iaik.security.ssl
Class CipherSuite

java.lang.Object
  extended by iaik.security.ssl.CipherSuite
All Implemented Interfaces:
java.io.Serializable, java.lang.Comparable

public final class CipherSuite
extends java.lang.Object
implements java.io.Serializable, java.lang.Comparable

A CipherSuite defines a cipher specification supported in SSL and TLS. This includes:

See Also:
Serialized Form

Field Summary
static CipherSuite[] CS_AEAD_GCM
          GCM based AEAD cipher suites.
static CipherSuite[] CS_ALL_PSK
          All PSK ciphersuites.
static CipherSuite[] CS_DH_ANON
          Domestic ciphersuites which use no authentication and ephemeral Diffie-Hellman for key exchange.
static CipherSuite[] CS_DH_ANON_EXPORT
          Domestic ciphersuites which use no authentication and ephemeral Diffie-Hellman for key exchange.
static CipherSuite[] CS_DH_DSS
          Domestic ciphersuite which use and DSS signed Diffie-Hellman certificate for authentication and key exchange.
static CipherSuite[] CS_DH_DSS_EXPORT
          512 bit export ciphersuites which use and DSS signed Diffie-Hellman certificate for authentication and key exchange.
static CipherSuite[] CS_DH_RSA
          Domestic ciphersuite which use and RSA signed Diffie-Hellman certificate for authentication and key exchange.
static CipherSuite[] CS_DH_RSA_EXPORT
          512 bit export ciphersuite which use and RSA signed Diffie-Hellman certificate for authentication and key exchange.
static CipherSuite[] CS_DHE_DSS
          Domestic ciphersuites which use DSS for authentication and ephemeral Diffie-Hellman for key exchange.
static CipherSuite[] CS_DHE_DSS_EXPORT
          512 bit export ciphersuites which use DSS for authentication and ephemeral Diffie-Hellman for key exchange.
static CipherSuite[] CS_DHE_DSS_EXPORT1024
          1024 bit export ciphersuites which use DSS for authentication and ephemeral Diffie-Hellman for key exchange.
static CipherSuite[] CS_DHE_PSK
          PSK ciphersuites using Diffie-Hellman key exchange authenticated with a pre-shared key.
static CipherSuite[] CS_DHE_RSA
          Domestic ciphersuites which use RSA for authentication and ephemeral Diffie-Hellman for key exchange.
static CipherSuite[] CS_DHE_RSA_EXPORT
          512 bit export ciphersuites which use RSA for authentication and ephemeral Diffie-Hellman for key exchange.
static CipherSuite[] CS_ECDH_ANON
          Anonymous ECDH cipher suites.
static CipherSuite[] CS_ECDH_ECDSA
          ECDH-ECDSA cipher suites using fixed ECDH with ECDSA-signed certificates for key exchange.
static CipherSuite[] CS_ECDH_RSA
          ECDH-RSA cipher suites using fixed ECDH with RSA-signed certificates for key exchange.
static CipherSuite[] CS_ECDHE_ECDSA
          ECDHE-ECDSA cipher suites using ephemeral ECDH with ECDSA signatures for key exchange.
static CipherSuite[] CS_ECDHE_PSK
          PSK ciphersuites using EC Diffie-Hellman key exchange authenticated with a pre-shared key.
static CipherSuite[] CS_ECDHE_RSA
          ECDHE-RSA cipher suites using ephemeral ECDH with RSA signatures for key exchange.
static CipherSuite[] CS_PSK
          PSK ciphersuites using symmetric key operations for authentication only
(The NULL encryption suites -- TLS_PSK_WITH_NULL_SHA, TLS_PSK_WITH_NULL_SHA256, TLS_PSK_WITH_NULL_SHA384 -- are not included in this list).
static CipherSuite[] CS_RSA
          Domestic ciphersuites which use RSA for authentication and key exchange.
static CipherSuite[] CS_RSA_EXPORT
          512 bit export ciphersuites which use RSA for authentication and key exchange.
static CipherSuite[] CS_RSA_EXPORT1024
          1024 bit export ciphersuites which use RSA for authentication and key exchange.
static CipherSuite[] CS_RSA_PSK
          PSK ciphersuites using RSA based public key authentication of the server and pre-shared key authenticaion of the client.
static CipherSuite[] CS_RSA_WITH_NULL
          Ciphersuites which use RSA for authentication and key exchange but no encryption.
static CipherSuite[] CS_SSL_V2
           
static CipherSuite PRIVATE_RSA_WITH_RC2_CBC_MD5
          Ciphersuite for SSLv2 mode only.
static CipherSuite SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
          Exportable cipher suite.
static CipherSuite SSL_DH_anon_EXPORT_WITH_RC4_40_MD5
          Exportable cipher suite.
static CipherSuite SSL_DH_anon_WITH_3DES_EDE_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_anon_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_anon_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_anon_WITH_DES_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_anon_WITH_RC4_128_MD5
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_anon_WITH_RC4_MD5
          Deprecated. use SSL_DH_anon_WITH_RC4_128_MD5 instead
static CipherSuite SSL_DH_DSS_EXPORT_WITH_DES40_CBC_SHA
          Exportable cipher suite.
static CipherSuite SSL_DH_DSS_WITH_3DES_EDE_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_DSS_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_DSS_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_DSS_WITH_DES_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_RSA_EXPORT_WITH_DES40_CBC_SHA
          Exportable cipher suite.
static CipherSuite SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_RSA_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_RSA_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DH_RSA_WITH_DES_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
          Exportable cipher suite.
static CipherSuite SSL_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA
          56 bit exportable ciphersuite.
static CipherSuite SSL_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA
          56 bit exportable ciphersuite.
static CipherSuite SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DHE_DSS_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DHE_DSS_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DHE_DSS_WITH_DES_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DHE_DSS_WITH_RC4_128_SHA
          Non-exportable ciphersuite.
static CipherSuite SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
          Exportable cipher suite.
static CipherSuite SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DHE_RSA_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DHE_RSA_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_DHE_RSA_WITH_DES_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
          Exportable cipher suite.
static CipherSuite SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
          Exportable cipher suite.
static CipherSuite SSL_RSA_EXPORT_WITH_RC4_40_MD5
          Exportable cipher suite.
static CipherSuite SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA
          56 bit exportable ciphersuite.
static CipherSuite SSL_RSA_EXPORT1024_WITH_RC4_56_SHA
          56 bit exportable ciphersuite.
static CipherSuite SSL_RSA_WITH_3DES_EDE_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_RSA_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_RSA_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_RSA_WITH_DES_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_RSA_WITH_IDEA_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_RSA_WITH_NULL_MD5
          Does not encrypt data but uses MD5 for the MAC.
static CipherSuite SSL_RSA_WITH_NULL_SHA
          Does not encrypt data but uses SHA for the MAC.
static CipherSuite SSL_RSA_WITH_RC4_128_MD5
          Non-Exportable cipher suite.
static CipherSuite SSL_RSA_WITH_RC4_128_SHA
          Non-Exportable cipher suite.
static CipherSuite SSL_RSA_WITH_RC4_MD5
          Deprecated. use SSL_RSA_WITH_RC4_128_MD5 instead
static CipherSuite SSL_RSA_WITH_RC4_SHA
          Deprecated. use SSL_RSA_WITH_RC4_128_SHA instead
static CipherSuite TLS_DH_anon_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_anon_WITH_AES_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_anon_WITH_AES_128_GCM_SHA256
          Anonymous DH cipher suite with 128 bit key AES in GCM mode.
static CipherSuite TLS_DH_anon_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_anon_WITH_AES_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_anon_WITH_AES_256_GCM_SHA384
          Anonymous DH cipher suite with 256 bit key AES in GCM mode.
static CipherSuite TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256
          Anonymous DH cipher suite with 128 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384
          Anonymous DH cipher suite with 256 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_DH_DSS_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_DSS_WITH_AES_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_DSS_WITH_AES_128_GCM_SHA256
          DH-DSS cipher suite with 128 bit key AES in GCM mode.
static CipherSuite TLS_DH_DSS_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_DSS_WITH_AES_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_DSS_WITH_AES_256_GCM_SHA384
          DH-DSS cipher suite with 256 bit key AES in GCM mode.
static CipherSuite TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256
          DH-DSS cipher suite with 128 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384
          DH-DSS cipher suite with 256 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_DH_RSA_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_RSA_WITH_AES_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_RSA_WITH_AES_128_GCM_SHA256
          DH-RSA cipher suite with 128 bit key AES in GCM mode.
static CipherSuite TLS_DH_RSA_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_RSA_WITH_AES_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_RSA_WITH_AES_256_GCM_SHA384
          DH-RSA cipher suite with 256 bit key AES in GCM mode.
static CipherSuite TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256
          DH-RSA cipher suite with 128 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384
          DH-RSA cipher suite with 256 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_DHE_DSS_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
          DHE-DSS cipher suite with 128 bit key AES in GCM mode.
static CipherSuite TLS_DHE_DSS_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
          DHE-DSS cipher suite with 256 bit key AES in GCM mode.
static CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256
          DHE-DSS cipher suite with 128 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384
          DHE-DSS cipher suite with 256 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_PSK_WITH_AES_128_CBC_SHA
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_PSK_WITH_AES_256_CBC_SHA
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_PSK_WITH_NULL_SHA
          DHE-PSK cipher suite with NULL encryption.
static CipherSuite TLS_DHE_PSK_WITH_NULL_SHA256
          DHE-PSK cipher suite with NULL encryption and SHA-256 for MAC computation.
static CipherSuite TLS_DHE_PSK_WITH_NULL_SHA384
          DHE-PSK cipher suite with NULL encryption and SHA-384 for MAC computation.
static CipherSuite TLS_DHE_PSK_WITH_RC4_128_SHA
          DHE-PSK cipher suite.
static CipherSuite TLS_DHE_RSA_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
          DHE-RSA cipher suite with 128 bit key AES in GCM mode.
static CipherSuite TLS_DHE_RSA_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
          DHE-RSA cipher suite with 256 bit key AES in GCM mode.
static CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
          DHE-RSA cipher suite with 128 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
          DHE-RSA cipher suite with 256 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
          Anonymous ECDH cipher suite with Triple DES in CBC mode.
static CipherSuite TLS_ECDH_anon_WITH_AES_128_CBC_SHA
          Anonymous ECDH cipher suite with 128 bit key AES in CBC mode.
static CipherSuite TLS_ECDH_anon_WITH_AES_256_CBC_SHA
          Anonymous ECDH cipher suite with 256 bit key AES in CBC mode.
static CipherSuite TLS_ECDH_anon_WITH_NULL_SHA
          Anonymous ECDH cipher suite with NULL encryption.
static CipherSuite TLS_ECDH_anon_WITH_RC4_128_SHA
          Anonymous ECDH cipher suite with 128 bit RC4 encryption.
static CipherSuite TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
          ECDH-ECDSA cipher suite with Triple DES in CBC mode.
static CipherSuite TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
          ECDH-ECDSA cipher suite with 128 bit key AES in CBC mode.
static CipherSuite TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
          ECDH-ECDSA cipher suite with 128 bit key AES in CBC mode and SHA-256 for MAC computation.
static CipherSuite TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
          ECDH-ECDSA cipher suite with 128 bit key AES in GCM mode.
static CipherSuite TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
          ECDH-ECDSA cipher suite with 256 bit key AES in CBC mode.
static CipherSuite TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
          ECDH-ECDSA cipher suite with 256 bit key AES in CBC mode and SHA-384 for MAC computation.
static CipherSuite TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
          ECDH-ECDSA cipher suite with 256 bit key AES in GCM mode.
static CipherSuite TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
          ECDH-ECDSA cipher suite with 128 bit key CAMELLIA in CBC mode and SHA-256 for MAC computation.
static CipherSuite TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
          ECDH-ECDSA cipher suite with 128 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
          ECDH-ECDSA cipher suite with 256 bit key CAMELLIA in CBC mode and SHA-384 for MAC computation.
static CipherSuite TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
          ECDH-ECDSA cipher suite with 256 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_ECDH_ECDSA_WITH_NULL_SHA
          ECDH-ECDSA cipher suite with NULL encryption.
static CipherSuite TLS_ECDH_ECDSA_WITH_RC4_128_SHA
          ECDH-ECDSA cipher suite with 128 bit RC4 encryption.
static CipherSuite TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
          ECDH-RSA cipher suite with Triple DES in CBC mode.
static CipherSuite TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
          ECDH-RSA cipher suite with 128 bit key AES in CBC mode.
static CipherSuite TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
          ECDH-RSA cipher suite with 128 bit key AES in CBC mode and SHA-256 for MAC computation.
static CipherSuite TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
          ECDH-RSA cipher suite with 128 bit key AES in GCM mode.
static CipherSuite TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
          ECDH-RSA cipher suite with 256 bit key AES in CBC mode.
static CipherSuite TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
          ECDH-RSA cipher suite with 256 bit key AES in CBC mode and SHA-384 for MAC computation.
static CipherSuite TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
          ECDH-RSA cipher suite with 256 bit key AES in GCM mode.
static CipherSuite TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
          ECDH-RSA cipher suite with 128 bit key CAMELLIA in CBC mode and SHA-256 for MAC computation.
static CipherSuite TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
          ECDH-RSA cipher suite with 128 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
          ECDH-RSA cipher suite with 256 bit key CAMELLIA in CBC mode and SHA-384 for MAC computation.
static CipherSuite TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
          ECDH-RSA cipher suite with 256 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_ECDH_RSA_WITH_NULL_SHA
          ECDH-RSA cipher suite with NULL encryption.
static CipherSuite TLS_ECDH_RSA_WITH_RC4_128_SHA
          ECDH-RSA cipher suite with 128 bit RC4 encryption.
static CipherSuite TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
          ECDHE-ECDSA cipher suite with Triple DES in CBC mode.
static CipherSuite TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
          ECDHE-ECDSA cipher suite with 128 bit key AES in CBC mode.
static CipherSuite TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
          ECDHE-ECDSA cipher suite with 128 bit key AES in CBC mode and SHA-256 for MAC computation (RFC 5289).
static CipherSuite TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
          ECDHE-ECDSA cipher suite with 128 bit key AES in GCM mode.
static CipherSuite TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
          ECDHE-ECDSA cipher suite with 256 bit key AES in CBC mode.
static CipherSuite TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
          ECDHE-ECDSA cipher suite with 256 bit key AES in CBC mode and SHA-384 for MAC computation(RFC 5289).
static CipherSuite TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
          ECDHE-ECDSA cipher suite with 256 bit key AES in GCM mode.
static CipherSuite TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
          ECDHE-ECDSA cipher suite with 128 bit key CAMELLIA in CBC mode and SHA-256 for MAC computation (RFC 6367).
static CipherSuite TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
          ECDHE-ECDSA cipher suite with 128 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
          ECDHE-ECDSA cipher suite with 256 bit key CAMELLIA in CBC mode and SHA-384 for MAC computation(RFC 6367).
static CipherSuite TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
          ECDHE-ECDSA cipher suite with 256 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_ECDHE_ECDSA_WITH_NULL_SHA
          ECDHE-ECDSA cipher suite with NULL encryption.
static CipherSuite TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
          ECDHE-ECDSA cipher suite with 128 bit RC4 encryption.
static CipherSuite TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
          ECDHE-PSK cipher suite (RFC 5489).
static CipherSuite TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA
          ECDHE-PSK cipher suite (RFC 5489).
static CipherSuite TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256
          ECDHE-PSK cipher suite (RFC 5489).
static CipherSuite TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
          ECDHE-PSK cipher suite (RFC 5489).
static CipherSuite TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384
          ECDHE-PSK cipher suite (RFC 5489).
static CipherSuite TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
          ECDHE-PSK cipher suite (RFC 6367).
static CipherSuite TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
          ECDHE-PSK cipher suite (RFC 6367).
static CipherSuite TLS_ECDHE_PSK_WITH_NULL_SHA
          ECDHE-PSK cipher suite (RFC 5489) with NULL encryption.
static CipherSuite TLS_ECDHE_PSK_WITH_NULL_SHA256
          ECDHE-PSK cipher suite (RFC 5489) with NULL encryption and SHA-256 for MAC computation.
static CipherSuite TLS_ECDHE_PSK_WITH_NULL_SHA384
          ECDHE-PSK cipher suite (RFC 5489) with NULL encryption and SHA-384 for MAC computation.
static CipherSuite TLS_ECDHE_PSK_WITH_RC4_128_SHA
          ECDHE-PSK cipher suite (RFC 5489).
static CipherSuite TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
          ECDHE-RSA cipher suite with Triple DES in CBC mode.
static CipherSuite TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
          ECDHE-RSA cipher suite with 128 bit key AES in CBC mode.
static CipherSuite TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
          ECDHE-RSA cipher suite with 128 bit key AES in CBC mode and SHA-256 for MAC computation.
static CipherSuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
          ECDHE-RSA cipher suite with 128 bit key AES in GCM mode.
static CipherSuite TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
          ECDHE-RSA cipher suite with 256 bit key AES in CBC mode.
static CipherSuite TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
          ECDHE-RSA cipher suite with 256 bit key AES in CBC mode and SHA-384 for MAC computation.
static CipherSuite TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
          ECDHE-RSA cipher suite with 256 bit key AES in GCM mode.
static CipherSuite TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
          ECDHE-RSA cipher suite with 128 bit key CAMELLIA in CBC mode and SHA-256 for MAC computation.
static CipherSuite TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
          ECDHE-RSA cipher suite with 128 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
          ECDHE-RSA cipher suite with 256 bit key CAMELLIA in CBC mode and SHA-384 for MAC computation.
static CipherSuite TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
          ECDHE-RSA cipher suite with 256 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_ECDHE_RSA_WITH_NULL_SHA
          ECDHE-RSA cipher suite with NULL encryption.
static CipherSuite TLS_ECDHE_RSA_WITH_RC4_128_SHA
          ECDHE-RSA cipher suite with 128 bit RC4 encryption.
static CipherSuite TLS_FALLBACK_SCSV
          Magic cipher suite for preventing protocol downgrade attacks on TLS (draft-bmoeller-tls-downgrade-scsv-01).
static CipherSuite TLS_PSK_WITH_3DES_EDE_CBC_SHA
          PSK cipher suite.
static CipherSuite TLS_PSK_WITH_AES_128_CBC_SHA
          PSK cipher suite.
static CipherSuite TLS_PSK_WITH_AES_128_CBC_SHA256
          PSK cipher suite.
static CipherSuite TLS_PSK_WITH_AES_128_GCM_SHA256
          PSK cipher suite.
static CipherSuite TLS_PSK_WITH_AES_256_CBC_SHA
          PSK cipher suite.
static CipherSuite TLS_PSK_WITH_AES_256_CBC_SHA384
          PSK cipher suite.
static CipherSuite TLS_PSK_WITH_AES_256_GCM_SHA384
          PSK cipher suite.
static CipherSuite TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
          PSK cipher suite.
static CipherSuite TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
          PSK cipher suite.
static CipherSuite TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
          PSK cipher suite.
static CipherSuite TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
          PSK cipher suite.
static CipherSuite TLS_PSK_WITH_NULL_SHA
          PSK cipher suite with NULL encryption.
static CipherSuite TLS_PSK_WITH_NULL_SHA256
          PSK cipher suite with NULL encryption and SHA-256 for MAC computation.
static CipherSuite TLS_PSK_WITH_NULL_SHA384
          PSK cipher suite with NULL encryption and SHA-384 for MAC computation.
static CipherSuite TLS_PSK_WITH_RC4_128_SHA
          PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_AES_128_CBC_SHA
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_AES_256_CBC_SHA
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_PSK_WITH_NULL_SHA
          RSA-PSK cipher suite with NULL encryption.
static CipherSuite TLS_RSA_PSK_WITH_NULL_SHA256
          RSA-PSK cipher suite with NULL encryption and SHA-256 for MAC computation.
static CipherSuite TLS_RSA_PSK_WITH_NULL_SHA384
          RSA-PSK cipher suite with NULL encryption and SHA-384 for MAC computation.
static CipherSuite TLS_RSA_PSK_WITH_RC4_128_SHA
          RSA-PSK cipher suite.
static CipherSuite TLS_RSA_WITH_AES_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_RSA_WITH_AES_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_RSA_WITH_AES_128_GCM_SHA256
          RSA cipher suite with 128 bit key AES in GCM mode.
static CipherSuite TLS_RSA_WITH_AES_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_RSA_WITH_AES_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_RSA_WITH_AES_256_GCM_SHA384
          RSA cipher suite with 256 bit key AES in GCM mode.
static CipherSuite TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
          RSA cipher suite with 128 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
          Non-Exportable cipher suite.
static CipherSuite TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
          Non-Exportable cipher suite.
static CipherSuite TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
          RSA cipher suite with 256 bit key CAMELLIA in GCM mode.
static CipherSuite TLS_RSA_WITH_NULL_SHA256
          Does not encrypt data but uses SHA-256 for the MAC.
 
Constructor Summary
CipherSuite(java.lang.String cipherSuiteName, java.lang.String keyExchangeAlgorithm, java.lang.String cipherAlgorithm, java.lang.String hashAlgorithm, int id, int keyMaterial, int IVSize)
          Create a new user defined ciphersuite.
 
Method Summary
 int compareTo(java.lang.Object o)
          Compares the given cipher suite of being stronger than the given cipher suite.
 boolean equals(java.lang.Object o)
           
 int getAllowedMaxVersion()
          Gets the max protocol version that may be used with this cipher suite.
 int getAllowedMinVersion()
          Gets the min protocol version that may be used with this cipher suite.
static CipherSuite getByName(java.lang.String name)
          Returns the cipher suite specified through its name.
 java.lang.String getCipherAlgorithm()
          Returns the name (transformation string) of the encryption algorithm.
static CipherSuite[] getDefault()
          Deprecated. use new CipherSuiteList(CipherSuiteList.L_DEFAULT) instead.
 int getExpandedKeyLength()
          Returns the number of bytes actually fed into the encryption algorithm.
 int getHashSize()
          Returns the hash size for the given MessageDigest.
 int getID()
          Returns the identifier of this CipherSuite.
 int getIVSize()
          Returns the number of bytes that are used for the initialization vector.
 java.lang.String getKeyExchangeAlgorithm()
          Returns the name of the key exchange algorithm.
 int getKeyLength()
          Returns the number of bytes that are used for generating the write keys.
 int getKeySizeLimit()
          Returns the key size limit for certificates.
 java.lang.String getMacAlgorithm()
          Returns the name of the MAC algorithm.
 java.lang.String getName()
          Returns the name of this CipherSuite.
 java.lang.String getPrfAlgorithm()
          Returns the name of the PRF algorithm (only meaningful for TLS versions >= 1.2).
 int hashCode()
           
 boolean isAvailable()
          Check if this ciphersuite is available, i.e. the current SecurityProvider supports all necessary algorithms.
 boolean isExportable()
          Returns true if this cipher suite is exportable.
 java.lang.String toString()
           
 
Methods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, wait, wait, wait
 

Field Detail

TLS_FALLBACK_SCSV

public static final CipherSuite TLS_FALLBACK_SCSV
Magic cipher suite for preventing protocol downgrade attacks on TLS (draft-bmoeller-tls-downgrade-scsv-01).
For interoperability reasons TLS clients may not only use the TLS inherent protocol negotiation mechanism, but may implement a downgrade dance making repeated handshake attempts with downgraded protocol versions if the first/previous (higher versioned) handshake with the server fails. Although both client and server are able to talk TLS, this downgrade dance maybe used by an attacker to enforce a fall back to SSLv3.0, which is vulnerable to a padding-oracle attack if CBC is used ("POODLE" -- Padding Oracle On Downgraded Legacy Encryption attack).

To prevent from a protocol downgrade (especially from TLS to SSLv3.0) draft-bmoeller-tls-downgrade-scsv-00 introduces the special TLS_FALLBACK_SCSV cipher suite value to be added by the client to the cipher suite set of a downgrade handshake that uses a ClientHello.client_version with a lower value than the latest (highest-valued) version supported by the client. For interoperability reasons the TLS_FALLBACK_SCSV shall be added at the end of the cipher suite list:

  cipherSuiteList.add(CipherSuite.TLS_FALLBACK_SCSV);
  

The server, when receiving a ClientHello containing the TLS_FALLBACK_SCSV cipher suite and suggesting a lower protocol version than the highest version supported by the server, knows that the handshake is a downgrade handshake and will abort the handshake with an inappropriate_fallback alert.

iSaSiLk itself does not implement a downgrade dance, but a downgrade dance may be used by iSaSiLk based clients. Such clients are recommended to either remove the downgrade dance or to change it by adding the TLS_FALLBACK_SCSV cipher suite value to their downgrade handshakes as described by draft-bmoeller-tls-downgrade-scsv-00.
On the server side iSaSilk (from version 5.0 upwards) automatically will check if the TLS_FALLBACK_SCSV is included in the client cipher suite set and will abort the handshake with an inappropriate_fallback alert if the ClientHello.client_version value is lower than the highest protocol version supported by the server.

Of course, disabling SSLv3.0 at client and/or server side at all will be the most effective countermeasure against the POODLE attack.


SSL_RSA_WITH_NULL_MD5

public static final CipherSuite SSL_RSA_WITH_NULL_MD5
Does not encrypt data but uses MD5 for the MAC.


SSL_RSA_WITH_NULL_SHA

public static final CipherSuite SSL_RSA_WITH_NULL_SHA
Does not encrypt data but uses SHA for the MAC.


TLS_RSA_WITH_NULL_SHA256

public static final CipherSuite TLS_RSA_WITH_NULL_SHA256
Does not encrypt data but uses SHA-256 for the MAC. Available since TLS 1.2


SSL_RSA_EXPORT_WITH_RC4_40_MD5

public static final CipherSuite SSL_RSA_EXPORT_WITH_RC4_40_MD5
Exportable cipher suite. Uses a 40 bit key to encrypt data with RC4.


SSL_RSA_WITH_RC4_128_MD5

public static final CipherSuite SSL_RSA_WITH_RC4_128_MD5
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with RC4.


SSL_RSA_WITH_RC4_128_SHA

public static final CipherSuite SSL_RSA_WITH_RC4_128_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with RC4.


SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5

public static final CipherSuite SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
Exportable cipher suite. Uses a 40 bit key to encrypt data with RC2 in CBC mode.


SSL_RSA_WITH_IDEA_CBC_SHA

public static final CipherSuite SSL_RSA_WITH_IDEA_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with IDEA in CBC mode.


SSL_RSA_EXPORT_WITH_DES40_CBC_SHA

public static final CipherSuite SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
Exportable cipher suite. Uses a 40 bit key to encrypt data with DES in CBC mode.


SSL_RSA_WITH_DES_CBC_SHA

public static final CipherSuite SSL_RSA_WITH_DES_CBC_SHA
Non-Exportable cipher suite. Uses a 56 bit key to encrypt data with DES in CBC mode.


SSL_RSA_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite SSL_RSA_WITH_3DES_EDE_CBC_SHA
Non-Exportable cipher suite. Uses a 168 bit key to encrypt data with Triple DES in CBC mode.


SSL_DH_DSS_EXPORT_WITH_DES40_CBC_SHA

public static final CipherSuite SSL_DH_DSS_EXPORT_WITH_DES40_CBC_SHA
Exportable cipher suite. Uses a 40 bit key to encrypt data with DES in CBC mode.


SSL_DH_DSS_WITH_DES_CBC_SHA

public static final CipherSuite SSL_DH_DSS_WITH_DES_CBC_SHA
Non-Exportable cipher suite. Uses a 56 bit key to encrypt data with DES in CBC mode.


SSL_DH_DSS_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite SSL_DH_DSS_WITH_3DES_EDE_CBC_SHA
Non-Exportable cipher suite. Uses a 168 bit key to encrypt data with Triple DES in CBC mode.


SSL_DH_RSA_EXPORT_WITH_DES40_CBC_SHA

public static final CipherSuite SSL_DH_RSA_EXPORT_WITH_DES40_CBC_SHA
Exportable cipher suite. Uses a 40 bit key to encrypt data with DES in CBC mode.


SSL_DH_RSA_WITH_DES_CBC_SHA

public static final CipherSuite SSL_DH_RSA_WITH_DES_CBC_SHA
Non-Exportable cipher suite. Uses a 56 bit key to encrypt data with DES in CBC mode.


SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA
Non-Exportable cipher suite. Uses a 168 bit key to encrypt data with Triple DES in CBC mode.


SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA

public static final CipherSuite SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
Exportable cipher suite. Uses a 40 bit key to encrypt data with DES in CBC mode.


SSL_DHE_DSS_WITH_DES_CBC_SHA

public static final CipherSuite SSL_DHE_DSS_WITH_DES_CBC_SHA
Non-Exportable cipher suite. Uses a 56 bit key to encrypt data with DES in CBC mode.


SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
Non-Exportable cipher suite. Uses a 168 bit key to encrypt data with Triple DES in CBC mode.


SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA

public static final CipherSuite SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
Exportable cipher suite. Uses a 40 bit key to encrypt data with DES in CBC mode.


SSL_DHE_RSA_WITH_DES_CBC_SHA

public static final CipherSuite SSL_DHE_RSA_WITH_DES_CBC_SHA
Non-Exportable cipher suite. Uses a 56 bit key to encrypt data with DES in CBC mode.


SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
Non-Exportable cipher suite. Uses a 168 bit key to encrypt data with Triple DES in CBC mode.


SSL_DH_anon_EXPORT_WITH_RC4_40_MD5

public static final CipherSuite SSL_DH_anon_EXPORT_WITH_RC4_40_MD5
Exportable cipher suite. Uses a 40 bit key to encrypt data with RC4.


SSL_DH_anon_WITH_RC4_128_MD5

public static final CipherSuite SSL_DH_anon_WITH_RC4_128_MD5
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with RC4.


SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA

public static final CipherSuite SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
Exportable cipher suite. Uses a 40 bit key to encrypt data with DES in CBC mode.


SSL_DH_anon_WITH_DES_CBC_SHA

public static final CipherSuite SSL_DH_anon_WITH_DES_CBC_SHA
Non-Exportable cipher suite. Uses a 56 bit key to encrypt data with DES in CBC mode.


SSL_DH_anon_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite SSL_DH_anon_WITH_3DES_EDE_CBC_SHA
Non-Exportable cipher suite. Uses a 168 bit key to encrypt data with Triple DES in CBC mode.


SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA

public static final CipherSuite SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA
56 bit exportable ciphersuite. RSA key exchange and ancryption with 56 bit DES/CBC.


SSL_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA

public static final CipherSuite SSL_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA
56 bit exportable ciphersuite. DHE key exchange and encryption with 56 bit DES/CBC.


SSL_RSA_EXPORT1024_WITH_RC4_56_SHA

public static final CipherSuite SSL_RSA_EXPORT1024_WITH_RC4_56_SHA
56 bit exportable ciphersuite. RSA key exchange and encryption with 56 bit RC4.


SSL_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA

public static final CipherSuite SSL_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA
56 bit exportable ciphersuite. DHE key exchange and encryption with 56 bit RC4.


SSL_DHE_DSS_WITH_RC4_128_SHA

public static final CipherSuite SSL_DHE_DSS_WITH_RC4_128_SHA
Non-exportable ciphersuite. DHE key exchange and encryption with 128 bit RC4.


TLS_RSA_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_RSA_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as SSL_RSA_WITH_AES_128_CBC_SHA).


TLS_RSA_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_RSA_WITH_AES_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


SSL_RSA_WITH_AES_128_CBC_SHA

public static final CipherSuite SSL_RSA_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as TLS_RSA_WITH_AES_128_CBC_SHA).


TLS_DH_DSS_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_DH_DSS_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as SSL_DH_DSS_WITH_AES_128_CBC_SHA).


SSL_DH_DSS_WITH_AES_128_CBC_SHA

public static final CipherSuite SSL_DH_DSS_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as TLS_DH_DSS_WITH_AES_128_CBC_SHA).


TLS_DH_DSS_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_DH_DSS_WITH_AES_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DH_RSA_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_DH_RSA_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as SSL_DH_RSA_WITH_AES_128_CBC_SHA).


SSL_DH_RSA_WITH_AES_128_CBC_SHA

public static final CipherSuite SSL_DH_RSA_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as TLS_DH_RSA_WITH_AES_128_CBC_SHA).


TLS_DH_RSA_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_DH_RSA_WITH_AES_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_DSS_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_DHE_DSS_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as SSL_DHE_DSS_WITH_AES_128_CBC_SHA).


SSL_DHE_DSS_WITH_AES_128_CBC_SHA

public static final CipherSuite SSL_DHE_DSS_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as TLS_DHE_DSS_WITH_AES_128_CBC_SHA).


TLS_DHE_DSS_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2. (same as SSL_DHE_DSS_WITH_AES_128_CBC_SHA).


TLS_DHE_RSA_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_DHE_RSA_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as SSL_DHE_RSA_WITH_AES_128_CBC_SHA).


SSL_DHE_RSA_WITH_AES_128_CBC_SHA

public static final CipherSuite SSL_DHE_RSA_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as TLS_DHE_RSA_WITH_AES_128_CBC_SHA).


TLS_DHE_RSA_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DH_anon_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_DH_anon_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as SSL_DH_anon_WITH_AES_128_CBC_SHA).


SSL_DH_anon_WITH_AES_128_CBC_SHA

public static final CipherSuite SSL_DH_anon_WITH_AES_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode. (same as TLS_DH_anon_WITH_AES_128_CBC_SHA).


TLS_DH_anon_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_DH_anon_WITH_AES_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_RSA_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_RSA_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same as SSL_RSA_WITH_AES_256_CBC_SHA).


TLS_RSA_WITH_AES_256_CBC_SHA256

public static final CipherSuite TLS_RSA_WITH_AES_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


SSL_RSA_WITH_AES_256_CBC_SHA

public static final CipherSuite SSL_RSA_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same as TLS_RSA_WITH_AES_256_CBC_SHA).


TLS_DH_DSS_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_DH_DSS_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same SSL_DH_DSS_WITH_AES_256_CBC_SHA).


SSL_DH_DSS_WITH_AES_256_CBC_SHA

public static final CipherSuite SSL_DH_DSS_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same TLS_DH_DSS_WITH_AES_256_CBC_SHA).


TLS_DH_DSS_WITH_AES_256_CBC_SHA256

public static final CipherSuite TLS_DH_DSS_WITH_AES_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DH_RSA_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_DH_RSA_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same as SSL_DH_RSA_WITH_AES_256_CBC_SHA).


SSL_DH_RSA_WITH_AES_256_CBC_SHA

public static final CipherSuite SSL_DH_RSA_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same as TLS_DH_RSA_WITH_AES_256_CBC_SHA).


TLS_DH_RSA_WITH_AES_256_CBC_SHA256

public static final CipherSuite TLS_DH_RSA_WITH_AES_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_DSS_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_DHE_DSS_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same as SSL_DHE_DSS_WITH_AES_256_CBC_SHA).


SSL_DHE_DSS_WITH_AES_256_CBC_SHA

public static final CipherSuite SSL_DHE_DSS_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same as TLS_DHE_DSS_WITH_AES_256_CBC_SHA).


TLS_DHE_DSS_WITH_AES_256_CBC_SHA256

public static final CipherSuite TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_RSA_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_DHE_RSA_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same as SSL_DHE_RSA_WITH_AES_256_CBC_SHA).


SSL_DHE_RSA_WITH_AES_256_CBC_SHA

public static final CipherSuite SSL_DHE_RSA_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same as TLS_DHE_RSA_WITH_AES_256_CBC_SHA).


TLS_DHE_RSA_WITH_AES_256_CBC_SHA256

public static final CipherSuite TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DH_anon_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_DH_anon_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same as SSL_DH_anon_WITH_AES_256_CBC_SHA).


SSL_DH_anon_WITH_AES_256_CBC_SHA

public static final CipherSuite SSL_DH_anon_WITH_AES_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode. (same as TLS_DH_anon_WITH_AES_256_CBC_SHA).


TLS_DH_anon_WITH_AES_256_CBC_SHA256

public static final CipherSuite TLS_DH_anon_WITH_AES_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode# and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

public static final CipherSuite TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA

public static final CipherSuite TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA

public static final CipherSuite TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA

public static final CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA

public static final CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA

public static final CipherSuite TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256
Non-Exportable cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

public static final CipherSuite TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256

public static final CipherSuite TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA

public static final CipherSuite TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256

public static final CipherSuite TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA

public static final CipherSuite TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256

public static final CipherSuite TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA

public static final CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256

public static final CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA

public static final CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256

public static final CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA

public static final CipherSuite TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode.


TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256

public static final CipherSuite TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256
Non-Exportable cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


PRIVATE_RSA_WITH_RC2_CBC_MD5

public static final CipherSuite PRIVATE_RSA_WITH_RC2_CBC_MD5
Ciphersuite for SSLv2 mode only. Pseudo equivalent to SSL2_RSA_WITH_RC2_128_CBC_MD5.


TLS_PSK_WITH_RC4_128_SHA

public static final CipherSuite TLS_PSK_WITH_RC4_128_SHA
PSK cipher suite. Uses a 128 bit key to encrypt data with RC4.


TLS_PSK_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite TLS_PSK_WITH_3DES_EDE_CBC_SHA
PSK cipher suite. Uses a 168 bit key to encrypt data with Triple DES in CBC mode.


TLS_PSK_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_PSK_WITH_AES_128_CBC_SHA
PSK cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode.


TLS_PSK_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_PSK_WITH_AES_256_CBC_SHA
PSK cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode.


TLS_PSK_WITH_NULL_SHA

public static final CipherSuite TLS_PSK_WITH_NULL_SHA
PSK cipher suite with NULL encryption.


TLS_DHE_PSK_WITH_RC4_128_SHA

public static final CipherSuite TLS_DHE_PSK_WITH_RC4_128_SHA
DHE-PSK cipher suite. DHE key exchange and encryption with 128 bit RC4.


TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
DHE-PSK cipher suite. Uses a 168 bit key to encrypt data with Triple DES in CBC mode.


TLS_DHE_PSK_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_DHE_PSK_WITH_AES_128_CBC_SHA
DHE-PSK cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode.


TLS_DHE_PSK_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_DHE_PSK_WITH_AES_256_CBC_SHA
DHE-PSK cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode.


TLS_DHE_PSK_WITH_NULL_SHA

public static final CipherSuite TLS_DHE_PSK_WITH_NULL_SHA
DHE-PSK cipher suite with NULL encryption.


TLS_RSA_PSK_WITH_RC4_128_SHA

public static final CipherSuite TLS_RSA_PSK_WITH_RC4_128_SHA
RSA-PSK cipher suite. Uses a 128 bit key to encrypt data with RC4.


TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
RSA-PSK cipher suite. Uses a 168 bit key to encrypt data with Triple DES in CBC mode.


TLS_RSA_PSK_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_RSA_PSK_WITH_AES_128_CBC_SHA
RSA-PSK cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode.


TLS_RSA_PSK_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_RSA_PSK_WITH_AES_256_CBC_SHA
RSA-PSK cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode.


TLS_RSA_PSK_WITH_NULL_SHA

public static final CipherSuite TLS_RSA_PSK_WITH_NULL_SHA
RSA-PSK cipher suite with NULL encryption.


TLS_ECDHE_PSK_WITH_RC4_128_SHA

public static final CipherSuite TLS_ECDHE_PSK_WITH_RC4_128_SHA
ECDHE-PSK cipher suite (RFC 5489). ECDHE key exchange and encryption with 128 bit RC4.


TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
ECDHE-PSK cipher suite (RFC 5489). Uses a 168 bit key to encrypt data with Triple DES in CBC mode.


TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA
ECDHE-PSK cipher suite (RFC 5489). Uses a 128 bit key to encrypt data with AES in CBC mode.


TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
ECDHE-PSK cipher suite (RFC 5489). Uses a 256 bit key to encrypt data with AES in CBC mode.


TLS_ECDHE_PSK_WITH_NULL_SHA

public static final CipherSuite TLS_ECDHE_PSK_WITH_NULL_SHA
ECDHE-PSK cipher suite (RFC 5489) with NULL encryption.


TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256
ECDHE-PSK cipher suite (RFC 5489). Uses a 128 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384

public static final CipherSuite TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384
ECDHE-PSK cipher suite (RFC 5489). Uses a 256 bit key to encrypt data with AES in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
ECDHE-PSK cipher suite (RFC 6367). Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384

public static final CipherSuite TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
ECDHE-PSK cipher suite (RFC 6367). Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_ECDHE_PSK_WITH_NULL_SHA256

public static final CipherSuite TLS_ECDHE_PSK_WITH_NULL_SHA256
ECDHE-PSK cipher suite (RFC 5489) with NULL encryption and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_ECDHE_PSK_WITH_NULL_SHA384

public static final CipherSuite TLS_ECDHE_PSK_WITH_NULL_SHA384
ECDHE-PSK cipher suite (RFC 5489) with NULL encryption and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_PSK_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_PSK_WITH_AES_128_CBC_SHA256
PSK cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_PSK_WITH_AES_256_CBC_SHA384

public static final CipherSuite TLS_PSK_WITH_AES_256_CBC_SHA384
PSK cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
PSK cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384

public static final CipherSuite TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
PSK cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_PSK_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_PSK_WITH_AES_128_GCM_SHA256
PSK cipher suite. Uses a 128 bit key to encrypt data with AES in GCM mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_PSK_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_PSK_WITH_AES_256_GCM_SHA384
PSK cipher suite. Uses a 256 bit key to encrypt data with AES in GCM mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
PSK cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in GCM mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
PSK cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in GCM mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_PSK_WITH_NULL_SHA256

public static final CipherSuite TLS_PSK_WITH_NULL_SHA256
PSK cipher suite with NULL encryption and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_PSK_WITH_NULL_SHA384

public static final CipherSuite TLS_PSK_WITH_NULL_SHA384
PSK cipher suite with NULL encryption and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_DHE_PSK_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
DHE-PSK cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_PSK_WITH_AES_256_CBC_SHA384

public static final CipherSuite TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
DHE-PSK cipher suite. Uses a 256 bit key to encrypt data with AES in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
DHE-PSK cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384

public static final CipherSuite TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
DHE-PSK cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_DHE_PSK_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
DHE-PSK cipher suite. Uses a 128 bit key to encrypt data with AES in GCM mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_PSK_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
DHE-PSK cipher suite. Uses a 256 bit key to encrypt data with AES in GCM mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256
DHE-PSK cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in GCM mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384
DHE-PSK cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in GCM mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_DHE_PSK_WITH_NULL_SHA256

public static final CipherSuite TLS_DHE_PSK_WITH_NULL_SHA256
DHE-PSK cipher suite with NULL encryption and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_DHE_PSK_WITH_NULL_SHA384

public static final CipherSuite TLS_DHE_PSK_WITH_NULL_SHA384
DHE-PSK cipher suite with NULL encryption and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_RSA_PSK_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
RSA-PSK cipher suite. Uses a 128 bit key to encrypt data with AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_RSA_PSK_WITH_AES_256_CBC_SHA384

public static final CipherSuite TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
RSA-PSK cipher suite. Uses a 256 bit key to encrypt data with AES in CBC modeand SHA-384 for MAC computation. Available since TLS 1.2.


TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
RSA-PSK cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384

public static final CipherSuite TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
RSA-PSK cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in CBC modeand SHA-384 for MAC computation. Available since TLS 1.2.


TLS_RSA_PSK_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
RSA-PSK cipher suite. Uses a 128 bit key to encrypt data with AES in GCM mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_RSA_PSK_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
RSA-PSK cipher suite. Uses a 256 bit key to encrypt data with AES in GCM modeand SHA-384 for MAC computation. Available since TLS 1.2.


TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256
RSA-PSK cipher suite. Uses a 128 bit key to encrypt data with CAMELLIA in GCM mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
RSA-PSK cipher suite. Uses a 256 bit key to encrypt data with CAMELLIA in GCM modeand SHA-384 for MAC computation. Available since TLS 1.2.


TLS_RSA_PSK_WITH_NULL_SHA256

public static final CipherSuite TLS_RSA_PSK_WITH_NULL_SHA256
RSA-PSK cipher suite with NULL encryption and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_RSA_PSK_WITH_NULL_SHA384

public static final CipherSuite TLS_RSA_PSK_WITH_NULL_SHA384
RSA-PSK cipher suite with NULL encryption and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_ECDH_ECDSA_WITH_NULL_SHA

public static final CipherSuite TLS_ECDH_ECDSA_WITH_NULL_SHA
ECDH-ECDSA cipher suite with NULL encryption.


TLS_ECDH_ECDSA_WITH_RC4_128_SHA

public static final CipherSuite TLS_ECDH_ECDSA_WITH_RC4_128_SHA
ECDH-ECDSA cipher suite with 128 bit RC4 encryption.


TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
ECDH-ECDSA cipher suite with Triple DES in CBC mode.


TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
ECDH-ECDSA cipher suite with 128 bit key AES in CBC mode.


TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
ECDH-ECDSA cipher suite with 128 bit key AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
ECDH-ECDSA cipher suite with 256 bit key AES in CBC mode.


TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384

public static final CipherSuite TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
ECDH-ECDSA cipher suite with 256 bit key AES in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
ECDH-ECDSA cipher suite with 128 bit key CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384

public static final CipherSuite TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
ECDH-ECDSA cipher suite with 256 bit key CAMELLIA in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_ECDHE_ECDSA_WITH_NULL_SHA

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_NULL_SHA
ECDHE-ECDSA cipher suite with NULL encryption.


TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
ECDHE-ECDSA cipher suite with 128 bit RC4 encryption.


TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
ECDHE-ECDSA cipher suite with Triple DES in CBC mode.


TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
ECDHE-ECDSA cipher suite with 128 bit key AES in CBC mode.


TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
ECDHE-ECDSA cipher suite with 128 bit key AES in CBC mode and SHA-256 for MAC computation (RFC 5289). Available since TLS 1.2.


TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
ECDHE-ECDSA cipher suite with 256 bit key AES in CBC mode.


TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
ECDHE-ECDSA cipher suite with 256 bit key AES in CBC mode and SHA-384 for MAC computation(RFC 5289). Available since TLS 1.2.


TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
ECDHE-ECDSA cipher suite with 128 bit key CAMELLIA in CBC mode and SHA-256 for MAC computation (RFC 6367). Available since TLS 1.2.


TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
ECDHE-ECDSA cipher suite with 256 bit key CAMELLIA in CBC mode and SHA-384 for MAC computation(RFC 6367). Available since TLS 1.2.


TLS_ECDH_RSA_WITH_NULL_SHA

public static final CipherSuite TLS_ECDH_RSA_WITH_NULL_SHA
ECDH-RSA cipher suite with NULL encryption.


TLS_ECDH_RSA_WITH_RC4_128_SHA

public static final CipherSuite TLS_ECDH_RSA_WITH_RC4_128_SHA
ECDH-RSA cipher suite with 128 bit RC4 encryption.


TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
ECDH-RSA cipher suite with Triple DES in CBC mode.


TLS_ECDH_RSA_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
ECDH-RSA cipher suite with 128 bit key AES in CBC mode.


TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
ECDH-RSA cipher suite with 128 bit key AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_ECDH_RSA_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
ECDH-RSA cipher suite with 256 bit key AES in CBC mode.


TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384

public static final CipherSuite TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
ECDH-RSA cipher suite with 256 bit key AES in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
ECDH-RSA cipher suite with 128 bit key CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384

public static final CipherSuite TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
ECDH-RSA cipher suite with 256 bit key CAMELLIA in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_ECDHE_RSA_WITH_NULL_SHA

public static final CipherSuite TLS_ECDHE_RSA_WITH_NULL_SHA
ECDHE-RSA cipher suite with NULL encryption.


TLS_ECDHE_RSA_WITH_RC4_128_SHA

public static final CipherSuite TLS_ECDHE_RSA_WITH_RC4_128_SHA
ECDHE-RSA cipher suite with 128 bit RC4 encryption.


TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
ECDHE-RSA cipher suite with Triple DES in CBC mode.


TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
ECDHE-RSA cipher suite with 128 bit key AES in CBC mode.


TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

public static final CipherSuite TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
ECDHE-RSA cipher suite with 128 bit key AES in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
ECDHE-RSA cipher suite with 256 bit key AES in CBC mode.


TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

public static final CipherSuite TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
ECDHE-RSA cipher suite with 256 bit key AES in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256

public static final CipherSuite TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
ECDHE-RSA cipher suite with 128 bit key CAMELLIA in CBC mode and SHA-256 for MAC computation. Available since TLS 1.2.


TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384

public static final CipherSuite TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
ECDHE-RSA cipher suite with 256 bit key CAMELLIA in CBC mode and SHA-384 for MAC computation. Available since TLS 1.2.


TLS_ECDH_anon_WITH_NULL_SHA

public static final CipherSuite TLS_ECDH_anon_WITH_NULL_SHA
Anonymous ECDH cipher suite with NULL encryption.


TLS_ECDH_anon_WITH_RC4_128_SHA

public static final CipherSuite TLS_ECDH_anon_WITH_RC4_128_SHA
Anonymous ECDH cipher suite with 128 bit RC4 encryption.


TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA

public static final CipherSuite TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
Anonymous ECDH cipher suite with Triple DES in CBC mode.


TLS_ECDH_anon_WITH_AES_128_CBC_SHA

public static final CipherSuite TLS_ECDH_anon_WITH_AES_128_CBC_SHA
Anonymous ECDH cipher suite with 128 bit key AES in CBC mode.


TLS_ECDH_anon_WITH_AES_256_CBC_SHA

public static final CipherSuite TLS_ECDH_anon_WITH_AES_256_CBC_SHA
Anonymous ECDH cipher suite with 256 bit key AES in CBC mode.


TLS_RSA_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_RSA_WITH_AES_128_GCM_SHA256
RSA cipher suite with 128 bit key AES in GCM mode.


TLS_RSA_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_RSA_WITH_AES_256_GCM_SHA384
RSA cipher suite with 256 bit key AES in GCM mode.


TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
DHE-RSA cipher suite with 128 bit key AES in GCM mode.


TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
DHE-RSA cipher suite with 256 bit key AES in GCM mode.


TLS_DH_RSA_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_DH_RSA_WITH_AES_128_GCM_SHA256
DH-RSA cipher suite with 128 bit key AES in GCM mode.


TLS_DH_RSA_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_DH_RSA_WITH_AES_256_GCM_SHA384
DH-RSA cipher suite with 256 bit key AES in GCM mode.


TLS_DHE_DSS_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
DHE-DSS cipher suite with 128 bit key AES in GCM mode.


TLS_DHE_DSS_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
DHE-DSS cipher suite with 256 bit key AES in GCM mode.


TLS_DH_DSS_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_DH_DSS_WITH_AES_128_GCM_SHA256
DH-DSS cipher suite with 128 bit key AES in GCM mode.


TLS_DH_DSS_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_DH_DSS_WITH_AES_256_GCM_SHA384
DH-DSS cipher suite with 256 bit key AES in GCM mode.


TLS_DH_anon_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_DH_anon_WITH_AES_128_GCM_SHA256
Anonymous DH cipher suite with 128 bit key AES in GCM mode.


TLS_DH_anon_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_DH_anon_WITH_AES_256_GCM_SHA384
Anonymous DH cipher suite with 256 bit key AES in GCM mode.


TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
ECDHE-ECDSA cipher suite with 128 bit key AES in GCM mode.


TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
ECDHE-ECDSA cipher suite with 256 bit key AES in GCM mode.


TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
ECDH-ECDSA cipher suite with 128 bit key AES in GCM mode.


TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
ECDH-ECDSA cipher suite with 256 bit key AES in GCM mode.


TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDHE-RSA cipher suite with 128 bit key AES in GCM mode.


TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDHE-RSA cipher suite with 256 bit key AES in GCM mode.


TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256

public static final CipherSuite TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
ECDH-RSA cipher suite with 128 bit key AES in GCM mode.


TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384

public static final CipherSuite TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
ECDH-RSA cipher suite with 256 bit key AES in GCM mode.


TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
RSA cipher suite with 128 bit key CAMELLIA in GCM mode.


TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
RSA cipher suite with 256 bit key CAMELLIA in GCM mode.


TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
DHE-RSA cipher suite with 128 bit key CAMELLIA in GCM mode.


TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
DHE-RSA cipher suite with 256 bit key CAMELLIA in GCM mode.


TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256
DH-RSA cipher suite with 128 bit key CAMELLIA in GCM mode.


TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384
DH-RSA cipher suite with 256 bit key CAMELLIA in GCM mode.


TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256
DHE-DSS cipher suite with 128 bit key CAMELLIA in GCM mode.


TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384
DHE-DSS cipher suite with 256 bit key CAMELLIA in GCM mode.


TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256
DH-DSS cipher suite with 128 bit key CAMELLIA in GCM mode.


TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384
DH-DSS cipher suite with 256 bit key CAMELLIA in GCM mode.


TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256
Anonymous DH cipher suite with 128 bit key CAMELLIA in GCM mode.


TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384
Anonymous DH cipher suite with 256 bit key CAMELLIA in GCM mode.


TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
ECDHE-ECDSA cipher suite with 128 bit key CAMELLIA in GCM mode.


TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
ECDHE-ECDSA cipher suite with 256 bit key CAMELLIA in GCM mode.


TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
ECDH-ECDSA cipher suite with 128 bit key CAMELLIA in GCM mode.


TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
ECDH-ECDSA cipher suite with 256 bit key CAMELLIA in GCM mode.


TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
ECDHE-RSA cipher suite with 128 bit key CAMELLIA in GCM mode.


TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
ECDHE-RSA cipher suite with 256 bit key CAMELLIA in GCM mode.


TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256

public static final CipherSuite TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
ECDH-RSA cipher suite with 128 bit key CAMELLIA in GCM mode.


TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384

public static final CipherSuite TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
ECDH-RSA cipher suite with 256 bit key CAMELLIA in GCM mode.


CS_SSL_V2

public static final CipherSuite[] CS_SSL_V2

CS_RSA

public static final CipherSuite[] CS_RSA
Domestic ciphersuites which use RSA for authentication and key exchange.
 SSL_RSA_WITH_RC4_128_MD5,
 SSL_RSA_WITH_RC4_128_SHA,
 SSL_RSA_WITH_IDEA_CBC_SHA,
 SSL_RSA_WITH_DES_CBC_SHA,
 SSL_RSA_WITH_3DES_EDE_CBC_SHA,
 SSL_RSA_WITH_AES_128_CBC_SHA (TLS_RSA_WITH_AES_128_CBC_SHA),
 TLS_RSA_WITH_AES_128_CBC_SHA256
 SSL_RSA_WITH_AES_256_CBC_SHA (TLS_RSA_WITH_AES_256_CBC_SHA),
 TLS_RSA_WITH_AES_256_CBC_SHA256
 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA,
 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA,
 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256,
 TLS_RSA_WITH_AES_128_GCM_SHA256,
 TLS_RSA_WITH_AES_256_GCM_SHA384,
 TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
 


CS_RSA_WITH_NULL

public static final CipherSuite[] CS_RSA_WITH_NULL
Ciphersuites which use RSA for authentication and key exchange but no encryption.
 SSL_RSA_WITH_NULL_MD5,
 SSL_RSA_WITH_NULL_SHA,
 TLS_RSA_WITH_NULL_SHA256
 


CS_RSA_EXPORT

public static final CipherSuite[] CS_RSA_EXPORT
512 bit export ciphersuites which use RSA for authentication and key exchange.
 SSL_RSA_EXPORT_WITH_RC4_40_MD5,
 SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5,
 SSL_RSA_EXPORT_WITH_DES40_CBC_SHA,
 


CS_RSA_EXPORT1024

public static final CipherSuite[] CS_RSA_EXPORT1024
1024 bit export ciphersuites which use RSA for authentication and key exchange.
 SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA,
 SSL_RSA_EXPORT1024_WITH_RC4_56_SHA,
 


CS_DHE_RSA

public static final CipherSuite[] CS_DHE_RSA
Domestic ciphersuites which use RSA for authentication and ephemeral Diffie-Hellman for key exchange.
 SSL_DHE_RSA_WITH_DES_CBC_SHA,
 SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,
 SSL_DHE_RSA_WITH_AES_128_CBC_SHA (TLS_DHE_RSA_WITH_AES_128_CBC_SHA),
 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,
 SSL_DHE_RSA_WITH_AES_256_CBC_SHA (TLS_DHE_RSA_WITH_AES_256_CBC_SHA),
 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,
 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256,
 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,
 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,
 TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
 


CS_DHE_RSA_EXPORT

public static final CipherSuite[] CS_DHE_RSA_EXPORT
512 bit export ciphersuites which use RSA for authentication and ephemeral Diffie-Hellman for key exchange.
 SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA,
 


CS_DHE_DSS

public static final CipherSuite[] CS_DHE_DSS
Domestic ciphersuites which use DSS for authentication and ephemeral Diffie-Hellman for key exchange.
 SSL_DHE_DSS_WITH_DES_CBC_SHA,
 SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,
 SSL_DHE_DSS_WITH_RC4_128_SHA,
 SSL_DHE_DSS_WITH_AES_128_CBC_SHA (TLS_DHE_DSS_WITH_AES_128_CBC_SHA),
 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256,
 SSL_DHE_DSS_WITH_AES_256_CBC_SHA (TLS_DHE_DSS_WITH_AES_256_CBC_SHA),
 TLS_DHE_DSS_WITH_AES_256_CBC_SHA256,
 TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,
 TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,
 TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256,
 TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,
 TLS_DHE_DSS_WITH_AES_256_GCM_SHA384,
 TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384
 


CS_DHE_DSS_EXPORT

public static final CipherSuite[] CS_DHE_DSS_EXPORT
512 bit export ciphersuites which use DSS for authentication and ephemeral Diffie-Hellman for key exchange.
 SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA,
 


CS_DHE_DSS_EXPORT1024

public static final CipherSuite[] CS_DHE_DSS_EXPORT1024
1024 bit export ciphersuites which use DSS for authentication and ephemeral Diffie-Hellman for key exchange.
 SSL_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA,
 SSL_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA,
 


CS_DH_RSA

public static final CipherSuite[] CS_DH_RSA
Domestic ciphersuite which use and RSA signed Diffie-Hellman certificate for authentication and key exchange.
 SSL_DH_RSA_WITH_DES_CBC_SHA,
 SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA,
 SSL_DH_RSA_WITH_AES_128_CBC_SHA (TLS_DH_RSA_WITH_AES_128_CBC_SHA),
 TLS_DH_RSA_WITH_AES_128_CBC_SHA256,
 SSL_DH_RSA_WITH_AES_256_CBC_SHA (TLS_DH_RSA_WITH_AES_256_CBC_SHA),
 TLS_DH_RSA_WITH_AES_256_CBC_SHA256,
 TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA,
 TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA,
 TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256,
 TLS_DH_RSA_WITH_AES_128_GCM_SHA256,
 TLS_DH_RSA_WITH_AES_256_GCM_SHA384,
 TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384
 


CS_DH_RSA_EXPORT

public static final CipherSuite[] CS_DH_RSA_EXPORT
512 bit export ciphersuite which use and RSA signed Diffie-Hellman certificate for authentication and key exchange.
 SSL_DH_RSA_EXPORT_WITH_DES40_CBC_SHA,
 


CS_DH_DSS

public static final CipherSuite[] CS_DH_DSS
Domestic ciphersuite which use and DSS signed Diffie-Hellman certificate for authentication and key exchange.
 SSL_DH_DSS_WITH_DES_CBC_SHA,
 SSL_DH_DSS_WITH_3DES_EDE_CBC_SHA,
 SSL_DH_DSS_WITH_AES_128_CBC_SHA (TLS_DH_DSS_WITH_AES_128_CBC_SHA),
 TLS_DH_DSS_WITH_AES_128_CBC_SHA256,
 SSL_DH_DSS_WITH_AES_256_CBC_SHA (TLS_DH_DSS_WITH_AES_256_CBC_SHA),
 TLS_DH_DSS_WITH_AES_256_CBC_SHA256,
 TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA,
 TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA,
 TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256,
 TLS_DH_DSS_WITH_AES_128_GCM_SHA256,
 TLS_DH_DSS_WITH_AES_256_GCM_SHA384,
 TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384
 


CS_DH_DSS_EXPORT

public static final CipherSuite[] CS_DH_DSS_EXPORT
512 bit export ciphersuites which use and DSS signed Diffie-Hellman certificate for authentication and key exchange.
 SSL_DH_DSS_EXPORT_WITH_DES40_CBC_SHA,
 


CS_DH_ANON

public static final CipherSuite[] CS_DH_ANON
Domestic ciphersuites which use no authentication and ephemeral Diffie-Hellman for key exchange.
 SSL_DH_anon_WITH_RC4_128_MD5,
 SSL_DH_anon_WITH_DES_CBC_SHA,
 SSL_DH_anon_WITH_3DES_EDE_CBC_SHA,
 SSL_DH_anon_WITH_AES_128_CBC_SHA (TLS_DH_anon_WITH_AES_128_CBC_SHA),
 TLS_DH_anon_WITH_AES_128_CBC_SHA256
 SSL_DH_anon_WITH_AES_256_CBC_SHA (TLS_DH_anon_WITH_AES_256_CBC_SHA),
 TLS_DH_anon_WITH_AES_256_CBC_SHA256,
 TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA,
 TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA,
 TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256,
 TLS_DH_anon_WITH_AES_128_GCM_SHA256,
 TLS_DH_anon_WITH_AES_256_GCM_SHA384,
 TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384
 


CS_DH_ANON_EXPORT

public static final CipherSuite[] CS_DH_ANON_EXPORT
Domestic ciphersuites which use no authentication and ephemeral Diffie-Hellman for key exchange.
 SSL_DH_anon_EXPORT_WITH_RC4_40_MD5,
 SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA,
 


CS_PSK

public static final CipherSuite[] CS_PSK
PSK ciphersuites using symmetric key operations for authentication only
(The NULL encryption suites -- TLS_PSK_WITH_NULL_SHA, TLS_PSK_WITH_NULL_SHA256, TLS_PSK_WITH_NULL_SHA384 -- are not included in this list).
 TLS_PSK_WITH_RC4_128_SHA,
 TLS_PSK_WITH_3DES_EDE_CBC_SHA,
 TLS_PSK_WITH_AES_128_CBC_SHA,
 TLS_PSK_WITH_AES_128_CBC_SHA256,
 TLS_PSK_WITH_AES_128_GCM_SHA256,
 TLS_PSK_WITH_AES_256_CBC_SHA,
 TLS_PSK_WITH_AES_256_CBC_SHA384,
 TLS_PSK_WITH_AES_256_GCM_SHA384,
 TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384,
 TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
 


CS_DHE_PSK

public static final CipherSuite[] CS_DHE_PSK
PSK ciphersuites using Diffie-Hellman key exchange authenticated with a pre-shared key.
(The NULL encryption suite -- TLS_DHE_PSK_WITH_NULL_SHA -- is not included in this list).
 TLS_DHE_PSK_WITH_RC4_128_SHA,
 TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA,
 TLS_DHE_PSK_WITH_AES_128_CBC_SHA,
 TLS_DHE_PSK_WITH_AES_128_CBC_SHA256,
 TLS_DHE_PSK_WITH_AES_128_GCM_SHA256,
 TLS_DHE_PSK_WITH_AES_256_CBC_SHA,
 TLS_DHE_PSK_WITH_AES_256_CBC_SHA384,
 TLS_DHE_PSK_WITH_AES_256_GCM_SHA384,
 TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
 TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384
 


CS_RSA_PSK

public static final CipherSuite[] CS_RSA_PSK
PSK ciphersuites using RSA based public key authentication of the server and pre-shared key authenticaion of the client.
(The NULL encryption suite -- TLS_RSA_PSK_WITH_NULL_SHA -- is not included in this list).
 TLS_RSA_PSK_WITH_RC4_128_SHA,
 TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA,
 TLS_RSA_PSK_WITH_AES_128_CBC_SHA,
 TLS_RSA_PSK_WITH_AES_128_CBC_SHA256,
 TLS_RSA_PSK_WITH_AES_128_GCM_SHA256,
 TLS_RSA_PSK_WITH_AES_256_CBC_SHA,
 TLS_RSA_PSK_WITH_AES_256_CBC_SHA384,
 TLS_RSA_PSK_WITH_AES_256_GCM_SHA384,
 TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384,
 TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
 


CS_ECDHE_PSK

public static final CipherSuite[] CS_ECDHE_PSK
PSK ciphersuites using EC Diffie-Hellman key exchange authenticated with a pre-shared key.
 TLS_ECDHE_PSK_WITH_RC4_128_SHA,
 TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA,
 TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA,
 TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256,
 TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA,
 TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384,
 TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
 


CS_ALL_PSK

public static final CipherSuite[] CS_ALL_PSK
All PSK ciphersuites.
(The NULL encryption suites -- TLS_PSK_WITH_NULL_SHA*, TLS_DHE_PSK_WITH_NULL_SHA*, TLS_RSA_PSK_WITH_NULL_SHA* -- are not included in this list).
 TLS_PSK_WITH_RC4_128_SHA,
 TLS_PSK_WITH_3DES_EDE_CBC_SHA,
 TLS_PSK_WITH_AES_128_CBC_SHA,
 TLS_PSK_WITH_AES_128_CBC_SHA256,
 TLS_PSK_WITH_AES_128_GCM_SHA256,
 TLS_PSK_WITH_AES_256_CBC_SHA,
 TLS_PSK_WITH_AES_256_CBC_SHA384,
 TLS_PSK_WITH_AES_256_GCM_SHA384,
 TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384,
 TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_DHE_PSK_WITH_RC4_128_SHA,
 TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA,
 TLS_DHE_PSK_WITH_AES_128_CBC_SHA,
 TLS_DHE_PSK_WITH_AES_128_CBC_SHA256,
 TLS_DHE_PSK_WITH_AES_128_GCM_SHA256,
 TLS_DHE_PSK_WITH_AES_256_CBC_SHA,
 TLS_DHE_PSK_WITH_AES_256_CBC_SHA384,
 TLS_DHE_PSK_WITH_AES_256_GCM_SHA384,
 TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
 TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384, 
 TLS_RSA_PSK_WITH_RC4_128_SHA,
 TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA,
 TLS_RSA_PSK_WITH_AES_128_CBC_SHA,
 TLS_RSA_PSK_WITH_AES_128_CBC_SHA256,
 TLS_RSA_PSK_WITH_AES_128_GCM_SHA256,
 TLS_RSA_PSK_WITH_AES_256_CBC_SHA,
 TLS_RSA_PSK_WITH_AES_256_CBC_SHA384,
 TLS_RSA_PSK_WITH_AES_256_GCM_SHA384,
 TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384,
 TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_ECDHE_PSK_WITH_RC4_128_SHA,
 TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA,
 TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA,
 TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256,
 TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA,
 TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384,
 TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
 


CS_ECDH_ECDSA

public static final CipherSuite[] CS_ECDH_ECDSA
ECDH-ECDSA cipher suites using fixed ECDH with ECDSA-signed certificates for key exchange.
(The NULL encryption suite -- TLS_ECDH_ECDSA_WITH_NULL_SHA -- is not included in this list).
 TLS_ECDH_ECDSA_WITH_RC4_128_SHA,
 TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,
 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,
 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,
 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,
 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384,
 TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,
 TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,
 TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,
 TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
 


CS_ECDHE_ECDSA

public static final CipherSuite[] CS_ECDHE_ECDSA
ECDHE-ECDSA cipher suites using ephemeral ECDH with ECDSA signatures for key exchange.
(The NULL encryption suite -- TLS_ECDHE_ECDSA_WITH_NULL_SHA -- is not included in this list).
 TLS_ECDHE_ECDSA_WITH_RC4_128_SHA,
 TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,
 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,
 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
 TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,
 TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
 


CS_ECDH_RSA

public static final CipherSuite[] CS_ECDH_RSA
ECDH-RSA cipher suites using fixed ECDH with RSA-signed certificates for key exchange.
(The NULL encryption suite -- TLS_ECDH_RSA_WITH_NULL_SHA -- is not included in this list).
 TLS_ECDH_RSA_WITH_RC4_128_SHA,
 TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,
 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,
 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,
 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,
 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
 TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,
 TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,
 TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384,
 TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
 


CS_ECDHE_RSA

public static final CipherSuite[] CS_ECDHE_RSA
ECDHE-RSA cipher suites using ephemeral ECDH with RSA signatures for key exchange.
(The NULL encryption suite -- TLS_ECDHE_RSA_WITH_NULL_SHA -- is not included in this list).
 TLS_ECDHE_RSA_WITH_RC4_128_SHA,
 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384,
 TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
 


CS_ECDH_ANON

public static final CipherSuite[] CS_ECDH_ANON
Anonymous ECDH cipher suites.
(The NULL encryption suite -- TLS_ECDH_anon_WITH_NULL_SHA -- is not included in this list).
 TLS_ECDH_anon_WITH_RC4_128_SHA,
 TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA,
 TLS_ECDH_anon_WITH_AES_128_CBC_SHA,
 TLS_ECDH_anon_WITH_AES_256_CBC_SHA
 


CS_AEAD_GCM

public static final CipherSuite[] CS_AEAD_GCM
GCM based AEAD cipher suites.
 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
 TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,
 TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,
 TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
 TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,
 TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,
 TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_RSA_WITH_AES_128_GCM_SHA256,
 TLS_RSA_WITH_AES_256_GCM_SHA384,
 TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,
 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,
 TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_DH_RSA_WITH_AES_128_GCM_SHA256,
 TLS_DH_RSA_WITH_AES_256_GCM_SHA384,
 TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,
 TLS_DHE_DSS_WITH_AES_256_GCM_SHA384,
 TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_DH_DSS_WITH_AES_128_GCM_SHA256,
 TLS_DH_DSS_WITH_AES_256_GCM_SHA384,
 TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_PSK_WITH_AES_128_GCM_SHA256,
 TLS_PSK_WITH_AES_256_GCM_SHA384,
 TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_DHE_PSK_WITH_AES_128_GCM_SHA256,
 TLS_DHE_PSK_WITH_AES_256_GCM_SHA384,
 TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_RSA_PSK_WITH_AES_128_GCM_SHA256,
 TLS_RSA_PSK_WITH_AES_256_GCM_SHA384,
 TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384,
 TLS_DH_anon_WITH_AES_128_GCM_SHA256,
 TLS_DH_anon_WITH_AES_256_GCM_SHA384,
 TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256,
 TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384
 


SSL_RSA_WITH_RC4_MD5

public static final CipherSuite SSL_RSA_WITH_RC4_MD5
Deprecated. use SSL_RSA_WITH_RC4_128_MD5 instead

SSL_RSA_WITH_RC4_SHA

public static final CipherSuite SSL_RSA_WITH_RC4_SHA
Deprecated. use SSL_RSA_WITH_RC4_128_SHA instead

SSL_DH_anon_WITH_RC4_MD5

public static final CipherSuite SSL_DH_anon_WITH_RC4_MD5
Deprecated. use SSL_DH_anon_WITH_RC4_128_MD5 instead
Constructor Detail

CipherSuite

public CipherSuite(java.lang.String cipherSuiteName,
                   java.lang.String keyExchangeAlgorithm,
                   java.lang.String cipherAlgorithm,
                   java.lang.String hashAlgorithm,
                   int id,
                   int keyMaterial,
                   int IVSize)
Create a new user defined ciphersuite. It can be used to define custom private ciphersuites that use e.g. Blowfish as symmetric cipher or to define one that uses e.g. TripleDES with MD5. However, it is currently not possible to add new key exchange algorithms, new hash algorithms, or to define an exportable ciphersuite.

Parameters:
cipherSuiteName - the name of the ciphersuite
keyExchangeAlgorithm - the name of the key exchange algorithm, e.g. RSA, DH_RSA, DH_DSS
cipherAlgorithm - the name and mode of the symmetric cipher per JCE convention, e.g. DES/CBC/NoPadding (always use NoPadding)
hashAlgorithm - the name of the hash algorithm (SHA or MD5)
id - two byte ciphersuite id. For private ciphersuites the high byte should be 0xFF (e.g. 0xFF52).
keyMaterial - size of the key to be used for the symmetric cipher in bytes, e.g. 16.
IVSize - blocksize of the cipher in bytes for block ciphers or 0 for stream ciphers.
Method Detail

getName

public java.lang.String getName()
Returns the name of this CipherSuite.

Returns:
the name of this CipherSuite

getID

public int getID()
Returns the identifier of this CipherSuite.

Returns:
the identifier of this CipherSuite

getCipherAlgorithm

public java.lang.String getCipherAlgorithm()
Returns the name (transformation string) of the encryption algorithm.

Returns:
the name (transformation string) of the encryption algorithm, e.g. "AES/CBC/NoPadding"

getMacAlgorithm

public java.lang.String getMacAlgorithm()
Returns the name of the MAC algorithm.

Returns:
the name of the MAC algorithm

getPrfAlgorithm

public java.lang.String getPrfAlgorithm()
Returns the name of the PRF algorithm (only meaningful for TLS versions >= 1.2).

Returns:
the name of the PRF algorithm, either

getKeyExchangeAlgorithm

public java.lang.String getKeyExchangeAlgorithm()
Returns the name of the key exchange algorithm.

Returns:
the name of the key exchange algorithm

isExportable

public boolean isExportable()
Returns true if this cipher suite is exportable.
This method returns true if this is an _EXPORT_ (exportable) or _NULL_ (no encryption) suite. If you want to ask for an _EXPORT_ (exportable) suite only you may call method getKeySizeLimit():
 if (cipherSuite.getKeySizeLimit() != -1) {
   ...
 }
 

Returns:
true if this cipher suite is exportable

getKeySizeLimit

public int getKeySizeLimit()
Returns the key size limit for certificates.

Returns:
the size of the largest public key that can be legally used for encryption with exportable cipher suites

getHashSize

public int getHashSize()
Returns the hash size for the given MessageDigest.

Returns:
the key size limit for this CipherSuite

getKeyLength

public int getKeyLength()
Returns the number of bytes that are used for generating the write keys.

Returns:
the number of bytes for the keys

getExpandedKeyLength

public int getExpandedKeyLength()
Returns the number of bytes actually fed into the encryption algorithm.

Returns:
the number of bytes for the keys

getIVSize

public int getIVSize()
Returns the number of bytes that are used for the initialization vector.

Returns:
the number of bytes for the IV

isAvailable

public boolean isAvailable()
Check if this ciphersuite is available, i.e. the current SecurityProvider supports all necessary algorithms.

See Also:
SecurityProvider.isImplemented(java.lang.String)

getAllowedMinVersion

public int getAllowedMinVersion()
Gets the min protocol version that may be used with this cipher suite.

Returns:
the min protocol version that may be used with this cipher suite.

getAllowedMaxVersion

public int getAllowedMaxVersion()
Gets the max protocol version that may be used with this cipher suite.

Returns:
the max protocol version that may be used with this cipher suite.

equals

public boolean equals(java.lang.Object o)
Overrides:
equals in class java.lang.Object

compareTo

public int compareTo(java.lang.Object o)
Compares the given cipher suite of being stronger than the given cipher suite.
We define a ciphersuite to be stronger than another by the following ordered criteria.
  1. Key length (however, GCM comes before CBC, AES_128_CBC comes before 3DES_EDE_CBC)
  2. Export key size limit
  3. MAC algorithm SHA384 over SHA256 over SHA over MD5
  4. Key Exchange algorithm: ECDHE_ECDSA and ECDHE_RSA, DHE_RSA, DHE_DSS, RSA, ECDH_ECDSA and ECDH_RSA, DH_RSA, DH_DSS
    (EC)DHE and RSA key exchange are preferred over (EC)DH with fixed parameters are preferred over PSK key exchange (EC)DHE and PSK exchange are preferred over PSK exchange with symmetric keys only (EC)DH_anon and RSA_WITH_NULL are handled separately as they do not offer the full security of the other ciphersuites. All other ciphersuites are defined to be stronger than DH_anon except RSA_WITH_NULL which are weaker.
PSK suites are interleaved, but this should be no problem because PSK suites and other suites will hardly be used at the same time. For ciphersuites that are equally strong by this definition the resulting ordering is undefined.

Note that is difficult to provide a sorting that is 100% accurate in any case. For instance, if suite A uses a 256-CBC cipher and SHA1 for hashing (mac) and suite B uses a 128-CBC cipher and SHA256 for hashing (mac), the 256 bit cipher might be preferrable over the 128-bit cipher, but the SHA256 hash would be preferrabele over the SHA1 hash. We try to consider all possibilities, however, often also the order in which the suites are compared/added may win. The best strategy might be to use a limited, easy manageable set of suites and manually define their preference order.

Specified by:
compareTo in interface java.lang.Comparable
Parameters:
o - the other CipherSuite to be compared against this suite
Returns:
1 if this suite is considered as being stronger as the other suite, 0 if the two suites are equivalent, -1 if the other suite is considered as being stronger

toString

public java.lang.String toString()
Overrides:
toString in class java.lang.Object

hashCode

public int hashCode()
Overrides:
hashCode in class java.lang.Object

getByName

public static CipherSuite getByName(java.lang.String name)
Returns the cipher suite specified through its name.

Parameters:
name - the name of the cipher suite
Returns:
the cipher suite specified through its name or null if the cipher suite with the given name is not supported

getDefault

public static CipherSuite[] getDefault()
Deprecated. use new CipherSuiteList(CipherSuiteList.L_DEFAULT) instead.


This Javadoc may contain text parts from text parts from IETF Internet Standard specifications (see copyright note).

iSaSiLk 5.104, (c) 2002 IAIK, (c) 2003 - 2015 SIC