Data

TLS cipher suite list

Every one of the 358 cipher suites in the IANA TLS registry, with its hex code, OpenSSL and GnuTLS names, key exchange, encryption, supported TLS versions and an explained security rating. Filter the table or open a suite for Nginx and Apache configuration.

Data updated Nov 10, 2026

Recommended 4
Secure 70
Weak 180
Insecure 102

Has OpenSSL name

IANA name	Hex code	OpenSSL	Kx	Au	Enc	MAC	TLS	Rating
TLS_NULL_WITH_NULL_NULL	0x00,0x00	–	NULL	NULL	NULL	NULL	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_WITH_NULL_MD5	0x00,0x01	NULL-MD5	RSA	RSA	NULL	MD5	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_WITH_NULL_SHA	0x00,0x02	NULL-SHA	RSA	RSA	NULL	SHA1	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_EXPORT_WITH_RC4_40_MD5	0x00,0x03	–	RSA	RSA	RC4-40	MD5	SSL 3.0, TLS 1.0	Insecure
TLS_RSA_WITH_RC4_128_MD5	0x00,0x04	RC4-MD5	RSA	RSA	RC4-128	MD5	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_WITH_RC4_128_SHA	0x00,0x05	RC4-SHA	RSA	RSA	RC4-128	SHA1	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5	0x00,0x06	–	RSA	RSA	RC2-CBC-40	MD5	SSL 3.0, TLS 1.0	Insecure
TLS_RSA_WITH_IDEA_CBC_SHA	0x00,0x07	IDEA-CBC-SHA	RSA	RSA	IDEA-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1	Insecure
TLS_RSA_EXPORT_WITH_DES40_CBC_SHA	0x00,0x08	–	RSA	RSA	DES40-CBC	SHA1	SSL 3.0, TLS 1.0	Insecure
TLS_RSA_WITH_DES_CBC_SHA	0x00,0x09	–	RSA	RSA	DES-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1	Insecure
TLS_RSA_WITH_3DES_EDE_CBC_SHA	0x00,0x0A	DES-CBC3-SHA	RSA	RSA	3DES-EDE-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA	0x00,0x0B	–	DH	DSS	DES40-CBC	SHA1	SSL 3.0, TLS 1.0	Insecure
TLS_DH_DSS_WITH_DES_CBC_SHA	0x00,0x0C	–	DH	DSS	DES-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1	Insecure
TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA	0x00,0x0D	–	DH	DSS	3DES-EDE-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA	0x00,0x0E	–	DH	RSA	DES40-CBC	SHA1	SSL 3.0, TLS 1.0	Insecure
TLS_DH_RSA_WITH_DES_CBC_SHA	0x00,0x0F	–	DH	RSA	DES-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1	Insecure
TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA	0x00,0x10	–	DH	RSA	3DES-EDE-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA	0x00,0x11	–	DHE	DSS	DES40-CBC	SHA1	SSL 3.0, TLS 1.0	Insecure
TLS_DHE_DSS_WITH_DES_CBC_SHA	0x00,0x12	–	DHE	DSS	DES-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1	Insecure
TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA	0x00,0x13	DHE-DSS-DES-CBC3-SHA	DHE	DSS	3DES-EDE-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA	0x00,0x14	–	DHE	RSA	DES40-CBC	SHA1	SSL 3.0, TLS 1.0	Insecure
TLS_DHE_RSA_WITH_DES_CBC_SHA	0x00,0x15	–	DHE	RSA	DES-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1	Insecure
TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA	0x00,0x16	DHE-RSA-DES-CBC3-SHA	DHE	RSA	3DES-EDE-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_DH_anon_EXPORT_WITH_RC4_40_MD5	0x00,0x17	–	DH	anon	RC4-40	MD5	SSL 3.0, TLS 1.0	Insecure
TLS_DH_anon_WITH_RC4_128_MD5	0x00,0x18	ADH-RC4-MD5	DH	anon	RC4-128	MD5	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA	0x00,0x19	–	DH	anon	DES40-CBC	SHA1	SSL 3.0, TLS 1.0	Insecure
TLS_DH_anon_WITH_DES_CBC_SHA	0x00,0x1A	–	DH	anon	DES-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1	Insecure
TLS_DH_anon_WITH_3DES_EDE_CBC_SHA	0x00,0x1B	ADH-DES-CBC3-SHA	DH	anon	3DES-EDE-CBC	SHA1	SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_KRB5_WITH_DES_CBC_SHA	0x00,0x1E	–	KRB5	KRB5	DES-CBC	SHA1	TLS 1.0, TLS 1.1	Insecure
TLS_KRB5_WITH_3DES_EDE_CBC_SHA	0x00,0x1F	–	KRB5	KRB5	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_KRB5_WITH_RC4_128_SHA	0x00,0x20	–	KRB5	KRB5	RC4-128	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_KRB5_WITH_IDEA_CBC_SHA	0x00,0x21	–	KRB5	KRB5	IDEA-CBC	SHA1	TLS 1.0, TLS 1.1	Insecure
TLS_KRB5_WITH_DES_CBC_MD5	0x00,0x22	–	KRB5	KRB5	DES-CBC	MD5	TLS 1.0, TLS 1.1	Insecure
TLS_KRB5_WITH_3DES_EDE_CBC_MD5	0x00,0x23	–	KRB5	KRB5	3DES-EDE-CBC	MD5	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_KRB5_WITH_RC4_128_MD5	0x00,0x24	–	KRB5	KRB5	RC4-128	MD5	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_KRB5_WITH_IDEA_CBC_MD5	0x00,0x25	–	KRB5	KRB5	IDEA-CBC	MD5	TLS 1.0, TLS 1.1	Insecure
TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA	0x00,0x26	–	KRB5	KRB5	DES-CBC-40	SHA1	SSL 3.0, TLS 1.0	Insecure
TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA	0x00,0x27	–	KRB5	KRB5	RC2-CBC-40	SHA1	SSL 3.0, TLS 1.0	Insecure
TLS_KRB5_EXPORT_WITH_RC4_40_SHA	0x00,0x28	–	KRB5	KRB5	RC4-40	SHA1	SSL 3.0, TLS 1.0	Insecure
TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5	0x00,0x29	–	KRB5	KRB5	DES-CBC-40	MD5	SSL 3.0, TLS 1.0	Insecure
TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5	0x00,0x2A	–	KRB5	KRB5	RC2-CBC-40	MD5	SSL 3.0, TLS 1.0	Insecure
TLS_KRB5_EXPORT_WITH_RC4_40_MD5	0x00,0x2B	–	KRB5	KRB5	RC4-40	MD5	SSL 3.0, TLS 1.0	Insecure
TLS_PSK_WITH_NULL_SHA	0x00,0x2C	PSK-NULL-SHA	PSK	PSK	NULL	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_DHE_PSK_WITH_NULL_SHA	0x00,0x2D	DHE-PSK-NULL-SHA	DHE	PSK	NULL	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_PSK_WITH_NULL_SHA	0x00,0x2E	RSA-PSK-NULL-SHA	RSA	PSK	NULL	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_WITH_AES_128_CBC_SHA	0x00,0x2F	AES128-SHA	RSA	RSA	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_DSS_WITH_AES_128_CBC_SHA	0x00,0x30	–	DH	DSS	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_RSA_WITH_AES_128_CBC_SHA	0x00,0x31	–	DH	RSA	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_DSS_WITH_AES_128_CBC_SHA	0x00,0x32	DHE-DSS-AES128-SHA	DHE	DSS	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_RSA_WITH_AES_128_CBC_SHA	0x00,0x33	DHE-RSA-AES128-SHA	DHE	RSA	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_anon_WITH_AES_128_CBC_SHA	0x00,0x34	ADH-AES128-SHA	DH	anon	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_WITH_AES_256_CBC_SHA	0x00,0x35	AES256-SHA	RSA	RSA	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_DSS_WITH_AES_256_CBC_SHA	0x00,0x36	–	DH	DSS	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_RSA_WITH_AES_256_CBC_SHA	0x00,0x37	–	DH	RSA	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_DSS_WITH_AES_256_CBC_SHA	0x00,0x38	DHE-DSS-AES256-SHA	DHE	DSS	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_RSA_WITH_AES_256_CBC_SHA	0x00,0x39	DHE-RSA-AES256-SHA	DHE	RSA	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_anon_WITH_AES_256_CBC_SHA	0x00,0x3A	ADH-AES256-SHA	DH	anon	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_WITH_NULL_SHA256	0x00,0x3B	NULL-SHA256	RSA	RSA	NULL	SHA256	TLS 1.2	Insecure
TLS_RSA_WITH_AES_128_CBC_SHA256	0x00,0x3C	AES128-SHA256	RSA	RSA	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_RSA_WITH_AES_256_CBC_SHA256	0x00,0x3D	AES256-SHA256	RSA	RSA	AES-256-CBC	SHA256	TLS 1.2	Weak
TLS_DH_DSS_WITH_AES_128_CBC_SHA256	0x00,0x3E	–	DH	DSS	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_DH_RSA_WITH_AES_128_CBC_SHA256	0x00,0x3F	–	DH	RSA	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_DSS_WITH_AES_128_CBC_SHA256	0x00,0x40	DHE-DSS-AES128-SHA256	DHE	DSS	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA	0x00,0x41	CAMELLIA128-SHA	RSA	RSA	Camellia-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA	0x00,0x42	–	DH	DSS	Camellia-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA	0x00,0x43	–	DH	RSA	Camellia-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA	0x00,0x44	DHE-DSS-CAMELLIA128-SHA	DHE	DSS	Camellia-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA	0x00,0x45	DHE-RSA-CAMELLIA128-SHA	DHE	RSA	Camellia-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA	0x00,0x46	ADH-CAMELLIA128-SHA	DH	anon	Camellia-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256	0x00,0x67	DHE-RSA-AES128-SHA256	DHE	RSA	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_DH_DSS_WITH_AES_256_CBC_SHA256	0x00,0x68	–	DH	DSS	AES-256-CBC	SHA256	TLS 1.2	Weak
TLS_DH_RSA_WITH_AES_256_CBC_SHA256	0x00,0x69	–	DH	RSA	AES-256-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_DSS_WITH_AES_256_CBC_SHA256	0x00,0x6A	DHE-DSS-AES256-SHA256	DHE	DSS	AES-256-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256	0x00,0x6B	DHE-RSA-AES256-SHA256	DHE	RSA	AES-256-CBC	SHA256	TLS 1.2	Weak
TLS_DH_anon_WITH_AES_128_CBC_SHA256	0x00,0x6C	ADH-AES128-SHA256	DH	anon	AES-128-CBC	SHA256	TLS 1.2	Insecure
TLS_DH_anon_WITH_AES_256_CBC_SHA256	0x00,0x6D	ADH-AES256-SHA256	DH	anon	AES-256-CBC	SHA256	TLS 1.2	Insecure
TLS_ASCONAEAD128_ASCONHASH256	0x00,0x6E	–	any	any	Ascon-AEAD128	AEAD	TLS 1.3	Secure
TLS_ASCONAEAD128_SHA256	0x00,0x6F	–	any	any	Ascon-AEAD128	AEAD	TLS 1.3	Secure
TLS_AES_128_GCM_ASCONHASH256	0x00,0x70	–	any	any	AES-128-GCM	AEAD	TLS 1.3	Secure
TLS_AES_128_CCM_ASCONHASH256	0x00,0x71	–	any	any	AES-128-CCM	AEAD	TLS 1.3	Secure
TLS_BELT_CHE256_BELT_HASH	0x00,0x72	–	any	any	belt-che256	AEAD	TLS 1.3	Secure
TLS_BASH_PRG_AE2561_BASH256	0x00,0x73	–	any	any	bash-prg-ae2561	AEAD	TLS 1.3	Secure
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA	0x00,0x84	CAMELLIA256-SHA	RSA	RSA	Camellia-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA	0x00,0x85	–	DH	DSS	Camellia-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA	0x00,0x86	–	DH	RSA	Camellia-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA	0x00,0x87	DHE-DSS-CAMELLIA256-SHA	DHE	DSS	Camellia-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA	0x00,0x88	DHE-RSA-CAMELLIA256-SHA	DHE	RSA	Camellia-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA	0x00,0x89	ADH-CAMELLIA256-SHA	DH	anon	Camellia-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_PSK_WITH_RC4_128_SHA	0x00,0x8A	–	PSK	PSK	RC4-128	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_PSK_WITH_3DES_EDE_CBC_SHA	0x00,0x8B	–	PSK	PSK	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_PSK_WITH_AES_128_CBC_SHA	0x00,0x8C	PSK-AES128-CBC-SHA	PSK	PSK	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_PSK_WITH_AES_256_CBC_SHA	0x00,0x8D	PSK-AES256-CBC-SHA	PSK	PSK	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_PSK_WITH_RC4_128_SHA	0x00,0x8E	–	DHE	PSK	RC4-128	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA	0x00,0x8F	–	DHE	PSK	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_DHE_PSK_WITH_AES_128_CBC_SHA	0x00,0x90	DHE-PSK-AES128-CBC-SHA	DHE	PSK	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_PSK_WITH_AES_256_CBC_SHA	0x00,0x91	DHE-PSK-AES256-CBC-SHA	DHE	PSK	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_RSA_PSK_WITH_RC4_128_SHA	0x00,0x92	–	RSA	PSK	RC4-128	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA	0x00,0x93	–	RSA	PSK	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_PSK_WITH_AES_128_CBC_SHA	0x00,0x94	RSA-PSK-AES128-CBC-SHA	RSA	PSK	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_RSA_PSK_WITH_AES_256_CBC_SHA	0x00,0x95	RSA-PSK-AES256-CBC-SHA	RSA	PSK	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_RSA_WITH_SEED_CBC_SHA	0x00,0x96	SEED-SHA	RSA	RSA	SEED-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_DSS_WITH_SEED_CBC_SHA	0x00,0x97	–	DH	DSS	SEED-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_RSA_WITH_SEED_CBC_SHA	0x00,0x98	–	DH	RSA	SEED-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_DSS_WITH_SEED_CBC_SHA	0x00,0x99	DHE-DSS-SEED-SHA	DHE	DSS	SEED-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DHE_RSA_WITH_SEED_CBC_SHA	0x00,0x9A	DHE-RSA-SEED-SHA	DHE	RSA	SEED-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_DH_anon_WITH_SEED_CBC_SHA	0x00,0x9B	–	DH	anon	SEED-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_RSA_WITH_AES_128_GCM_SHA256	0x00,0x9C	AES128-GCM-SHA256	RSA	RSA	AES-128-GCM	AEAD	TLS 1.2	Weak
TLS_RSA_WITH_AES_256_GCM_SHA384	0x00,0x9D	AES256-GCM-SHA384	RSA	RSA	AES-256-GCM	AEAD	TLS 1.2	Weak
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256	0x00,0x9E	DHE-RSA-AES128-GCM-SHA256	DHE	RSA	AES-128-GCM	AEAD	TLS 1.2	Secure
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384	0x00,0x9F	DHE-RSA-AES256-GCM-SHA384	DHE	RSA	AES-256-GCM	AEAD	TLS 1.2	Secure
TLS_DH_RSA_WITH_AES_128_GCM_SHA256	0x00,0xA0	–	DH	RSA	AES-128-GCM	AEAD	TLS 1.2	Weak
TLS_DH_RSA_WITH_AES_256_GCM_SHA384	0x00,0xA1	–	DH	RSA	AES-256-GCM	AEAD	TLS 1.2	Weak
TLS_DHE_DSS_WITH_AES_128_GCM_SHA256	0x00,0xA2	DHE-DSS-AES128-GCM-SHA256	DHE	DSS	AES-128-GCM	AEAD	TLS 1.2	Secure
TLS_DHE_DSS_WITH_AES_256_GCM_SHA384	0x00,0xA3	DHE-DSS-AES256-GCM-SHA384	DHE	DSS	AES-256-GCM	AEAD	TLS 1.2	Secure
TLS_DH_DSS_WITH_AES_128_GCM_SHA256	0x00,0xA4	–	DH	DSS	AES-128-GCM	AEAD	TLS 1.2	Weak
TLS_DH_DSS_WITH_AES_256_GCM_SHA384	0x00,0xA5	–	DH	DSS	AES-256-GCM	AEAD	TLS 1.2	Weak
TLS_DH_anon_WITH_AES_128_GCM_SHA256	0x00,0xA6	ADH-AES128-GCM-SHA256	DH	anon	AES-128-GCM	AEAD	TLS 1.2	Insecure
TLS_DH_anon_WITH_AES_256_GCM_SHA384	0x00,0xA7	ADH-AES256-GCM-SHA384	DH	anon	AES-256-GCM	AEAD	TLS 1.2	Insecure
TLS_PSK_WITH_AES_128_GCM_SHA256	0x00,0xA8	PSK-AES128-GCM-SHA256	PSK	PSK	AES-128-GCM	AEAD	TLS 1.2	Weak
TLS_PSK_WITH_AES_256_GCM_SHA384	0x00,0xA9	PSK-AES256-GCM-SHA384	PSK	PSK	AES-256-GCM	AEAD	TLS 1.2	Weak
TLS_DHE_PSK_WITH_AES_128_GCM_SHA256	0x00,0xAA	DHE-PSK-AES128-GCM-SHA256	DHE	PSK	AES-128-GCM	AEAD	TLS 1.2	Secure
TLS_DHE_PSK_WITH_AES_256_GCM_SHA384	0x00,0xAB	DHE-PSK-AES256-GCM-SHA384	DHE	PSK	AES-256-GCM	AEAD	TLS 1.2	Secure
TLS_RSA_PSK_WITH_AES_128_GCM_SHA256	0x00,0xAC	RSA-PSK-AES128-GCM-SHA256	RSA	PSK	AES-128-GCM	AEAD	TLS 1.2	Weak
TLS_RSA_PSK_WITH_AES_256_GCM_SHA384	0x00,0xAD	RSA-PSK-AES256-GCM-SHA384	RSA	PSK	AES-256-GCM	AEAD	TLS 1.2	Weak
TLS_PSK_WITH_AES_128_CBC_SHA256	0x00,0xAE	PSK-AES128-CBC-SHA256	PSK	PSK	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_PSK_WITH_AES_256_CBC_SHA384	0x00,0xAF	PSK-AES256-CBC-SHA384	PSK	PSK	AES-256-CBC	SHA384	TLS 1.2	Weak
TLS_PSK_WITH_NULL_SHA256	0x00,0xB0	PSK-NULL-SHA256	PSK	PSK	NULL	SHA256	TLS 1.2	Insecure
TLS_PSK_WITH_NULL_SHA384	0x00,0xB1	PSK-NULL-SHA384	PSK	PSK	NULL	SHA384	TLS 1.2	Insecure
TLS_DHE_PSK_WITH_AES_128_CBC_SHA256	0x00,0xB2	DHE-PSK-AES128-CBC-SHA256	DHE	PSK	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_PSK_WITH_AES_256_CBC_SHA384	0x00,0xB3	DHE-PSK-AES256-CBC-SHA384	DHE	PSK	AES-256-CBC	SHA384	TLS 1.2	Weak
TLS_DHE_PSK_WITH_NULL_SHA256	0x00,0xB4	DHE-PSK-NULL-SHA256	DHE	PSK	NULL	SHA256	TLS 1.2	Insecure
TLS_DHE_PSK_WITH_NULL_SHA384	0x00,0xB5	DHE-PSK-NULL-SHA384	DHE	PSK	NULL	SHA384	TLS 1.2	Insecure
TLS_RSA_PSK_WITH_AES_128_CBC_SHA256	0x00,0xB6	RSA-PSK-AES128-CBC-SHA256	RSA	PSK	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_RSA_PSK_WITH_AES_256_CBC_SHA384	0x00,0xB7	RSA-PSK-AES256-CBC-SHA384	RSA	PSK	AES-256-CBC	SHA384	TLS 1.2	Weak
TLS_RSA_PSK_WITH_NULL_SHA256	0x00,0xB8	RSA-PSK-NULL-SHA256	RSA	PSK	NULL	SHA256	TLS 1.2	Insecure
TLS_RSA_PSK_WITH_NULL_SHA384	0x00,0xB9	RSA-PSK-NULL-SHA384	RSA	PSK	NULL	SHA384	TLS 1.2	Insecure
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256	0x00,0xBA	CAMELLIA128-SHA256	RSA	RSA	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256	0x00,0xBB	–	DH	DSS	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256	0x00,0xBC	–	DH	RSA	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256	0x00,0xBD	DHE-DSS-CAMELLIA128-SHA256	DHE	DSS	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256	0x00,0xBE	DHE-RSA-CAMELLIA128-SHA256	DHE	RSA	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256	0x00,0xBF	ADH-CAMELLIA128-SHA256	DH	anon	Camellia-128-CBC	SHA256	TLS 1.2	Insecure
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256	0x00,0xC0	CAMELLIA256-SHA256	RSA	RSA	Camellia-256-CBC	SHA256	TLS 1.2	Weak
TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256	0x00,0xC1	–	DH	DSS	Camellia-256-CBC	SHA256	TLS 1.2	Weak
TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256	0x00,0xC2	–	DH	RSA	Camellia-256-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256	0x00,0xC3	DHE-DSS-CAMELLIA256-SHA256	DHE	DSS	Camellia-256-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256	0x00,0xC4	DHE-RSA-CAMELLIA256-SHA256	DHE	RSA	Camellia-256-CBC	SHA256	TLS 1.2	Weak
TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256	0x00,0xC5	ADH-CAMELLIA256-SHA256	DH	anon	Camellia-256-CBC	SHA256	TLS 1.2	Insecure
TLS_SM4_GCM_SM3	0x00,0xC6	–	any	any	SM4-GCM	AEAD	TLS 1.3	Secure
TLS_SM4_CCM_SM3	0x00,0xC7	–	any	any	SM4-CCM	AEAD	TLS 1.3	Secure
TLS_EMPTY_RENEGOTIATION_INFO_SCSV	0x00,0xFF	–	-	-	-	-	–	Signal only
TLS_AES_128_GCM_SHA256	0x13,0x01	TLS_AES_128_GCM_SHA256	any	any	AES-128-GCM	AEAD	TLS 1.3	Recommended
TLS_AES_256_GCM_SHA384	0x13,0x02	TLS_AES_256_GCM_SHA384	any	any	AES-256-GCM	AEAD	TLS 1.3	Recommended
TLS_CHACHA20_POLY1305_SHA256	0x13,0x03	TLS_CHACHA20_POLY1305_SHA256	any	any	ChaCha20-Poly1305	AEAD	TLS 1.3	Recommended
TLS_AES_128_CCM_SHA256	0x13,0x04	TLS_AES_128_CCM_SHA256	any	any	AES-128-CCM	AEAD	TLS 1.3	Recommended
TLS_AES_128_CCM_8_SHA256	0x13,0x05	TLS_AES_128_CCM_8_SHA256	any	any	AES-128-CCM-8	AEAD	TLS 1.3	Secure
TLS_AEGIS_256_SHA512	0x13,0x06	–	any	any	AEGIS-256	AEAD	TLS 1.3	Secure
TLS_AEGIS_128L_SHA256	0x13,0x07	–	any	any	AEGIS-128L	AEAD	TLS 1.3	Secure
TLS_FALLBACK_SCSV	0x56,0x00	–	-	-	-	-	–	Signal only
TLS_ECDH_ECDSA_WITH_NULL_SHA	0xC0,0x01	–	ECDH	ECDSA	NULL	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDH_ECDSA_WITH_RC4_128_SHA	0xC0,0x02	ECDH-ECDSA-RC4-SHA	ECDH	ECDSA	RC4-128	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA	0xC0,0x03	ECDH-ECDSA-DES-CBC3-SHA	ECDH	ECDSA	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA	0xC0,0x04	ECDH-ECDSA-AES128-SHA	ECDH	ECDSA	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA	0xC0,0x05	ECDH-ECDSA-AES256-SHA	ECDH	ECDSA	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_ECDHE_ECDSA_WITH_NULL_SHA	0xC0,0x06	ECDHE-ECDSA-NULL-SHA	ECDHE	ECDSA	NULL	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDHE_ECDSA_WITH_RC4_128_SHA	0xC0,0x07	ECDHE-ECDSA-RC4-SHA	ECDHE	ECDSA	RC4-128	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA	0xC0,0x08	ECDHE-ECDSA-DES-CBC3-SHA	ECDHE	ECDSA	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA	0xC0,0x09	ECDHE-ECDSA-AES128-SHA	ECDHE	ECDSA	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA	0xC0,0x0A	ECDHE-ECDSA-AES256-SHA	ECDHE	ECDSA	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_ECDH_RSA_WITH_NULL_SHA	0xC0,0x0B	–	ECDH	RSA	NULL	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDH_RSA_WITH_RC4_128_SHA	0xC0,0x0C	ECDH-RSA-RC4-SHA	ECDH	RSA	RC4-128	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA	0xC0,0x0D	ECDH-RSA-DES-CBC3-SHA	ECDH	RSA	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA	0xC0,0x0E	ECDH-RSA-AES128-SHA	ECDH	RSA	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA	0xC0,0x0F	ECDH-RSA-AES256-SHA	ECDH	RSA	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_ECDHE_RSA_WITH_NULL_SHA	0xC0,0x10	ECDHE-RSA-NULL-SHA	ECDHE	RSA	NULL	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDHE_RSA_WITH_RC4_128_SHA	0xC0,0x11	ECDHE-RSA-RC4-SHA	ECDHE	RSA	RC4-128	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA	0xC0,0x12	ECDHE-RSA-DES-CBC3-SHA	ECDHE	RSA	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA	0xC0,0x13	ECDHE-RSA-AES128-SHA	ECDHE	RSA	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	0xC0,0x14	ECDHE-RSA-AES256-SHA	ECDHE	RSA	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_ECDH_anon_WITH_NULL_SHA	0xC0,0x15	AECDH-NULL-SHA	ECDH	anon	NULL	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDH_anon_WITH_RC4_128_SHA	0xC0,0x16	AECDH-RC4-SHA	ECDH	anon	RC4-128	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA	0xC0,0x17	–	ECDH	anon	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDH_anon_WITH_AES_128_CBC_SHA	0xC0,0x18	AECDH-AES128-SHA	ECDH	anon	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDH_anon_WITH_AES_256_CBC_SHA	0xC0,0x19	AECDH-AES256-SHA	ECDH	anon	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA	0xC0,0x1A	–	SRP	SRP	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA	0xC0,0x1B	–	SRP	RSA	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA	0xC0,0x1C	–	SRP	DSS	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_SRP_SHA_WITH_AES_128_CBC_SHA	0xC0,0x1D	SRP-AES-128-CBC-SHA	SRP	SRP	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA	0xC0,0x1E	SRP-RSA-AES-128-CBC-SHA	SRP	RSA	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA	0xC0,0x1F	SRP-DSS-AES-128-CBC-SHA	SRP	DSS	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_SRP_SHA_WITH_AES_256_CBC_SHA	0xC0,0x20	SRP-AES-256-CBC-SHA	SRP	SRP	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA	0xC0,0x21	SRP-RSA-AES-256-CBC-SHA	SRP	RSA	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA	0xC0,0x22	SRP-DSS-AES-256-CBC-SHA	SRP	DSS	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256	0xC0,0x23	ECDHE-ECDSA-AES128-SHA256	ECDHE	ECDSA	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384	0xC0,0x24	ECDHE-ECDSA-AES256-SHA384	ECDHE	ECDSA	AES-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256	0xC0,0x25	ECDH-ECDSA-AES128-SHA256	ECDH	ECDSA	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384	0xC0,0x26	ECDH-ECDSA-AES256-SHA384	ECDH	ECDSA	AES-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	0xC0,0x27	ECDHE-RSA-AES128-SHA256	ECDHE	RSA	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384	0xC0,0x28	ECDHE-RSA-AES256-SHA384	ECDHE	RSA	AES-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256	0xC0,0x29	ECDH-RSA-AES128-SHA256	ECDH	RSA	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384	0xC0,0x2A	ECDH-RSA-AES256-SHA384	ECDH	RSA	AES-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	0xC0,0x2B	ECDHE-ECDSA-AES128-GCM-SHA256	ECDHE	ECDSA	AES-128-GCM	AEAD	TLS 1.2	Secure
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384	0xC0,0x2C	ECDHE-ECDSA-AES256-GCM-SHA384	ECDHE	ECDSA	AES-256-GCM	AEAD	TLS 1.2	Secure
TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256	0xC0,0x2D	ECDH-ECDSA-AES128-GCM-SHA256	ECDH	ECDSA	AES-128-GCM	AEAD	TLS 1.2	Weak
TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384	0xC0,0x2E	ECDH-ECDSA-AES256-GCM-SHA384	ECDH	ECDSA	AES-256-GCM	AEAD	TLS 1.2	Weak
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	0xC0,0x2F	ECDHE-RSA-AES128-GCM-SHA256	ECDHE	RSA	AES-128-GCM	AEAD	TLS 1.2	Secure
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384	0xC0,0x30	ECDHE-RSA-AES256-GCM-SHA384	ECDHE	RSA	AES-256-GCM	AEAD	TLS 1.2	Secure
TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256	0xC0,0x31	ECDH-RSA-AES128-GCM-SHA256	ECDH	RSA	AES-128-GCM	AEAD	TLS 1.2	Weak
TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384	0xC0,0x32	ECDH-RSA-AES256-GCM-SHA384	ECDH	RSA	AES-256-GCM	AEAD	TLS 1.2	Weak
TLS_ECDHE_PSK_WITH_RC4_128_SHA	0xC0,0x33	ECDHE-PSK-RC4-SHA	ECDHE	PSK	RC4-128	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA	0xC0,0x34	ECDHE-PSK-DES-CBC3-SHA	ECDHE	PSK	3DES-EDE-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA	0xC0,0x35	ECDHE-PSK-AES128-CBC-SHA	ECDHE	PSK	AES-128-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA	0xC0,0x36	ECDHE-PSK-AES256-CBC-SHA	ECDHE	PSK	AES-256-CBC	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Weak
TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256	0xC0,0x37	ECDHE-PSK-AES128-CBC-SHA256	ECDHE	PSK	AES-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384	0xC0,0x38	ECDHE-PSK-AES256-CBC-SHA384	ECDHE	PSK	AES-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDHE_PSK_WITH_NULL_SHA	0xC0,0x39	ECDHE-PSK-NULL-SHA	ECDHE	PSK	NULL	SHA1	TLS 1.0, TLS 1.1, TLS 1.2	Insecure
TLS_ECDHE_PSK_WITH_NULL_SHA256	0xC0,0x3A	ECDHE-PSK-NULL-SHA256	ECDHE	PSK	NULL	SHA256	TLS 1.2	Insecure
TLS_ECDHE_PSK_WITH_NULL_SHA384	0xC0,0x3B	ECDHE-PSK-NULL-SHA384	ECDHE	PSK	NULL	SHA384	TLS 1.2	Insecure
TLS_RSA_WITH_ARIA_128_CBC_SHA256	0xC0,0x3C	ARIA128-CBC-SHA256	RSA	RSA	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_RSA_WITH_ARIA_256_CBC_SHA384	0xC0,0x3D	ARIA256-CBC-SHA384	RSA	RSA	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256	0xC0,0x3E	–	DH	DSS	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384	0xC0,0x3F	–	DH	DSS	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256	0xC0,0x40	–	DH	RSA	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384	0xC0,0x41	–	DH	RSA	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256	0xC0,0x42	–	DHE	DSS	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384	0xC0,0x43	–	DHE	DSS	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256	0xC0,0x44	DHE-RSA-ARIA128-CBC-SHA256	DHE	RSA	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384	0xC0,0x45	DHE-RSA-ARIA256-CBC-SHA384	DHE	RSA	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_DH_anon_WITH_ARIA_128_CBC_SHA256	0xC0,0x46	–	DH	anon	ARIA-128-CBC	SHA256	TLS 1.2	Insecure
TLS_DH_anon_WITH_ARIA_256_CBC_SHA384	0xC0,0x47	ADH-ARIA256-CBC-SHA384	DH	anon	ARIA-256-CBC	SHA384	TLS 1.2	Insecure
TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256	0xC0,0x48	ECDHE-ECDSA-ARIA128-CBC-SHA256	ECDHE	ECDSA	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384	0xC0,0x49	ECDHE-ECDSA-ARIA256-CBC-SHA384	ECDHE	ECDSA	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256	0xC0,0x4A	–	ECDH	ECDSA	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384	0xC0,0x4B	–	ECDH	ECDSA	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256	0xC0,0x4C	ECDHE-RSA-ARIA128-CBC-SHA256	ECDHE	RSA	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384	0xC0,0x4D	ECDHE-RSA-ARIA256-CBC-SHA384	ECDHE	RSA	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256	0xC0,0x4E	–	ECDH	RSA	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384	0xC0,0x4F	–	ECDH	RSA	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_RSA_WITH_ARIA_128_GCM_SHA256	0xC0,0x50	ARIA128-GCM-SHA256	RSA	RSA	ARIA-128-GCM	AEAD	TLS 1.2	Weak
TLS_RSA_WITH_ARIA_256_GCM_SHA384	0xC0,0x51	ARIA256-GCM-SHA384	RSA	RSA	ARIA-256-GCM	AEAD	TLS 1.2	Weak
TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256	0xC0,0x52	DHE-RSA-ARIA128-GCM-SHA256	DHE	RSA	ARIA-128-GCM	AEAD	TLS 1.2	Secure
TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384	0xC0,0x53	DHE-RSA-ARIA256-GCM-SHA384	DHE	RSA	ARIA-256-GCM	AEAD	TLS 1.2	Secure
TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256	0xC0,0x54	–	DH	RSA	ARIA-128-GCM	AEAD	TLS 1.2	Weak
TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384	0xC0,0x55	–	DH	RSA	ARIA-256-GCM	AEAD	TLS 1.2	Weak
TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256	0xC0,0x56	DHE-DSS-ARIA128-GCM-SHA256	DHE	DSS	ARIA-128-GCM	AEAD	TLS 1.2	Secure
TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384	0xC0,0x57	DHE-DSS-ARIA256-GCM-SHA384	DHE	DSS	ARIA-256-GCM	AEAD	TLS 1.2	Secure
TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256	0xC0,0x58	–	DH	DSS	ARIA-128-GCM	AEAD	TLS 1.2	Weak
TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384	0xC0,0x59	–	DH	DSS	ARIA-256-GCM	AEAD	TLS 1.2	Weak
TLS_DH_anon_WITH_ARIA_128_GCM_SHA256	0xC0,0x5A	ADH-ARIA128-GCM-SHA256	DH	anon	ARIA-128-GCM	AEAD	TLS 1.2	Insecure
TLS_DH_anon_WITH_ARIA_256_GCM_SHA384	0xC0,0x5B	ADH-ARIA256-GCM-SHA384	DH	anon	ARIA-256-GCM	AEAD	TLS 1.2	Insecure
TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256	0xC0,0x5C	ECDHE-ECDSA-ARIA128-GCM-SHA256	ECDHE	ECDSA	ARIA-128-GCM	AEAD	TLS 1.2	Secure
TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384	0xC0,0x5D	ECDHE-ECDSA-ARIA256-GCM-SHA384	ECDHE	ECDSA	ARIA-256-GCM	AEAD	TLS 1.2	Secure
TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256	0xC0,0x5E	–	ECDH	ECDSA	ARIA-128-GCM	AEAD	TLS 1.2	Weak
TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384	0xC0,0x5F	–	ECDH	ECDSA	ARIA-256-GCM	AEAD	TLS 1.2	Weak
TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256	0xC0,0x60	ECDHE-ARIA128-GCM-SHA256	ECDHE	RSA	ARIA-128-GCM	AEAD	TLS 1.2	Secure
TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384	0xC0,0x61	ECDHE-ARIA256-GCM-SHA384	ECDHE	RSA	ARIA-256-GCM	AEAD	TLS 1.2	Secure
TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256	0xC0,0x62	–	ECDH	RSA	ARIA-128-GCM	AEAD	TLS 1.2	Weak
TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384	0xC0,0x63	–	ECDH	RSA	ARIA-256-GCM	AEAD	TLS 1.2	Weak
TLS_PSK_WITH_ARIA_128_CBC_SHA256	0xC0,0x64	PSK-ARIA128-CBC-SHA256	PSK	PSK	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_PSK_WITH_ARIA_256_CBC_SHA384	0xC0,0x65	–	PSK	PSK	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256	0xC0,0x66	DHE-PSK-ARIA128-CBC-SHA256	DHE	PSK	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384	0xC0,0x67	DHE-PSK-ARIA256-CBC-SHA384	DHE	PSK	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256	0xC0,0x68	RSA-PSK-ARIA128-CBC-SHA256	RSA	PSK	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384	0xC0,0x69	RSA-PSK-ARIA256-CBC-SHA384	RSA	PSK	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_PSK_WITH_ARIA_128_GCM_SHA256	0xC0,0x6A	PSK-ARIA128-GCM-SHA256	PSK	PSK	ARIA-128-GCM	AEAD	TLS 1.2	Weak
TLS_PSK_WITH_ARIA_256_GCM_SHA384	0xC0,0x6B	PSK-ARIA256-GCM-SHA384	PSK	PSK	ARIA-256-GCM	AEAD	TLS 1.2	Weak
TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256	0xC0,0x6C	DHE-PSK-ARIA128-GCM-SHA256	DHE	PSK	ARIA-128-GCM	AEAD	TLS 1.2	Secure
TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384	0xC0,0x6D	DHE-PSK-ARIA256-GCM-SHA384	DHE	PSK	ARIA-256-GCM	AEAD	TLS 1.2	Secure
TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256	0xC0,0x6E	RSA-PSK-ARIA128-GCM-SHA256	RSA	PSK	ARIA-128-GCM	AEAD	TLS 1.2	Weak
TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384	0xC0,0x6F	RSA-PSK-ARIA256-GCM-SHA384	RSA	PSK	ARIA-256-GCM	AEAD	TLS 1.2	Weak
TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256	0xC0,0x70	ECDHE-PSK-ARIA128-CBC-SHA256	ECDHE	PSK	ARIA-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384	0xC0,0x71	ECDHE-PSK-ARIA256-CBC-SHA384	ECDHE	PSK	ARIA-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256	0xC0,0x72	ECDHE-ECDSA-CAMELLIA128-SHA256	ECDHE	ECDSA	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384	0xC0,0x73	ECDHE-ECDSA-CAMELLIA256-SHA384	ECDHE	ECDSA	Camellia-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256	0xC0,0x74	ECDH-ECDSA-CAMELLIA128-SHA256	ECDH	ECDSA	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384	0xC0,0x75	ECDH-ECDSA-CAMELLIA256-SHA384	ECDH	ECDSA	Camellia-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256	0xC0,0x76	ECDHE-RSA-CAMELLIA128-SHA256	ECDHE	RSA	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384	0xC0,0x77	ECDHE-RSA-CAMELLIA256-SHA384	ECDHE	RSA	Camellia-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256	0xC0,0x78	ECDH-RSA-CAMELLIA128-SHA256	ECDH	RSA	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384	0xC0,0x79	ECDH-RSA-CAMELLIA256-SHA384	ECDH	RSA	Camellia-256-CBC	SHA384	TLS 1.2	Weak
TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x7A	CAMELLIA128-GCM-SHA256	RSA	RSA	Camellia-128-GCM	AEAD	TLS 1.2	Weak
TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x7B	CAMELLIA256-GCM-SHA384	RSA	RSA	Camellia-256-GCM	AEAD	TLS 1.2	Weak
TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x7C	DHE-RSA-CAMELLIA128-GCM-SHA256	DHE	RSA	Camellia-128-GCM	AEAD	TLS 1.2	Secure
TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x7D	DHE-RSA-CAMELLIA256-GCM-SHA384	DHE	RSA	Camellia-256-GCM	AEAD	TLS 1.2	Secure
TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x7E	–	DH	RSA	Camellia-128-GCM	AEAD	TLS 1.2	Weak
TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x7F	–	DH	RSA	Camellia-256-GCM	AEAD	TLS 1.2	Weak
TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x80	DHE-DSS-CAMELLIA128-GCM-SHA256	DHE	DSS	Camellia-128-GCM	AEAD	TLS 1.2	Secure
TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x81	DHE-DSS-CAMELLIA256-GCM-SHA384	DHE	DSS	Camellia-256-GCM	AEAD	TLS 1.2	Secure
TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x82	–	DH	DSS	Camellia-128-GCM	AEAD	TLS 1.2	Weak
TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x83	–	DH	DSS	Camellia-256-GCM	AEAD	TLS 1.2	Weak
TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x84	ADH-CAMELLIA128-GCM-SHA256	DH	anon	Camellia-128-GCM	AEAD	TLS 1.2	Insecure
TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x85	ADH-CAMELLIA256-GCM-SHA384	DH	anon	Camellia-256-GCM	AEAD	TLS 1.2	Insecure
TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x86	–	ECDHE	ECDSA	Camellia-128-GCM	AEAD	TLS 1.2	Secure
TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x87	–	ECDHE	ECDSA	Camellia-256-GCM	AEAD	TLS 1.2	Secure
TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x88	–	ECDH	ECDSA	Camellia-128-GCM	AEAD	TLS 1.2	Weak
TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x89	–	ECDH	ECDSA	Camellia-256-GCM	AEAD	TLS 1.2	Weak
TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x8A	–	ECDHE	RSA	Camellia-128-GCM	AEAD	TLS 1.2	Secure
TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x8B	–	ECDHE	RSA	Camellia-256-GCM	AEAD	TLS 1.2	Secure
TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x8C	–	ECDH	RSA	Camellia-128-GCM	AEAD	TLS 1.2	Weak
TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x8D	–	ECDH	RSA	Camellia-256-GCM	AEAD	TLS 1.2	Weak
TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x8E	–	PSK	PSK	Camellia-128-GCM	AEAD	TLS 1.2	Weak
TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x8F	–	PSK	PSK	Camellia-256-GCM	AEAD	TLS 1.2	Weak
TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x90	–	DHE	PSK	Camellia-128-GCM	AEAD	TLS 1.2	Secure
TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x91	–	DHE	PSK	Camellia-256-GCM	AEAD	TLS 1.2	Secure
TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256	0xC0,0x92	–	RSA	PSK	Camellia-128-GCM	AEAD	TLS 1.2	Weak
TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384	0xC0,0x93	–	RSA	PSK	Camellia-256-GCM	AEAD	TLS 1.2	Weak
TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256	0xC0,0x94	PSK-CAMELLIA128-SHA256	PSK	PSK	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384	0xC0,0x95	PSK-CAMELLIA256-SHA384	PSK	PSK	Camellia-256-CBC	SHA384	TLS 1.2	Weak
TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256	0xC0,0x96	DHE-PSK-CAMELLIA128-SHA256	DHE	PSK	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384	0xC0,0x97	DHE-PSK-CAMELLIA256-SHA384	DHE	PSK	Camellia-256-CBC	SHA384	TLS 1.2	Weak
TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256	0xC0,0x98	RSA-PSK-CAMELLIA128-SHA256	RSA	PSK	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384	0xC0,0x99	RSA-PSK-CAMELLIA256-SHA384	RSA	PSK	Camellia-256-CBC	SHA384	TLS 1.2	Weak
TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256	0xC0,0x9A	ECDHE-PSK-CAMELLIA128-SHA256	ECDHE	PSK	Camellia-128-CBC	SHA256	TLS 1.2	Weak
TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384	0xC0,0x9B	ECDHE-PSK-CAMELLIA256-SHA384	ECDHE	PSK	Camellia-256-CBC	SHA384	TLS 1.2	Weak
TLS_RSA_WITH_AES_128_CCM	0xC0,0x9C	AES128-CCM	RSA	RSA	AES-128-CCM	AEAD	TLS 1.2	Weak
TLS_RSA_WITH_AES_256_CCM	0xC0,0x9D	AES256-CCM	RSA	RSA	AES-256-CCM	AEAD	TLS 1.2	Weak
TLS_DHE_RSA_WITH_AES_128_CCM	0xC0,0x9E	DHE-RSA-AES128-CCM	DHE	RSA	AES-128-CCM	AEAD	TLS 1.2	Secure
TLS_DHE_RSA_WITH_AES_256_CCM	0xC0,0x9F	DHE-RSA-AES256-CCM	DHE	RSA	AES-256-CCM	AEAD	TLS 1.2	Secure
TLS_RSA_WITH_AES_128_CCM_8	0xC0,0xA0	AES128-CCM8	RSA	RSA	AES-128-CCM-8	AEAD	TLS 1.2	Weak
TLS_RSA_WITH_AES_256_CCM_8	0xC0,0xA1	AES256-CCM8	RSA	RSA	AES-256-CCM-8	AEAD	TLS 1.2	Weak
TLS_DHE_RSA_WITH_AES_128_CCM_8	0xC0,0xA2	DHE-RSA-AES128-CCM8	DHE	RSA	AES-128-CCM-8	AEAD	TLS 1.2	Secure
TLS_DHE_RSA_WITH_AES_256_CCM_8	0xC0,0xA3	DHE-RSA-AES256-CCM8	DHE	RSA	AES-256-CCM-8	AEAD	TLS 1.2	Secure
TLS_PSK_WITH_AES_128_CCM	0xC0,0xA4	PSK-AES128-CCM	PSK	PSK	AES-128-CCM	AEAD	TLS 1.2	Weak
TLS_PSK_WITH_AES_256_CCM	0xC0,0xA5	PSK-AES256-CCM	PSK	PSK	AES-256-CCM	AEAD	TLS 1.2	Weak
TLS_DHE_PSK_WITH_AES_128_CCM	0xC0,0xA6	DHE-PSK-AES128-CCM	DHE	PSK	AES-128-CCM	AEAD	TLS 1.2	Secure
TLS_DHE_PSK_WITH_AES_256_CCM	0xC0,0xA7	DHE-PSK-AES256-CCM	DHE	PSK	AES-256-CCM	AEAD	TLS 1.2	Secure
TLS_PSK_WITH_AES_128_CCM_8	0xC0,0xA8	PSK-AES128-CCM8	PSK	PSK	AES-128-CCM-8	AEAD	TLS 1.2	Weak
TLS_PSK_WITH_AES_256_CCM_8	0xC0,0xA9	PSK-AES256-CCM8	PSK	PSK	AES-256-CCM-8	AEAD	TLS 1.2	Weak
TLS_PSK_DHE_WITH_AES_128_CCM_8	0xC0,0xAA	DHE-PSK-AES128-CCM8	DHE	PSK	AES-128-CCM-8	AEAD	TLS 1.2	Secure
TLS_PSK_DHE_WITH_AES_256_CCM_8	0xC0,0xAB	DHE-PSK-AES256-CCM8	DHE	PSK	AES-256-CCM-8	AEAD	TLS 1.2	Secure
TLS_ECDHE_ECDSA_WITH_AES_128_CCM	0xC0,0xAC	ECDHE-ECDSA-AES128-CCM	ECDHE	ECDSA	AES-128-CCM	AEAD	TLS 1.2	Secure
TLS_ECDHE_ECDSA_WITH_AES_256_CCM	0xC0,0xAD	ECDHE-ECDSA-AES256-CCM	ECDHE	ECDSA	AES-256-CCM	AEAD	TLS 1.2	Secure
TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8	0xC0,0xAE	ECDHE-ECDSA-AES128-CCM8	ECDHE	ECDSA	AES-128-CCM-8	AEAD	TLS 1.2	Secure
TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8	0xC0,0xAF	ECDHE-ECDSA-AES256-CCM8	ECDHE	ECDSA	AES-256-CCM-8	AEAD	TLS 1.2	Secure
TLS_ECCPWD_WITH_AES_128_GCM_SHA256	0xC0,0xB0	–	ECCPWD	ECCPWD	AES-128-GCM	AEAD	TLS 1.2, TLS 1.3	Secure
TLS_ECCPWD_WITH_AES_256_GCM_SHA384	0xC0,0xB1	–	ECCPWD	ECCPWD	AES-256-GCM	AEAD	TLS 1.2, TLS 1.3	Secure
TLS_ECCPWD_WITH_AES_128_CCM_SHA256	0xC0,0xB2	–	ECCPWD	ECCPWD	AES-128-CCM	AEAD	TLS 1.2, TLS 1.3	Secure
TLS_ECCPWD_WITH_AES_256_CCM_SHA384	0xC0,0xB3	–	ECCPWD	ECCPWD	AES-256-CCM	AEAD	TLS 1.2, TLS 1.3	Secure
TLS_SHA256_SHA256	0xC0,0xB4	–	any	any	NULL	HMAC-SHA256	TLS 1.3	Insecure
TLS_SHA384_SHA384	0xC0,0xB5	TLS_SHA384_SHA384	any	any	NULL	HMAC-SHA384	TLS 1.3	Insecure
TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC	0xC1,0x00	–	GOST	GOST	Kuznyechik-CTR	OMAC	TLS 1.2	Weak
TLS_GOSTR341112_256_WITH_MAGMA_CTR_OMAC	0xC1,0x01	–	GOST	GOST	Magma-CTR	OMAC	TLS 1.2	Weak
TLS_GOSTR341112_256_WITH_28147_CNT_IMIT	0xC1,0x02	–	GOST	GOST	GOST28147-CNT	IMIT	TLS 1.2	Weak
TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_L	0xC1,0x03	–	any	any	Kuznyechik-MGM-L	AEAD	TLS 1.3	Secure
TLS_GOSTR341112_256_WITH_MAGMA_MGM_L	0xC1,0x04	–	any	any	Magma-MGM-L	AEAD	TLS 1.3	Secure
TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_S	0xC1,0x05	–	any	any	Kuznyechik-MGM-S	AEAD	TLS 1.3	Secure
TLS_GOSTR341112_256_WITH_MAGMA_MGM_S	0xC1,0x06	–	any	any	Magma-MGM-S	AEAD	TLS 1.3	Secure
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256	0xCC,0xA8	ECDHE-RSA-CHACHA20-POLY1305	ECDHE	RSA	ChaCha20-Poly1305	AEAD	TLS 1.2	Secure
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256	0xCC,0xA9	ECDHE-ECDSA-CHACHA20-POLY1305	ECDHE	ECDSA	ChaCha20-Poly1305	AEAD	TLS 1.2	Secure
TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256	0xCC,0xAA	DHE-RSA-CHACHA20-POLY1305	DHE	RSA	ChaCha20-Poly1305	AEAD	TLS 1.2	Secure
TLS_PSK_WITH_CHACHA20_POLY1305_SHA256	0xCC,0xAB	PSK-CHACHA20-POLY1305	PSK	PSK	ChaCha20-Poly1305	AEAD	TLS 1.2	Weak
TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256	0xCC,0xAC	ECDHE-PSK-CHACHA20-POLY1305	ECDHE	PSK	ChaCha20-Poly1305	AEAD	TLS 1.2	Secure
TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256	0xCC,0xAD	DHE-PSK-CHACHA20-POLY1305	DHE	PSK	ChaCha20-Poly1305	AEAD	TLS 1.2	Secure
TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256	0xCC,0xAE	RSA-PSK-CHACHA20-POLY1305	RSA	PSK	ChaCha20-Poly1305	AEAD	TLS 1.2	Weak
TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256	0xD0,0x01	ECDHE-PSK-AES128-GCM-SHA256	ECDHE	PSK	AES-128-GCM	AEAD	TLS 1.2	Secure
TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384	0xD0,0x02	ECDHE-PSK-AES256-GCM-SHA384	ECDHE	PSK	AES-256-GCM	AEAD	TLS 1.2	Secure
TLS_ECDHE_PSK_WITH_AES_128_CCM_8_SHA256	0xD0,0x03	ECDHE-PSK-AES128-CCM8	ECDHE	PSK	AES-128-CCM-8	AEAD	TLS 1.2	Secure
TLS_ECDHE_PSK_WITH_AES_128_CCM_SHA256	0xD0,0x05	ECDHE-PSK-AES128-CCM	ECDHE	PSK	AES-128-CCM	AEAD	TLS 1.2	Secure

On narrow screens only the name, hex code and rating are shown; open a suite for all fields.

How the rating works

ssl.sh applies these rules in order; the first matching rule decides the rating. The rating is about the suite's algorithms, not about any particular server.

Insecure NULL encryption, EXPORT, anonymous (anon) key exchange, RC4, DES/DES40, 3DES, RC2, IDEA or an MD5 MAC.
Weak Anything left that is not AEAD (CBC, CTR/CNT stream modes) or has no forward secrecy (static RSA, DH, ECDH, PSK, Kerberos).
Secure Ephemeral key exchange (ECDHE, DHE, SRP, ECCPWD) with an AEAD cipher (GCM, CCM, ChaCha20-Poly1305), and TLS 1.3 AEAD suites that IANA doesn't mark Recommended.
Recommended TLS 1.3 suites that IANA marks Recommended (Y).
Signal only Signaling values (TLS_EMPTY_RENEGOTIATION_INFO_SCSV, TLS_FALLBACK_SCSV) are not rated.

The separate IANA "Recommended" column comes straight from the IANA registry: Y = recommended by the IETF, N = not evaluated or not recommended, D = discouraged.

TLS versions are derived from the suite definition: AEAD and SHA-256/384 suites exist only in TLS 1.2, export suites end at TLS 1.0, DES and IDEA end at TLS 1.1, TLS 1.3 suites are TLS 1.3 only. TLS 1.0 and 1.1 themselves are deprecated by RFC 8996.

Download the data

/data/pki/ciphers.json — full dataset (all fields, references, rating reasons)
/static/data/ciphers.json — compact list used by the tools (iana, hex, openssl, kx, au, enc, mac, tls_versions, rating)

Sources: IANA TLS Cipher Suites registry, OpenSSL names from OpenSSL 3.5 and the openssl-ciphers manual, GnuTLS names from ciphersuites.c.

Cipher Suite Lookup · TLS Config Generator