Thursday, May 26, 2016

Which cipher supports a TLS (SSL) client ?

Which cipher supports certain  TLS (SSL) client ?


The is basic question that can lead to big efforts in some environments. For this reason, I wrote a small bash script to display to ciphers supported by client

In first  TLS/SSL negotiation packet, the client sends list of all supported ciphers as described in RFC TLS 1.2.

The common ways to obtain ciphers supported by client:

  1. Read the client and OS documentation. TLS is mostly part of OS stack. You need to now where to look for, like switches, config files, patch level etc.
  2. Use Wireshark or Tcpdump to display the SSL Handshake with ClientHello packet. For this you need root privileges (or similar), that are not alway available for experiments like this.
  3. This script without root privileges
This relatively small bash scripts can help you to display the algorithms without need of root privileges but you need nc installed.

The script mimics a dummy server and dumps the cipher list provided by the client.

The script must not run on the client machine (localhost), then on machine that you have access and the client can connect to. Probably you need to adjust the client settings to connect to.

Here are the need steps

  1. You can download the two bash files ssl_client_ciphers.zip  
  2. Start  this dummy pseudo server with
      ./client-ciphers.sh {port}
  3. Trigger the client to connect to this server. The server script will display the recieved client ciphers. From client prespective the connection with fail, since nothing hapens beside the fist packer (ClientHello)

 
Here and example of the output

x@host:/tmp$ ./client-ciphers.sh  1432
Client check ciphers v0.1 Vesselin 
 
 
 please start client to connect to port 1432
SSL Handshake found
TLS version(0303)   TLS 1.2
cipher len: 0x0088
---------------------------
cipher(C030)  TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
cipher(C02C)  TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
cipher(C028)  TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
cipher(C024)  TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
cipher(C014)  TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
cipher(C00A)  TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
cipher(00A3)  TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
cipher(009F)  TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
cipher(006B)  TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 
 
 
Enjoy
 
------------------------------------------------ 
 
 
If you can not download the ZIP file above (only in this case), here the script content


Name: ./client-ciphers.sh

#!/bin/bash
#
#   Print the TLS client ciphers send in TLS ClientHello
#
#   v0.1 Vesselin 25.05.2016
#
# Constants
echo "Client check ciphers v0.1 Vesselin"
echo
source ciphers.list

if [ $# -eq 0 ]; then
    echo "No arguments supplied. Please provide port number to lisen, for example 1432"
    exit 1
fi

echo "please start client to connect to port "$1
hex=`echo "test" | nc -l $1 -i 1| xxd -p| tr -d "\n"| tr '[:lower:]' '[:upper:]'`

# simple check if it look like SSL handshake
if [ "${hex:0:4}" = "1603" ]; then
    echo "SSL Handshake found"
else
    echo "Error: Not SSL Handshake found"
    exit 2
fi

version=${hex:18:4}
echo "TLS version("$version")   "${TlsVersion[$version]}

cipher_len="0x"${hex:88:4}

echo "cipher len: "$cipher_len
echo "---------------------------"
for (( i=92; i<$(($cipher_len*2+92)); i=i+4 ))
do 
    c=${hex:$i:4}
    echo  "cipher("$c")  "${Cipher[$c]}    
done
echo "---------------------------"



and the constants as separate script, since you need to update according new TLS RFCs

Name:ciphers.list
declare -A TlsVersion
TlsVersion[0300]="SSL 3.0"
TlsVersion[0301]="TLS 1.0"
TlsVersion[0302]="TLS 1.1"
TlsVersion[0303]="TLS 1.2"

declare -A Cipher
Cipher[0001]=TLS_RSA_WITH_NULL_MD5
Cipher[0002]=TLS_RSA_WITH_NULL_SHA
Cipher[0003]=TLS_RSA_EXPORT_WITH_RC4_40_MD5
Cipher[0004]=TLS_RSA_WITH_RC4_128_MD5
Cipher[0005]=TLS_RSA_WITH_RC4_128_SHA
Cipher[0006]=TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
Cipher[0007]=TLS_RSA_WITH_IDEA_CBC_SHA
Cipher[0008]=TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
Cipher[0009]=TLS_RSA_WITH_DES_CBC_SHA
Cipher[000A]=TLS_RSA_WITH_3DES_EDE_CBC_SHA
Cipher[000B]=TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA
Cipher[000C]=TLS_DH_DSS_WITH_DES_CBC_SHA
Cipher[000D]=TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA
Cipher[000E]=TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA
Cipher[000F]=TLS_DH_RSA_WITH_DES_CBC_SHA
Cipher[0010]=TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA
Cipher[0011]=TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
Cipher[0012]=TLS_DHE_DSS_WITH_DES_CBC_SHA
Cipher[0013]=TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
Cipher[0014]=TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
Cipher[0015]=TLS_DHE_RSA_WITH_DES_CBC_SHA
Cipher[0016]=TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
Cipher[0017]=TLS_DH_anon_EXPORT_WITH_RC4_40_MD5
Cipher[0018]=TLS_DH_anon_WITH_RC4_128_MD5
Cipher[0019]=TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA
Cipher[001A]=TLS_DH_anon_WITH_DES_CBC_SHA
Cipher[001B]=TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
Cipher[001E]=TLS_KRB5_WITH_DES_CBC_SHA
Cipher[001F]=TLS_KRB5_WITH_3DES_EDE_CBC_SHA
Cipher[0020]=TLS_KRB5_WITH_RC4_128_SHA
Cipher[0021]=TLS_KRB5_WITH_IDEA_CBC_SHA
Cipher[0022]=TLS_KRB5_WITH_DES_CBC_MD5
Cipher[0023]=TLS_KRB5_WITH_3DES_EDE_CBC_MD5
Cipher[0024]=TLS_KRB5_WITH_RC4_128_MD5
Cipher[0025]=TLS_KRB5_WITH_IDEA_CBC_MD5
Cipher[0026]=TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
Cipher[0027]=TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA
Cipher[0028]=TLS_KRB5_EXPORT_WITH_RC4_40_SHA
Cipher[0029]=TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5
Cipher[002A]=TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5
Cipher[002B]=TLS_KRB5_EXPORT_WITH_RC4_40_MD5
Cipher[002C]=TLS_PSK_WITH_NULL_SHA
Cipher[002D]=TLS_DHE_PSK_WITH_NULL_SHA
Cipher[002E]=TLS_RSA_PSK_WITH_NULL_SHA
Cipher[002F]=TLS_RSA_WITH_AES_128_CBC_SHA
Cipher[0030]=TLS_DH_DSS_WITH_AES_128_CBC_SHA
Cipher[0031]=TLS_DH_RSA_WITH_AES_128_CBC_SHA
Cipher[0032]=TLS_DHE_DSS_WITH_AES_128_CBC_SHA
Cipher[0033]=TLS_DHE_RSA_WITH_AES_128_CBC_SHA
Cipher[0034]=TLS_DH_anon_WITH_AES_128_CBC_SHA
Cipher[0035]=TLS_RSA_WITH_AES_256_CBC_SHA
Cipher[0036]=TLS_DH_DSS_WITH_AES_256_CBC_SHA
Cipher[0037]=TLS_DH_RSA_WITH_AES_256_CBC_SHA
Cipher[0038]=TLS_DHE_DSS_WITH_AES_256_CBC_SHA
Cipher[0039]=TLS_DHE_RSA_WITH_AES_256_CBC_SHA
Cipher[003A]=TLS_DH_anon_WITH_AES_256_CBC_SHA
Cipher[003B]=TLS_RSA_WITH_NULL_SHA256
Cipher[003C]=TLS_RSA_WITH_AES_128_CBC_SHA256
Cipher[003D]=TLS_RSA_WITH_AES_256_CBC_SHA256
Cipher[003E]=TLS_DH_DSS_WITH_AES_128_CBC_SHA256
Cipher[003F]=TLS_DH_RSA_WITH_AES_128_CBC_SHA256
Cipher[0040]=TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
Cipher[0041]=TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
Cipher[0042]=TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
Cipher[0043]=TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
Cipher[0044]=TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
Cipher[0045]=TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
Cipher[0046]=TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
Cipher[0067]=TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
Cipher[0068]=TLS_DH_DSS_WITH_AES_256_CBC_SHA256
Cipher[0069]=TLS_DH_RSA_WITH_AES_256_CBC_SHA256
Cipher[006A]=TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
Cipher[006B]=TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
Cipher[006C]=TLS_DH_anon_WITH_AES_128_CBC_SHA256
Cipher[006D]=TLS_DH_anon_WITH_AES_256_CBC_SHA256
Cipher[0084]=TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
Cipher[0085]=TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
Cipher[0086]=TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
Cipher[0087]=TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
Cipher[0088]=TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
Cipher[0089]=TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
Cipher[008A]=TLS_PSK_WITH_RC4_128_SHA
Cipher[008B]=TLS_PSK_WITH_3DES_EDE_CBC_SHA
Cipher[008C]=TLS_PSK_WITH_AES_128_CBC_SHA
Cipher[008D]=TLS_PSK_WITH_AES_256_CBC_SHA
Cipher[008E]=TLS_DHE_PSK_WITH_RC4_128_SHA
Cipher[008F]=TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
Cipher[0090]=TLS_DHE_PSK_WITH_AES_128_CBC_SHA
Cipher[0091]=TLS_DHE_PSK_WITH_AES_256_CBC_SHA
Cipher[0092]=TLS_RSA_PSK_WITH_RC4_128_SHA
Cipher[0093]=TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
Cipher[0094]=TLS_RSA_PSK_WITH_AES_128_CBC_SHA
Cipher[0095]=TLS_RSA_PSK_WITH_AES_256_CBC_SHA
Cipher[0096]=TLS_RSA_WITH_SEED_CBC_SHA
Cipher[0097]=TLS_DH_DSS_WITH_SEED_CBC_SHA
Cipher[0098]=TLS_DH_RSA_WITH_SEED_CBC_SHA
Cipher[0099]=TLS_DHE_DSS_WITH_SEED_CBC_SHA
Cipher[009A]=TLS_DHE_RSA_WITH_SEED_CBC_SHA
Cipher[009B]=TLS_DH_anon_WITH_SEED_CBC_SHA
Cipher[009C]=TLS_RSA_WITH_AES_128_GCM_SHA256
Cipher[009D]=TLS_RSA_WITH_AES_256_GCM_SHA384
Cipher[009E]=TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
Cipher[009F]=TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
Cipher[00A0]=TLS_DH_RSA_WITH_AES_128_GCM_SHA256
Cipher[00A1]=TLS_DH_RSA_WITH_AES_256_GCM_SHA384
Cipher[00A2]=TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
Cipher[00A3]=TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
Cipher[00A4]=TLS_DH_DSS_WITH_AES_128_GCM_SHA256
Cipher[00A5]=TLS_DH_DSS_WITH_AES_256_GCM_SHA384
Cipher[00A6]=TLS_DH_anon_WITH_AES_128_GCM_SHA256
Cipher[00A7]=TLS_DH_anon_WITH_AES_256_GCM_SHA384
Cipher[00A8]=TLS_PSK_WITH_AES_128_GCM_SHA256
Cipher[00A9]=TLS_PSK_WITH_AES_256_GCM_SHA384
Cipher[00AA]=TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
Cipher[00AB]=TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
Cipher[00AC]=TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
Cipher[00AD]=TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
Cipher[00AE]=TLS_PSK_WITH_AES_128_CBC_SHA256
Cipher[00AF]=TLS_PSK_WITH_AES_256_CBC_SHA384
Cipher[00B0]=TLS_PSK_WITH_NULL_SHA256
Cipher[00B1]=TLS_PSK_WITH_NULL_SHA384
Cipher[00B2]=TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
Cipher[00B3]=TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
Cipher[00B4]=TLS_DHE_PSK_WITH_NULL_SHA256
Cipher[00B5]=TLS_DHE_PSK_WITH_NULL_SHA384
Cipher[00B6]=TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
Cipher[00B7]=TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
Cipher[00B8]=TLS_RSA_PSK_WITH_NULL_SHA256
Cipher[00B9]=TLS_RSA_PSK_WITH_NULL_SHA384
Cipher[00BA]=TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
Cipher[00BB]=TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256
Cipher[00BC]=TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256
Cipher[00BD]=TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256
Cipher[00BE]=TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
Cipher[00BF]=TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256
Cipher[00C0]=TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
Cipher[00C1]=TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256
Cipher[00C2]=TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256
Cipher[00C3]=TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256
Cipher[00C4]=TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
Cipher[00C5]=TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256
Cipher[00FF]=TLS_EMPTY_RENEGOTIATION_INFO_SCSV
Cipher[5600]=TLS_FALLBACK_SCSV
Cipher[C001]=TLS_ECDH_ECDSA_WITH_NULL_SHA
Cipher[C002]=TLS_ECDH_ECDSA_WITH_RC4_128_SHA
Cipher[C003]=TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
Cipher[C004]=TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
Cipher[C005]=TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
Cipher[C006]=TLS_ECDHE_ECDSA_WITH_NULL_SHA
Cipher[C007]=TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
Cipher[C008]=TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
Cipher[C009]=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
Cipher[C00A]=TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
Cipher[C00B]=TLS_ECDH_RSA_WITH_NULL_SHA
Cipher[C00C]=TLS_ECDH_RSA_WITH_RC4_128_SHA
Cipher[C00D]=TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
Cipher[C00E]=TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
Cipher[C00F]=TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
Cipher[C010]=TLS_ECDHE_RSA_WITH_NULL_SHA
Cipher[C011]=TLS_ECDHE_RSA_WITH_RC4_128_SHA
Cipher[C012]=TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
Cipher[C013]=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
Cipher[C014]=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
Cipher[C015]=TLS_ECDH_anon_WITH_NULL_SHA
Cipher[C016]=TLS_ECDH_anon_WITH_RC4_128_SHA
Cipher[C017]=TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
Cipher[C018]=TLS_ECDH_anon_WITH_AES_128_CBC_SHA
Cipher[C019]=TLS_ECDH_anon_WITH_AES_256_CBC_SHA
Cipher[C01A]=TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA
Cipher[C01B]=TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA
Cipher[C01C]=TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA
Cipher[C01D]=TLS_SRP_SHA_WITH_AES_128_CBC_SHA
Cipher[C01E]=TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA
Cipher[C01F]=TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA
Cipher[C020]=TLS_SRP_SHA_WITH_AES_256_CBC_SHA
Cipher[C021]=TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA
Cipher[C022]=TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA
Cipher[C023]=TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
Cipher[C024]=TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
Cipher[C025]=TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
Cipher[C026]=TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
Cipher[C027]=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
Cipher[C028]=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
Cipher[C029]=TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
Cipher[C02A]=TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
Cipher[C02B]=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
Cipher[C02C]=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
Cipher[C02D]=TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
Cipher[C02E]=TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
Cipher[C02F]=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Cipher[C030]=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Cipher[C031]=TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
Cipher[C032]=TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
Cipher[C033]=TLS_ECDHE_PSK_WITH_RC4_128_SHA
Cipher[C034]=TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
Cipher[C035]=TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA
Cipher[C036]=TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
Cipher[C037]=TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256
Cipher[C038]=TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384
Cipher[C039]=TLS_ECDHE_PSK_WITH_NULL_SHA
Cipher[C03A]=TLS_ECDHE_PSK_WITH_NULL_SHA256
Cipher[C03B]=TLS_ECDHE_PSK_WITH_NULL_SHA384
Cipher[C03C]=TLS_RSA_WITH_ARIA_128_CBC_SHA256
Cipher[C03D]=TLS_RSA_WITH_ARIA_256_CBC_SHA384
Cipher[C03E]=TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256
Cipher[C03F]=TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384
Cipher[C040]=TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256
Cipher[C041]=TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384
Cipher[C042]=TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256
Cipher[C043]=TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384
Cipher[C044]=TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256
Cipher[C045]=TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384
Cipher[C046]=TLS_DH_anon_WITH_ARIA_128_CBC_SHA256
Cipher[C047]=TLS_DH_anon_WITH_ARIA_256_CBC_SHA384
Cipher[C048]=TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256
Cipher[C049]=TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384
Cipher[C04A]=TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256
Cipher[C04B]=TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384
Cipher[C04C]=TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256
Cipher[C04D]=TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384
Cipher[C04E]=TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256
Cipher[C04F]=TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384
Cipher[C050]=TLS_RSA_WITH_ARIA_128_GCM_SHA256
Cipher[C051]=TLS_RSA_WITH_ARIA_256_GCM_SHA384
Cipher[C052]=TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256
Cipher[C053]=TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384
Cipher[C054]=TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256
Cipher[C055]=TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384
Cipher[C056]=TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256
Cipher[C057]=TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384
Cipher[C058]=TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256
Cipher[C059]=TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384
Cipher[C05A]=TLS_DH_anon_WITH_ARIA_128_GCM_SHA256
Cipher[C05B]=TLS_DH_anon_WITH_ARIA_256_GCM_SHA384
Cipher[C05C]=TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256
Cipher[C05D]=TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384
Cipher[C05E]=TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256
Cipher[C05F]=TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384
Cipher[C060]=TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256
Cipher[C061]=TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384
Cipher[C062]=TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256
Cipher[C063]=TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384
Cipher[C064]=TLS_PSK_WITH_ARIA_128_CBC_SHA256
Cipher[C065]=TLS_PSK_WITH_ARIA_256_CBC_SHA384
Cipher[C066]=TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256
Cipher[C067]=TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384
Cipher[C068]=TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256
Cipher[C069]=TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384
Cipher[C06A]=TLS_PSK_WITH_ARIA_128_GCM_SHA256
Cipher[C06B]=TLS_PSK_WITH_ARIA_256_GCM_SHA384
Cipher[C06C]=TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256
Cipher[C06D]=TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384
Cipher[C06E]=TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256
Cipher[C06F]=TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384
Cipher[C070]=TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256
Cipher[C071]=TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384
Cipher[C072]=TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
Cipher[C073]=TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
Cipher[C074]=TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
Cipher[C075]=TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
Cipher[C076]=TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
Cipher[C077]=TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
Cipher[C078]=TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
Cipher[C079]=TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
Cipher[C07A]=TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C07B]=TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C07C]=TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C07D]=TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C07E]=TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C07F]=TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C080]=TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C081]=TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C082]=TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C083]=TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C084]=TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C085]=TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C086]=TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C087]=TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C088]=TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C089]=TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C08A]=TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C08B]=TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C08C]=TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C08D]=TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C08E]=TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C08F]=TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C090]=TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C091]=TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C092]=TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256
Cipher[C093]=TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
Cipher[C094]=TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
Cipher[C095]=TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
Cipher[C096]=TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
Cipher[C097]=TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
Cipher[C098]=TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
Cipher[C099]=TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
Cipher[C09A]=TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
Cipher[C09B]=TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
Cipher[C09C]=TLS_RSA_WITH_AES_128_CCM
Cipher[C09D]=TLS_RSA_WITH_AES_256_CCM
Cipher[C09E]=TLS_DHE_RSA_WITH_AES_128_CCM
Cipher[C09F]=TLS_DHE_RSA_WITH_AES_256_CCM
Cipher[C0A0]=TLS_RSA_WITH_AES_128_CCM_8
Cipher[C0A1]=TLS_RSA_WITH_AES_256_CCM_8
Cipher[C0A2]=TLS_DHE_RSA_WITH_AES_128_CCM_8
Cipher[C0A3]=TLS_DHE_RSA_WITH_AES_256_CCM_8
Cipher[C0A4]=TLS_PSK_WITH_AES_128_CCM
Cipher[C0A5]=TLS_PSK_WITH_AES_256_CCM
Cipher[C0A6]=TLS_DHE_PSK_WITH_AES_128_CCM
Cipher[C0A7]=TLS_DHE_PSK_WITH_AES_256_CCM
Cipher[C0A8]=TLS_PSK_WITH_AES_128_CCM_8
Cipher[C0A9]=TLS_PSK_WITH_AES_256_CCM_8
Cipher[C0AA]=TLS_PSK_DHE_WITH_AES_128_CCM_8
Cipher[C0AB]=TLS_PSK_DHE_WITH_AES_256_CCM_8
Cipher[C0AC]=TLS_ECDHE_ECDSA_WITH_AES_128_CCM
Cipher[C0AD]=TLS_ECDHE_ECDSA_WITH_AES_256_CCM
Cipher[C0AE]=TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8
Cipher[C0AF]=TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8
Cipher[CCA8]=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
Cipher[CCA9]=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
Cipher[CCAA]=TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
Cipher[CCAB]=TLS_PSK_WITH_CHACHA20_POLY1305_SHA256
Cipher[CCAC]=TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256
Cipher[CCAD]=TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256
Cipher[CCAE]=TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256






No comments:

Post a Comment