SSL/TLS Ciphers

Below is a list of SSL/TLS Ciphers that are available for selection when:

 

  • Configuring Domain (SERVICES > Listeners) and Global (GLOBAL SERVICES > Listeners) FTP/S and AFTP services.

  • Configuring Domain (SERVICES > Listeners) OFTP2/ services.

  • Configuring Settings > MISCELLANEOUS > Web > Web HTTP/S.

  • Configuring Settings > MISCELLANEOUS > Web > REST HTTP/S.

 

Each of the above configurations include an SSL/TLS Ciphers button, that when clicked, displays what you see in the image below.

 

The buttons at the top of the window let you: <Select All>/<Deselect All> ciphers, or Select Medium or Select Strong ciphers.

 

 

Below is a list of all the ciphers. A check next to the cipher name indicates it is considered a medium or strong cipher, or both.

 

Medium Strong Cipher
✓ ✓ TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
✓ ✓ TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384
    TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
    TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
✓ ✓ TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
✓ ✓ TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
✓ ✓ TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
    TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256
    TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256
    TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
    TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
✓ ✓ TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
✓ ✓ TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
✓ ✓ TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
✓ ✓ TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
✓ ✓ TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384
    TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384
    TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
    TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
✓ ✓ TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
✓ ✓ TLS_ECDHE_ECDSA_WITH_AES_256_CCM
✓ ✓ TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8
✓ ✓ TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
✓ ✓ TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
    TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256
    TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256
    TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
    TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
✓ ✓ TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
✓ ✓ TLS_ECDHE_ECDSA_WITH_AES_128_CCM
✓ ✓ TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8
✓ ✓ TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
✓ ✓ TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
✓   TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384
    TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384
    TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
✓   TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
    TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
✓   TLS_DHE_RSA_WITH_AES_256_CBC_SHA
    TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
✓   TLS_DHE_RSA_WITH_AES_256_CCM
✓   TLS_DHE_RSA_WITH_AES_256_CCM_8
✓   TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
✓   TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
    TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256
    TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256
    TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
    TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
✓   TLS_DHE_RSA_WITH_AES_128_CBC_SHA
    TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
✓   TLS_DHE_RSA_WITH_AES_128_CCM
✓   TLS_DHE_RSA_WITH_AES_128_CCM_8
✓   TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
✓   TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
✓   TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
    TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384
    TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384
    TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384
✓   TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
    TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256
✓   TLS_DHE_DSS_WITH_AES_256_CBC_SHA
    TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
✓   TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
✓   TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
    TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256
    TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256
    TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256
    TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256
✓   TLS_DHE_DSS_WITH_AES_128_CBC_SHA
    TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
✓   TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
✓   TLS_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_ARIA_256_CBC_SHA384
    TLS_RSA_WITH_ARIA_256_GCM_SHA384
    TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
✓   TLS_RSA_WITH_AES_256_CBC_SHA256
    TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
✓   TLS_RSA_WITH_AES_256_CBC_SHA
    TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
✓   TLS_RSA_WITH_AES_256_CCM
✓   TLS_RSA_WITH_AES_256_CCM_8
✓   TLS_RSA_WITH_AES_128_CBC_SHA256
✓   TLS_RSA_WITH_AES_128_GCM_SHA256
    TLS_RSA_WITH_ARIA_128_CBC_SHA256
    TLS_RSA_WITH_ARIA_128_GCM_SHA256
    TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
    TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
✓   TLS_RSA_WITH_AES_128_CBC_SHA
    TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
✓   TLS_RSA_WITH_AES_128_CCM
✓   TLS_RSA_WITH_AES_128_CCM_8
✓   TLS_RSA_WITH_3DES_EDE_CBC_SHA
✓ ✓ TLS_AES_256_GCM_SHA384
    TLS_DH_anon_WITH_AES_256_GCM_SHA384
    TLS_DH_anon_WITH_ARIA_256_CBC_SHA384
    TLS_DH_anon_WITH_ARIA_256_GCM_SHA384
    TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384
    TLS_DH_anon_WITH_AES_256_CBC_SHA256
    TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256
    TLS_DH_anon_WITH_AES_256_CBC_SHA
    TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
    TLS_ECDH_anon_WITH_AES_256_CBC_SHA
✓ ✓ TLS_AES_128_CCM_8_SHA256
✓ ✓ TLS_AES_128_CCM_SHA256
✓ ✓ TLS_AES_128_GCM_SHA256
    TLS_DH_anon_WITH_AES_128_CBC_SHA256
    TLS_DH_anon_WITH_AES_128_GCM_SHA256
    TLS_DH_anon_WITH_ARIA_128_CBC_SHA256
    TLS_DH_anon_WITH_ARIA_128_GCM_SHA256
    TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256
    TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256
    TLS_DH_anon_WITH_AES_128_CBC_SHA
    TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
    TLS_ECDH_anon_WITH_AES_128_CBC_SHA
✓ ✓ TLS_CHACHA20_POLY1305_SHA256
    TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
    TLS_ECDHE_RSA_WITH_NULL_SHA
    TLS_ECDHE_ECDSA_WITH_NULL_SHA
    TLS_RSA_WITH_NULL_SHA256
    TLS_RSA_WITH_NULL_S