Skip navigation

Supported Cipher Suites

emSSL includes the most commonly used cipher suites, which allows to connect to nearly every TLS-supporting server.

Dynamically added cipher suites

Cipher suites are added to emSSL dynamically, at runtime, totally eliminating the nightmare of "configuration spaghetti" preprocessor symbols. When the required cipher suites are known it is possible to create a minimal size configuration by not linking in unused algorithms. This is can be done by the compiler/linker automatically. With the included scan suites application it is possible to determine which cipher suites are supposed by a particular server.

The following list shows the cipher suites which are available in emSSL:

The cipher suites are grouped by key exchange algorithm.

ECDHE-ECDSA

  • ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256
  • ECDHE-ECDSA-WITH-3DES-EDE-CBC-SHA
  • ECDHE-ECDSA-WITH-AES-128-CBC-SHA
  • ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
  • ECDHE-ECDSA-WITH-AES-128-CCM
  • ECDHE-ECDSA-WITH-AES-128-CCM-8
  • ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
  • ECDHE-ECDSA-WITH-AES-256-CBC-SHA
  • ECDHE-ECDSA-WITH-AES-256-CBC-SHA384
  • ECDHE-ECDSA-WITH-AES-256-CCM
  • ECDHE-ECDSA-WITH-AES-256-CCM-8
  • ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
  • ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256
  • ECDHE-ECDSA-WITH-ARIA-128-GCM-SHA256
  • ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384
  • ECDHE-ECDSA-WITH-ARIA-256-GCM-SHA384
  • ECDHE-ECDSA-WITH-CAMELLIA-128-CBC-SHA256
  • ECDHE-ECDSA-WITH-CAMELLIA-128-GCM-SHA256
  • ECDHE-ECDSA-WITH-CAMELLIA-256-CBC-SHA384
  • ECDHE-ECDSA-WITH-CAMELLIA-256-GCM-SHA384
  • ECDHE-ECDSA-WITH-RC4-128-SHA

ECDH-ECDSA

  • ECDH-ECDSA-WITH-RC4-128-SHA
  • ECDH-ECDSA-WITH-3DES-EDE-CBC-SHA
  • ECDH-ECDSA-WITH-AES-128-CBC-SHA
  • ECDH-ECDSA-WITH-AES-128-CBC-SHA256
  • ECDH-ECDSA-WITH-AES-128-GCM-SHA256
  • ECDH-ECDSA-WITH-AES-256-CBC-SHA
  • ECDH-ECDSA-WITH-AES-256-CBC-SHA384
  • ECDH-ECDSA-WITH-AES-256-GCM-SHA384
  • ECDH-ECDSA-WITH-ARIA-128-CBC-SHA256
  • ECDH-ECDSA-WITH-ARIA-128-GCM-SHA256
  • ECDH-ECDSA-WITH-ARIA-256-CBC-SHA384
  • ECDH-ECDSA-WITH-ARIA-256-GCM-SHA384
  • ECDH-ECDSA-WITH-CAMELLIA-128-CBC-SHA256
  • ECDH-ECDSA-WITH-CAMELLIA-128-GCM-SHA256
  • ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384
  • ECDH-ECDSA-WITH-CAMELLIA-256-GCM-SHA384 

ECDHE-RSA

  • ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256
  • ECDHE-RSA-WITH-3DES-EDE-CBC-SHA
  • ECDHE-RSA-WITH-AES-128-CBC-SHA
  • ECDHE-RSA-WITH-AES-128-CBC-SHA256
  • ECDHE-RSA-WITH-AES-128-GCM-SHA256
  • ECDHE-RSA-WITH-AES-256-CBC-SHA
  • ECDHE-RSA-WITH-AES-256-CBC-SHA384
  • ECDHE-RSA-WITH-AES-256-GCM-SHA384
  • ECDHE-RSA-WITH-ARIA-128-CBC-SHA256
  • ECDHE-RSA-WITH-ARIA-128-GCM-SHA256
  • ECDHE-RSA-WITH-ARIA-256-CBC-SHA384
  • ECDHE-RSA-WITH-ARIA-256-GCM-SHA384
  • ECDHE-RSA-WITH-CAMELLIA-128-CBC-SHA256
  • ECDHE-RSA-WITH-CAMELLIA-128-GCM-SHA256
  • ECDHE-RSA-WITH-CAMELLIA-256-CBC-SHA384
  • ECDHE-RSA-WITH-CAMELLIA-256-GCM-SHA384
  • ECDHE-RSA-WITH-RC4-128-SHA

ECDH-RSA

  • ECDH-RSA-WITH-3DES-EDE-CBC-SHA
  • ECDH-RSA-WITH-AES-128-CBC-SHA
  • ECDH-RSA-WITH-AES-128-CBC-SHA256
  • ECDH-RSA-WITH-AES-128-GCM-SHA256
  • ECDH-RSA-WITH-AES-256-CBC-SHA
  • ECDH-RSA-WITH-AES-256-CBC-SHA384
  • ECDH-RSA-WITH-AES-256-GCM-SHA384
  • ECDH-RSA-WITH-ARIA-128-CBC-SHA256
  • ECDH-RSA-WITH-ARIA-128-GCM-SHA256
  • ECDH-RSA-WITH-ARIA-256-CBC-SHA384
  • ECDH-RSA-WITH-ARIA-256-GCM-SHA384
  • ECDH-RSA-WITH-CAMELLIA-128-CBC-SHA256
  • ECDH-RSA-WITH-CAMELLIA-128-GCM-SHA256
  • ECDH-RSA-WITH-CAMELLIA-256-CBC-SHA384
  • ECDH-RSA-WITH-CAMELLIA-256-GCM-SHA384
  • ECDH-RSA-WITH-RC4-128-SHA

DHE-RSA

  • DHE-RSA-WITH-CHACHA20-POLY1305-SHA256
  • DHE-RSA-WITH-3DES-EDE-CBC-SHA
  • DHE-RSA-WITH-SEED-CBC-SHA
  • DHE-RSA-WITH-AES-128-CBC-SHA
  • DHE-RSA-WITH-AES-128-CBC-SHA256
  • DHE-RSA-WITH-AES-128-CCM
  • DHE-RSA-WITH-AES-128-CCM-8
  • DHE-RSA-WITH-AES-128-GCM-SHA256
  • DHE-RSA-WITH-AES-256-CBC-SHA
  • DHE-RSA-WITH-AES-256-CBC-SHA256
  • DHE-RSA-WITH-AES-256-CCM
  • DHE-RSA-WITH-AES-256-CCM-8
  • DHE-RSA-WITH-AES-256-GCM-SHA384
  • DHE-RSA-WITH-ARIA-128-CBC-SHA256
  • DHE-RSA-WITH-ARIA-256-CBC-SHA384
  • DHE-RSA-WITH-ARIA-128-GCM-SHA256
  • DHE-RSA-WITH-ARIA-256-GCM-SHA384
  • DHE-RSA-WITH-CAMELLIA-128-CBC-SHA
  • DHE-RSA-WITH-CAMELLIA-256-CBC-SHA
  • DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256
  • DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256

RSA

  • RSA-WITH-3DES-EDE-CBC-SHA
  • RSA-WITH-SEED-CBC-SHA
  • RSA-WITH-AES-128-CBC-SHA
  • RSA-WITH-AES-128-CBC-SHA256
  • RSA-WITH-AES-128-CCM
  • RSA-WITH-AES-128-GCM-SHA256
  • RSA-WITH-AES-256-CBC-SHA
  • RSA-WITH-AES-256-CBC-SHA256
  • RSA-WITH-AES-256-CCM
  • RSA-WITH-AES-256-GCM-SHA384
  • RSA-WITH-CAMELLIA-128-CBC-SHA
  • RSA-WITH-CAMELLIA-256-CBC-SHA
  • RSA-WITH-CAMELLIA-128-CBC-SHA256
  • RSA-WITH-CAMELLIA-256-CBC-SHA256
  • RSA-WITH-ARIA-128-CBC-SHA256
  • RSA-WITH-ARIA-256-CBC-SHA384
  • RSA-WITH-ARIA-128-GCM-SHA256
  • RSA-WITH-ARIA-256-GCM-SHA384
  • RSA-WITH-RC4-128-MD5
  • RSA-WITH-RC4-128-SHA