EN

数据

TLS 密码套件列表

IANA TLS 注册表里的全部 358 个密码套件，列出十六进制码、OpenSSL 和 GnuTLS 名称、密钥交换、加密算法、支持的 TLS 版本，以及带理由的安全评级。可以筛选表格，点进单个套件查看 Nginx、Apache 配置。

数据更新于

IANA 名称十六进制码OpenSSL 密钥交换认证加密 MACTLS评级
TLS_NULL_WITH_NULL_NULL 0x00,0x00 – NULL NULL NULL NULL SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_WITH_NULL_MD5 0x00,0x01 NULL-MD5 RSA RSA NULL MD5 SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_WITH_NULL_SHA 0x00,0x02 NULL-SHA RSA RSA NULL SHA1 SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_EXPORT_WITH_RC4_40_MD5 0x00,0x03 – RSA RSA RC4-40 MD5 SSL 3.0, TLS 1.0 不安全
TLS_RSA_WITH_RC4_128_MD5 0x00,0x04 RC4-MD5 RSA RSA RC4-128 MD5 SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_WITH_RC4_128_SHA 0x00,0x05 RC4-SHA RSA RSA RC4-128 SHA1 SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 0x00,0x06 – RSA RSA RC2-CBC-40 MD5 SSL 3.0, TLS 1.0 不安全
TLS_RSA_WITH_IDEA_CBC_SHA 0x00,0x07 IDEA-CBC-SHA RSA RSA IDEA-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1 不安全
TLS_RSA_EXPORT_WITH_DES40_CBC_SHA 0x00,0x08 – RSA RSA DES40-CBC SHA1 SSL 3.0, TLS 1.0 不安全
TLS_RSA_WITH_DES_CBC_SHA 0x00,0x09 – RSA RSA DES-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1 不安全
TLS_RSA_WITH_3DES_EDE_CBC_SHA 0x00,0x0A DES-CBC3-SHA RSA RSA 3DES-EDE-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA 0x00,0x0B – DH DSS DES40-CBC SHA1 SSL 3.0, TLS 1.0 不安全
TLS_DH_DSS_WITH_DES_CBC_SHA 0x00,0x0C – DH DSS DES-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1 不安全
TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA 0x00,0x0D – DH DSS 3DES-EDE-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA 0x00,0x0E – DH RSA DES40-CBC SHA1 SSL 3.0, TLS 1.0 不安全
TLS_DH_RSA_WITH_DES_CBC_SHA 0x00,0x0F – DH RSA DES-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1 不安全
TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA 0x00,0x10 – DH RSA 3DES-EDE-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA 0x00,0x11 – DHE DSS DES40-CBC SHA1 SSL 3.0, TLS 1.0 不安全
TLS_DHE_DSS_WITH_DES_CBC_SHA 0x00,0x12 – DHE DSS DES-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1 不安全
TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA 0x00,0x13 DHE-DSS-DES-CBC3-SHA DHE DSS 3DES-EDE-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA 0x00,0x14 – DHE RSA DES40-CBC SHA1 SSL 3.0, TLS 1.0 不安全
TLS_DHE_RSA_WITH_DES_CBC_SHA 0x00,0x15 – DHE RSA DES-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1 不安全
TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA 0x00,0x16 DHE-RSA-DES-CBC3-SHA DHE RSA 3DES-EDE-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 0x00,0x17 – DH anon RC4-40 MD5 SSL 3.0, TLS 1.0 不安全
TLS_DH_anon_WITH_RC4_128_MD5 0x00,0x18 ADH-RC4-MD5 DH anon RC4-128 MD5 SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA 0x00,0x19 – DH anon DES40-CBC SHA1 SSL 3.0, TLS 1.0 不安全
TLS_DH_anon_WITH_DES_CBC_SHA 0x00,0x1A – DH anon DES-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1 不安全
TLS_DH_anon_WITH_3DES_EDE_CBC_SHA 0x00,0x1B ADH-DES-CBC3-SHA DH anon 3DES-EDE-CBC SHA1 SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_KRB5_WITH_DES_CBC_SHA 0x00,0x1E – KRB5 KRB5 DES-CBC SHA1 TLS 1.0, TLS 1.1 不安全
TLS_KRB5_WITH_3DES_EDE_CBC_SHA 0x00,0x1F – KRB5 KRB5 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_KRB5_WITH_RC4_128_SHA 0x00,0x20 – KRB5 KRB5 RC4-128 SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_KRB5_WITH_IDEA_CBC_SHA 0x00,0x21 – KRB5 KRB5 IDEA-CBC SHA1 TLS 1.0, TLS 1.1 不安全
TLS_KRB5_WITH_DES_CBC_MD5 0x00,0x22 – KRB5 KRB5 DES-CBC MD5 TLS 1.0, TLS 1.1 不安全
TLS_KRB5_WITH_3DES_EDE_CBC_MD5 0x00,0x23 – KRB5 KRB5 3DES-EDE-CBC MD5 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_KRB5_WITH_RC4_128_MD5 0x00,0x24 – KRB5 KRB5 RC4-128 MD5 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_KRB5_WITH_IDEA_CBC_MD5 0x00,0x25 – KRB5 KRB5 IDEA-CBC MD5 TLS 1.0, TLS 1.1 不安全
TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA 0x00,0x26 – KRB5 KRB5 DES-CBC-40 SHA1 SSL 3.0, TLS 1.0 不安全
TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA 0x00,0x27 – KRB5 KRB5 RC2-CBC-40 SHA1 SSL 3.0, TLS 1.0 不安全
TLS_KRB5_EXPORT_WITH_RC4_40_SHA 0x00,0x28 – KRB5 KRB5 RC4-40 SHA1 SSL 3.0, TLS 1.0 不安全
TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5 0x00,0x29 – KRB5 KRB5 DES-CBC-40 MD5 SSL 3.0, TLS 1.0 不安全
TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5 0x00,0x2A – KRB5 KRB5 RC2-CBC-40 MD5 SSL 3.0, TLS 1.0 不安全
TLS_KRB5_EXPORT_WITH_RC4_40_MD5 0x00,0x2B – KRB5 KRB5 RC4-40 MD5 SSL 3.0, TLS 1.0 不安全
TLS_PSK_WITH_NULL_SHA 0x00,0x2C PSK-NULL-SHA PSK PSK NULL SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_DHE_PSK_WITH_NULL_SHA 0x00,0x2D DHE-PSK-NULL-SHA DHE PSK NULL SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_PSK_WITH_NULL_SHA 0x00,0x2E RSA-PSK-NULL-SHA RSA PSK NULL SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_WITH_AES_128_CBC_SHA 0x00,0x2F AES128-SHA RSA RSA AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_DSS_WITH_AES_128_CBC_SHA 0x00,0x30 – DH DSS AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_RSA_WITH_AES_128_CBC_SHA 0x00,0x31 – DH RSA AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_DSS_WITH_AES_128_CBC_SHA 0x00,0x32 DHE-DSS-AES128-SHA DHE DSS AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_RSA_WITH_AES_128_CBC_SHA 0x00,0x33 DHE-RSA-AES128-SHA DHE RSA AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_anon_WITH_AES_128_CBC_SHA 0x00,0x34 ADH-AES128-SHA DH anon AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_WITH_AES_256_CBC_SHA 0x00,0x35 AES256-SHA RSA RSA AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_DSS_WITH_AES_256_CBC_SHA 0x00,0x36 – DH DSS AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_RSA_WITH_AES_256_CBC_SHA 0x00,0x37 – DH RSA AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_DSS_WITH_AES_256_CBC_SHA 0x00,0x38 DHE-DSS-AES256-SHA DHE DSS AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_RSA_WITH_AES_256_CBC_SHA 0x00,0x39 DHE-RSA-AES256-SHA DHE RSA AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_anon_WITH_AES_256_CBC_SHA 0x00,0x3A ADH-AES256-SHA DH anon AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_WITH_NULL_SHA256 0x00,0x3B NULL-SHA256 RSA RSA NULL SHA256 TLS 1.2 不安全
TLS_RSA_WITH_AES_128_CBC_SHA256 0x00,0x3C AES128-SHA256 RSA RSA AES-128-CBC SHA256 TLS 1.2 弱
TLS_RSA_WITH_AES_256_CBC_SHA256 0x00,0x3D AES256-SHA256 RSA RSA AES-256-CBC SHA256 TLS 1.2 弱
TLS_DH_DSS_WITH_AES_128_CBC_SHA256 0x00,0x3E – DH DSS AES-128-CBC SHA256 TLS 1.2 弱
TLS_DH_RSA_WITH_AES_128_CBC_SHA256 0x00,0x3F – DH RSA AES-128-CBC SHA256 TLS 1.2 弱
TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 0x00,0x40 DHE-DSS-AES128-SHA256 DHE DSS AES-128-CBC SHA256 TLS 1.2 弱
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA 0x00,0x41 CAMELLIA128-SHA RSA RSA Camellia-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA 0x00,0x42 – DH DSS Camellia-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA 0x00,0x43 – DH RSA Camellia-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA 0x00,0x44 DHE-DSS-CAMELLIA128-SHA DHE DSS Camellia-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA 0x00,0x45 DHE-RSA-CAMELLIA128-SHA DHE RSA Camellia-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA 0x00,0x46 ADH-CAMELLIA128-SHA DH anon Camellia-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 0x00,0x67 DHE-RSA-AES128-SHA256 DHE RSA AES-128-CBC SHA256 TLS 1.2 弱
TLS_DH_DSS_WITH_AES_256_CBC_SHA256 0x00,0x68 – DH DSS AES-256-CBC SHA256 TLS 1.2 弱
TLS_DH_RSA_WITH_AES_256_CBC_SHA256 0x00,0x69 – DH RSA AES-256-CBC SHA256 TLS 1.2 弱
TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 0x00,0x6A DHE-DSS-AES256-SHA256 DHE DSS AES-256-CBC SHA256 TLS 1.2 弱
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 0x00,0x6B DHE-RSA-AES256-SHA256 DHE RSA AES-256-CBC SHA256 TLS 1.2 弱
TLS_DH_anon_WITH_AES_128_CBC_SHA256 0x00,0x6C ADH-AES128-SHA256 DH anon AES-128-CBC SHA256 TLS 1.2 不安全
TLS_DH_anon_WITH_AES_256_CBC_SHA256 0x00,0x6D ADH-AES256-SHA256 DH anon AES-256-CBC SHA256 TLS 1.2 不安全
TLS_ASCONAEAD128_ASCONHASH256 0x00,0x6E – 任意 任意 Ascon-AEAD128 AEAD TLS 1.3 安全
TLS_ASCONAEAD128_SHA256 0x00,0x6F – 任意 任意 Ascon-AEAD128 AEAD TLS 1.3 安全
TLS_AES_128_GCM_ASCONHASH256 0x00,0x70 – 任意 任意 AES-128-GCM AEAD TLS 1.3 安全
TLS_AES_128_CCM_ASCONHASH256 0x00,0x71 – 任意 任意 AES-128-CCM AEAD TLS 1.3 安全
TLS_BELT_CHE256_BELT_HASH 0x00,0x72 – 任意 任意 belt-che256 AEAD TLS 1.3 安全
TLS_BASH_PRG_AE2561_BASH256 0x00,0x73 – 任意 任意 bash-prg-ae2561 AEAD TLS 1.3 安全
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA 0x00,0x84 CAMELLIA256-SHA RSA RSA Camellia-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA 0x00,0x85 – DH DSS Camellia-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA 0x00,0x86 – DH RSA Camellia-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA 0x00,0x87 DHE-DSS-CAMELLIA256-SHA DHE DSS Camellia-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA 0x00,0x88 DHE-RSA-CAMELLIA256-SHA DHE RSA Camellia-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA 0x00,0x89 ADH-CAMELLIA256-SHA DH anon Camellia-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_PSK_WITH_RC4_128_SHA 0x00,0x8A – PSK PSK RC4-128 SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_PSK_WITH_3DES_EDE_CBC_SHA 0x00,0x8B – PSK PSK 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_PSK_WITH_AES_128_CBC_SHA 0x00,0x8C PSK-AES128-CBC-SHA PSK PSK AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_PSK_WITH_AES_256_CBC_SHA 0x00,0x8D PSK-AES256-CBC-SHA PSK PSK AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_PSK_WITH_RC4_128_SHA 0x00,0x8E – DHE PSK RC4-128 SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA 0x00,0x8F – DHE PSK 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_DHE_PSK_WITH_AES_128_CBC_SHA 0x00,0x90 DHE-PSK-AES128-CBC-SHA DHE PSK AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_PSK_WITH_AES_256_CBC_SHA 0x00,0x91 DHE-PSK-AES256-CBC-SHA DHE PSK AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_RSA_PSK_WITH_RC4_128_SHA 0x00,0x92 – RSA PSK RC4-128 SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA 0x00,0x93 – RSA PSK 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_PSK_WITH_AES_128_CBC_SHA 0x00,0x94 RSA-PSK-AES128-CBC-SHA RSA PSK AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_RSA_PSK_WITH_AES_256_CBC_SHA 0x00,0x95 RSA-PSK-AES256-CBC-SHA RSA PSK AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_RSA_WITH_SEED_CBC_SHA 0x00,0x96 SEED-SHA RSA RSA SEED-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_DSS_WITH_SEED_CBC_SHA 0x00,0x97 – DH DSS SEED-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_RSA_WITH_SEED_CBC_SHA 0x00,0x98 – DH RSA SEED-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_DSS_WITH_SEED_CBC_SHA 0x00,0x99 DHE-DSS-SEED-SHA DHE DSS SEED-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DHE_RSA_WITH_SEED_CBC_SHA 0x00,0x9A DHE-RSA-SEED-SHA DHE RSA SEED-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_DH_anon_WITH_SEED_CBC_SHA 0x00,0x9B – DH anon SEED-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_RSA_WITH_AES_128_GCM_SHA256 0x00,0x9C AES128-GCM-SHA256 RSA RSA AES-128-GCM AEAD TLS 1.2 弱
TLS_RSA_WITH_AES_256_GCM_SHA384 0x00,0x9D AES256-GCM-SHA384 RSA RSA AES-256-GCM AEAD TLS 1.2 弱
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 0x00,0x9E DHE-RSA-AES128-GCM-SHA256 DHE RSA AES-128-GCM AEAD TLS 1.2 安全
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 0x00,0x9F DHE-RSA-AES256-GCM-SHA384 DHE RSA AES-256-GCM AEAD TLS 1.2 安全
TLS_DH_RSA_WITH_AES_128_GCM_SHA256 0x00,0xA0 – DH RSA AES-128-GCM AEAD TLS 1.2 弱
TLS_DH_RSA_WITH_AES_256_GCM_SHA384 0x00,0xA1 – DH RSA AES-256-GCM AEAD TLS 1.2 弱
TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 0x00,0xA2 DHE-DSS-AES128-GCM-SHA256 DHE DSS AES-128-GCM AEAD TLS 1.2 安全
TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 0x00,0xA3 DHE-DSS-AES256-GCM-SHA384 DHE DSS AES-256-GCM AEAD TLS 1.2 安全
TLS_DH_DSS_WITH_AES_128_GCM_SHA256 0x00,0xA4 – DH DSS AES-128-GCM AEAD TLS 1.2 弱
TLS_DH_DSS_WITH_AES_256_GCM_SHA384 0x00,0xA5 – DH DSS AES-256-GCM AEAD TLS 1.2 弱
TLS_DH_anon_WITH_AES_128_GCM_SHA256 0x00,0xA6 ADH-AES128-GCM-SHA256 DH anon AES-128-GCM AEAD TLS 1.2 不安全
TLS_DH_anon_WITH_AES_256_GCM_SHA384 0x00,0xA7 ADH-AES256-GCM-SHA384 DH anon AES-256-GCM AEAD TLS 1.2 不安全
TLS_PSK_WITH_AES_128_GCM_SHA256 0x00,0xA8 PSK-AES128-GCM-SHA256 PSK PSK AES-128-GCM AEAD TLS 1.2 弱
TLS_PSK_WITH_AES_256_GCM_SHA384 0x00,0xA9 PSK-AES256-GCM-SHA384 PSK PSK AES-256-GCM AEAD TLS 1.2 弱
TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 0x00,0xAA DHE-PSK-AES128-GCM-SHA256 DHE PSK AES-128-GCM AEAD TLS 1.2 安全
TLS_DHE_PSK_WITH_AES_256_GCM_SHA384 0x00,0xAB DHE-PSK-AES256-GCM-SHA384 DHE PSK AES-256-GCM AEAD TLS 1.2 安全
TLS_RSA_PSK_WITH_AES_128_GCM_SHA256 0x00,0xAC RSA-PSK-AES128-GCM-SHA256 RSA PSK AES-128-GCM AEAD TLS 1.2 弱
TLS_RSA_PSK_WITH_AES_256_GCM_SHA384 0x00,0xAD RSA-PSK-AES256-GCM-SHA384 RSA PSK AES-256-GCM AEAD TLS 1.2 弱
TLS_PSK_WITH_AES_128_CBC_SHA256 0x00,0xAE PSK-AES128-CBC-SHA256 PSK PSK AES-128-CBC SHA256 TLS 1.2 弱
TLS_PSK_WITH_AES_256_CBC_SHA384 0x00,0xAF PSK-AES256-CBC-SHA384 PSK PSK AES-256-CBC SHA384 TLS 1.2 弱
TLS_PSK_WITH_NULL_SHA256 0x00,0xB0 PSK-NULL-SHA256 PSK PSK NULL SHA256 TLS 1.2 不安全
TLS_PSK_WITH_NULL_SHA384 0x00,0xB1 PSK-NULL-SHA384 PSK PSK NULL SHA384 TLS 1.2 不安全
TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 0x00,0xB2 DHE-PSK-AES128-CBC-SHA256 DHE PSK AES-128-CBC SHA256 TLS 1.2 弱
TLS_DHE_PSK_WITH_AES_256_CBC_SHA384 0x00,0xB3 DHE-PSK-AES256-CBC-SHA384 DHE PSK AES-256-CBC SHA384 TLS 1.2 弱
TLS_DHE_PSK_WITH_NULL_SHA256 0x00,0xB4 DHE-PSK-NULL-SHA256 DHE PSK NULL SHA256 TLS 1.2 不安全
TLS_DHE_PSK_WITH_NULL_SHA384 0x00,0xB5 DHE-PSK-NULL-SHA384 DHE PSK NULL SHA384 TLS 1.2 不安全
TLS_RSA_PSK_WITH_AES_128_CBC_SHA256 0x00,0xB6 RSA-PSK-AES128-CBC-SHA256 RSA PSK AES-128-CBC SHA256 TLS 1.2 弱
TLS_RSA_PSK_WITH_AES_256_CBC_SHA384 0x00,0xB7 RSA-PSK-AES256-CBC-SHA384 RSA PSK AES-256-CBC SHA384 TLS 1.2 弱
TLS_RSA_PSK_WITH_NULL_SHA256 0x00,0xB8 RSA-PSK-NULL-SHA256 RSA PSK NULL SHA256 TLS 1.2 不安全
TLS_RSA_PSK_WITH_NULL_SHA384 0x00,0xB9 RSA-PSK-NULL-SHA384 RSA PSK NULL SHA384 TLS 1.2 不安全
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 0x00,0xBA CAMELLIA128-SHA256 RSA RSA Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256 0x00,0xBB – DH DSS Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256 0x00,0xBC – DH RSA Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256 0x00,0xBD DHE-DSS-CAMELLIA128-SHA256 DHE DSS Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 0x00,0xBE DHE-RSA-CAMELLIA128-SHA256 DHE RSA Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256 0x00,0xBF ADH-CAMELLIA128-SHA256 DH anon Camellia-128-CBC SHA256 TLS 1.2 不安全
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 0x00,0xC0 CAMELLIA256-SHA256 RSA RSA Camellia-256-CBC SHA256 TLS 1.2 弱
TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256 0x00,0xC1 – DH DSS Camellia-256-CBC SHA256 TLS 1.2 弱
TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256 0x00,0xC2 – DH RSA Camellia-256-CBC SHA256 TLS 1.2 弱
TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256 0x00,0xC3 DHE-DSS-CAMELLIA256-SHA256 DHE DSS Camellia-256-CBC SHA256 TLS 1.2 弱
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 0x00,0xC4 DHE-RSA-CAMELLIA256-SHA256 DHE RSA Camellia-256-CBC SHA256 TLS 1.2 弱
TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256 0x00,0xC5 ADH-CAMELLIA256-SHA256 DH anon Camellia-256-CBC SHA256 TLS 1.2 不安全
TLS_SM4_GCM_SM3 0x00,0xC6 – 任意 任意 SM4-GCM AEAD TLS 1.3 安全
TLS_SM4_CCM_SM3 0x00,0xC7 – 任意 任意 SM4-CCM AEAD TLS 1.3 安全
TLS_EMPTY_RENEGOTIATION_INFO_SCSV 0x00,0xFF – - - - - – 仅信令
TLS_AES_128_GCM_SHA256 0x13,0x01 TLS_AES_128_GCM_SHA256 任意 任意 AES-128-GCM AEAD TLS 1.3 推荐
TLS_AES_256_GCM_SHA384 0x13,0x02 TLS_AES_256_GCM_SHA384 任意 任意 AES-256-GCM AEAD TLS 1.3 推荐
TLS_CHACHA20_POLY1305_SHA256 0x13,0x03 TLS_CHACHA20_POLY1305_SHA256 任意 任意 ChaCha20-Poly1305 AEAD TLS 1.3 推荐
TLS_AES_128_CCM_SHA256 0x13,0x04 TLS_AES_128_CCM_SHA256 任意 任意 AES-128-CCM AEAD TLS 1.3 推荐
TLS_AES_128_CCM_8_SHA256 0x13,0x05 TLS_AES_128_CCM_8_SHA256 任意 任意 AES-128-CCM-8 AEAD TLS 1.3 安全
TLS_AEGIS_256_SHA512 0x13,0x06 – 任意 任意 AEGIS-256 AEAD TLS 1.3 安全
TLS_AEGIS_128L_SHA256 0x13,0x07 – 任意 任意 AEGIS-128L AEAD TLS 1.3 安全
TLS_FALLBACK_SCSV 0x56,0x00 – - - - - – 仅信令
TLS_ECDH_ECDSA_WITH_NULL_SHA 0xC0,0x01 – ECDH ECDSA NULL SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDH_ECDSA_WITH_RC4_128_SHA 0xC0,0x02 ECDH-ECDSA-RC4-SHA ECDH ECDSA RC4-128 SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA 0xC0,0x03 ECDH-ECDSA-DES-CBC3-SHA ECDH ECDSA 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA 0xC0,0x04 ECDH-ECDSA-AES128-SHA ECDH ECDSA AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA 0xC0,0x05 ECDH-ECDSA-AES256-SHA ECDH ECDSA AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_ECDHE_ECDSA_WITH_NULL_SHA 0xC0,0x06 ECDHE-ECDSA-NULL-SHA ECDHE ECDSA NULL SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDHE_ECDSA_WITH_RC4_128_SHA 0xC0,0x07 ECDHE-ECDSA-RC4-SHA ECDHE ECDSA RC4-128 SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA 0xC0,0x08 ECDHE-ECDSA-DES-CBC3-SHA ECDHE ECDSA 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 0xC0,0x09 ECDHE-ECDSA-AES128-SHA ECDHE ECDSA AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 0xC0,0x0A ECDHE-ECDSA-AES256-SHA ECDHE ECDSA AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_ECDH_RSA_WITH_NULL_SHA 0xC0,0x0B – ECDH RSA NULL SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDH_RSA_WITH_RC4_128_SHA 0xC0,0x0C ECDH-RSA-RC4-SHA ECDH RSA RC4-128 SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA 0xC0,0x0D ECDH-RSA-DES-CBC3-SHA ECDH RSA 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA 0xC0,0x0E ECDH-RSA-AES128-SHA ECDH RSA AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA 0xC0,0x0F ECDH-RSA-AES256-SHA ECDH RSA AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_ECDHE_RSA_WITH_NULL_SHA 0xC0,0x10 ECDHE-RSA-NULL-SHA ECDHE RSA NULL SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDHE_RSA_WITH_RC4_128_SHA 0xC0,0x11 ECDHE-RSA-RC4-SHA ECDHE RSA RC4-128 SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA 0xC0,0x12 ECDHE-RSA-DES-CBC3-SHA ECDHE RSA 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 0xC0,0x13 ECDHE-RSA-AES128-SHA ECDHE RSA AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 0xC0,0x14 ECDHE-RSA-AES256-SHA ECDHE RSA AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_ECDH_anon_WITH_NULL_SHA 0xC0,0x15 AECDH-NULL-SHA ECDH anon NULL SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDH_anon_WITH_RC4_128_SHA 0xC0,0x16 AECDH-RC4-SHA ECDH anon RC4-128 SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA 0xC0,0x17 – ECDH anon 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDH_anon_WITH_AES_128_CBC_SHA 0xC0,0x18 AECDH-AES128-SHA ECDH anon AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDH_anon_WITH_AES_256_CBC_SHA 0xC0,0x19 AECDH-AES256-SHA ECDH anon AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA 0xC0,0x1A – SRP SRP 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA 0xC0,0x1B – SRP RSA 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA 0xC0,0x1C – SRP DSS 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_SRP_SHA_WITH_AES_128_CBC_SHA 0xC0,0x1D SRP-AES-128-CBC-SHA SRP SRP AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA 0xC0,0x1E SRP-RSA-AES-128-CBC-SHA SRP RSA AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA 0xC0,0x1F SRP-DSS-AES-128-CBC-SHA SRP DSS AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_SRP_SHA_WITH_AES_256_CBC_SHA 0xC0,0x20 SRP-AES-256-CBC-SHA SRP SRP AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA 0xC0,0x21 SRP-RSA-AES-256-CBC-SHA SRP RSA AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA 0xC0,0x22 SRP-DSS-AES-256-CBC-SHA SRP DSS AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 0xC0,0x23 ECDHE-ECDSA-AES128-SHA256 ECDHE ECDSA AES-128-CBC SHA256 TLS 1.2 弱
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 0xC0,0x24 ECDHE-ECDSA-AES256-SHA384 ECDHE ECDSA AES-256-CBC SHA384 TLS 1.2 弱
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 0xC0,0x25 ECDH-ECDSA-AES128-SHA256 ECDH ECDSA AES-128-CBC SHA256 TLS 1.2 弱
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 0xC0,0x26 ECDH-ECDSA-AES256-SHA384 ECDH ECDSA AES-256-CBC SHA384 TLS 1.2 弱
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 0xC0,0x27 ECDHE-RSA-AES128-SHA256 ECDHE RSA AES-128-CBC SHA256 TLS 1.2 弱
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 0xC0,0x28 ECDHE-RSA-AES256-SHA384 ECDHE RSA AES-256-CBC SHA384 TLS 1.2 弱
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 0xC0,0x29 ECDH-RSA-AES128-SHA256 ECDH RSA AES-128-CBC SHA256 TLS 1.2 弱
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 0xC0,0x2A ECDH-RSA-AES256-SHA384 ECDH RSA AES-256-CBC SHA384 TLS 1.2 弱
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 0xC0,0x2B ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE ECDSA AES-128-GCM AEAD TLS 1.2 安全
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 0xC0,0x2C ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE ECDSA AES-256-GCM AEAD TLS 1.2 安全
TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 0xC0,0x2D ECDH-ECDSA-AES128-GCM-SHA256 ECDH ECDSA AES-128-GCM AEAD TLS 1.2 弱
TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 0xC0,0x2E ECDH-ECDSA-AES256-GCM-SHA384 ECDH ECDSA AES-256-GCM AEAD TLS 1.2 弱
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 0xC0,0x2F ECDHE-RSA-AES128-GCM-SHA256 ECDHE RSA AES-128-GCM AEAD TLS 1.2 安全
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 0xC0,0x30 ECDHE-RSA-AES256-GCM-SHA384 ECDHE RSA AES-256-GCM AEAD TLS 1.2 安全
TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 0xC0,0x31 ECDH-RSA-AES128-GCM-SHA256 ECDH RSA AES-128-GCM AEAD TLS 1.2 弱
TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 0xC0,0x32 ECDH-RSA-AES256-GCM-SHA384 ECDH RSA AES-256-GCM AEAD TLS 1.2 弱
TLS_ECDHE_PSK_WITH_RC4_128_SHA 0xC0,0x33 ECDHE-PSK-RC4-SHA ECDHE PSK RC4-128 SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA 0xC0,0x34 ECDHE-PSK-DES-CBC3-SHA ECDHE PSK 3DES-EDE-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA 0xC0,0x35 ECDHE-PSK-AES128-CBC-SHA ECDHE PSK AES-128-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA 0xC0,0x36 ECDHE-PSK-AES256-CBC-SHA ECDHE PSK AES-256-CBC SHA1 TLS 1.0, TLS 1.1, TLS 1.2 弱
TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 0xC0,0x37 ECDHE-PSK-AES128-CBC-SHA256 ECDHE PSK AES-128-CBC SHA256 TLS 1.2 弱
TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384 0xC0,0x38 ECDHE-PSK-AES256-CBC-SHA384 ECDHE PSK AES-256-CBC SHA384 TLS 1.2 弱
TLS_ECDHE_PSK_WITH_NULL_SHA 0xC0,0x39 ECDHE-PSK-NULL-SHA ECDHE PSK NULL SHA1 TLS 1.0, TLS 1.1, TLS 1.2 不安全
TLS_ECDHE_PSK_WITH_NULL_SHA256 0xC0,0x3A ECDHE-PSK-NULL-SHA256 ECDHE PSK NULL SHA256 TLS 1.2 不安全
TLS_ECDHE_PSK_WITH_NULL_SHA384 0xC0,0x3B ECDHE-PSK-NULL-SHA384 ECDHE PSK NULL SHA384 TLS 1.2 不安全
TLS_RSA_WITH_ARIA_128_CBC_SHA256 0xC0,0x3C ARIA128-CBC-SHA256 RSA RSA ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_RSA_WITH_ARIA_256_CBC_SHA384 0xC0,0x3D ARIA256-CBC-SHA384 RSA RSA ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256 0xC0,0x3E – DH DSS ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384 0xC0,0x3F – DH DSS ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256 0xC0,0x40 – DH RSA ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384 0xC0,0x41 – DH RSA ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256 0xC0,0x42 – DHE DSS ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384 0xC0,0x43 – DHE DSS ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256 0xC0,0x44 DHE-RSA-ARIA128-CBC-SHA256 DHE RSA ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384 0xC0,0x45 DHE-RSA-ARIA256-CBC-SHA384 DHE RSA ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_DH_anon_WITH_ARIA_128_CBC_SHA256 0xC0,0x46 – DH anon ARIA-128-CBC SHA256 TLS 1.2 不安全
TLS_DH_anon_WITH_ARIA_256_CBC_SHA384 0xC0,0x47 ADH-ARIA256-CBC-SHA384 DH anon ARIA-256-CBC SHA384 TLS 1.2 不安全
TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256 0xC0,0x48 ECDHE-ECDSA-ARIA128-CBC-SHA256 ECDHE ECDSA ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384 0xC0,0x49 ECDHE-ECDSA-ARIA256-CBC-SHA384 ECDHE ECDSA ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256 0xC0,0x4A – ECDH ECDSA ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384 0xC0,0x4B – ECDH ECDSA ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256 0xC0,0x4C ECDHE-RSA-ARIA128-CBC-SHA256 ECDHE RSA ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384 0xC0,0x4D ECDHE-RSA-ARIA256-CBC-SHA384 ECDHE RSA ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256 0xC0,0x4E – ECDH RSA ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384 0xC0,0x4F – ECDH RSA ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_RSA_WITH_ARIA_128_GCM_SHA256 0xC0,0x50 ARIA128-GCM-SHA256 RSA RSA ARIA-128-GCM AEAD TLS 1.2 弱
TLS_RSA_WITH_ARIA_256_GCM_SHA384 0xC0,0x51 ARIA256-GCM-SHA384 RSA RSA ARIA-256-GCM AEAD TLS 1.2 弱
TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 0xC0,0x52 DHE-RSA-ARIA128-GCM-SHA256 DHE RSA ARIA-128-GCM AEAD TLS 1.2 安全
TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 0xC0,0x53 DHE-RSA-ARIA256-GCM-SHA384 DHE RSA ARIA-256-GCM AEAD TLS 1.2 安全
TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256 0xC0,0x54 – DH RSA ARIA-128-GCM AEAD TLS 1.2 弱
TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384 0xC0,0x55 – DH RSA ARIA-256-GCM AEAD TLS 1.2 弱
TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256 0xC0,0x56 DHE-DSS-ARIA128-GCM-SHA256 DHE DSS ARIA-128-GCM AEAD TLS 1.2 安全
TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384 0xC0,0x57 DHE-DSS-ARIA256-GCM-SHA384 DHE DSS ARIA-256-GCM AEAD TLS 1.2 安全
TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256 0xC0,0x58 – DH DSS ARIA-128-GCM AEAD TLS 1.2 弱
TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384 0xC0,0x59 – DH DSS ARIA-256-GCM AEAD TLS 1.2 弱
TLS_DH_anon_WITH_ARIA_128_GCM_SHA256 0xC0,0x5A ADH-ARIA128-GCM-SHA256 DH anon ARIA-128-GCM AEAD TLS 1.2 不安全
TLS_DH_anon_WITH_ARIA_256_GCM_SHA384 0xC0,0x5B ADH-ARIA256-GCM-SHA384 DH anon ARIA-256-GCM AEAD TLS 1.2 不安全
TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 0xC0,0x5C ECDHE-ECDSA-ARIA128-GCM-SHA256 ECDHE ECDSA ARIA-128-GCM AEAD TLS 1.2 安全
TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 0xC0,0x5D ECDHE-ECDSA-ARIA256-GCM-SHA384 ECDHE ECDSA ARIA-256-GCM AEAD TLS 1.2 安全
TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256 0xC0,0x5E – ECDH ECDSA ARIA-128-GCM AEAD TLS 1.2 弱
TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384 0xC0,0x5F – ECDH ECDSA ARIA-256-GCM AEAD TLS 1.2 弱
TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 0xC0,0x60 ECDHE-ARIA128-GCM-SHA256 ECDHE RSA ARIA-128-GCM AEAD TLS 1.2 安全
TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 0xC0,0x61 ECDHE-ARIA256-GCM-SHA384 ECDHE RSA ARIA-256-GCM AEAD TLS 1.2 安全
TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256 0xC0,0x62 – ECDH RSA ARIA-128-GCM AEAD TLS 1.2 弱
TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384 0xC0,0x63 – ECDH RSA ARIA-256-GCM AEAD TLS 1.2 弱
TLS_PSK_WITH_ARIA_128_CBC_SHA256 0xC0,0x64 PSK-ARIA128-CBC-SHA256 PSK PSK ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_PSK_WITH_ARIA_256_CBC_SHA384 0xC0,0x65 – PSK PSK ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256 0xC0,0x66 DHE-PSK-ARIA128-CBC-SHA256 DHE PSK ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384 0xC0,0x67 DHE-PSK-ARIA256-CBC-SHA384 DHE PSK ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256 0xC0,0x68 RSA-PSK-ARIA128-CBC-SHA256 RSA PSK ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384 0xC0,0x69 RSA-PSK-ARIA256-CBC-SHA384 RSA PSK ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_PSK_WITH_ARIA_128_GCM_SHA256 0xC0,0x6A PSK-ARIA128-GCM-SHA256 PSK PSK ARIA-128-GCM AEAD TLS 1.2 弱
TLS_PSK_WITH_ARIA_256_GCM_SHA384 0xC0,0x6B PSK-ARIA256-GCM-SHA384 PSK PSK ARIA-256-GCM AEAD TLS 1.2 弱
TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256 0xC0,0x6C DHE-PSK-ARIA128-GCM-SHA256 DHE PSK ARIA-128-GCM AEAD TLS 1.2 安全
TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384 0xC0,0x6D DHE-PSK-ARIA256-GCM-SHA384 DHE PSK ARIA-256-GCM AEAD TLS 1.2 安全
TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256 0xC0,0x6E RSA-PSK-ARIA128-GCM-SHA256 RSA PSK ARIA-128-GCM AEAD TLS 1.2 弱
TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384 0xC0,0x6F RSA-PSK-ARIA256-GCM-SHA384 RSA PSK ARIA-256-GCM AEAD TLS 1.2 弱
TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256 0xC0,0x70 ECDHE-PSK-ARIA128-CBC-SHA256 ECDHE PSK ARIA-128-CBC SHA256 TLS 1.2 弱
TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384 0xC0,0x71 ECDHE-PSK-ARIA256-CBC-SHA384 ECDHE PSK ARIA-256-CBC SHA384 TLS 1.2 弱
TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 0xC0,0x72 ECDHE-ECDSA-CAMELLIA128-SHA256 ECDHE ECDSA Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 0xC0,0x73 ECDHE-ECDSA-CAMELLIA256-SHA384 ECDHE ECDSA Camellia-256-CBC SHA384 TLS 1.2 弱
TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 0xC0,0x74 ECDH-ECDSA-CAMELLIA128-SHA256 ECDH ECDSA Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 0xC0,0x75 ECDH-ECDSA-CAMELLIA256-SHA384 ECDH ECDSA Camellia-256-CBC SHA384 TLS 1.2 弱
TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 0xC0,0x76 ECDHE-RSA-CAMELLIA128-SHA256 ECDHE RSA Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 0xC0,0x77 ECDHE-RSA-CAMELLIA256-SHA384 ECDHE RSA Camellia-256-CBC SHA384 TLS 1.2 弱
TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256 0xC0,0x78 ECDH-RSA-CAMELLIA128-SHA256 ECDH RSA Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384 0xC0,0x79 ECDH-RSA-CAMELLIA256-SHA384 ECDH RSA Camellia-256-CBC SHA384 TLS 1.2 弱
TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x7A CAMELLIA128-GCM-SHA256 RSA RSA Camellia-128-GCM AEAD TLS 1.2 弱
TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x7B CAMELLIA256-GCM-SHA384 RSA RSA Camellia-256-GCM AEAD TLS 1.2 弱
TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x7C DHE-RSA-CAMELLIA128-GCM-SHA256 DHE RSA Camellia-128-GCM AEAD TLS 1.2 安全
TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x7D DHE-RSA-CAMELLIA256-GCM-SHA384 DHE RSA Camellia-256-GCM AEAD TLS 1.2 安全
TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x7E – DH RSA Camellia-128-GCM AEAD TLS 1.2 弱
TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x7F – DH RSA Camellia-256-GCM AEAD TLS 1.2 弱
TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x80 DHE-DSS-CAMELLIA128-GCM-SHA256 DHE DSS Camellia-128-GCM AEAD TLS 1.2 安全
TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x81 DHE-DSS-CAMELLIA256-GCM-SHA384 DHE DSS Camellia-256-GCM AEAD TLS 1.2 安全
TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x82 – DH DSS Camellia-128-GCM AEAD TLS 1.2 弱
TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x83 – DH DSS Camellia-256-GCM AEAD TLS 1.2 弱
TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x84 ADH-CAMELLIA128-GCM-SHA256 DH anon Camellia-128-GCM AEAD TLS 1.2 不安全
TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x85 ADH-CAMELLIA256-GCM-SHA384 DH anon Camellia-256-GCM AEAD TLS 1.2 不安全
TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x86 – ECDHE ECDSA Camellia-128-GCM AEAD TLS 1.2 安全
TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x87 – ECDHE ECDSA Camellia-256-GCM AEAD TLS 1.2 安全
TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x88 – ECDH ECDSA Camellia-128-GCM AEAD TLS 1.2 弱
TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x89 – ECDH ECDSA Camellia-256-GCM AEAD TLS 1.2 弱
TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x8A – ECDHE RSA Camellia-128-GCM AEAD TLS 1.2 安全
TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x8B – ECDHE RSA Camellia-256-GCM AEAD TLS 1.2 安全
TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x8C – ECDH RSA Camellia-128-GCM AEAD TLS 1.2 弱
TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x8D – ECDH RSA Camellia-256-GCM AEAD TLS 1.2 弱
TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x8E – PSK PSK Camellia-128-GCM AEAD TLS 1.2 弱
TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x8F – PSK PSK Camellia-256-GCM AEAD TLS 1.2 弱
TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x90 – DHE PSK Camellia-128-GCM AEAD TLS 1.2 安全
TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x91 – DHE PSK Camellia-256-GCM AEAD TLS 1.2 安全
TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256 0xC0,0x92 – RSA PSK Camellia-128-GCM AEAD TLS 1.2 弱
TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384 0xC0,0x93 – RSA PSK Camellia-256-GCM AEAD TLS 1.2 弱
TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256 0xC0,0x94 PSK-CAMELLIA128-SHA256 PSK PSK Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384 0xC0,0x95 PSK-CAMELLIA256-SHA384 PSK PSK Camellia-256-CBC SHA384 TLS 1.2 弱
TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 0xC0,0x96 DHE-PSK-CAMELLIA128-SHA256 DHE PSK Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 0xC0,0x97 DHE-PSK-CAMELLIA256-SHA384 DHE PSK Camellia-256-CBC SHA384 TLS 1.2 弱
TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256 0xC0,0x98 RSA-PSK-CAMELLIA128-SHA256 RSA PSK Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384 0xC0,0x99 RSA-PSK-CAMELLIA256-SHA384 RSA PSK Camellia-256-CBC SHA384 TLS 1.2 弱
TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 0xC0,0x9A ECDHE-PSK-CAMELLIA128-SHA256 ECDHE PSK Camellia-128-CBC SHA256 TLS 1.2 弱
TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 0xC0,0x9B ECDHE-PSK-CAMELLIA256-SHA384 ECDHE PSK Camellia-256-CBC SHA384 TLS 1.2 弱
TLS_RSA_WITH_AES_128_CCM 0xC0,0x9C AES128-CCM RSA RSA AES-128-CCM AEAD TLS 1.2 弱
TLS_RSA_WITH_AES_256_CCM 0xC0,0x9D AES256-CCM RSA RSA AES-256-CCM AEAD TLS 1.2 弱
TLS_DHE_RSA_WITH_AES_128_CCM 0xC0,0x9E DHE-RSA-AES128-CCM DHE RSA AES-128-CCM AEAD TLS 1.2 安全
TLS_DHE_RSA_WITH_AES_256_CCM 0xC0,0x9F DHE-RSA-AES256-CCM DHE RSA AES-256-CCM AEAD TLS 1.2 安全
TLS_RSA_WITH_AES_128_CCM_8 0xC0,0xA0 AES128-CCM8 RSA RSA AES-128-CCM-8 AEAD TLS 1.2 弱
TLS_RSA_WITH_AES_256_CCM_8 0xC0,0xA1 AES256-CCM8 RSA RSA AES-256-CCM-8 AEAD TLS 1.2 弱
TLS_DHE_RSA_WITH_AES_128_CCM_8 0xC0,0xA2 DHE-RSA-AES128-CCM8 DHE RSA AES-128-CCM-8 AEAD TLS 1.2 安全
TLS_DHE_RSA_WITH_AES_256_CCM_8 0xC0,0xA3 DHE-RSA-AES256-CCM8 DHE RSA AES-256-CCM-8 AEAD TLS 1.2 安全
TLS_PSK_WITH_AES_128_CCM 0xC0,0xA4 PSK-AES128-CCM PSK PSK AES-128-CCM AEAD TLS 1.2 弱
TLS_PSK_WITH_AES_256_CCM 0xC0,0xA5 PSK-AES256-CCM PSK PSK AES-256-CCM AEAD TLS 1.2 弱
TLS_DHE_PSK_WITH_AES_128_CCM 0xC0,0xA6 DHE-PSK-AES128-CCM DHE PSK AES-128-CCM AEAD TLS 1.2 安全
TLS_DHE_PSK_WITH_AES_256_CCM 0xC0,0xA7 DHE-PSK-AES256-CCM DHE PSK AES-256-CCM AEAD TLS 1.2 安全
TLS_PSK_WITH_AES_128_CCM_8 0xC0,0xA8 PSK-AES128-CCM8 PSK PSK AES-128-CCM-8 AEAD TLS 1.2 弱
TLS_PSK_WITH_AES_256_CCM_8 0xC0,0xA9 PSK-AES256-CCM8 PSK PSK AES-256-CCM-8 AEAD TLS 1.2 弱
TLS_PSK_DHE_WITH_AES_128_CCM_8 0xC0,0xAA DHE-PSK-AES128-CCM8 DHE PSK AES-128-CCM-8 AEAD TLS 1.2 安全
TLS_PSK_DHE_WITH_AES_256_CCM_8 0xC0,0xAB DHE-PSK-AES256-CCM8 DHE PSK AES-256-CCM-8 AEAD TLS 1.2 安全
TLS_ECDHE_ECDSA_WITH_AES_128_CCM 0xC0,0xAC ECDHE-ECDSA-AES128-CCM ECDHE ECDSA AES-128-CCM AEAD TLS 1.2 安全
TLS_ECDHE_ECDSA_WITH_AES_256_CCM 0xC0,0xAD ECDHE-ECDSA-AES256-CCM ECDHE ECDSA AES-256-CCM AEAD TLS 1.2 安全
TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 0xC0,0xAE ECDHE-ECDSA-AES128-CCM8 ECDHE ECDSA AES-128-CCM-8 AEAD TLS 1.2 安全
TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 0xC0,0xAF ECDHE-ECDSA-AES256-CCM8 ECDHE ECDSA AES-256-CCM-8 AEAD TLS 1.2 安全
TLS_ECCPWD_WITH_AES_128_GCM_SHA256 0xC0,0xB0 – ECCPWD ECCPWD AES-128-GCM AEAD TLS 1.2, TLS 1.3 安全
TLS_ECCPWD_WITH_AES_256_GCM_SHA384 0xC0,0xB1 – ECCPWD ECCPWD AES-256-GCM AEAD TLS 1.2, TLS 1.3 安全
TLS_ECCPWD_WITH_AES_128_CCM_SHA256 0xC0,0xB2 – ECCPWD ECCPWD AES-128-CCM AEAD TLS 1.2, TLS 1.3 安全
TLS_ECCPWD_WITH_AES_256_CCM_SHA384 0xC0,0xB3 – ECCPWD ECCPWD AES-256-CCM AEAD TLS 1.2, TLS 1.3 安全
TLS_SHA256_SHA256 0xC0,0xB4 – 任意 任意 NULL HMAC-SHA256 TLS 1.3 不安全
TLS_SHA384_SHA384 0xC0,0xB5 TLS_SHA384_SHA384 任意 任意 NULL HMAC-SHA384 TLS 1.3 不安全
TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC 0xC1,0x00 – GOST GOST Kuznyechik-CTR OMAC TLS 1.2 弱
TLS_GOSTR341112_256_WITH_MAGMA_CTR_OMAC 0xC1,0x01 – GOST GOST Magma-CTR OMAC TLS 1.2 弱
TLS_GOSTR341112_256_WITH_28147_CNT_IMIT 0xC1,0x02 – GOST GOST GOST28147-CNT IMIT TLS 1.2 弱
TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_L 0xC1,0x03 – 任意 任意 Kuznyechik-MGM-L AEAD TLS 1.3 安全
TLS_GOSTR341112_256_WITH_MAGMA_MGM_L 0xC1,0x04 – 任意 任意 Magma-MGM-L AEAD TLS 1.3 安全
TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_S 0xC1,0x05 – 任意 任意 Kuznyechik-MGM-S AEAD TLS 1.3 安全
TLS_GOSTR341112_256_WITH_MAGMA_MGM_S 0xC1,0x06 – 任意 任意 Magma-MGM-S AEAD TLS 1.3 安全
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 0xCC,0xA8 ECDHE-RSA-CHACHA20-POLY1305 ECDHE RSA ChaCha20-Poly1305 AEAD TLS 1.2 安全
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 0xCC,0xA9 ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE ECDSA ChaCha20-Poly1305 AEAD TLS 1.2 安全
TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 0xCC,0xAA DHE-RSA-CHACHA20-POLY1305 DHE RSA ChaCha20-Poly1305 AEAD TLS 1.2 安全
TLS_PSK_WITH_CHACHA20_POLY1305_SHA256 0xCC,0xAB PSK-CHACHA20-POLY1305 PSK PSK ChaCha20-Poly1305 AEAD TLS 1.2 弱
TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256 0xCC,0xAC ECDHE-PSK-CHACHA20-POLY1305 ECDHE PSK ChaCha20-Poly1305 AEAD TLS 1.2 安全
TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256 0xCC,0xAD DHE-PSK-CHACHA20-POLY1305 DHE PSK ChaCha20-Poly1305 AEAD TLS 1.2 安全
TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256 0xCC,0xAE RSA-PSK-CHACHA20-POLY1305 RSA PSK ChaCha20-Poly1305 AEAD TLS 1.2 弱
TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 0xD0,0x01 ECDHE-PSK-AES128-GCM-SHA256 ECDHE PSK AES-128-GCM AEAD TLS 1.2 安全
TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384 0xD0,0x02 ECDHE-PSK-AES256-GCM-SHA384 ECDHE PSK AES-256-GCM AEAD TLS 1.2 安全
TLS_ECDHE_PSK_WITH_AES_128_CCM_8_SHA256 0xD0,0x03 ECDHE-PSK-AES128-CCM8 ECDHE PSK AES-128-CCM-8 AEAD TLS 1.2 安全
TLS_ECDHE_PSK_WITH_AES_128_CCM_SHA256 0xD0,0x05 ECDHE-PSK-AES128-CCM ECDHE PSK AES-128-CCM AEAD TLS 1.2 安全

手机上只显示名称、十六进制码和评级，点进套件可看全部字段。

评级规则

ssl.sh 按下面的顺序套用规则，命中第一条就定级。评级只针对套件本身的算法，不代表某台服务器的整体安全。

  1. 不安全 NULL 加密、EXPORT、匿名（anon）密钥交换、RC4、DES/DES40、3DES、RC2、IDEA 或 MD5 MAC。
  2. 弱 其余非 AEAD（CBC、CTR/CNT 流模式）或没有前向保密（静态 RSA、DH、ECDH、PSK、Kerberos）的套件。
  3. 安全 临时密钥交换（ECDHE、DHE、SRP、ECCPWD）加 AEAD（GCM、CCM、ChaCha20-Poly1305）；以及 IANA 未标为 Recommended 的 TLS 1.3 AEAD 套件。
  4. 推荐 IANA 标为 Recommended（Y）的 TLS 1.3 套件。
  5. 仅信令 信令值（TLS_EMPTY_RENEGOTIATION_INFO_SCSV、TLS_FALLBACK_SCSV）不评级。

单独的 IANA“Recommended”一栏直接取自 IANA 注册表：Y 表示 IETF 推荐，N 表示未评估或不推荐，D 表示不建议使用。

TLS 版本按套件定义推算：AEAD 和 SHA-256/384 套件只存在于 TLS 1.2，出口级套件止于 TLS 1.0，DES 和 IDEA 止于 TLS 1.1，TLS 1.3 套件只用于 TLS 1.3。TLS 1.0 和 1.1 本身已被 RFC 8996 弃用。

下载数据

来源：IANA TLS Cipher Suites 注册表；OpenSSL 名称取自 OpenSSL 3.5 和 openssl-ciphers 手册；GnuTLS 名称取自 ciphersuites.c。

密码套件查询 · TLS 配置生成