

0080

TLS_GOSTR341094_WITH_28147_CNT_IMIT

-

v

-

GOST94-GOST89-GOST89

GOST94

GOST

0081

TLS_GOSTR341001_WITH_28147_CNT_IMIT

-

v

-

GOST2001-GOST89-GOST89

GOST01

GOST

0082

TLS_GOSTR341094_WITH_NULL_GOSTR3411

-

v

-

GOST94-NULL-GOST94

GOST94

None

GOST

0083

TLS_GOSTR341001_WITH_NULL_GOSTR3411

-

v

-

GOST2001-NULL-GOST94

GOST01

None

GOST

0084

TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

v

-

v

-

v

-

CAMELLIA256-SHA

RSA

Camla.256

SHA1

0085

TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA

-

DH

DSS

Camla.256

SHA1

0086

TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA

-

DH

RSA

Camla.256

SHA1

0087

TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA

v

-

v

-

v

-

DHE-DSS-CAMELLIA256-SHA

DHE

DSS

Camla.256

SHA1

0088

TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA

v

-

v

-

v (1)

v

-

DHE-RSA-CAMELLIA256-SHA

DHE

RSA

Camla.256

SHA1

0089

TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA

v

-

ADH-CAMELLIA256-SHA

DH

None

Camla.256

SHA1

008a

TLS_PSK_WITH_RC4_128_SHA

-

v

-

PSK-RC4-SHA

PSK

RC4.128

SHA1

008b

TLS_PSK_WITH_3DES_EDE_CBC_SHA

-

v

-

PSK-3DES-EDE-CBC-SHA

PSK

3DES.168

SHA1

008c

TLS_PSK_WITH_AES_128_CBC_SHA

-

v

-

PSK-AES128-CBC-SHA

PSK

AES.128

SHA1

008d

TLS_PSK_WITH_AES_256_CBC_SHA

-

v

-

PSK-AES256-CBC-SHA

PSK

AES.256

SHA1

008e

TLS_DHE_PSK_WITH_RC4_128_SHA

-

DHE

PSK

RC4.128

SHA1

008f

TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA

-

DHE

PSK

3DES.168

SHA1

0090

TLS_DHE_PSK_WITH_AES_128_CBC_SHA

-

DHE

PSK

AES.128

SHA1

0091

TLS_DHE_PSK_WITH_AES_256_CBC_SHA

-

DHE

PSK

AES.256

SHA1

0092

TLS_RSA_PSK_WITH_RC4_128_SHA

-

RSA

PSK

RC4.128

SHA1

0093

TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA

-

RSA

PSK

3DES.168

SHA1

0094

TLS_RSA_PSK_WITH_AES_128_CBC_SHA

-

RSA

PSK

AES.128

SHA1

0095

TLS_RSA_PSK_WITH_AES_256_CBC_SHA

-

RSA

PSK

AES.256

SHA1

0096

TLS_RSA_WITH_SEED_CBC_SHA

v

-

v

-

v

-

SEED-SHA

RSA

SEED.128

SHA1

0097

TLS_DH_DSS_WITH_SEED_CBC_SHA

-

DH

DSS

SEED.128

SHA1

0098

TLS_DH_RSA_WITH_SEED_CBC_SHA

-

DH

RSA

SEED.128

SHA1

0099

TLS_DHE_DSS_WITH_SEED_CBC_SHA

v

-

DHE-DSS-SEED-SHA

DHE

DSS

SEED.128

SHA1

009a

TLS_DHE_RSA_WITH_SEED_CBC_SHA

v

-

DHE-RSA-SEED-SHA

DHE

RSA

SEED.128

SHA1

009b

TLS_DH_anon_WITH_SEED_CBC_SHA

v

-

ADH-SEED-SHA

DH

None

SEED.128

SHA1

009c

TLS_RSA_WITH_AES_128_GCM_SHA256

-

RSA

AES.128g

SHA256

009d

TLS_RSA_WITH_AES_256_GCM_SHA384

-

RSA

AES.256g

SHA384

009e

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

-

DHE

RSA

AES.128g

SHA256

009f

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

-

DHE

RSA

AES.256g

SHA384

00a0

TLS_DH_RSA_WITH_AES_128_GCM_SHA256

-

DH

RSA

AES.128g

SHA256

00a1

TLS_DH_RSA_WITH_AES_256_GCM_SHA384

-

DH

RSA

AES.256g

SHA384

00a2

TLS_DHE_DSS_WITH_AES_128_GCM_SHA256

-

DHE

DSS

AES.128g

SHA256

00a3

TLS_DHE_DSS_WITH_AES_256_GCM_SHA384

-

DHE

DSS

AES.256g

SHA384

00a4

TLS_DH_DSS_WITH_AES_128_GCM_SHA256

-

DH

DSS

AES.128g

SHA256

00a5

TLS_DH_DSS_WITH_AES_256_GCM_SHA384

-

DH

DSS

AES.256g

SHA384

00a6

TLS_DH_Anon_WITH_AES_128_GCM_SHA256

-

DH

None

AES.128g

SHA256

00a7

TLS_DH_Anon_WITH_AES_256_GCM_SHA384

-

DH

None

AES.256g

SHA384

00a8

TLS_PSK_WITH_AES_128_GCM_SHA256

-

PSK

AES.128g

SHA256

00a9

TLS_PSK_WITH_AES_256_GCM_SHA384

-

PSK

AES.256g

SHA384

00aa

TLS_DHE_PSK_WITH_AES_128_GCM_SHA256

-

DHE

PSK

AES.128g

SHA256

00ab

TLS_DHE_PSK_WITH_AES_256_GCM_SHA384

-

DHE

PSK

AES.256g

SHA384

00ac

TLS_RSA_PSK_WITH_AES_128_GCM_SHA256

-

RSA

PSK

AES.128g

SHA256

00ad

TLS_RSA_PSK_WITH_AES_256_GCM_SHA384

-

RSA

PSK

AES.256g

SHA384

00ae

TLS_PSK_WITH_AES_128_CBC_SHA256

-

PSK

AES.128

SHA256

00af

TLS_PSK_WITH_AES_256_CBC_SHA384

-

PSK

AES.256

SHA384

00b0

TLS_PSK_WITH_NULL_SHA256

-

PSK

None

SHA256

00b1

TLS_PSK_WITH_NULL_SHA384

-

PSK

None

SHA384

00b2

TLS_DHE_PSK_WITH_AES_128_CBC_SHA256

-

DHE

PSK

AES.128

SHA256

00b3

TLS_DHE_PSK_WITH_AES_256_CBC_SHA384

-

DHE

PSK

AES.256

SHA384

00b4

TLS_DHE_PSK_WITH_NULL_SHA256

-

DHE

PSK

None

SHA256

00b5

TLS_DHE_PSK_WITH_NULL_SHA384

-

DHE

PSK

None

SHA384

00b6

TLS_RSA_PSK_WITH_AES_128_CBC_SHA256

-

RSA

PSK

AES.128

SHA256

00b7

TLS_RSA_PSK_WITH_AES_256_CBC_SHA384

-

RSA

PSK

AES.256

SHA384

00b8

TLS_RSA_PSK_WITH_NULL_SHA256

-

RSA

PSK

None

SHA256

00b9

TLS_RSA_PSK_WITH_NULL_SHA384

-

RSA

PSK

None

SHA384

00ff

TLS_EMPTY_RENEGOTIATION_INFO_SCSV (RFC 5746)

-

v

-

1.4.2u28+

u26+

u22+

v

c001

TLS_ECDH_ECDSA_WITH_NULL_SHA

-

v

-

v

-

x

ECDH-ECDSA-NULL-SHA

HECDSA

ECDH

None

SHA1

c002

TLS_ECDH_ECDSA_WITH_RC4_128_SHA

-

v

-

v

-

v

-

v

-

o

ECDH-ECDSA-RC4-SHA

HECDSA

ECDH

RC4.128

SHA1

c003

TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA

-

v

-

v

-

v

-

v

-

o

ECDH-ECDSA-DES-CBC3-SHA

HECDSA

ECDH

3DES.168

SHA1

c004

TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA

-

v

-

v

-

v

-

v

-

o

ECDH-ECDSA-AES128-SHA

HECDSA

ECDH

AES.128

SHA1

c005

TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA

-

v

-

v

-

v

-

v

-

o

ECDH-ECDSA-AES256-SHA

HECDSA

ECDH

AES.256

SHA1

c006

TLS_ECDHE_ECDSA_WITH_NULL_SHA

-

v

-

v

-

x

ECDHE-ECDSA-NULL-SHA

ECDHE

ECDSA

None

SHA1

c007

TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

-

v

-

v

-

v

-

v

-

o

ECDHE-ECDSA-RC4-SHA

ECDHE

ECDSA

RC4.128

SHA1

c008

TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

-

v

-

v

-

v

-

v

-

o

ECDHE-ECDSA-DES-CBC3-SHA

ECDHE

ECDSA

3DES.168

SHA1

c009

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

-

v

-

v

-

v

-

v

-

v

-

o

ECDHE-ECDSA-AES128-SHA

ECDHE

ECDSA

AES.128

SHA1

c00a

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

-

v

-

v

-

v

-

v

-

v

-

o

ECDHE-ECDSA-AES256-SHA

ECDHE

ECDSA

AES.256

SHA1

c00b

TLS_ECDH_RSA_WITH_NULL_SHA

-

v

-

v

-

x

ECDH-RSA-NULL-SHA

HRSA

ECDH

None

SHA1

c00c

TLS_ECDH_RSA_WITH_RC4_128_SHA

-

v

-

v

-

v

-

v

-

o

ECDH-RSA-RC4-SHA

HRSA

ECDH

RC4.128

SHA1

c00d

TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA

-

v

-

v

-

v

-

v

-

o

ECDH-RSA-DES-CBC3-SHA

HRSA

ECDH

3DES.168

SHA1

c00e

TLS_ECDH_RSA_WITH_AES_128_CBC_SHA

-

v

-

v

-

v

-

v

-

o

ECDH-RSA-AES128-SHA

HRSA

ECDH

AES.128

SHA1

c00f

TLS_ECDH_RSA_WITH_AES_256_CBC_SHA

-

v

-

v

-

v

-

v

-

o

ECDH-RSA-AES256-SHA

HRSA

ECDH

AES.256

SHA1

c010

TLS_ECDHE_RSA_WITH_NULL_SHA

-

v

-

v

-

x

ECDHE-RSA-NULL-SHA

ECDHE

RSA

None

SHA1

c011

TLS_ECDHE_RSA_WITH_RC4_128_SHA

-

v

-

v

-

v

-

v

-

o

ECDHE-RSA-RC4-SHA

ECDHE

RSA

RC4.128

SHA1

c012

TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

-

v

-

v

-

v

-

v

-

o

ECDHE-RSA-DES-CBC3-SHA

ECDHE

RSA

3DES.168

SHA1

c013

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

-

v

-

v

-

v

-

v

-

v

-

o

ECDHE-RSA-AES128-SHA

ECDHE

RSA

AES.128

SHA1

c014

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

-

v

-

v

-

v

-

v

-

v

-

o

ECDHE-RSA-AES256-SHA

ECDHE

RSA

AES.256

SHA1

c015

TLS_ECDH_anon_WITH_NULL_SHA

-

v

-

x

AECDH-NULL-SHA

ECDH

None

SHA1

c016

TLS_ECDH_anon_WITH_RC4_128_SHA

-

v

-

x

AECDH-RC4-SHA

ECDH

None

RC4.128

SHA1

c017

TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA

-

v

-

x

AECDH-DES-CBC3-SHA

ECDH

None

3DES.168

SHA1

c018

TLS_ECDH_anon_WITH_AES_128_CBC_SHA

-

v

-

x

AECDH-AES128-SHA

ECDH

None

AES.128

SHA1

c019

TLS_ECDH_anon_WITH_AES_256_CBC_SHA

-

v

-

x

AECDH-AES256-SHA

ECDH

None

AES.256

SHA1

c01a

TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA

-

v

-

SRPSHA

None

3DES.168

SHA1

c01b

TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA

-

v

-

SRPSHA

RSA

3DES.168

SHA1

c01c

TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA

-

v

-

SRPSHA

DSS

3DES.168

SHA1

c01d

TLS_SRP_SHA_WITH_AES_128_CBC_SHA

-

v

-

SRPSHA

None

AES.128

SHA1

c01e

TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA

-

v

-

SRPSHA

RSA

AES.128

SHA1

c01f

TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA

-

v

-

SRPSHA

DSS

AES.128

SHA1

c020

TLS_SRP_SHA_WITH_AES_256_CBC_SHA

-

v

-

SRPSHA

None

AES.256

SHA1

c021

TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA

-

v

-

SRPSHA

RSA

AES.256

SHA1

c022

TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA

-

v

-

SRPSHA

DSS

AES.256

SHA1

c023

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

-

v

-

v

-

o

ECDHE

ECDSA

AES.128

SHA256

c024

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

-

v

-

v

-

o

ECDHE

ECDSA

AES.256

SHA384

c025

TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256

-

o

ECDH

ECDSA

AES.128

SHA256

c026

TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384

-

o

ECDH

ECDSA

AES.256

SHA384

c027

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

-

v

-

v

-

o

ECDHE

RSA

AES.128

SHA256

c028

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

-

v

-

o

ECDHE

RSA

AES.256

SHA384

c029

TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256

-

o

ECDH

RSA

AES.128

SHA256

c02a

TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384

-

o

ECDH

RSA

AES.256

SHA384

c02b

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

-

v

-

v

-

ECDHE

ECDSA

AES.128g

SHA256

c02c

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

-

v

-

v

-

ECDHE

ECDSA

AES.256g

SHA384

c02d

TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256

-

ECDH

ECDSA

AES.128g

SHA256

c02e

TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384

-

ECDH

ECDSA

AES.256g

SHA384

c02f

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

-

ECDHE

RSA

AES.128g

SHA256

c030

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

-

ECDHE

RSA

AES.256g

SHA384

c031

TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256

-

ECDH

RSA

AES.128g

SHA256

c032

TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384

-

ECDH

RSA

AES.256g

SHA384

fefe

SSL_RSA_FIPS_WITH_DES_CBC_SHA

-

v

-

RSAFIPS

DES.56

SHA1

feff

SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA

-

v

-

v

-

v

-

RSAFIPS

3DES.168

SHA1

ffe0

SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA

-

RSAFIPS

3DES.168

SHA1

ffe1

SSL_RSA_FIPS_WITH_DES_CBC_SHA

-

RSAFIPS

DES.56

SHA1

010080

SSL_CK_RC4_128_WITH_MD5

v

-

v

-

v

-

RC4-MD5

RSA

RC4.128

MD5

020080

SSL_CK_RC4_128_EXPORT40_WITH_MD5

v

-

v

-

v

-

EXP-RC4-MD5

RSA.512

RSA

RC4.40

MD5

030080

SSL_CK_RC2_128_CBC_WITH_MD5

v

-

v

-

v

-

RC2-MD5

RSA

RC2.128

MD5

040080

SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD

v

-

v

-

v

-

EXP-RC2-MD5

RSA.512

RSA

RC4.40

MD5

050080

SSL_CK_IDEA_128_CBC_WITH_MD5

v

-

v

-

IDEA-CBC-MD5

RSA

IDEA.128

MD5

060040

SSL_CK_DES_64_CBC_WITH_MD5

v

-

v

-

v

-

DES-CBC-MD5

RSA

DES.56

MD5

0700C0

SSL_CK_DES_192_EDE3_CBC_WITH_MD5

v

-

v

-

v

-

DES-CBC3-MD5

RSA

3DES.168

MD5

080080

SSL2_RC4_64_WITH_MD5

-

800001

PCT_SSL_CERT_TYPE|PCT1_CERT_X509

-

800003

PCT_SSL_CERT_TYPE|PCT1_CERT_X509_CHAIN

-

810001

PCT_SSL_HASH_TYPE|PCT1_HASH_MD5

-

810003

PCT_SSL_HASH_TYPE|PCT1_HASH_SHA

-

820001

PCT_SSL_EXCH_TYPE|PCT1_EXCH_RSA_PKCS1

-

823004

PCT_SSL_CIPHER_TYPE_1ST_HALF|PCT1_CIPHER_RC4

-

842840

PCT_SSL_CIPHER_TYPE_2ND_HALF|PCT1_ENC_BITS_40|PCT1_MAC_BITS_128

-

848040

PCT_SSL_CIPHER_TYPE_2ND_HALF|PCT1_ENC_BITS_128|PCT1_MAC_BITS_128

-

8f8001

PCT_SSL_COMPAT|PCT_VERSION_1

-

Compression Method

null

null,deflate

null

Server Name Indication Extension Supported

No

Yes

No

Yes

Yes?

No

Yes

ClientHello Extension Exists: Server Name(0000)

-

Yes

-

Yes

-

Yes

ClientHello Extension Exists: Status Request

-

Yes

-

Yes

-

ClientHello Extension Exists: Elliptic Curves(000a)

-

Yes(2)

-

Yes(2)

Yes(3)

Yes(2)

-

Yes(25)

ClientHello Extension Exists:: EC Point Formats(000b)

-

Yes

-

Yes

-

Yes

ClientHello Extension Exists:: Session Ticket TLS(0023)

-

Yes

-

Yes

-

ClientHello Extension Exists: NextProtocol Negotiation(3374)

-

Yes

-

ClientHello Extension Exists: Renegotiation Info(ff01)

Yes

LEGEND

(1) : CipherSuites investigated on Debian lenny Apache2 mod_gnutls

(2) : Supported Elliptic Curves = secp256r1, secp384r1, secp512r1

(3) : Supported Elliptic Curves = secp256r1, secp384r1

ChangeLog

V3.0: Sun(Oracle) Java SE JCA/JCE CipherSuites are added. Fixed for IDEA (Thanks Alteon-san)

V2.0: Google Chrome 6.0 added. Server/Client table are merged. OpenSSL CipherSuites, OpenSSL name, algorithms description are added.

V1.2: CipherSuites for the built-in browser and Opera mini beta5 (5.0.18302) of docomo Xperia are added.

ACRONYMS

Camla.### = Camellia ### bit

LEGEND

RSAex1k=RSA_EXPORT1024

-

Not supported

AES.###g=AES.###GCM

o

Enabled by default

FRTZA = FORTEZZA

x

Disabled by default

HECDSA = ECDH/ECDSA

HRSA = ECDH/RSA