Please note, this is a STATIC archive of website developer.mozilla.org from 03 Nov 2016, cach3.com does not collect or store any user information, there is no "phishing" involved.

Revision 812325 of Cipher suite

  • Revision slug: Glossary/Cipher_suite
  • Revision title: Cipher suite
  • Revision id: 812325
  • Created:
  • Creator: kscarfone
  • Is current revision? Yes
  • Comment Technical and editorial review
Tags: 

Revision Content

A cipher suite is a combination of a key exchange algorithm, authentication method, bulk encryption {{Glossary("cipher")}}, and message authentication code.

In a {{Glossary("cryptosystem")}} like {{Glossary("TLS")}}, the client and server must agree on a cipher suite before they can begin communicating securely.  A typical cipher suite looks like ECDHE_RSA_WITH_AES_128_GCM_SHA256 or ECDHE-RSA-AES128-GCM-SHA256, indicating:

  • ECDHE (elliptic curve Diffie-Hellman ephemeral) for key exchange
  • RSA for authentication
  • AES-128 as the cipher, with Galois/Counter Mode (GCM) as the block cipher mode of operation
  • SHA-256 as the hash-based message authentication code (HMAC)

Learn more

Revision Source

 
<p><span class="seoSummary">A cipher suite is a combination of a key exchange algorithm, authentication method, bulk encryption {{Glossary("cipher")}}, and message authentication code.</span></p>

<p>In a {{Glossary("cryptosystem")}} like {{Glossary("TLS")}}, the client and server must agree on a cipher suite before they can begin communicating securely.&nbsp; A typical cipher suite looks like ECDHE_RSA_WITH_AES_128_GCM_SHA256 or ECDHE-RSA-AES128-GCM-SHA256, indicating:</p>

<ul>
 <li>ECDHE (elliptic curve Diffie-Hellman ephemeral) for key exchange</li>
 <li>RSA for authentication</li>
 <li>AES-128 as the cipher, with Galois/Counter Mode (GCM) as the block cipher mode of operation</li>
 <li>SHA-256 as the hash-based message authentication code (HMAC)</li>
</ul>

<h2 id="Learn_more">Learn more</h2>

<ul>
 <li><a href="https://wiki.mozilla.org/Security/Server_Side_TLS">Mozilla recommended cipher suite choices for TLS</a></li>
</ul>
Revert to this revision