TLS Cipher Suites
Reference of common TLS 1.2 / 1.3 cipher suites with strength notes.
| Name | IANA ID | TLS | Kx | Auth | Cipher | MAC | Strength |
|---|---|---|---|---|---|---|---|
TLS_AES_128_GCM_SHA256 |
{0x13,0x01} |
1.3 | ECDHE | any | AES-128-GCM | SHA256 | Strong |
TLS_AES_256_GCM_SHA384 |
{0x13,0x02} |
1.3 | ECDHE | any | AES-256-GCM | SHA384 | Strong |
TLS_CHACHA20_POLY1305_SHA256 |
{0x13,0x03} |
1.3 | ECDHE | any | ChaCha20-Poly1305 | SHA256 | Strong |
ECDHE-RSA-AES128-GCM-SHA256 |
{0xC0,0x2F} |
1.2 | ECDHE | RSA | AES-128-GCM | SHA256 | Strong |
ECDHE-RSA-AES256-GCM-SHA384 |
{0xC0,0x30} |
1.2 | ECDHE | RSA | AES-256-GCM | SHA384 | Strong |
ECDHE-ECDSA-AES128-GCM-SHA256 |
{0xC0,0x2B} |
1.2 | ECDHE | ECDSA | AES-128-GCM | SHA256 | Strong |
ECDHE-ECDSA-AES256-GCM-SHA384 |
{0xC0,0x2C} |
1.2 | ECDHE | ECDSA | AES-256-GCM | SHA384 | Strong |
ECDHE-RSA-CHACHA20-POLY1305 |
{0xCC,0xA8} |
1.2 | ECDHE | RSA | ChaCha20-Poly1305 | SHA256 | Strong |
ECDHE-ECDSA-CHACHA20-POLY1305 |
{0xCC,0xA9} |
1.2 | ECDHE | ECDSA | ChaCha20-Poly1305 | SHA256 | Strong |
ECDHE-RSA-AES128-SHA256 |
{0xC0,0x27} |
1.2 | ECDHE | RSA | AES-128-CBC | SHA256 | OK (CBC) |
ECDHE-RSA-AES256-SHA384 |
{0xC0,0x28} |
1.2 | ECDHE | RSA | AES-256-CBC | SHA384 | OK (CBC) |
AES128-SHA |
{0x00,0x2F} |
1.0+ | RSA | RSA | AES-128-CBC | SHA1 | Weak — no forward secrecy |
DES-CBC3-SHA |
{0x00,0x0A} |
1.0+ | RSA | RSA | 3DES-CBC | SHA1 | Insecure — 3DES |
RC4-MD5 |
{0x00,0x04} |
1.0+ | RSA | RSA | RC4-128 | MD5 | Insecure — disable |
About this tool
Browse common TLS cipher suites — their IANA hex IDs, key-exchange, authentication, cipher and MAC. Flags weak / insecure suites at a glance.