uCosminexus Application Server, Security Management Guide

[Contents][Index][Back][Next]

7.3.2 Protocols and encryption suites

The following subsection describes the protocols and encryption suites compatible with the SSL/TLS communication functionality realized by SSL-J.

Organization of this subsection
(1) Protocols
(2) Encryption suites

(1) Protocols

This communication functionality can be used with the following protocols:

(2) Encryption suites

The table below lists the encryption suites compatible with the SSL/TLS communication functionality realized by SSL-J. It also lists the protocols supported by these encryption suites.

Table 7-4 Encryption suites compatible with the SSL/TLS communication functionality realized by SSL-J, and supported protocols

No. Encryption suite Protocol
SSLv3 TLSv1 TLSv1.1 TLSv1.2
1 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 -- -- -- S
2 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 -- -- -- S
3 TLS_RSA_WITH_AES_256_CBC_SHA256 -- -- -- S+D
4 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 -- -- -- S
5 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 -- -- -- S
6 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 -- -- -- S+D
7 TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 -- -- -- S+D
8 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA -- S S S
9 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA -- S S S
10 TLS_RSA_WITH_AES_256_CBC_SHA S S S S+D
11 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA -- S S S
12 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA -- S S S
13 TLS_DHE_RSA_WITH_AES_256_CBC_SHA S S S S+D
14 TLS_DHE_DSS_WITH_AES_256_CBC_SHA S S S S+D
15 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 -- -- -- S
16 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 -- -- -- S
17 TLS_RSA_WITH_AES_128_CBC_SHA256 -- -- -- S+D
18 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 -- -- -- S
19 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 -- -- -- S
20 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 -- -- -- S+D
21 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 -- -- -- S+D
22 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA -- S S S
23 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA -- S S S
24 TLS_RSA_WITH_AES_128_CBC_SHA S S S S+D
25 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA -- S S S
26 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA -- S S S
27 TLS_DHE_RSA_WITH_AES_128_CBC_SHA S S S S+D
28 TLS_DHE_DSS_WITH_AES_128_CBC_SHA S S S S+D
29 TLS_ECDHE_ECDSA_WITH_RC4_128_SHA -- S S S
30 TLS_ECDHE_RSA_WITH_RC4_128_SHA -- S S S
31 SSL_RSA_WITH_RC4_128_SHA S S S S+D
32 TLS_ECDH_ECDSA_WITH_RC4_128_SHA -- S S S
33 TLS_ECDH_RSA_WITH_RC4_128_SHA -- S S S
34 TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA -- S S S
35 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA -- S S S
36 SSL_RSA_WITH_3DES_EDE_CBC_SHA S S S S+D
37 TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA -- S S S
38 TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA -- S S S
39 SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA S S S S+D
40 SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA S S S S+D
41 SSL_RSA_WITH_RC4_128_MD5 S S S S+D

Legend:
S: Encryption suite supported by protocol
S+D: Encryption suite supported by protocol and defined by RFC5246 (TLSv1.2)
--: Encryption suite not supported by protocol

Note: Some encryption suites are likely to become unusable when they are upgraded. They are supported as non-recommended encryption suites for the SSL/TLS communication functionality realized by SSL-J. For information about these encryption suites, see 7.3.7 Precautions for using the SSL/TLS communication functionality realized by SSL-J.