# TLS cipher suites: IANA list with OpenSSL names and ratings

> All 358 TLS cipher suites in the IANA registry with hex codes, OpenSSL and GnuTLS names, TLS versions and a security rating.

Source: https://ssl.sh/ciphers/
Last updated: 2026-11-10

Every one of the 358 cipher suites in the IANA TLS registry, with its hex code, OpenSSL and GnuTLS names, key exchange, encryption, supported TLS versions and an explained security rating. Filter the table or open a suite for Nginx and Apache configuration.

## How the rating works

- NULL encryption, EXPORT, anonymous (anon) key exchange, RC4, DES/DES40, 3DES, RC2, IDEA or an MD5 MAC.
- Anything left that is not AEAD (CBC, CTR/CNT stream modes) or has no forward secrecy (static RSA, DH, ECDH, PSK, Kerberos).
- Ephemeral key exchange (ECDHE, DHE, SRP, ECCPWD) with an AEAD cipher (GCM, CCM, ChaCha20-Poly1305), and TLS 1.3 AEAD suites that IANA doesn't mark Recommended.
- TLS 1.3 suites that IANA marks Recommended (Y).
- Signaling values (TLS_EMPTY_RENEGOTIATION_INFO_SCSV, TLS_FALLBACK_SCSV) are not rated.

## All cipher suites

| IANA | Hex code | OpenSSL | TLS versions | Rating |
|---|---|---|---|---|
| TLS_NULL_WITH_NULL_NULL | 0x00,0x00 | - | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_WITH_NULL_MD5 | 0x00,0x01 | NULL-MD5 | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_WITH_NULL_SHA | 0x00,0x02 | NULL-SHA | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_EXPORT_WITH_RC4_40_MD5 | 0x00,0x03 | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_RSA_WITH_RC4_128_MD5 | 0x00,0x04 | RC4-MD5 | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_WITH_RC4_128_SHA | 0x00,0x05 | RC4-SHA | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 | 0x00,0x06 | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_RSA_WITH_IDEA_CBC_SHA | 0x00,0x07 | IDEA-CBC-SHA | SSL 3.0, TLS 1.0, TLS 1.1 | Insecure |
| TLS_RSA_EXPORT_WITH_DES40_CBC_SHA | 0x00,0x08 | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_RSA_WITH_DES_CBC_SHA | 0x00,0x09 | - | SSL 3.0, TLS 1.0, TLS 1.1 | Insecure |
| TLS_RSA_WITH_3DES_EDE_CBC_SHA | 0x00,0x0A | DES-CBC3-SHA | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA | 0x00,0x0B | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_DH_DSS_WITH_DES_CBC_SHA | 0x00,0x0C | - | SSL 3.0, TLS 1.0, TLS 1.1 | Insecure |
| TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA | 0x00,0x0D | - | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA | 0x00,0x0E | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_DH_RSA_WITH_DES_CBC_SHA | 0x00,0x0F | - | SSL 3.0, TLS 1.0, TLS 1.1 | Insecure |
| TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA | 0x00,0x10 | - | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA | 0x00,0x11 | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_DHE_DSS_WITH_DES_CBC_SHA | 0x00,0x12 | - | SSL 3.0, TLS 1.0, TLS 1.1 | Insecure |
| TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA | 0x00,0x13 | DHE-DSS-DES-CBC3-SHA | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA | 0x00,0x14 | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_DHE_RSA_WITH_DES_CBC_SHA | 0x00,0x15 | - | SSL 3.0, TLS 1.0, TLS 1.1 | Insecure |
| TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA | 0x00,0x16 | DHE-RSA-DES-CBC3-SHA | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 | 0x00,0x17 | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_DH_anon_WITH_RC4_128_MD5 | 0x00,0x18 | ADH-RC4-MD5 | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA | 0x00,0x19 | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_DH_anon_WITH_DES_CBC_SHA | 0x00,0x1A | - | SSL 3.0, TLS 1.0, TLS 1.1 | Insecure |
| TLS_DH_anon_WITH_3DES_EDE_CBC_SHA | 0x00,0x1B | ADH-DES-CBC3-SHA | SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_KRB5_WITH_DES_CBC_SHA | 0x00,0x1E | - | TLS 1.0, TLS 1.1 | Insecure |
| TLS_KRB5_WITH_3DES_EDE_CBC_SHA | 0x00,0x1F | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_KRB5_WITH_RC4_128_SHA | 0x00,0x20 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_KRB5_WITH_IDEA_CBC_SHA | 0x00,0x21 | - | TLS 1.0, TLS 1.1 | Insecure |
| TLS_KRB5_WITH_DES_CBC_MD5 | 0x00,0x22 | - | TLS 1.0, TLS 1.1 | Insecure |
| TLS_KRB5_WITH_3DES_EDE_CBC_MD5 | 0x00,0x23 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_KRB5_WITH_RC4_128_MD5 | 0x00,0x24 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_KRB5_WITH_IDEA_CBC_MD5 | 0x00,0x25 | - | TLS 1.0, TLS 1.1 | Insecure |
| TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA | 0x00,0x26 | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA | 0x00,0x27 | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_KRB5_EXPORT_WITH_RC4_40_SHA | 0x00,0x28 | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5 | 0x00,0x29 | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5 | 0x00,0x2A | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_KRB5_EXPORT_WITH_RC4_40_MD5 | 0x00,0x2B | - | SSL 3.0, TLS 1.0 | Insecure |
| TLS_PSK_WITH_NULL_SHA | 0x00,0x2C | PSK-NULL-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_DHE_PSK_WITH_NULL_SHA | 0x00,0x2D | DHE-PSK-NULL-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_PSK_WITH_NULL_SHA | 0x00,0x2E | RSA-PSK-NULL-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_WITH_AES_128_CBC_SHA | 0x00,0x2F | AES128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_AES_128_CBC_SHA | 0x00,0x30 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_AES_128_CBC_SHA | 0x00,0x31 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_AES_128_CBC_SHA | 0x00,0x32 | DHE-DSS-AES128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_AES_128_CBC_SHA | 0x00,0x33 | DHE-RSA-AES128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_anon_WITH_AES_128_CBC_SHA | 0x00,0x34 | ADH-AES128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_WITH_AES_256_CBC_SHA | 0x00,0x35 | AES256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_AES_256_CBC_SHA | 0x00,0x36 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_AES_256_CBC_SHA | 0x00,0x37 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_AES_256_CBC_SHA | 0x00,0x38 | DHE-DSS-AES256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_AES_256_CBC_SHA | 0x00,0x39 | DHE-RSA-AES256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_anon_WITH_AES_256_CBC_SHA | 0x00,0x3A | ADH-AES256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_WITH_NULL_SHA256 | 0x00,0x3B | NULL-SHA256 | TLS 1.2 | Insecure |
| TLS_RSA_WITH_AES_128_CBC_SHA256 | 0x00,0x3C | AES128-SHA256 | TLS 1.2 | Weak |
| TLS_RSA_WITH_AES_256_CBC_SHA256 | 0x00,0x3D | AES256-SHA256 | TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_AES_128_CBC_SHA256 | 0x00,0x3E | - | TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_AES_128_CBC_SHA256 | 0x00,0x3F | - | TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 | 0x00,0x40 | DHE-DSS-AES128-SHA256 | TLS 1.2 | Weak |
| TLS_RSA_WITH_CAMELLIA_128_CBC_SHA | 0x00,0x41 | CAMELLIA128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA | 0x00,0x42 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA | 0x00,0x43 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA | 0x00,0x44 | DHE-DSS-CAMELLIA128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA | 0x00,0x45 | DHE-RSA-CAMELLIA128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA | 0x00,0x46 | ADH-CAMELLIA128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 | 0x00,0x67 | DHE-RSA-AES128-SHA256 | TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_AES_256_CBC_SHA256 | 0x00,0x68 | - | TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_AES_256_CBC_SHA256 | 0x00,0x69 | - | TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 | 0x00,0x6A | DHE-DSS-AES256-SHA256 | TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 | 0x00,0x6B | DHE-RSA-AES256-SHA256 | TLS 1.2 | Weak |
| TLS_DH_anon_WITH_AES_128_CBC_SHA256 | 0x00,0x6C | ADH-AES128-SHA256 | TLS 1.2 | Insecure |
| TLS_DH_anon_WITH_AES_256_CBC_SHA256 | 0x00,0x6D | ADH-AES256-SHA256 | TLS 1.2 | Insecure |
| TLS_ASCONAEAD128_ASCONHASH256 | 0x00,0x6E | - | TLS 1.3 | Secure |
| TLS_ASCONAEAD128_SHA256 | 0x00,0x6F | - | TLS 1.3 | Secure |
| TLS_AES_128_GCM_ASCONHASH256 | 0x00,0x70 | - | TLS 1.3 | Secure |
| TLS_AES_128_CCM_ASCONHASH256 | 0x00,0x71 | - | TLS 1.3 | Secure |
| TLS_BELT_CHE256_BELT_HASH | 0x00,0x72 | - | TLS 1.3 | Secure |
| TLS_BASH_PRG_AE2561_BASH256 | 0x00,0x73 | - | TLS 1.3 | Secure |
| TLS_RSA_WITH_CAMELLIA_256_CBC_SHA | 0x00,0x84 | CAMELLIA256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA | 0x00,0x85 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA | 0x00,0x86 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA | 0x00,0x87 | DHE-DSS-CAMELLIA256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA | 0x00,0x88 | DHE-RSA-CAMELLIA256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA | 0x00,0x89 | ADH-CAMELLIA256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_PSK_WITH_RC4_128_SHA | 0x00,0x8A | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_PSK_WITH_3DES_EDE_CBC_SHA | 0x00,0x8B | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_PSK_WITH_AES_128_CBC_SHA | 0x00,0x8C | PSK-AES128-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_PSK_WITH_AES_256_CBC_SHA | 0x00,0x8D | PSK-AES256-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_RC4_128_SHA | 0x00,0x8E | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA | 0x00,0x8F | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_DHE_PSK_WITH_AES_128_CBC_SHA | 0x00,0x90 | DHE-PSK-AES128-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_AES_256_CBC_SHA | 0x00,0x91 | DHE-PSK-AES256-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_RSA_PSK_WITH_RC4_128_SHA | 0x00,0x92 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA | 0x00,0x93 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_PSK_WITH_AES_128_CBC_SHA | 0x00,0x94 | RSA-PSK-AES128-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_RSA_PSK_WITH_AES_256_CBC_SHA | 0x00,0x95 | RSA-PSK-AES256-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_RSA_WITH_SEED_CBC_SHA | 0x00,0x96 | SEED-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_SEED_CBC_SHA | 0x00,0x97 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_SEED_CBC_SHA | 0x00,0x98 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_SEED_CBC_SHA | 0x00,0x99 | DHE-DSS-SEED-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_SEED_CBC_SHA | 0x00,0x9A | DHE-RSA-SEED-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_DH_anon_WITH_SEED_CBC_SHA | 0x00,0x9B | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_RSA_WITH_AES_128_GCM_SHA256 | 0x00,0x9C | AES128-GCM-SHA256 | TLS 1.2 | Weak |
| TLS_RSA_WITH_AES_256_GCM_SHA384 | 0x00,0x9D | AES256-GCM-SHA384 | TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 | 0x00,0x9E | DHE-RSA-AES128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 | 0x00,0x9F | DHE-RSA-AES256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_DH_RSA_WITH_AES_128_GCM_SHA256 | 0x00,0xA0 | - | TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_AES_256_GCM_SHA384 | 0x00,0xA1 | - | TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 | 0x00,0xA2 | DHE-DSS-AES128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 | 0x00,0xA3 | DHE-DSS-AES256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_DH_DSS_WITH_AES_128_GCM_SHA256 | 0x00,0xA4 | - | TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_AES_256_GCM_SHA384 | 0x00,0xA5 | - | TLS 1.2 | Weak |
| TLS_DH_anon_WITH_AES_128_GCM_SHA256 | 0x00,0xA6 | ADH-AES128-GCM-SHA256 | TLS 1.2 | Insecure |
| TLS_DH_anon_WITH_AES_256_GCM_SHA384 | 0x00,0xA7 | ADH-AES256-GCM-SHA384 | TLS 1.2 | Insecure |
| TLS_PSK_WITH_AES_128_GCM_SHA256 | 0x00,0xA8 | PSK-AES128-GCM-SHA256 | TLS 1.2 | Weak |
| TLS_PSK_WITH_AES_256_GCM_SHA384 | 0x00,0xA9 | PSK-AES256-GCM-SHA384 | TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 | 0x00,0xAA | DHE-PSK-AES128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_DHE_PSK_WITH_AES_256_GCM_SHA384 | 0x00,0xAB | DHE-PSK-AES256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_RSA_PSK_WITH_AES_128_GCM_SHA256 | 0x00,0xAC | RSA-PSK-AES128-GCM-SHA256 | TLS 1.2 | Weak |
| TLS_RSA_PSK_WITH_AES_256_GCM_SHA384 | 0x00,0xAD | RSA-PSK-AES256-GCM-SHA384 | TLS 1.2 | Weak |
| TLS_PSK_WITH_AES_128_CBC_SHA256 | 0x00,0xAE | PSK-AES128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_PSK_WITH_AES_256_CBC_SHA384 | 0x00,0xAF | PSK-AES256-CBC-SHA384 | TLS 1.2 | Weak |
| TLS_PSK_WITH_NULL_SHA256 | 0x00,0xB0 | PSK-NULL-SHA256 | TLS 1.2 | Insecure |
| TLS_PSK_WITH_NULL_SHA384 | 0x00,0xB1 | PSK-NULL-SHA384 | TLS 1.2 | Insecure |
| TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 | 0x00,0xB2 | DHE-PSK-AES128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_AES_256_CBC_SHA384 | 0x00,0xB3 | DHE-PSK-AES256-CBC-SHA384 | TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_NULL_SHA256 | 0x00,0xB4 | DHE-PSK-NULL-SHA256 | TLS 1.2 | Insecure |
| TLS_DHE_PSK_WITH_NULL_SHA384 | 0x00,0xB5 | DHE-PSK-NULL-SHA384 | TLS 1.2 | Insecure |
| TLS_RSA_PSK_WITH_AES_128_CBC_SHA256 | 0x00,0xB6 | RSA-PSK-AES128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_RSA_PSK_WITH_AES_256_CBC_SHA384 | 0x00,0xB7 | RSA-PSK-AES256-CBC-SHA384 | TLS 1.2 | Weak |
| TLS_RSA_PSK_WITH_NULL_SHA256 | 0x00,0xB8 | RSA-PSK-NULL-SHA256 | TLS 1.2 | Insecure |
| TLS_RSA_PSK_WITH_NULL_SHA384 | 0x00,0xB9 | RSA-PSK-NULL-SHA384 | TLS 1.2 | Insecure |
| TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 | 0x00,0xBA | CAMELLIA128-SHA256 | TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256 | 0x00,0xBB | - | TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256 | 0x00,0xBC | - | TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256 | 0x00,0xBD | DHE-DSS-CAMELLIA128-SHA256 | TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 | 0x00,0xBE | DHE-RSA-CAMELLIA128-SHA256 | TLS 1.2 | Weak |
| TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256 | 0x00,0xBF | ADH-CAMELLIA128-SHA256 | TLS 1.2 | Insecure |
| TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 | 0x00,0xC0 | CAMELLIA256-SHA256 | TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256 | 0x00,0xC1 | - | TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256 | 0x00,0xC2 | - | TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256 | 0x00,0xC3 | DHE-DSS-CAMELLIA256-SHA256 | TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 | 0x00,0xC4 | DHE-RSA-CAMELLIA256-SHA256 | TLS 1.2 | Weak |
| TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256 | 0x00,0xC5 | ADH-CAMELLIA256-SHA256 | TLS 1.2 | Insecure |
| TLS_SM4_GCM_SM3 | 0x00,0xC6 | - | TLS 1.3 | Secure |
| TLS_SM4_CCM_SM3 | 0x00,0xC7 | - | TLS 1.3 | Secure |
| TLS_EMPTY_RENEGOTIATION_INFO_SCSV | 0x00,0xFF | - | - | Signal only |
| TLS_AES_128_GCM_SHA256 | 0x13,0x01 | TLS_AES_128_GCM_SHA256 | TLS 1.3 | Recommended |
| TLS_AES_256_GCM_SHA384 | 0x13,0x02 | TLS_AES_256_GCM_SHA384 | TLS 1.3 | Recommended |
| TLS_CHACHA20_POLY1305_SHA256 | 0x13,0x03 | TLS_CHACHA20_POLY1305_SHA256 | TLS 1.3 | Recommended |
| TLS_AES_128_CCM_SHA256 | 0x13,0x04 | TLS_AES_128_CCM_SHA256 | TLS 1.3 | Recommended |
| TLS_AES_128_CCM_8_SHA256 | 0x13,0x05 | TLS_AES_128_CCM_8_SHA256 | TLS 1.3 | Secure |
| TLS_AEGIS_256_SHA512 | 0x13,0x06 | - | TLS 1.3 | Secure |
| TLS_AEGIS_128L_SHA256 | 0x13,0x07 | - | TLS 1.3 | Secure |
| TLS_FALLBACK_SCSV | 0x56,0x00 | - | - | Signal only |
| TLS_ECDH_ECDSA_WITH_NULL_SHA | 0xC0,0x01 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDH_ECDSA_WITH_RC4_128_SHA | 0xC0,0x02 | ECDH-ECDSA-RC4-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA | 0xC0,0x03 | ECDH-ECDSA-DES-CBC3-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA | 0xC0,0x04 | ECDH-ECDSA-AES128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA | 0xC0,0x05 | ECDH-ECDSA-AES256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_ECDHE_ECDSA_WITH_NULL_SHA | 0xC0,0x06 | ECDHE-ECDSA-NULL-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDHE_ECDSA_WITH_RC4_128_SHA | 0xC0,0x07 | ECDHE-ECDSA-RC4-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA | 0xC0,0x08 | ECDHE-ECDSA-DES-CBC3-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | 0xC0,0x09 | ECDHE-ECDSA-AES128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA | 0xC0,0x0A | ECDHE-ECDSA-AES256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_ECDH_RSA_WITH_NULL_SHA | 0xC0,0x0B | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDH_RSA_WITH_RC4_128_SHA | 0xC0,0x0C | ECDH-RSA-RC4-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA | 0xC0,0x0D | ECDH-RSA-DES-CBC3-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDH_RSA_WITH_AES_128_CBC_SHA | 0xC0,0x0E | ECDH-RSA-AES128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_ECDH_RSA_WITH_AES_256_CBC_SHA | 0xC0,0x0F | ECDH-RSA-AES256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_ECDHE_RSA_WITH_NULL_SHA | 0xC0,0x10 | ECDHE-RSA-NULL-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDHE_RSA_WITH_RC4_128_SHA | 0xC0,0x11 | ECDHE-RSA-RC4-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA | 0xC0,0x12 | ECDHE-RSA-DES-CBC3-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA | 0xC0,0x13 | ECDHE-RSA-AES128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA | 0xC0,0x14 | ECDHE-RSA-AES256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_ECDH_anon_WITH_NULL_SHA | 0xC0,0x15 | AECDH-NULL-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDH_anon_WITH_RC4_128_SHA | 0xC0,0x16 | AECDH-RC4-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA | 0xC0,0x17 | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDH_anon_WITH_AES_128_CBC_SHA | 0xC0,0x18 | AECDH-AES128-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDH_anon_WITH_AES_256_CBC_SHA | 0xC0,0x19 | AECDH-AES256-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA | 0xC0,0x1A | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA | 0xC0,0x1B | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA | 0xC0,0x1C | - | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_SRP_SHA_WITH_AES_128_CBC_SHA | 0xC0,0x1D | SRP-AES-128-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA | 0xC0,0x1E | SRP-RSA-AES-128-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA | 0xC0,0x1F | SRP-DSS-AES-128-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_SRP_SHA_WITH_AES_256_CBC_SHA | 0xC0,0x20 | SRP-AES-256-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA | 0xC0,0x21 | SRP-RSA-AES-256-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA | 0xC0,0x22 | SRP-DSS-AES-256-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 | 0xC0,0x23 | ECDHE-ECDSA-AES128-SHA256 | TLS 1.2 | Weak |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 | 0xC0,0x24 | ECDHE-ECDSA-AES256-SHA384 | TLS 1.2 | Weak |
| TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 | 0xC0,0x25 | ECDH-ECDSA-AES128-SHA256 | TLS 1.2 | Weak |
| TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 | 0xC0,0x26 | ECDH-ECDSA-AES256-SHA384 | TLS 1.2 | Weak |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 | 0xC0,0x27 | ECDHE-RSA-AES128-SHA256 | TLS 1.2 | Weak |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 | 0xC0,0x28 | ECDHE-RSA-AES256-SHA384 | TLS 1.2 | Weak |
| TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 | 0xC0,0x29 | ECDH-RSA-AES128-SHA256 | TLS 1.2 | Weak |
| TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 | 0xC0,0x2A | ECDH-RSA-AES256-SHA384 | TLS 1.2 | Weak |
| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | 0xC0,0x2B | ECDHE-ECDSA-AES128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 | 0xC0,0x2C | ECDHE-ECDSA-AES256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 | 0xC0,0x2D | ECDH-ECDSA-AES128-GCM-SHA256 | TLS 1.2 | Weak |
| TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 | 0xC0,0x2E | ECDH-ECDSA-AES256-GCM-SHA384 | TLS 1.2 | Weak |
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 | 0xC0,0x2F | ECDHE-RSA-AES128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | 0xC0,0x30 | ECDHE-RSA-AES256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 | 0xC0,0x31 | ECDH-RSA-AES128-GCM-SHA256 | TLS 1.2 | Weak |
| TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 | 0xC0,0x32 | ECDH-RSA-AES256-GCM-SHA384 | TLS 1.2 | Weak |
| TLS_ECDHE_PSK_WITH_RC4_128_SHA | 0xC0,0x33 | ECDHE-PSK-RC4-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA | 0xC0,0x34 | ECDHE-PSK-DES-CBC3-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA | 0xC0,0x35 | ECDHE-PSK-AES128-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA | 0xC0,0x36 | ECDHE-PSK-AES256-CBC-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Weak |
| TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 | 0xC0,0x37 | ECDHE-PSK-AES128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384 | 0xC0,0x38 | ECDHE-PSK-AES256-CBC-SHA384 | TLS 1.2 | Weak |
| TLS_ECDHE_PSK_WITH_NULL_SHA | 0xC0,0x39 | ECDHE-PSK-NULL-SHA | TLS 1.0, TLS 1.1, TLS 1.2 | Insecure |
| TLS_ECDHE_PSK_WITH_NULL_SHA256 | 0xC0,0x3A | ECDHE-PSK-NULL-SHA256 | TLS 1.2 | Insecure |
| TLS_ECDHE_PSK_WITH_NULL_SHA384 | 0xC0,0x3B | ECDHE-PSK-NULL-SHA384 | TLS 1.2 | Insecure |
| TLS_RSA_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x3C | ARIA128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_RSA_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x3D | ARIA256-CBC-SHA384 | TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x3E | - | TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x3F | - | TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x40 | - | TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x41 | - | TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x42 | - | TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x43 | - | TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x44 | DHE-RSA-ARIA128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x45 | DHE-RSA-ARIA256-CBC-SHA384 | TLS 1.2 | Weak |
| TLS_DH_anon_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x46 | - | TLS 1.2 | Insecure |
| TLS_DH_anon_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x47 | ADH-ARIA256-CBC-SHA384 | TLS 1.2 | Insecure |
| TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x48 | ECDHE-ECDSA-ARIA128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x49 | ECDHE-ECDSA-ARIA256-CBC-SHA384 | TLS 1.2 | Weak |
| TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x4A | - | TLS 1.2 | Weak |
| TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x4B | - | TLS 1.2 | Weak |
| TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x4C | ECDHE-RSA-ARIA128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x4D | ECDHE-RSA-ARIA256-CBC-SHA384 | TLS 1.2 | Weak |
| TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x4E | - | TLS 1.2 | Weak |
| TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x4F | - | TLS 1.2 | Weak |
| TLS_RSA_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x50 | ARIA128-GCM-SHA256 | TLS 1.2 | Weak |
| TLS_RSA_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x51 | ARIA256-GCM-SHA384 | TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x52 | DHE-RSA-ARIA128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x53 | DHE-RSA-ARIA256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x54 | - | TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x55 | - | TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x56 | DHE-DSS-ARIA128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x57 | DHE-DSS-ARIA256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x58 | - | TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x59 | - | TLS 1.2 | Weak |
| TLS_DH_anon_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x5A | ADH-ARIA128-GCM-SHA256 | TLS 1.2 | Insecure |
| TLS_DH_anon_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x5B | ADH-ARIA256-GCM-SHA384 | TLS 1.2 | Insecure |
| TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x5C | ECDHE-ECDSA-ARIA128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x5D | ECDHE-ECDSA-ARIA256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x5E | - | TLS 1.2 | Weak |
| TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x5F | - | TLS 1.2 | Weak |
| TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x60 | ECDHE-ARIA128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x61 | ECDHE-ARIA256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x62 | - | TLS 1.2 | Weak |
| TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x63 | - | TLS 1.2 | Weak |
| TLS_PSK_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x64 | PSK-ARIA128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_PSK_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x65 | - | TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x66 | DHE-PSK-ARIA128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x67 | DHE-PSK-ARIA256-CBC-SHA384 | TLS 1.2 | Weak |
| TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x68 | RSA-PSK-ARIA128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x69 | RSA-PSK-ARIA256-CBC-SHA384 | TLS 1.2 | Weak |
| TLS_PSK_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x6A | PSK-ARIA128-GCM-SHA256 | TLS 1.2 | Weak |
| TLS_PSK_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x6B | PSK-ARIA256-GCM-SHA384 | TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x6C | DHE-PSK-ARIA128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x6D | DHE-PSK-ARIA256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256 | 0xC0,0x6E | RSA-PSK-ARIA128-GCM-SHA256 | TLS 1.2 | Weak |
| TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384 | 0xC0,0x6F | RSA-PSK-ARIA256-GCM-SHA384 | TLS 1.2 | Weak |
| TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256 | 0xC0,0x70 | ECDHE-PSK-ARIA128-CBC-SHA256 | TLS 1.2 | Weak |
| TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384 | 0xC0,0x71 | ECDHE-PSK-ARIA256-CBC-SHA384 | TLS 1.2 | Weak |
| TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 | 0xC0,0x72 | ECDHE-ECDSA-CAMELLIA128-SHA256 | TLS 1.2 | Weak |
| TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 | 0xC0,0x73 | ECDHE-ECDSA-CAMELLIA256-SHA384 | TLS 1.2 | Weak |
| TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 | 0xC0,0x74 | ECDH-ECDSA-CAMELLIA128-SHA256 | TLS 1.2 | Weak |
| TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 | 0xC0,0x75 | ECDH-ECDSA-CAMELLIA256-SHA384 | TLS 1.2 | Weak |
| TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 | 0xC0,0x76 | ECDHE-RSA-CAMELLIA128-SHA256 | TLS 1.2 | Weak |
| TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 | 0xC0,0x77 | ECDHE-RSA-CAMELLIA256-SHA384 | TLS 1.2 | Weak |
| TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256 | 0xC0,0x78 | ECDH-RSA-CAMELLIA128-SHA256 | TLS 1.2 | Weak |
| TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384 | 0xC0,0x79 | ECDH-RSA-CAMELLIA256-SHA384 | TLS 1.2 | Weak |
| TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x7A | CAMELLIA128-GCM-SHA256 | TLS 1.2 | Weak |
| TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x7B | CAMELLIA256-GCM-SHA384 | TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x7C | DHE-RSA-CAMELLIA128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x7D | DHE-RSA-CAMELLIA256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x7E | - | TLS 1.2 | Weak |
| TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x7F | - | TLS 1.2 | Weak |
| TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x80 | DHE-DSS-CAMELLIA128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x81 | DHE-DSS-CAMELLIA256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x82 | - | TLS 1.2 | Weak |
| TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x83 | - | TLS 1.2 | Weak |
| TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x84 | ADH-CAMELLIA128-GCM-SHA256 | TLS 1.2 | Insecure |
| TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x85 | ADH-CAMELLIA256-GCM-SHA384 | TLS 1.2 | Insecure |
| TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x86 | - | TLS 1.2 | Secure |
| TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x87 | - | TLS 1.2 | Secure |
| TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x88 | - | TLS 1.2 | Weak |
| TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x89 | - | TLS 1.2 | Weak |
| TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x8A | - | TLS 1.2 | Secure |
| TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x8B | - | TLS 1.2 | Secure |
| TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x8C | - | TLS 1.2 | Weak |
| TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x8D | - | TLS 1.2 | Weak |
| TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x8E | - | TLS 1.2 | Weak |
| TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x8F | - | TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x90 | - | TLS 1.2 | Secure |
| TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x91 | - | TLS 1.2 | Secure |
| TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256 | 0xC0,0x92 | - | TLS 1.2 | Weak |
| TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384 | 0xC0,0x93 | - | TLS 1.2 | Weak |
| TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256 | 0xC0,0x94 | PSK-CAMELLIA128-SHA256 | TLS 1.2 | Weak |
| TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384 | 0xC0,0x95 | PSK-CAMELLIA256-SHA384 | TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 | 0xC0,0x96 | DHE-PSK-CAMELLIA128-SHA256 | TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 | 0xC0,0x97 | DHE-PSK-CAMELLIA256-SHA384 | TLS 1.2 | Weak |
| TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256 | 0xC0,0x98 | RSA-PSK-CAMELLIA128-SHA256 | TLS 1.2 | Weak |
| TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384 | 0xC0,0x99 | RSA-PSK-CAMELLIA256-SHA384 | TLS 1.2 | Weak |
| TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 | 0xC0,0x9A | ECDHE-PSK-CAMELLIA128-SHA256 | TLS 1.2 | Weak |
| TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 | 0xC0,0x9B | ECDHE-PSK-CAMELLIA256-SHA384 | TLS 1.2 | Weak |
| TLS_RSA_WITH_AES_128_CCM | 0xC0,0x9C | AES128-CCM | TLS 1.2 | Weak |
| TLS_RSA_WITH_AES_256_CCM | 0xC0,0x9D | AES256-CCM | TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_AES_128_CCM | 0xC0,0x9E | DHE-RSA-AES128-CCM | TLS 1.2 | Secure |
| TLS_DHE_RSA_WITH_AES_256_CCM | 0xC0,0x9F | DHE-RSA-AES256-CCM | TLS 1.2 | Secure |
| TLS_RSA_WITH_AES_128_CCM_8 | 0xC0,0xA0 | AES128-CCM8 | TLS 1.2 | Weak |
| TLS_RSA_WITH_AES_256_CCM_8 | 0xC0,0xA1 | AES256-CCM8 | TLS 1.2 | Weak |
| TLS_DHE_RSA_WITH_AES_128_CCM_8 | 0xC0,0xA2 | DHE-RSA-AES128-CCM8 | TLS 1.2 | Secure |
| TLS_DHE_RSA_WITH_AES_256_CCM_8 | 0xC0,0xA3 | DHE-RSA-AES256-CCM8 | TLS 1.2 | Secure |
| TLS_PSK_WITH_AES_128_CCM | 0xC0,0xA4 | PSK-AES128-CCM | TLS 1.2 | Weak |
| TLS_PSK_WITH_AES_256_CCM | 0xC0,0xA5 | PSK-AES256-CCM | TLS 1.2 | Weak |
| TLS_DHE_PSK_WITH_AES_128_CCM | 0xC0,0xA6 | DHE-PSK-AES128-CCM | TLS 1.2 | Secure |
| TLS_DHE_PSK_WITH_AES_256_CCM | 0xC0,0xA7 | DHE-PSK-AES256-CCM | TLS 1.2 | Secure |
| TLS_PSK_WITH_AES_128_CCM_8 | 0xC0,0xA8 | PSK-AES128-CCM8 | TLS 1.2 | Weak |
| TLS_PSK_WITH_AES_256_CCM_8 | 0xC0,0xA9 | PSK-AES256-CCM8 | TLS 1.2 | Weak |
| TLS_PSK_DHE_WITH_AES_128_CCM_8 | 0xC0,0xAA | DHE-PSK-AES128-CCM8 | TLS 1.2 | Secure |
| TLS_PSK_DHE_WITH_AES_256_CCM_8 | 0xC0,0xAB | DHE-PSK-AES256-CCM8 | TLS 1.2 | Secure |
| TLS_ECDHE_ECDSA_WITH_AES_128_CCM | 0xC0,0xAC | ECDHE-ECDSA-AES128-CCM | TLS 1.2 | Secure |
| TLS_ECDHE_ECDSA_WITH_AES_256_CCM | 0xC0,0xAD | ECDHE-ECDSA-AES256-CCM | TLS 1.2 | Secure |
| TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 | 0xC0,0xAE | ECDHE-ECDSA-AES128-CCM8 | TLS 1.2 | Secure |
| TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 | 0xC0,0xAF | ECDHE-ECDSA-AES256-CCM8 | TLS 1.2 | Secure |
| TLS_ECCPWD_WITH_AES_128_GCM_SHA256 | 0xC0,0xB0 | - | TLS 1.2, TLS 1.3 | Secure |
| TLS_ECCPWD_WITH_AES_256_GCM_SHA384 | 0xC0,0xB1 | - | TLS 1.2, TLS 1.3 | Secure |
| TLS_ECCPWD_WITH_AES_128_CCM_SHA256 | 0xC0,0xB2 | - | TLS 1.2, TLS 1.3 | Secure |
| TLS_ECCPWD_WITH_AES_256_CCM_SHA384 | 0xC0,0xB3 | - | TLS 1.2, TLS 1.3 | Secure |
| TLS_SHA256_SHA256 | 0xC0,0xB4 | - | TLS 1.3 | Insecure |
| TLS_SHA384_SHA384 | 0xC0,0xB5 | TLS_SHA384_SHA384 | TLS 1.3 | Insecure |
| TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC | 0xC1,0x00 | - | TLS 1.2 | Weak |
| TLS_GOSTR341112_256_WITH_MAGMA_CTR_OMAC | 0xC1,0x01 | - | TLS 1.2 | Weak |
| TLS_GOSTR341112_256_WITH_28147_CNT_IMIT | 0xC1,0x02 | - | TLS 1.2 | Weak |
| TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_L | 0xC1,0x03 | - | TLS 1.3 | Secure |
| TLS_GOSTR341112_256_WITH_MAGMA_MGM_L | 0xC1,0x04 | - | TLS 1.3 | Secure |
| TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_S | 0xC1,0x05 | - | TLS 1.3 | Secure |
| TLS_GOSTR341112_256_WITH_MAGMA_MGM_S | 0xC1,0x06 | - | TLS 1.3 | Secure |
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | 0xCC,0xA8 | ECDHE-RSA-CHACHA20-POLY1305 | TLS 1.2 | Secure |
| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 | 0xCC,0xA9 | ECDHE-ECDSA-CHACHA20-POLY1305 | TLS 1.2 | Secure |
| TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | 0xCC,0xAA | DHE-RSA-CHACHA20-POLY1305 | TLS 1.2 | Secure |
| TLS_PSK_WITH_CHACHA20_POLY1305_SHA256 | 0xCC,0xAB | PSK-CHACHA20-POLY1305 | TLS 1.2 | Weak |
| TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256 | 0xCC,0xAC | ECDHE-PSK-CHACHA20-POLY1305 | TLS 1.2 | Secure |
| TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256 | 0xCC,0xAD | DHE-PSK-CHACHA20-POLY1305 | TLS 1.2 | Secure |
| TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256 | 0xCC,0xAE | RSA-PSK-CHACHA20-POLY1305 | TLS 1.2 | Weak |
| TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 | 0xD0,0x01 | ECDHE-PSK-AES128-GCM-SHA256 | TLS 1.2 | Secure |
| TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384 | 0xD0,0x02 | ECDHE-PSK-AES256-GCM-SHA384 | TLS 1.2 | Secure |
| TLS_ECDHE_PSK_WITH_AES_128_CCM_8_SHA256 | 0xD0,0x03 | ECDHE-PSK-AES128-CCM8 | TLS 1.2 | Secure |
| TLS_ECDHE_PSK_WITH_AES_128_CCM_SHA256 | 0xD0,0x05 | ECDHE-PSK-AES128-CCM | TLS 1.2 | Secure |