Cipher Suites

Acipher suite is a named combination of authentication, encryption, message authentication code (MAC) and key exchange algorithms used to negotiate the security settings for a network connection using the Transport Layer Security (TLS) / Secure Sockets Layer (SSL) network protocol.



Usage

When a TLS connection is established, a handshaking, known as the TLS Handshake Protocol, occurs. Within this handshake, a client hello (ClientHello) and a server hello (ServerHello) message are passed. First, the client sends a cipher suite list, a list of the cipher suites that it supports, in order of preference. Then the server replies with the cipher suite that it has selected from the client cipher suite list.

Description of Algorithms

In cryptography, a message authentication code (MAC) is a short piece of information used to authenticate a message and to provide integrity and authenticity assurances on the message.
A MAC algorithm, accepts as input a secret key and an arbitrary-length message to be authenticated, and outputs a MAC (sometimes known as a tag). The MAC value protects both a message's data integrity as well as its authenticity, by allowing verifiers (who also possess the secret key) to detect any changes to the message content.

Key exchange is any method in cryptography by which cryptographic keys are exchanged between two parties, allowing use of a cryptographic algorithm. If sender and receiver wish to exchange encrypted messages, each must be equipped to encrypt messages to be sent and decrypt messages received.
If the cipher is a symmetric key cipher, both will need a copy of the same key. If an asymmetric key cipher with the public/private key property, both will need the other's public key.

Various Key-Exchange algorithms are :-
RSA, Diffie-Hellman, ECDH, SRP (Simple Remote Password Protocol), PSK (Pre Shared Key)

Various Authentication algorithms are :-
RSA, DSA, ECDSA

Various Encryption/Cipher algorithms are :-
RC4, Triple DES, AES, IDEA, DES

List of Cipher Suites:-
  • Cipher ID -- A 2-3 bit unique cipher identifier
  • Name -- Name of each cipher suite
  • Protocol -- Most Cipher Suite comes under TLS or SSL protocol and very few are Microsoft proprietary protocol PCT.
  • Key Exchange -- Most popular are RSA and DHE. Flavours of Kerberos KRB5 and PSK are also available but rarely used.
  • Authentication -- RSA is most used for authentication
  • Encryption -- Popular Symmetric encryption algorithm are DES, 3DES, AES, RC4, etc.
  • Bits -- Symmetric Encryption key size in bits
  • MAC --Hashing algorithm used for TLS/SSL data packets integrity and authentication checks.
Cipher ID Name Protocol Key Exchange Authentication Encryption Bits Mac
0x000000 TLS_NULL_WITH_NULL_NULL TLS NULL NULL NULL 0 NULL
0x000001 TLS_RSA_WITH_NULL_MD5 TLS RSA RSA NULL 0 MD5
0x000002 TLS_RSA_WITH_NULL_SHA TLS RSA RSA NULL 0 SHA
0x000003 TLS_RSA_EXPORT_WITH_RC4_40_MD5 TLS RSA_EXPORT RSA_EXPORT RC4_40 40 MD5
0x000004 TLS_RSA_WITH_RC4_128_MD5 TLS RSA RSA RC4_128 128 MD5
0x000005 TLS_RSA_WITH_RC4_128_SHA TLS RSA RSA RC4_128 128 SHA
0x000006 TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 TLS RSA_EXPORT RSA_EXPORT RC2_CBC_40 40 MD5
0x000007 TLS_RSA_WITH_IDEA_CBC_SHA TLS RSA RSA IDEA_CBC 128 SHA
0x000008 TLS_RSA_EXPORT_WITH_DES40_CBC_SHA TLS RSA_EXPORT RSA_EXPORT DES40_CBC 40 SHA
0x000009 TLS_RSA_WITH_DES_CBC_SHA TLS RSA RSA DES_CBC 56 SHA
0x00000A TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS RSA RSA 3DES_EDE_CBC 168 SHA
0x00000B TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA TLS DH DSS DES40_CBC 40 SHA
0x00000C TLS_DH_DSS_WITH_DES_CBC_SHA TLS DH DSS DES_CBC 56 SHA
0x00000D TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA TLS DH DSS 3DES_EDE_CBC 168 SHA
0x00000E TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA TLS DH RSA DES40_CBC 40 SHA
0x00000F TLS_DH_RSA_WITH_DES_CBC_SHA TLS DH RSA DES_CBC 56 SHA
0x000010 TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA TLS DH RSA 3DES_EDE_CBC 168 SHA
0x000011 TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA TLS DHE DSS DES40_CBC 40 SHA
0x000012 TLS_DHE_DSS_WITH_DES_CBC_SHA TLS DHE DSS DES_CBC 56 SHA
0x000013 TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA TLS DHE DSS 3DES_EDE_CBC 168 SHA
0x000014 TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA TLS DHE RSA DES40_CBC 40 SHA
0x000015 TLS_DHE_RSA_WITH_DES_CBC_SHA TLS DHE RSA DES_CBC 56 SHA
0x000016 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA TLS DHE RSA 3DES_EDE_CBC 168 SHA
0x000017 TLS_DH_Anon_EXPORT_WITH_RC4_40_MD5 TLS DH Anon RC4_40 40 MD5
0x000018 TLS_DH_Anon_WITH_RC4_128_MD5 TLS DH Anon RC4_128 128 MD5
0x000019 TLS_DH_Anon_EXPORT_WITH_DES40_CBC_SHA TLS DH Anon DES40_CBC 40 SHA
0x00001A TLS_DH_Anon_WITH_DES_CBC_SHA TLS DH Anon DES_CBC 56 SHA
0x00001B TLS_DH_Anon_WITH_3DES_EDE_CBC_SHA TLS DH Anon 3DES_EDE_CBC 168 SHA
0x00001C SSL_FORTEZZA_KEA_WITH_NULL_SHA SSL FORTEZZA KEA NULL 0 SHA
0x00001D SSL_FORTEZZA_KEA_WITH_FORTEZZA_CBC_SHA SSL FORTEZZA KEA FORTEZZA_CBC 80 SHA
0x00001E TLS_KRB5_WITH_DES_CBC_SHA TLS KRB5 KRB5 DES_CBC 56 SHA
0x00001F TLS_KRB5_WITH_3DES_EDE_CBC_SHA TLS KRB5 KRB5 3DES_EDE_CBC 168 SHA
0x000020 TLS_KRB5_WITH_RC4_128_SHA TLS KRB5 KRB5 RC4_128 128 SHA
0x000021 TLS_KRB5_WITH_IDEA_CBC_SHA TLS KRB5 KRB5 IDEA_CBC 128 SHA
0x000022 TLS_KRB5_WITH_DES_CBC_MD5 TLS KRB5 KRB5 DES_CBC 56 MD5
0x000023 TLS_KRB5_WITH_3DES_EDE_CBC_MD5 TLS KRB5 KRB5 3DES_EDE_CBC 168 MD5
0x000024 TLS_KRB5_WITH_RC4_128_MD5 TLS KRB5 KRB5 RC4_128 128 MD5
0x000025 TLS_KRB5_WITH_IDEA_CBC_MD5 TLS KRB5 KRB5 IDEA_CBC 128 MD5
0x000026 TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA TLS KRB5_EXPORT KRB5_EXPORT DES_CBC_40 40 SHA
0x000027 TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA TLS KRB5_EXPORT KRB5_EXPORT RC2_CBC_40 40 SHA
0x000028 TLS_KRB5_EXPORT_WITH_RC4_40_SHA TLS KRB5_EXPORT KRB5_EXPORT RC4_40 40 SHA
0x000029 TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5 TLS KRB5_EXPORT KRB5_EXPORT DES_CBC_40 40 MD5
0x00002A TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5 TLS KRB5_EXPORT KRB5_EXPORT RC2_CBC_40 40 MD5
0x00002B TLS_KRB5_EXPORT_WITH_RC4_40_MD5 TLS KRB5_EXPORT KRB5_EXPORT RC4_40 40 MD5
0x00002C TLS_PSK_WITH_NULL_SHA TLS PSK PSK NULL 0 SHA
0x00002D TLS_DHE_PSK_WITH_NULL_SHA TLS DHE PSK NULL 0 SHA
0x00002E TLS_RSA_PSK_WITH_NULL_SHA TLS RSA PSK NULL 0 SHA
0x00002F TLS_RSA_WITH_AES_128_CBC_SHA TLS RSA RSA AES_128_CBC 128 SHA
0x000030 TLS_DH_DSS_WITH_AES_128_CBC_SHA TLS DH DSS AES_128_CBC 128 SHA
0x000031 TLS_DH_RSA_WITH_AES_128_CBC_SHA TLS DH RSA AES_128_CBC 128 SHA
0x000032 TLS_DHE_DSS_WITH_AES_128_CBC_SHA TLS DHE DSS AES_128_CBC 128 SHA
0x000033 TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS DHE RSA AES_128_CBC 128 SHA
0x000034 TLS_DH_Anon_WITH_AES_128_CBC_SHA TLS DH Anon AES_128_CBC 128 SHA
0x000035 TLS_RSA_WITH_AES_256_CBC_SHA TLS RSA RSA AES_256_CBC 256 SHA
0x000036 TLS_DH_DSS_WITH_AES_256_CBC_SHA TLS DH DSS AES_256_CBC 256 SHA
0x000037 TLS_DH_RSA_WITH_AES_256_CBC_SHA TLS DH RSA AES_256_CBC 256 SHA
0x000038 TLS_DHE_DSS_WITH_AES_256_CBC_SHA TLS DHE DSS AES_256_CBC 256 SHA
0x000039 TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS DHE RSA AES_256_CBC 256 SHA
0x00003A TLS_DH_Anon_WITH_AES_256_CBC_SHA TLS DH Anon AES_256_CBC 256 SHA
0x00003B TLS_RSA_WITH_NULL_SHA256 TLS RSA RSA NULL 0 SHA256
0x00003C TLS_RSA_WITH_AES_128_CBC_SHA256 TLS RSA RSA AES_128_CBC 128 SHA256
0x00003D TLS_RSA_WITH_AES_256_CBC_SHA256 TLS RSA RSA AES_256_CBC 256 SHA256
0x00003E TLS_DH_DSS_WITH_AES_128_CBC_SHA256 TLS DH DSS AES_128_CBC 128 SHA256
0x00003F TLS_DH_RSA_WITH_AES_128_CBC_SHA256 TLS DH RSA AES_128_CBC 128 SHA256
0x000040 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 TLS DHE DSS AES_128_CBC 128 SHA256
0x000041 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA TLS RSA RSA CAMELLIA_128_CBC 128 SHA
0x000042 TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA TLS DH DSS CAMELLIA_128_CBC 128 SHA
0x000043 TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA TLS DH RSA CAMELLIA_128_CBC 128 SHA
0x000044 TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA TLS DHE DSS CAMELLIA_128_CBC 128 SHA
0x000045 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA TLS DHE RSA CAMELLIA_128_CBC 128 SHA
0x000046 TLS_DH_Anon_WITH_CAMELLIA_128_CBC_SHA TLS DH Anon CAMELLIA_128_CBC 128 SHA
0x000047 TLS_ECDH_ECDSA_WITH_NULL_SHA TLS ECDH ECDSA NULL 0 SHA
0x000048 TLS_ECDH_ECDSA_WITH_RC4_128_SHA TLS ECDH ECDSA RC4_128 128 SHA
0x000049 TLS_ECDH_ECDSA_WITH_DES_CBC_SHA TLS ECDH ECDSA DES_CBC 56 SHA
0x00004A TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA TLS ECDH ECDSA 3DES_EDE_CBC 168 SHA
0x00004B TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA TLS ECDH ECDSA AES_128_CBC 128 SHA
0x00004C TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA TLS ECDH ECDSA AES_256_CBC 256 SHA
0x000060 TLS_RSA_EXPORT1024_WITH_RC4_56_MD5 TLS RSA_EXPORT 1024 RSA_EXPORT 1024 RC4_56 56 MD5
0x000061 TLS_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5 TLS RSA_EXPORT 1024 RSA_EXPORT 1024 RC2_CBC_56 56 MD5
0x000062 TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA TLS RSA_EXPORT 1024 RSA_EXPORT 1024 DES_CBC 56 SHA
0x000063 TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA TLS DHE DSS DES_CBC 56 SHA
0x000064 TLS_RSA_EXPORT1024_WITH_RC4_56_SHA TLS RSA_EXPORT 1024 RSA_EXPORT 1024 RC4_56 56 SHA
0x000065 TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA TLS DHE DSS RC4_56 56 SHA
0x000066 TLS_DHE_DSS_WITH_RC4_128_SHA TLS DHE DSS RC4_128 128 SHA
0x000067 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 TLS DHE RSA AES_128_CBC 128 SHA256
0x000068 TLS_DH_DSS_WITH_AES_256_CBC_SHA256 TLS DH DSS AES_256_CBC 256 SHA256
0x000069 TLS_DH_RSA_WITH_AES_256_CBC_SHA256 TLS DH RSA AES_256_CBC 256 SHA256
0x00006A TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 TLS DHE DSS AES_256_CBC 256 SHA256
0x00006B TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 TLS DHE RSA AES_256_CBC 256 SHA256
0x00006C TLS_DH_Anon_WITH_AES_128_CBC_SHA256 TLS DH Anon AES_128_CBC 128 SHA256
0x00006D TLS_DH_Anon_WITH_AES_256_CBC_SHA256 TLS DH Anon AES_256_CBC 256 SHA256
0x000080 TLS_GOSTR341094_WITH_28147_CNT_IMIT TLS VKO GOST R 34.10-94 VKO GOST R 34.10-94 GOST28147 256 GOST28147
0x000081 TLS_GOSTR341001_WITH_28147_CNT_IMIT TLS VKO GOST R 34.10-2001 VKO GOST R 34.10-2001 GOST28147 256 GOST28147
0x000082 TLS_GOSTR341094_WITH_NULL_GOSTR3411 TLS VKO GOST R 34.10-94 VKO GOST R 34.10-94 NULL 0 GOSTR3411
0x000083 TLS_GOSTR341001_WITH_NULL_GOSTR3411 TLS VKO GOST R 34.10-2001 VKO GOST R 34.10-2001 NULL 0 GOSTR3411
0x000084 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA TLS RSA RSA CAMELLIA_256_CBC 256 SHA
0x000085 TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA TLS DH DSS CAMELLIA_256_CBC 256 SHA
0x000086 TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA TLS DH RSA CAMELLIA_256_CBC 256 SHA
0x000087 TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA TLS DHE DSS CAMELLIA_256_CBC 256 SHA
0x000088 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA TLS DHE RSA CAMELLIA_256_CBC 256 SHA
0x000089 TLS_DH_Anon_WITH_CAMELLIA_256_CBC_SHA TLS DH Anon CAMELLIA_256_CBC 256 SHA
0x00008A TLS_PSK_WITH_RC4_128_SHA TLS PSK PSK RC4_128 128 SHA
0x00008B TLS_PSK_WITH_3DES_EDE_CBC_SHA TLS PSK PSK 3DES_EDE_CBC 168 SHA
0x00008C TLS_PSK_WITH_AES_128_CBC_SHA TLS PSK PSK AES_128_CBC 128 SHA
0x00008D TLS_PSK_WITH_AES_256_CBC_SHA TLS PSK PSK AES_256_CBC 256 SHA
0x00008E TLS_DHE_PSK_WITH_RC4_128_SHA TLS DHE PSK RC4_128 128 SHA
0x00008F TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA TLS DHE PSK 3DES_EDE_CBC 168 SHA
0x000090 TLS_DHE_PSK_WITH_AES_128_CBC_SHA TLS DHE PSK AES_128_CBC 128 SHA
0x000091 TLS_DHE_PSK_WITH_AES_256_CBC_SHA TLS DHE PSK AES_256_CBC 256 SHA
0x000092 TLS_RSA_PSK_WITH_RC4_128_SHA TLS RSA PSK RC4_128 128 SHA
0x000093 TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA TLS RSA PSK 3DES_EDE_CBC 168 SHA
0x000094 TLS_RSA_PSK_WITH_AES_128_CBC_SHA TLS RSA PSK AES_128_CBC 128 SHA
0x000095 TLS_RSA_PSK_WITH_AES_256_CBC_SHA TLS RSA PSK AES_256_CBC 256 SHA
0x000096 TLS_RSA_WITH_SEED_CBC_SHA TLS RSA RSA SEED_CBC 128 SHA
0x000097 TLS_DH_DSS_WITH_SEED_CBC_SHA TLS DH DSS SEED_CBC 128 SHA
0x000098 TLS_DH_RSA_WITH_SEED_CBC_SHA TLS DH RSA SEED_CBC 128 SHA
0x000099 TLS_DHE_DSS_WITH_SEED_CBC_SHA TLS DHE DSS SEED_CBC 128 SHA
0x00009A TLS_DHE_RSA_WITH_SEED_CBC_SHA TLS DHE RSA SEED_CBC 128 SHA
0x00009B TLS_DH_Anon_WITH_SEED_CBC_SHA TLS DH Anon SEED_CBC 128 SHA
0x00009C TLS_RSA_WITH_AES_128_GCM_SHA256 TLS RSA RSA AES_128_GCM 128 SHA256
0x00009D TLS_RSA_WITH_AES_256_GCM_SHA384 TLS RSA RSA AES_256_GCM 256 SHA384
0x00009E TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS DHE RSA AES_128_GCM 128 SHA256
0x00009F TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS DHE RSA AES_256_GCM 256 SHA384
0x0000A0 TLS_DH_RSA_WITH_AES_128_GCM_SHA256 TLS DH RSA AES_128_GCM 128 SHA256
0x0000A1 TLS_DH_RSA_WITH_AES_256_GCM_SHA384 TLS DH RSA AES_256_GCM 256 SHA384
0x0000A2 TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 TLS DHE DSS AES_128_GCM 128 SHA256
0x0000A3 TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 TLS DHE DSS AES_256_GCM 256 SHA384
0x0000A4 TLS_DH_DSS_WITH_AES_128_GCM_SHA256 TLS DH DSS AES_128_GCM 128 SHA256
0x0000A5 TLS_DH_DSS_WITH_AES_256_GCM_SHA384 TLS DH DSS AES_256_GCM 256 SHA384
0x0000A6 TLS_DH_Anon_WITH_AES_128_GCM_SHA256 TLS DH Anon AES_128_GCM 128 SHA256
0x0000A7 TLS_DH_Anon_WITH_AES_256_GCM_SHA384 TLS DH Anon AES_256_GCM 256 SHA384
0x0000A8 TLS_PSK_WITH_AES_128_GCM_SHA256 TLS PSK PSK AES_128_GCM 128 SHA256
0x0000A9 TLS_PSK_WITH_AES_256_GCM_SHA384 TLS PSK PSK AES_256_GCM 256 SHA384
0x0000AA TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 TLS DHE PSK AES_128_GCM 128 SHA256
0x0000AB TLS_DHE_PSK_WITH_AES_256_GCM_SHA384 TLS DHE PSK AES_256_GCM 256 SHA384
0x0000AC TLS_RSA_PSK_WITH_AES_128_GCM_SHA256 TLS RSA PSK AES_128_GCM 128 SHA256
0x0000AD TLS_RSA_PSK_WITH_AES_256_GCM_SHA384 TLS RSA PSK AES_256_GCM 256 SHA384
0x0000AE TLS_PSK_WITH_AES_128_CBC_SHA256 TLS PSK PSK AES_128_CBC 128 SHA256
0x0000AF TLS_PSK_WITH_AES_256_CBC_SHA384 TLS PSK PSK AES_256_CBC 256 SHA384
0x0000B0 TLS_PSK_WITH_NULL_SHA256 TLS PSK PSK NULL 0 SHA256
0x0000B1 TLS_PSK_WITH_NULL_SHA384 TLS PSK PSK NULL 0 SHA384
0x0000B2 TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 TLS DHE PSK AES_128_CBC 128 SHA256
0x0000B3 TLS_DHE_PSK_WITH_AES_256_CBC_SHA384 TLS DHE PSK AES_256_CBC 256 SHA384
0x0000B4 TLS_DHE_PSK_WITH_NULL_SHA256 TLS DHE PSK NULL 0 SHA256
0x0000B5 TLS_DHE_PSK_WITH_NULL_SHA384 TLS DHE PSK NULL 0 SHA384
0x0000B6 TLS_RSA_PSK_WITH_AES_128_CBC_SHA256 TLS RSA PSK AES_128_CBC 128 SHA256
0x0000B7 TLS_RSA_PSK_WITH_AES_256_CBC_SHA384 TLS RSA PSK AES_256_CBC 256 SHA384
0x0000B8 TLS_RSA_PSK_WITH_NULL_SHA256 TLS RSA PSK NULL 0 SHA256
0x0000B9 TLS_RSA_PSK_WITH_NULL_SHA384 TLS RSA PSK NULL 0 SHA384
0x00C001 TLS_ECDH_ECDSA_WITH_NULL_SHA TLS ECDH ECDSA NULL 0 SHA
0x00C002 TLS_ECDH_ECDSA_WITH_RC4_128_SHA TLS ECDH ECDSA RC4_128 128 SHA
0x00C003 TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA TLS ECDH ECDSA 3DES_EDE_CBC 168 SHA
0x00C004 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA TLS ECDH ECDSA AES_128_CBC 128 SHA
0x00C005 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA TLS ECDH ECDSA AES_256_CBC 256 SHA
0x00C006 TLS_ECDHE_ECDSA_WITH_NULL_SHA TLS ECDHE ECDSA NULL 0 SHA
0x00C007 TLS_ECDHE_ECDSA_WITH_RC4_128_SHA TLS ECDHE ECDSA RC4_128 128 SHA
0x00C008 TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA TLS ECDHE ECDSA 3DES_EDE_CBC 168 SHA
0x00C009 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS ECDHE ECDSA AES_128_CBC 128 SHA
0x00C00A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS ECDHE ECDSA AES_256_CBC 256 SHA
0x00C00B TLS_ECDH_RSA_WITH_NULL_SHA TLS ECDH RSA NULL 0 SHA
0x00C00C TLS_ECDH_RSA_WITH_RC4_128_SHA TLS ECDH RSA RC4_128 128 SHA
0x00C00D TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA TLS ECDH RSA 3DES_EDE_CBC 168 SHA
0x00C00E TLS_ECDH_RSA_WITH_AES_128_CBC_SHA TLS ECDH RSA AES_128_CBC 128 SHA
0x00C00F TLS_ECDH_RSA_WITH_AES_256_CBC_SHA TLS ECDH RSA AES_256_CBC 256 SHA
0x00C010 TLS_ECDHE_RSA_WITH_NULL_SHA TLS ECDHE RSA NULL 0 SHA
0x00C011 TLS_ECDHE_RSA_WITH_RC4_128_SHA TLS ECDHE RSA RC4_128 128 SHA
0x00C012 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA TLS ECDHE RSA 3DES_EDE_CBC 168 SHA
0x00C013 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS ECDHE RSA AES_128_CBC 128 SHA
0x00C014 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS ECDHE RSA AES_256_CBC 256 SHA
0x00C015 TLS_ECDH_Anon_WITH_NULL_SHA TLS ECDH Anon NULL 0 SHA
0x00C016 TLS_ECDH_Anon_WITH_RC4_128_SHA TLS ECDH Anon RC4_128 128 SHA
0x00C017 TLS_ECDH_Anon_WITH_3DES_EDE_CBC_SHA TLS ECDH Anon 3DES_EDE_CBC 168 SHA
0x00C018 TLS_ECDH_Anon_WITH_AES_128_CBC_SHA TLS ECDH Anon AES_128_CBC 128 SHA
0x00C019 TLS_ECDH_Anon_WITH_AES_256_CBC_SHA TLS ECDH Anon AES_256_CBC 256 SHA
0x00C01A TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA TLS SRP SHA 3DES_EDE_CBC 168 SHA
0x00C01B TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA TLS SRP SHA 3DES_EDE_CBC 168 SHA
0x00C01C TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA TLS SRP SHA 3DES_EDE_CBC 168 SHA
0x00C01D TLS_SRP_SHA_WITH_AES_128_CBC_SHA TLS SRP SHA AES_128_CBC 128 SHA
0x00C01E TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA TLS SRP SHA AES_128_CBC 128 SHA
0x00C01F TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA TLS SRP SHA AES_128_CBC 128 SHA
0x00C020 TLS_SRP_SHA_WITH_AES_256_CBC_SHA TLS SRP SHA AES_256_CBC 256 SHA
0x00C021 TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA TLS SRP SHA AES_256_CBC 256 SHA
0x00C022 TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA TLS SRP SHA AES_256_CBC 256 SHA
0x00C023 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS ECDHE ECDSA AES_128_CBC 128 SHA256
0x00C024 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS ECDHE ECDSA AES_256_CBC 256 SHA384
0x00C025 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 TLS ECDH ECDSA AES_128_CBC 128 SHA256
0x00C026 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 TLS ECDH ECDSA AES_256_CBC 256 SHA384
0x00C027 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS ECDHE RSA AES_128_CBC 128 SHA256
0x00C028 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS ECDHE RSA AES_256_CBC 256 SHA384
0x00C029 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 TLS ECDH RSA AES_128_CBC 128 SHA256
0x00C02A TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 TLS ECDH RSA AES_256_CBC 256 SHA384
0x00C02B TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS ECDHE ECDSA AES_128_GCM 128 SHA256
0x00C02C TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS ECDHE ECDSA AES_256_GCM 256 SHA384
0x00C02D TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 TLS ECDH ECDSA AES_128_GCM 128 SHA256
0x00C02E TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 TLS ECDH ECDSA AES_256_GCM 256 SHA384
0x00C02F TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS ECDHE RSA AES_128_GCM 128 SHA256
0x00C030 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS ECDHE RSA AES_256_GCM 256 SHA384
0x00C031 TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 TLS ECDH RSA AES_128_GCM 128 SHA256
0x00C032 TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 TLS ECDH RSA AES_256_GCM 256 SHA384
0x00C033 TLS_ECDHE_PSK_WITH_RC4_128_SHA TLS ECDHE PSK RC4_128 128 SHA
0x00C034 TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA TLS ECDHE PSK 3DES_EDE_CBC 168 SHA
0x00C035 TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA TLS ECDHE PSK AES_128_CBC 128 SHA
0x00C036 TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA TLS ECDHE PSK AES_256_CBC 256 SHA
0x00C037 TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 TLS ECDHE PSK AES_128_CBC 128 SHA256
0x00C038 TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384 TLS ECDHE PSK AES_256_CBC 256 SHA384
0x00C039 TLS_ECDHE_PSK_WITH_NULL_SHA TLS ECDHE PSK NULL 0 SHA
0x00C03A TLS_ECDHE_PSK_WITH_NULL_SHA256 TLS ECDHE PSK NULL 0 SHA256
0x00C03B TLS_ECDHE_PSK_WITH_NULL_SHA384 TLS ECDHE PSK NULL 0 SHA384
0x00FEFE SSL_RSA_FIPS_WITH_DES_CBC_SHA SSL RSA_FIPS RSA_FIPS DES_CBC 56 SHA
0x00FEFF SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA SSL RSA_FIPS RSA_FIPS 3DES_EDE_CBC 168 SHA
0x00FFE0 SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA SSL RSA_FIPS RSA_FIPS 3DES_EDE_CBC 168 SHA
0x00FFE1 SSL_RSA_FIPS_WITH_DES_CBC_SHA SSL RSA_FIPS RSA_FIPS DES_CBC 56 SHA
0x010080 SSL2_RC4_128_WITH_MD5 SSL2 RSA RSA RC4_128 128 MD5
0x020080 SSL2_RC4_128_EXPORT40_WITH_MD5 SSL2 RSA RSA RC4_128_EXPORT40 40 MD5
0x030080 SSL2_RC2_CBC_128_CBC_WITH_MD5 SSL2 RSA RSA RC2_CBC_128_CBC 128 MD5
0x040080 SSL2_RC2_CBC_128_CBC_WITH_MD5 SSL2 RSA RSA RC2_CBC_128_CBC 128 MD5
0x050080 SSL2_IDEA_128_CBC_WITH_MD5 SSL2 RSA RSA IDEA_128_CBC 128 MD5
0x060040 SSL2_DES_64_CBC_WITH_MD5 SSL2 RSA RSA DES_64_CBC 64 MD5
0x0700C0 SSL2_DES_192_EDE3_CBC_WITH_MD5 SSL2 RSA RSA DES_192_EDE3_CBC 192 MD5
0x080080 SSL2_RC4_64_WITH_MD5 SSL2 RSA RSA RC4_64 64 MD5
0x800001 PCT_SSL_CERT_TYPE PCT1_CERT_X509 PCT
0x800003 PCT_SSL_CERT_TYPE PCT1_CERT_X509_CHAIN PCT
0x810001 PCT_SSL_HASH_TYPE PCT1_HASH_MD5 PCT
0x810003 PCT_SSL_HASH_TYPE PCT1_HASH_SHA PCT
0x820001 PCT_SSL_EXCH_TYPE PCT1_EXCH_RSA_PKCS1 PCT
0x830004 PCT_SSL_CIPHER_TYPE_1ST_HALF PCT1_CIPHER_RC4 PCT
0x842840 PCT_SSL_CIPHER_TYPE_2ND_HALF PCT1_ENC_BITS_40 PCT1_MAC_BITS 128 PCT
0x848040 PCT_SSL_CIPHER_TYPE_2ND_HALF PCT1_ENC_BITS_128 PCT1_MAC_BITS 128 PCT
0x8F8001 PCT_SSL_COMPAT PCT_VERSION_1 PCT
IANA list of cipher suites:-

http://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-4

Appendix:-
  • Anon

    Anonymous cipher suites with no key authentication. Highly vulnerable to man in the midule attack.

  • Export

    Intentionally crippled cipher suite to conform to US export laws. Symmetric cipher used in export cipher suites typically does not exceed 56bits.

  • NULL

    Null cipher suites do not provide any data encryption and/or data integrity. TLS_NULL_WITH_NULL_NULL (0x0000) cipher suite is used during initial session establishment.

Key exchange and Authentication algorithms:
  • RSA

    Rivest, Shamir, Auleman

  • DH

    Diffie-Hellman

  • DHE

    Diffie-Hellman Ephemeral

  • ECDH

    Elliptic-Curve Diffie-Hellman

  • KRB5

    Kerberos

  • SRP

    Secure Remote Password Protocol

  • PSK

    Pre-shared key

  • DSA

    Digital Signature Algorithm

  • ECDSA

    Elliptic Curve Digital Signature Algorithm

  • DSS

    Digital Signature Standard

Encryption and MAC algorithms:
  • 3DES

    Tripple Data Encryption Algorithm

  • AES

    Advanced Encryption Standard

  • Camelia

    Block cipher developed by Mitsubishi and NTT

  • DES

    Data Encryption Standard

  • Fortezza

    Security token based cipher

  • GOST

    Block cipher developed in USSR

  • IDEA

    International Data Encryption Algorithm

  • RC2

    Rivest Cipher 4

  • RC4

    Rivest Cipher 2

  • SEED

    Block cipher developed by Korean Information Security Agency

  • SHA

    Secure Hash Algorithm

  • MD5

    Message Digiest algorithm 5

TLS