[proxy] web.archive.org — ← back | site home | direct (HTTPS) ↗ | proxy home | ◑ dark◐ light

Supported SSL / TLS ciphersuites

ARM Limited

RSA (RSA) key exchange

mbed TLS Name / NIST Name OpenSSL equivalent Value
TLS-RSA-WITH-AES-128-CBC-SHA AES128-SHA {0x00,0x2F}
TLS-RSA-WITH-AES-256-CBC-SHA AES256-SHA {0x00,0x35}
TLS-RSA-WITH-AES-128-CBC-SHA256 AES128-SHA256 {0x00,0x3C}
TLS-RSA-WITH-AES-256-CBC-SHA256 AES256-SHA256 {0x00,0x3D}
TLS-RSA-WITH-AES-128-GCM-SHA256 AES128-GCM-SHA256 {0x00,0x9C}
TLS-RSA-WITH-AES-256-GCM-SHA384 AES256-GCM-SHA384 {0x00,0x9D}
TLS-RSA-WITH-AES-128-CCM AES128-CCM {0xC0,0x9C}
TLS-RSA-WITH-AES-256-CCM AES256-CCM {0xC0,0x9D}
TLS-RSA-WITH-AES-128-CCM-8 AES128-CCM8 {0xC0,0xA0}
TLS-RSA-WITH-AES-256-CCM-8 AES256-CCM8 {0xC0,0xA1}
TLS-RSA-WITH-CAMELLIA-128-CBC-SHA CAMELLIA128-SHA {0x00,0x41}
TLS-RSA-WITH-CAMELLIA-256-CBC-SHA CAMELLIA256-SHA {0x00,0x84}
TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256 Not supported {0x00,0xBA}
TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256 Not supported {0x00,0xC0}
TLS-RSA-WITH-CAMELLIA-128-GCM-SHA256 Not supported {0x00,0x7A}
TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 Not supported {0x00,0x7B}
TLS-RSA-WITH-3DES-EDE-CBC-SHA DES-CBC3-SHA {0x00,0x0A}
TLS-RSA-WITH-RC4-128-SHA RC4-SHA {0x00,0x05}
TLS-RSA-WITH-RC4-128-MD5 RC4-MD5 {0x00,0x04}
TLS-RSA-WITH-DES-CBC-SHA DES-CBC-SHA {0x00,0x09}
TLS-RSA-WITH-NULL-MD5 NULL-MD5 {0x00,0x01}
TLS-RSA-WITH-NULL-SHA NULL-SHA {0x00,0x02}
TLS-RSA-WITH-NULL-SHA256 NULL-SHA256 {0x00,0x3B}

RSA with Ephemeral Diffie Hellman (DHE-RSA) key exchange

mbed TLS Name / NIST Name OpenSSL equivalent Value
TLS-DHE-RSA-WITH-AES-128-CBC-SHA DHE-RSA-AES128-SHA {0x00,0x33}
TLS-DHE-RSA-WITH-AES-256-CBC-SHA DHE-RSA-AES256-SHA {0x00,0x39}
TLS-DHE-RSA-WITH-AES-128-CBC-SHA256 DHE-RSA-AES128-SHA256 {0x00,0x67}
TLS-DHE-RSA-WITH-AES-256-CBC-SHA256 DHE-RSA-AES256-SHA256 {0x00,0x6B}
TLS-DHE-RSA-WITH-AES-128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256 {0x00,0x9E}
TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 {0x00,0x9F}
TLS-DHE-RSA-WITH-AES-128-CCM DHE-RSA-AES128-CCM {0xC0,0x9E}
TLS-DHE-RSA-WITH-AES-256-CCM DHE-RSA-AES256-CCM {0xC0,0x9F}
TLS-DHE-RSA-WITH-AES-128-CCM-8 DHE-RSA-AES128-CCM8 {0xC0,0xA2}
TLS-DHE-RSA-WITH-AES-256-CCM-8 DHE-RSA-AES256-CCM8 {0xC0,0xA3}
TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA DHE-RSA-CAMELLIA128-SHA {0x00,0x45}
TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA DHE-RSA-CAMELLIA256-SHA {0x00,0x88}
TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256 Not supported {0x00,0xBE}
TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256 Not supported {0x00,0xC4}
TLS-DHE-RSA-WITH-CAMELLIA-128-GCM-SHA256 Not supported {0x00,0x7C}
TLS-DHE-RSA-WITH-CAMELLIA-256-GCM-SHA256 Not supported {0x00,0x7D}
TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA EDH-RSA-DES-CBC3-SHA {0x00,0x16}
TLS-DHE-RSA-WITH-DES-CBC-SHA EDH-RSA-DES-CBC-SHA {0x00,0x15}

RSA with Elliptic Curve Ephemeral Diffie Hellman (ECDHE-RSA) key exchange

mbed TLS Name / NIST Name OpenSSL equivalent Value
TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA ECDHE-RSA-AES128-SHA {0xC0,0x13}
TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA ECDHE-RSA-AES256-SHA {0xC0,0x14}
TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256 ECDHE-RSA-AES128-SHA256 {0xC0,0x27}
TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384 ECDHE-RSA-AES256-SHA384 {0xC0,0x28}
TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256 ECDHE-RSA-AES128-GCM-SHA256 {0xC0,0x2F}
TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 {0xC0,0x30}
TLS-ECDHE-RSA-WITH-CAMELLIA-128-CBC-SHA256 ECDHE-RSA-CAMELLIA128-SHA256 {0xC0,0x76}
TLS-ECDHE-RSA-WITH-CAMELLIA-256-CBC-SHA384 ECDHE-RSA-CAMELLIA256-SHA384 {0xC0,0x77}
TLS-ECDHE-RSA-WITH-CAMELLIA-128-GCM-SHA256 Not supported {0xC0,0x8A}
TLS-ECDHE-RSA-WITH-CAMELLIA-256-GCM-SHA384 Not supported {0xC0,0x8B}
TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA ECDHE-RSA-DES-CBC3-SHA {0xC0,0x12}
TLS-ECDHE-RSA-WITH-RC4-128-SHA ECDHE-RSA-RC4-SHA {0xC0,0x11}
TLS-ECDHE-RSA-WITH-NULL-SHA ECDHE-RSA-NULL-SHA {0xC0,0x10}

RSA with Elliptic Curve Diffie Hellman (ECDH-RSA) key exchange

mbed TLS Name / NIST Name OpenSSL equivalent Value
TLS-ECDH-RSA-WITH-AES-128-CBC-SHA ECDH-RSA-AES128-SHA {0xC0,0x0E}
TLS-ECDH-RSA-WITH-AES-256-CBC-SHA ECDH-RSA-AES256-SHA {0xC0,0x0F}
TLS-ECDH-RSA-WITH-AES-128-CBC-SHA256 ECDH-RSA-AES128-SHA256 {0xC0,0x29}
TLS-ECDH-RSA-WITH-AES-256-CBC-SHA384 ECDH-RSA-AES256-SHA384 {0xC0,0x2A}
TLS-ECDH-RSA-WITH-AES-128-GCM-SHA256 ECDH-RSA-AES128-GCM-SHA256 {0xC0,0x31}
TLS-ECDH-RSA-WITH-AES-256-GCM-SHA384 ECDH-RSA-AES256-GCM-SHA384 {0xC0,0x32}
TLS-ECDH-RSA-WITH-CAMELLIA-128-CBC-SHA256 ECDH-RSA-CAMELLIA128-SHA256 {0xC0,0x78}
TLS-ECDH-RSA-WITH-CAMELLIA-256-CBC-SHA384 ECDH-RSA-CAMELLIA256-SHA384 {0xC0,0x79}
TLS-ECDH-RSA-WITH-CAMELLIA-128-GCM-SHA256 Not supported {0xC0,0x8C}
TLS-ECDH-RSA-WITH-CAMELLIA-256-GCM-SHA384 Not supported {0xC0,0x8D}
TLS-ECDH-RSA-WITH-3DES-EDE-CBC-SHA ECDH-RSA-DES-CBC3-SHA {0xC0,0x0D}
TLS-ECDH-RSA-WITH-RC4-128-SHA ECDH-RSA-RC4-SHA {0xC0,0x0C}
TLS-ECDH-RSA-WITH-NULL-SHA ECDH-RSA-NULL-SHA {0xC0,0x0B}

ECDSA with Elliptic Curve Ephemeral Diffie Hellman (ECDHE-ECDSA) key exchange

mbed TLS Name / NIST Name OpenSSL equivalent Value
TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA ECDHE-ECDSA-AES128-SHA {0xC0,0x09}
TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA ECDHE-ECDSA-AES256-SHA {0xC0,0x0A}
TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 ECDHE-ECDSA-AES128-SHA256 {0xC0,0x23}
TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384 ECDHE-ECDSA-AES256-SHA384 {0xC0,0x24}
TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 {0xC0,0x2B}
TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384 ECDHE-ECDSA-AES256-GCM-SHA384 {0xC0,0x2C}
TLS-ECDHE-ECDSA-WITH-AES-128-CCM ECDHE-ECDSA-AES128-CCM {0xC0,0xAC}
TLS-ECDHE-ECDSA-WITH-AES-256-CCM ECDHE-ECDSA-AES256-CCM {0xC0,0xAD}
TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 ECDHE-ECDSA-AES128-CCM8 {0xC0,0xAE}
TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8 ECDHE-ECDSA-AES256-CCM8 {0xC0,0xAF}
TLS-ECDHE-ECDSA-WITH-CAMELLIA-128-CBC-SHA256 ECDHE-ECDSA-CAMELLIA128-SHA256 {0xC0,0x72}
TLS-ECDHE-ECDSA-WITH-CAMELLIA-256-CBC-SHA384 ECDHE-ECDSA-CAMELLIA256-SHA384 {0xC0,0x73}
TLS-ECDHE-ECDSA-WITH-CAMELLIA-128-GCM-SHA256 Not supported {0xC0,0x86}
TLS-ECDHE-ECDSA-WITH-CAMELLIA-256-GCM-SHA384 Not supported {0xC0,0x87}
TLS-ECDHE-ECDSA-WITH-3DES-EDE-CBC-SHA ECDHE-ECDSA-DES-CBC3-SHA {0xC0,0x08}
TLS-ECDHE-ECDSA-WITH-RC4-128-SHA ECDHE-ECDSA-RC4-SHA {0xC0,0x07}
TLS-ECDHE-ECDSA-WITH-NULL-SHA ECDHE-ECDSA-NULL-SHA {0xC0,0x06}

ECDSA with Elliptic Curve Diffie Hellman (ECDH-ECDSA) key exchange

mbed TLS Name / NIST Name OpenSSL equivalent Value
TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA ECDH-ECDSA-AES128-SHA {0xC0,0x04}
TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA ECDH-ECDSA-AES256-SHA {0xC0,0x05}
TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA256 ECDH-ECDSA-AES128-SHA256 {0xC0,0x25}
TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA384 ECDH-ECDSA-AES256-SHA384 {0xC0,0x26}
TLS-ECDH-ECDSA-WITH-AES-128-GCM-SHA256 ECDH-ECDSA-AES128-GCM-SHA256 {0xC0,0x2D}
TLS-ECDH-ECDSA-WITH-AES-256-GCM-SHA384 ECDH-ECDSA-AES256-GCM-SHA384 {0xC0,0x2E}
TLS-ECDH-ECDSA-WITH-CAMELLIA-128-CBC-SHA256 ECDH-ECDSA-CAMELLIA128-SHA256 {0xC0,0x74}
TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384 ECDH-ECDSA-CAMELLIA256-SHA38 {0xC0,0x75}
TLS-ECDH-ECDSA-WITH-CAMELLIA-128-GCM-SHA256 Not supported {0xC0,0x88}
TLS-ECDH-ECDSA-WITH-CAMELLIA-256-GCM-SHA384 Not supported {0xC0,0x89}
TLS-ECDH-ECDSA-WITH-3DES-EDE-CBC-SHA ECDH-ECDSA-DES-CBC3-SHA {0xC0,0x03}
TLS-ECDH-ECDSA-WITH-RC4-128-SHA ECDH-ECDSA-RC4-SHA {0xC0,0x02}
TLS-ECDH-ECDSA-WITH-NULL-SHA ECDH-ECDSA-NULL-SHA {0xC0,0x01}

Pre Shared Key (PSK) key exchange

mbed TLS Name / NIST Name OpenSSL equivalent Value
TLS-PSK-WITH-RC4-128-SHA PSK-RC4-SHA {0x00,0x8A}
TLS-PSK-WITH-3DES-EDE-CBC-SHA PSK-3DES-EDE-CBC-SHA {0x00,0x8B}
TLS-PSK-WITH-AES-128-CBC-SHA PSK-AES128-CBC-SHA {0x00,0x8C}
TLS-PSK-WITH-AES-256-CBC-SHA PSK-AES256-CBC-SHA {0x00,0x8D}
TLS-PSK-WITH-AES-128-CBC-SHA256 PSK-AES128-CBC-SHA256 {0x00,0xAE}
TLS-PSK-WITH-AES-256-CBC-SHA384 PSK-AES256-CBC-SHA384 {0x00,0xAF}
TLS-PSK-WITH-AES-128-GCM-SHA256 PSK-AES128-GCM-SHA256 {0x00,0xA8}
TLS-PSK-WITH-AES-256-GCM-SHA384 PSK-AES256-GCM-SHA384 {0x00,0xA9}
TLS-PSK-WITH-AES-128-CCM PSK-AES128-CCM {0xC0,0xA4}
TLS-PSK-WITH-AES-256-CCM PSK-AES256-CCM {0xC0,0xA5}
TLS-PSK-WITH-AES-128-CCM-8 PSK-AES128-CCM8 {0xC0,0xA8}
TLS-PSK-WITH-AES-256-CCM-8 PSK-AES256-CCM8 {0xC0,0xA9}
TLS-PSK-WITH-CAMELLIA-128-CBC-SHA256 PSK-CAMELLIA128-SHA256 {0xC0,0x94}
TLS-PSK-WITH-CAMELLIA-256-CBC-SHA384 PSK-CAMELLIA256-SHA384 {0xC0,0x95}
TLS-PSK-WITH-CAMELLIA-128-GCM-SHA256 Not supported {0xC0,0x8D}
TLS-PSK-WITH-CAMELLIA-256-GCM-SHA384 Not supported {0xC0,0x8F}
TLS-PSK-WITH-NULL-SHA PSK-NULL-SHA {0x00,0x2C}
TLS-PSK-WITH-NULL-SHA256 PSK-NULL-SHA256 {0x00,0xB4}
TLS-PSK-WITH-NULL-SHA384 PSK-NULL-SHA256 {0x00,0xB5}

Pre Shared Key with Diffie Hellman (DHE-PSK) key exchange

mbed TLS Name / NIST Name OpenSSL equivalent Value
TLS-DHE-PSK-WITH-RC4-128-SHA DHE-PSK-RC4-SHA {0x00,0x8E}
TLS-DHE-PSK-WITH-3DES-EDE-CBC-SHA DHE-PSK-3DES-EDE-CBC-SHA {0x00,0x8F}
TLS-DHE-PSK-WITH-AES-128-CBC-SHA DHE-PSK-AES128-CBC-SHA {0x00,0x90}
TLS-DHE-PSK-WITH-AES-256-CBC-SHA DHE-PSK-AES256-CBC-SHA {0x00,0x91}
TLS-DHE-PSK-WITH-AES-128-CBC-SHA256 DHE-PSK-AES128-CBC-SHA256 {0x00,0xB2}
TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 DHE-PSK-AES256-CBC-SHA384 {0x00,0xB3}
TLS-DHE-PSK-WITH-AES-128-GCM-SHA256 DHE-PSK-AES128-GCM-SHA256 {0x00,0xAA}
TLS-DHE-PSK-WITH-AES-256-GCM-SHA384 DHE-PSK-AES256-GCM-SHA384 {0x00,0xAB}
TLS-DHE-PSK-WITH-AES-128-CCM DHE-PSK-AES128-CCM {0xC0,0xA6}
TLS-DHE-PSK-WITH-AES-256-CCM DHE-PSK-AES256-CCM {0xC0,0xA7}
TLS-DHE-PSK-WITH-AES-128-CCM-8 DHE-PSK-AES128-CCM8 {0xC0,0xAA}
TLS-DHE-PSK-WITH-AES-256-CCM-8 DHE-PSK-AES256-CCM8 {0xC0,0xAB}
TLS-DHE-PSK-WITH-CAMELLIA-128-CBC-SHA256 DHE-PSK-CAMELLIA128-SHA256 {0xC0,0x96}
TLS-DHE-PSK-WITH-CAMELLIA-256-CBC-SHA384 DHE-PSK-CAMELLIA256-SHA384 {0xC0,0x97}
TLS-DHE-PSK-WITH-CAMELLIA-128-GCM-SHA256 Not supported {0xC0,0x90}
TLS-DHE-PSK-WITH-CAMELLIA-256-GCM-SHA384 Not supported {0xC0,0x91}
TLS-DHE-PSK-WITH-NULL-SHA DHE-PSK-NULL-SHA {0x00,0x2D}
TLS-DHE-PSK-WITH-NULL-SHA256 DHE-PSK-NULL-SHA256 {0x00,0xB4}
TLS-DHE-PSK-WITH-NULL-SHA384 DHE-PSK-NULL-SHA384 {0x00,0xB5}

Pre Shared Key with Elliptic Curve Ephemeral Diffie Hellman (ECDHE-PSK) key exchange

mbed TLS Name / NIST Name OpenSSL equivalent Value
TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA ECDHE-PSK-AES128-CBC-SHA {0xC0,0x35}
TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA ECDHE-PSK-AES256-CBC-SHA {0xC0,0x36}
TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA256 ECDHE-PSK-AES128-CBC-SHA256 {0xC0,0x37}
TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 ECDHE-PSK-AES256-CBC-SHA384 {0xC0,0x38}
TLS-ECDHE-PSK-WITH-CAMELLIA-128-CBC-SHA256 ECDHE-PSK-CAMELLIA128-SHA256 {0xC0,0x9A}
TLS-ECDHE-PSK-WITH-CAMELLIA-256-CBC-SHA384 ECDHE-PSK-CAMELLIA256-SHA384 {0xC0,0x9B}
TLS-ECDHE-PSK-WITH-3DES-EDE-CBC-SHA ECDHE-PSK-3DES-EDE-CBC-SHA {0xC0,0x34}
TLS-ECDHE-PSK-WITH-RC4-128-SHA ECDHE-PSK-RC4-SHA {0xC0,0x33}
TLS-ECDHE-PSK-WITH-NULL-SHA ECDHE-PSK-NULL-SHA {0xC0,0x39}
TLS-ECDHE-PSK-WITH-NULL-SHA256 ECDHE-PSK-NULL-SHA256 {0xC0,0x3A}
TLS-ECDHE-PSK-WITH-NULL-SHA384 ECDHE-PSK-NULL-SHA384 {0xC0,0x3B}

Pre Shared Key with RSA (RSA-PSK) key exchange

mbed TLS Name / NIST Name OpenSSL equivalent Value
TLS-RSA-PSK-WITH-AES-128-CBC-SHA RSA-PSK-AES128-CBC-SHA {0x00,0x94}
TLS-RSA-PSK-WITH-AES-256-CBC-SHA RSA-PSK-AES256-CBC-SHA {0x00,0x95}
TLS-RSA-PSK-WITH-AES-128-GCM-SHA256 RSA-PSK-AES128-GCM-SHA256 {0x00,0xAC}
TLS-RSA-PSK-WITH-AES-256-GCM-SHA384 RSA-PSK-AES256-GCM-SHA384 {0x00,0xAD}
TLS-RSA-PSK-WITH-AES-128-CBC-SHA256 RSA-PSK-AES128-CBC-SHA256 {0x00,0xB6}
TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 RSA-PSK-AES256-CBC-SHA384 {0x00,0xB7}
TLS-RSA-PSK-WITH-CAMELLIA-128-CBC-SHA256 RSA-PSK-CAMELLIA128-SHA256 {0x00,0x98}
TLS-RSA-PSK-WITH-CAMELLIA-256-CBC-SHA384 RSA-PSK-CAMELLIA256-SHA384 {0x00,0x99}
TLS-RSA-PSK-WITH-CAMELLIA-128-GCM-SHA256 Not supported {0x00,0x92}
TLS-RSA-PSK-WITH-CAMELLIA-256-GCM-SHA384 Not supported {0x00,0x93}
TLS-RSA-PSK-WITH-3DES-EDE-CBC-SHA RSA-PSK-3DES-EDE-CBC-SHA {0x00,0x93}
TLS-RSA-PSK-WITH-RC4-128-SHA RSA-PSK-RC4-SHA {0x00,0x92}
TLS-RSA-PSK-WITH-NULL-SHA RSA-PSK-NULL-SHA {0x00,0x2E}
TLS-RSA-PSK-WITH-NULL-SHA256 RSA-PSK-NULL-SHA256 {0x00,0xB8}
TLS-RSA-PSK-WITH-NULL-SHA384 RSA-PSK-NULL-SHA384 {0x00,0xB9}