Mit welchen Ciphers kann ich welche Cipher Suite nutzen?
| Mit der Aktivierung der Cipher AES128/128 kann man folgende Cipher Suiten einsetzen: |
| TLS_DHE_DSS_WITH_AES_128_CBC_SHA |
| TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P256 |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P384 |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P521 |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P256 |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P384 |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P521 |
| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P256 |
| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P384 |
| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P521 |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256 |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P384 |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P521 |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256 |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P384 |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P521 |
| TLS_RSA_WITH_AES_128_CBC_SHA |
| TLS_RSA_WITH_AES_128_CBC_SHA256 |
| Mit der Aktivierung der Cipher AES256/256 kann man folgende Cipher Suiten einsetzen: |
| TLS_DHE_DSS_WITH_AES_256_CBC_SHA |
| TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P256 |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P384 |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P521 |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384_P384 |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384_P521 |
| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P384 |
| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P521 |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P256 |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384 |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P521 |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256 |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384 |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P521 |
| TLS_RSA_WITH_AES_256_CBC_SHA |
| TLS_RSA_WITH_AES_256_CBC_SHA256 |
Mit welchem Hash kann ich welche Cipher Suite nutzen?
| Mit der Aktivierung der Hashfunktion SHA-256 kann man folgende Cipher Suiten einsetzen: |
| TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 |
| TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P256 |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P384 |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P521 |
| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P256 |
| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P384 |
| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P521 |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256 |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P384 |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P521 |
| TLS_RSA_WITH_AES_128_CBC_SHA256 |
| TLS_RSA_WITH_AES_256_CBC_SHA256 |
| TLS_RSA_WITH_NULL_SHA256 |
| Mit der Aktivierung der Hashfunktion SHA-384 kann man folgende Cipher Suiten einsetzen: |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 |
| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 |
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
Mit welchem KeyExchange kann ich welche Cipher Suite nutzen?
Mit der Aktivierung des KeyExchange ECDH kann man folgende Cipher Suiten
mit Elliptic-Curve einsetzen: |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 |
| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 |
| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 |
https://www.der-windows-papst.de/2019/02/20/tls-1-2-diffie-hellman-key-length/
