Cipher Suites

A cipher suite is a named combination of authentication, encryption, message authentication code (MAC) and key exchange algorithms used to negotiate the security settings for a network connection using the Transport Layer Security (TLS) / Secure Sockets Layer (SSL) network protocol.

Usage

When a TLS connection is established, a handshaking, known as the TLS Handshake Protocol, occurs. Within this handshake, a client hello (ClientHello) and a server hello (ServerHello) message are passed. First, the client sends a cipher suite list, a list of the cipher suites that it supports, in order of preference. Then the server replies with the cipher suite that it has selected from the client cipher suite list.

Description of Algorithms

In cryptography, a message authentication code (MAC) is a short piece of information used to authenticate a message and to provide integrity and authenticity assurances on the message.
A MAC algorithm, accepts as input a secret key and an arbitrary-length message to be authenticated, and outputs a MAC (sometimes known as a tag). The MAC value protects both a message's data integrity as well as its authenticity, by allowing verifiers (who also possess the secret key) to detect any changes to the message content.

Key exchange is any method in cryptography by which cryptographic keys are exchanged between two parties, allowing use of a cryptographic algorithm. If sender and receiver wish to exchange encrypted messages, each must be equipped to encrypt messages to be sent and decrypt messages received.
If the cipher is a symmetric key cipher, both will need a copy of the same key. If an asymmetric key cipher with the public/private key property, both will need the other's public key.

Various Key-Exchange algorithms are :-
RSA, Diffie-Hellman, ECDH, SRP (Simple Remote Password Protocol), PSK (Pre Shared Key)

Various Authentication algorithms are :-
RSA, DSA, ECDSA

Various Encryption/Cipher algorithms are :-
RC4, Triple DES, AES, IDEA, DES

List of Cipher Suites

Cipher ID -- A 2-3 bit unique cipher identifier
Name -- Name of each cipher suite
Protocol -- Most Cipher Suite comes under TLS or SSL protocol and very few are Microsoft proprietary protocol PCT.
Key Exchange -- Most popular are RSA and DHE. Flavours of Kerberos KRB5 and PSK are also available but rarely used.
Authentication -- RSA is most used for authentication
Encryption -- Popular Symmetric encryption algorithm are DES, 3DES, AES, RC4, etc.
Bits -- Symmetric Encryption key size in bits
MAC -- Hashing algorithm used for TLS/SSL data packets integrity and authentication checks.

Cipher ID	Name	Protocol	Key Exchange	Authentication	Encryption	Bits	Mac
0x000000	TLS_NULL_WITH_NULL_NULL	TLS	NULL	NULL	NULL	0	NULL
0x000001	TLS_RSA_WITH_NULL_MD5	TLS	RSA	RSA	NULL	0	MD5
0x000002	TLS_RSA_WITH_NULL_SHA	TLS	RSA	RSA	NULL	0	SHA
0x000003	TLS_RSA_EXPORT_WITH_RC4_40_MD5	TLS	RSA_EXPORT	RSA_EXPORT	RC4_40	40	MD5
0x000004	TLS_RSA_WITH_RC4_128_MD5	TLS	RSA	RSA	RC4_128	128	MD5
0x000005	TLS_RSA_WITH_RC4_128_SHA	TLS	RSA	RSA	RC4_128	128	SHA
0x000006	TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5	TLS	RSA_EXPORT	RSA_EXPORT	RC2_CBC_40	40	MD5
0x000007	TLS_RSA_WITH_IDEA_CBC_SHA	TLS	RSA	RSA	IDEA_CBC	128	SHA
0x000008	TLS_RSA_EXPORT_WITH_DES40_CBC_SHA	TLS	RSA_EXPORT	RSA_EXPORT	DES40_CBC	40	SHA
0x000009	TLS_RSA_WITH_DES_CBC_SHA	TLS	RSA	RSA	DES_CBC	56	SHA
0x00000A	TLS_RSA_WITH_3DES_EDE_CBC_SHA	TLS	RSA	RSA	3DES_EDE_CBC	168	SHA
0x00000B	TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA	TLS	DH	DSS	DES40_CBC	40	SHA
0x00000C	TLS_DH_DSS_WITH_DES_CBC_SHA	TLS	DH	DSS	DES_CBC	56	SHA
0x00000D	TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA	TLS	DH	DSS	3DES_EDE_CBC	168	SHA
0x00000E	TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA	TLS	DH	RSA	DES40_CBC	40	SHA
0x00000F	TLS_DH_RSA_WITH_DES_CBC_SHA	TLS	DH	RSA	DES_CBC	56	SHA
0x000010	TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA	TLS	DH	RSA	3DES_EDE_CBC	168	SHA
0x000011	TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA	TLS	DHE	DSS	DES40_CBC	40	SHA
0x000012	TLS_DHE_DSS_WITH_DES_CBC_SHA	TLS	DHE	DSS	DES_CBC	56	SHA
0x000013	TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA	TLS	DHE	DSS	3DES_EDE_CBC	168	SHA
0x000014	TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA	TLS	DHE	RSA	DES40_CBC	40	SHA
0x000015	TLS_DHE_RSA_WITH_DES_CBC_SHA	TLS	DHE	RSA	DES_CBC	56	SHA
0x000016	TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA	TLS	DHE	RSA	3DES_EDE_CBC	168	SHA
0x000017	TLS_DH_Anon_EXPORT_WITH_RC4_40_MD5	TLS	DH	Anon	RC4_40	40	MD5
0x000018	TLS_DH_Anon_WITH_RC4_128_MD5	TLS	DH	Anon	RC4_128	128	MD5
0x000019	TLS_DH_Anon_EXPORT_WITH_DES40_CBC_SHA	TLS	DH	Anon	DES40_CBC	40	SHA
0x00001A	TLS_DH_Anon_WITH_DES_CBC_SHA	TLS	DH	Anon	DES_CBC	56	SHA
0x00001B	TLS_DH_Anon_WITH_3DES_EDE_CBC_SHA	TLS	DH	Anon	3DES_EDE_CBC	168	SHA
0x00001C	SSL_FORTEZZA_KEA_WITH_NULL_SHA	SSL	FORTEZZA	KEA	NULL	0	SHA
0x00001D	SSL_FORTEZZA_KEA_WITH_FORTEZZA_CBC_SHA	SSL	FORTEZZA	KEA	FORTEZZA_CBC	80	SHA
0x00001E	TLS_KRB5_WITH_DES_CBC_SHA	TLS	KRB5	KRB5	DES_CBC	56	SHA
0x00001F	TLS_KRB5_WITH_3DES_EDE_CBC_SHA	TLS	KRB5	KRB5	3DES_EDE_CBC	168	SHA
0x000020	TLS_KRB5_WITH_RC4_128_SHA	TLS	KRB5	KRB5	RC4_128	128	SHA
0x000021	TLS_KRB5_WITH_IDEA_CBC_SHA	TLS	KRB5	KRB5	IDEA_CBC	128	SHA
0x000022	TLS_KRB5_WITH_DES_CBC_MD5	TLS	KRB5	KRB5	DES_CBC	56	MD5
0x000023	TLS_KRB5_WITH_3DES_EDE_CBC_MD5	TLS	KRB5	KRB5	3DES_EDE_CBC	168	MD5
0x000024	TLS_KRB5_WITH_RC4_128_MD5	TLS	KRB5	KRB5	RC4_128	128	MD5
0x000025	TLS_KRB5_WITH_IDEA_CBC_MD5	TLS	KRB5	KRB5	IDEA_CBC	128	MD5
0x000026	TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA	TLS	KRB5_EXPORT	KRB5_EXPORT	DES_CBC_40	40	SHA
0x000027	TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA	TLS	KRB5_EXPORT	KRB5_EXPORT	RC2_CBC_40	40	SHA
0x000028	TLS_KRB5_EXPORT_WITH_RC4_40_SHA	TLS	KRB5_EXPORT	KRB5_EXPORT	RC4_40	40	SHA
0x000029	TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5	TLS	KRB5_EXPORT	KRB5_EXPORT	DES_CBC_40	40	MD5
0x00002A	TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5	TLS	KRB5_EXPORT	KRB5_EXPORT	RC2_CBC_40	40	MD5
0x00002B	TLS_KRB5_EXPORT_WITH_RC4_40_MD5	TLS	KRB5_EXPORT	KRB5_EXPORT	RC4_40	40	MD5
0x00002C	TLS_PSK_WITH_NULL_SHA	TLS	PSK	PSK	NULL	0	SHA
0x00002D	TLS_DHE_PSK_WITH_NULL_SHA	TLS	DHE	PSK	NULL	0	SHA
0x00002E	TLS_RSA_PSK_WITH_NULL_SHA	TLS	RSA	PSK	NULL	0	SHA
0x00002F	TLS_RSA_WITH_AES_128_CBC_SHA	TLS	RSA	RSA	AES_128_CBC	128	SHA
0x000030	TLS_DH_DSS_WITH_AES_128_CBC_SHA	TLS	DH	DSS	AES_128_CBC	128	SHA
0x000031	TLS_DH_RSA_WITH_AES_128_CBC_SHA	TLS	DH	RSA	AES_128_CBC	128	SHA
0x000032	TLS_DHE_DSS_WITH_AES_128_CBC_SHA	TLS	DHE	DSS	AES_128_CBC	128	SHA
0x000033	TLS_DHE_RSA_WITH_AES_128_CBC_SHA	TLS	DHE	RSA	AES_128_CBC	128	SHA
0x000034	TLS_DH_Anon_WITH_AES_128_CBC_SHA	TLS	DH	Anon	AES_128_CBC	128	SHA
0x000035	TLS_RSA_WITH_AES_256_CBC_SHA	TLS	RSA	RSA	AES_256_CBC	256	SHA
0x000036	TLS_DH_DSS_WITH_AES_256_CBC_SHA	TLS	DH	DSS	AES_256_CBC	256	SHA
0x000037	TLS_DH_RSA_WITH_AES_256_CBC_SHA	TLS	DH	RSA	AES_256_CBC	256	SHA
0x000038	TLS_DHE_DSS_WITH_AES_256_CBC_SHA	TLS	DHE	DSS	AES_256_CBC	256	SHA
0x000039	TLS_DHE_RSA_WITH_AES_256_CBC_SHA	TLS	DHE	RSA	AES_256_CBC	256	SHA
0x00003A	TLS_DH_Anon_WITH_AES_256_CBC_SHA	TLS	DH	Anon	AES_256_CBC	256	SHA
0x00003B	TLS_RSA_WITH_NULL_SHA256	TLS	RSA	RSA	NULL	0	SHA256
0x00003C	TLS_RSA_WITH_AES_128_CBC_SHA256	TLS	RSA	RSA	AES_128_CBC	128	SHA256
0x00003D	TLS_RSA_WITH_AES_256_CBC_SHA256	TLS	RSA	RSA	AES_256_CBC	256	SHA256
0x00003E	TLS_DH_DSS_WITH_AES_128_CBC_SHA256	TLS	DH	DSS	AES_128_CBC	128	SHA256
0x00003F	TLS_DH_RSA_WITH_AES_128_CBC_SHA256	TLS	DH	RSA	AES_128_CBC	128	SHA256
0x000040	TLS_DHE_DSS_WITH_AES_128_CBC_SHA256	TLS	DHE	DSS	AES_128_CBC	128	SHA256
0x000041	TLS_RSA_WITH_CAMELLIA_128_CBC_SHA	TLS	RSA	RSA	CAMELLIA_128_CBC	128	SHA
0x000042	TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA	TLS	DH	DSS	CAMELLIA_128_CBC	128	SHA
0x000043	TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA	TLS	DH	RSA	CAMELLIA_128_CBC	128	SHA
0x000044	TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA	TLS	DHE	DSS	CAMELLIA_128_CBC	128	SHA
0x000045	TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA	TLS	DHE	RSA	CAMELLIA_128_CBC	128	SHA
0x000046	TLS_DH_Anon_WITH_CAMELLIA_128_CBC_SHA	TLS	DH	Anon	CAMELLIA_128_CBC	128	SHA
0x000047	TLS_ECDH_ECDSA_WITH_NULL_SHA	TLS	ECDH	ECDSA	NULL	0	SHA
0x000048	TLS_ECDH_ECDSA_WITH_RC4_128_SHA	TLS	ECDH	ECDSA	RC4_128	128	SHA
0x000049	TLS_ECDH_ECDSA_WITH_DES_CBC_SHA	TLS	ECDH	ECDSA	DES_CBC	56	SHA
0x00004A	TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA	TLS	ECDH	ECDSA	3DES_EDE_CBC	168	SHA
0x00004B	TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA	TLS	ECDH	ECDSA	AES_128_CBC	128	SHA
0x00004C	TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA	TLS	ECDH	ECDSA	AES_256_CBC	256	SHA
0x000060	TLS_RSA_EXPORT1024_WITH_RC4_56_MD5	TLS	RSA_EXPORT 1024	RSA_EXPORT 1024	RC4_56	56	MD5
0x000061	TLS_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5	TLS	RSA_EXPORT 1024	RSA_EXPORT 1024	RC2_CBC_56	56	MD5
0x000062	TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA	TLS	RSA_EXPORT 1024	RSA_EXPORT 1024	DES_CBC	56	SHA
0x000063	TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA	TLS	DHE	DSS	DES_CBC	56	SHA
0x000064	TLS_RSA_EXPORT1024_WITH_RC4_56_SHA	TLS	RSA_EXPORT 1024	RSA_EXPORT 1024	RC4_56	56	SHA
0x000065	TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA	TLS	DHE	DSS	RC4_56	56	SHA
0x000066	TLS_DHE_DSS_WITH_RC4_128_SHA	TLS	DHE	DSS	RC4_128	128	SHA
0x000067	TLS_DHE_RSA_WITH_AES_128_CBC_SHA256	TLS	DHE	RSA	AES_128_CBC	128	SHA256
0x000068	TLS_DH_DSS_WITH_AES_256_CBC_SHA256	TLS	DH	DSS	AES_256_CBC	256	SHA256
0x000069	TLS_DH_RSA_WITH_AES_256_CBC_SHA256	TLS	DH	RSA	AES_256_CBC	256	SHA256
0x00006A	TLS_DHE_DSS_WITH_AES_256_CBC_SHA256	TLS	DHE	DSS	AES_256_CBC	256	SHA256
0x00006B	TLS_DHE_RSA_WITH_AES_256_CBC_SHA256	TLS	DHE	RSA	AES_256_CBC	256	SHA256
0x00006C	TLS_DH_Anon_WITH_AES_128_CBC_SHA256	TLS	DH	Anon	AES_128_CBC	128	SHA256
0x00006D	TLS_DH_Anon_WITH_AES_256_CBC_SHA256	TLS	DH	Anon	AES_256_CBC	256	SHA256
0x000080	TLS_GOSTR341094_WITH_28147_CNT_IMIT	TLS	VKO GOST R 34.10-94	VKO GOST R 34.10-94	GOST28147	256	GOST28147
0x000081	TLS_GOSTR341001_WITH_28147_CNT_IMIT	TLS	VKO GOST R 34.10-2001	VKO GOST R 34.10-2001	GOST28147	256	GOST28147
0x000082	TLS_GOSTR341094_WITH_NULL_GOSTR3411	TLS	VKO GOST R 34.10-94	VKO GOST R 34.10-94	NULL	0	GOSTR3411
0x000083	TLS_GOSTR341001_WITH_NULL_GOSTR3411	TLS	VKO GOST R 34.10-2001	VKO GOST R 34.10-2001	NULL	0	GOSTR3411
0x000084	TLS_RSA_WITH_CAMELLIA_256_CBC_SHA	TLS	RSA	RSA	CAMELLIA_256_CBC	256	SHA
0x000085	TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA	TLS	DH	DSS	CAMELLIA_256_CBC	256	SHA
0x000086	TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA	TLS	DH	RSA	CAMELLIA_256_CBC	256	SHA
0x000087	TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA	TLS	DHE	DSS	CAMELLIA_256_CBC	256	SHA
0x000088	TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA	TLS	DHE	RSA	CAMELLIA_256_CBC	256	SHA
0x000089	TLS_DH_Anon_WITH_CAMELLIA_256_CBC_SHA	TLS	DH	Anon	CAMELLIA_256_CBC	256	SHA
0x00008A	TLS_PSK_WITH_RC4_128_SHA	TLS	PSK	PSK	RC4_128	128	SHA
0x00008B	TLS_PSK_WITH_3DES_EDE_CBC_SHA	TLS	PSK	PSK	3DES_EDE_CBC	168	SHA
0x00008C	TLS_PSK_WITH_AES_128_CBC_SHA	TLS	PSK	PSK	AES_128_CBC	128	SHA
0x00008D	TLS_PSK_WITH_AES_256_CBC_SHA	TLS	PSK	PSK	AES_256_CBC	256	SHA
0x00008E	TLS_DHE_PSK_WITH_RC4_128_SHA	TLS	DHE	PSK	RC4_128	128	SHA
0x00008F	TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA	TLS	DHE	PSK	3DES_EDE_CBC	168	SHA
0x000090	TLS_DHE_PSK_WITH_AES_128_CBC_SHA	TLS	DHE	PSK	AES_128_CBC	128	SHA
0x000091	TLS_DHE_PSK_WITH_AES_256_CBC_SHA	TLS	DHE	PSK	AES_256_CBC	256	SHA
0x000092	TLS_RSA_PSK_WITH_RC4_128_SHA	TLS	RSA	PSK	RC4_128	128	SHA
0x000093	TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA	TLS	RSA	PSK	3DES_EDE_CBC	168	SHA
0x000094	TLS_RSA_PSK_WITH_AES_128_CBC_SHA	TLS	RSA	PSK	AES_128_CBC	128	SHA
0x000095	TLS_RSA_PSK_WITH_AES_256_CBC_SHA	TLS	RSA	PSK	AES_256_CBC	256	SHA
0x000096	TLS_RSA_WITH_SEED_CBC_SHA	TLS	RSA	RSA	SEED_CBC	128	SHA
0x000097	TLS_DH_DSS_WITH_SEED_CBC_SHA	TLS	DH	DSS	SEED_CBC	128	SHA
0x000098	TLS_DH_RSA_WITH_SEED_CBC_SHA	TLS	DH	RSA	SEED_CBC	128	SHA
0x000099	TLS_DHE_DSS_WITH_SEED_CBC_SHA	TLS	DHE	DSS	SEED_CBC	128	SHA
0x00009A	TLS_DHE_RSA_WITH_SEED_CBC_SHA	TLS	DHE	RSA	SEED_CBC	128	SHA
0x00009B	TLS_DH_Anon_WITH_SEED_CBC_SHA	TLS	DH	Anon	SEED_CBC	128	SHA
0x00009C	TLS_RSA_WITH_AES_128_GCM_SHA256	TLS	RSA	RSA	AES_128_GCM	128	SHA256
0x00009D	TLS_RSA_WITH_AES_256_GCM_SHA384	TLS	RSA	RSA	AES_256_GCM	256	SHA384
0x00009E	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256	TLS	DHE	RSA	AES_128_GCM	128	SHA256
0x00009F	TLS_DHE_RSA_WITH_AES_256_GCM_SHA384	TLS	DHE	RSA	AES_256_GCM	256	SHA384
0x0000A0	TLS_DH_RSA_WITH_AES_128_GCM_SHA256	TLS	DH	RSA	AES_128_GCM	128	SHA256
0x0000A1	TLS_DH_RSA_WITH_AES_256_GCM_SHA384	TLS	DH	RSA	AES_256_GCM	256	SHA384
0x0000A2	TLS_DHE_DSS_WITH_AES_128_GCM_SHA256	TLS	DHE	DSS	AES_128_GCM	128	SHA256
0x0000A3	TLS_DHE_DSS_WITH_AES_256_GCM_SHA384	TLS	DHE	DSS	AES_256_GCM	256	SHA384
0x0000A4	TLS_DH_DSS_WITH_AES_128_GCM_SHA256	TLS	DH	DSS	AES_128_GCM	128	SHA256
0x0000A5	TLS_DH_DSS_WITH_AES_256_GCM_SHA384	TLS	DH	DSS	AES_256_GCM	256	SHA384
0x0000A6	TLS_DH_Anon_WITH_AES_128_GCM_SHA256	TLS	DH	Anon	AES_128_GCM	128	SHA256
0x0000A7	TLS_DH_Anon_WITH_AES_256_GCM_SHA384	TLS	DH	Anon	AES_256_GCM	256	SHA384
0x0000A8	TLS_PSK_WITH_AES_128_GCM_SHA256	TLS	PSK	PSK	AES_128_GCM	128	SHA256
0x0000A9	TLS_PSK_WITH_AES_256_GCM_SHA384	TLS	PSK	PSK	AES_256_GCM	256	SHA384
0x0000AA	TLS_DHE_PSK_WITH_AES_128_GCM_SHA256	TLS	DHE	PSK	AES_128_GCM	128	SHA256
0x0000AB	TLS_DHE_PSK_WITH_AES_256_GCM_SHA384	TLS	DHE	PSK	AES_256_GCM	256	SHA384
0x0000AC	TLS_RSA_PSK_WITH_AES_128_GCM_SHA256	TLS	RSA	PSK	AES_128_GCM	128	SHA256
0x0000AD	TLS_RSA_PSK_WITH_AES_256_GCM_SHA384	TLS	RSA	PSK	AES_256_GCM	256	SHA384
0x0000AE	TLS_PSK_WITH_AES_128_CBC_SHA256	TLS	PSK	PSK	AES_128_CBC	128	SHA256
0x0000AF	TLS_PSK_WITH_AES_256_CBC_SHA384	TLS	PSK	PSK	AES_256_CBC	256	SHA384
0x0000B0	TLS_PSK_WITH_NULL_SHA256	TLS	PSK	PSK	NULL	0	SHA256
0x0000B1	TLS_PSK_WITH_NULL_SHA384	TLS	PSK	PSK	NULL	0	SHA384
0x0000B2	TLS_DHE_PSK_WITH_AES_128_CBC_SHA256	TLS	DHE	PSK	AES_128_CBC	128	SHA256
0x0000B3	TLS_DHE_PSK_WITH_AES_256_CBC_SHA384	TLS	DHE	PSK	AES_256_CBC	256	SHA384
0x0000B4	TLS_DHE_PSK_WITH_NULL_SHA256	TLS	DHE	PSK	NULL	0	SHA256
0x0000B5	TLS_DHE_PSK_WITH_NULL_SHA384	TLS	DHE	PSK	NULL	0	SHA384
0x0000B6	TLS_RSA_PSK_WITH_AES_128_CBC_SHA256	TLS	RSA	PSK	AES_128_CBC	128	SHA256
0x0000B7	TLS_RSA_PSK_WITH_AES_256_CBC_SHA384	TLS	RSA	PSK	AES_256_CBC	256	SHA384
0x0000B8	TLS_RSA_PSK_WITH_NULL_SHA256	TLS	RSA	PSK	NULL	0	SHA256
0x0000B9	TLS_RSA_PSK_WITH_NULL_SHA384	TLS	RSA	PSK	NULL	0	SHA384
0x00C001	TLS_ECDH_ECDSA_WITH_NULL_SHA	TLS	ECDH	ECDSA	NULL	0	SHA
0x00C002	TLS_ECDH_ECDSA_WITH_RC4_128_SHA	TLS	ECDH	ECDSA	RC4_128	128	SHA
0x00C003	TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA	TLS	ECDH	ECDSA	3DES_EDE_CBC	168	SHA
0x00C004	TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA	TLS	ECDH	ECDSA	AES_128_CBC	128	SHA
0x00C005	TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA	TLS	ECDH	ECDSA	AES_256_CBC	256	SHA
0x00C006	TLS_ECDHE_ECDSA_WITH_NULL_SHA	TLS	ECDHE	ECDSA	NULL	0	SHA
0x00C007	TLS_ECDHE_ECDSA_WITH_RC4_128_SHA	TLS	ECDHE	ECDSA	RC4_128	128	SHA
0x00C008	TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA	TLS	ECDHE	ECDSA	3DES_EDE_CBC	168	SHA
0x00C009	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA	TLS	ECDHE	ECDSA	AES_128_CBC	128	SHA
0x00C00A	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA	TLS	ECDHE	ECDSA	AES_256_CBC	256	SHA
0x00C00B	TLS_ECDH_RSA_WITH_NULL_SHA	TLS	ECDH	RSA	NULL	0	SHA
0x00C00C	TLS_ECDH_RSA_WITH_RC4_128_SHA	TLS	ECDH	RSA	RC4_128	128	SHA
0x00C00D	TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA	TLS	ECDH	RSA	3DES_EDE_CBC	168	SHA
0x00C00E	TLS_ECDH_RSA_WITH_AES_128_CBC_SHA	TLS	ECDH	RSA	AES_128_CBC	128	SHA
0x00C00F	TLS_ECDH_RSA_WITH_AES_256_CBC_SHA	TLS	ECDH	RSA	AES_256_CBC	256	SHA
0x00C010	TLS_ECDHE_RSA_WITH_NULL_SHA	TLS	ECDHE	RSA	NULL	0	SHA
0x00C011	TLS_ECDHE_RSA_WITH_RC4_128_SHA	TLS	ECDHE	RSA	RC4_128	128	SHA
0x00C012	TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA	TLS	ECDHE	RSA	3DES_EDE_CBC	168	SHA
0x00C013	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA	TLS	ECDHE	RSA	AES_128_CBC	128	SHA
0x00C014	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	TLS	ECDHE	RSA	AES_256_CBC	256	SHA
0x00C015	TLS_ECDH_Anon_WITH_NULL_SHA	TLS	ECDH	Anon	NULL	0	SHA
0x00C016	TLS_ECDH_Anon_WITH_RC4_128_SHA	TLS	ECDH	Anon	RC4_128	128	SHA
0x00C017	TLS_ECDH_Anon_WITH_3DES_EDE_CBC_SHA	TLS	ECDH	Anon	3DES_EDE_CBC	168	SHA
0x00C018	TLS_ECDH_Anon_WITH_AES_128_CBC_SHA	TLS	ECDH	Anon	AES_128_CBC	128	SHA
0x00C019	TLS_ECDH_Anon_WITH_AES_256_CBC_SHA	TLS	ECDH	Anon	AES_256_CBC	256	SHA
0x00C01A	TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA	TLS	SRP	SHA	3DES_EDE_CBC	168	SHA
0x00C01B	TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA	TLS	SRP	SHA	3DES_EDE_CBC	168	SHA
0x00C01C	TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA	TLS	SRP	SHA	3DES_EDE_CBC	168	SHA
0x00C01D	TLS_SRP_SHA_WITH_AES_128_CBC_SHA	TLS	SRP	SHA	AES_128_CBC	128	SHA
0x00C01E	TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA	TLS	SRP	SHA	AES_128_CBC	128	SHA
0x00C01F	TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA	TLS	SRP	SHA	AES_128_CBC	128	SHA
0x00C020	TLS_SRP_SHA_WITH_AES_256_CBC_SHA	TLS	SRP	SHA	AES_256_CBC	256	SHA
0x00C021	TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA	TLS	SRP	SHA	AES_256_CBC	256	SHA
0x00C022	TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA	TLS	SRP	SHA	AES_256_CBC	256	SHA
0x00C023	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256	TLS	ECDHE	ECDSA	AES_128_CBC	128	SHA256
0x00C024	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384	TLS	ECDHE	ECDSA	AES_256_CBC	256	SHA384
0x00C025	TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256	TLS	ECDH	ECDSA	AES_128_CBC	128	SHA256
0x00C026	TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384	TLS	ECDH	ECDSA	AES_256_CBC	256	SHA384
0x00C027	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	TLS	ECDHE	RSA	AES_128_CBC	128	SHA256
0x00C028	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384	TLS	ECDHE	RSA	AES_256_CBC	256	SHA384
0x00C029	TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256	TLS	ECDH	RSA	AES_128_CBC	128	SHA256
0x00C02A	TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384	TLS	ECDH	RSA	AES_256_CBC	256	SHA384
0x00C02B	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	TLS	ECDHE	ECDSA	AES_128_GCM	128	SHA256
0x00C02C	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384	TLS	ECDHE	ECDSA	AES_256_GCM	256	SHA384
0x00C02D	TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256	TLS	ECDH	ECDSA	AES_128_GCM	128	SHA256
0x00C02E	TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384	TLS	ECDH	ECDSA	AES_256_GCM	256	SHA384
0x00C02F	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	TLS	ECDHE	RSA	AES_128_GCM	128	SHA256
0x00C030	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384	TLS	ECDHE	RSA	AES_256_GCM	256	SHA384
0x00C031	TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256	TLS	ECDH	RSA	AES_128_GCM	128	SHA256
0x00C032	TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384	TLS	ECDH	RSA	AES_256_GCM	256	SHA384
0x00C033	TLS_ECDHE_PSK_WITH_RC4_128_SHA	TLS	ECDHE	PSK	RC4_128	128	SHA
0x00C034	TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA	TLS	ECDHE	PSK	3DES_EDE_CBC	168	SHA
0x00C035	TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA	TLS	ECDHE	PSK	AES_128_CBC	128	SHA
0x00C036	TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA	TLS	ECDHE	PSK	AES_256_CBC	256	SHA
0x00C037	TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256	TLS	ECDHE	PSK	AES_128_CBC	128	SHA256
0x00C038	TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384	TLS	ECDHE	PSK	AES_256_CBC	256	SHA384
0x00C039	TLS_ECDHE_PSK_WITH_NULL_SHA	TLS	ECDHE	PSK	NULL	0	SHA
0x00C03A	TLS_ECDHE_PSK_WITH_NULL_SHA256	TLS	ECDHE	PSK	NULL	0	SHA256
0x00C03B	TLS_ECDHE_PSK_WITH_NULL_SHA384	TLS	ECDHE	PSK	NULL	0	SHA384
0x00FEFE	SSL_RSA_FIPS_WITH_DES_CBC_SHA	SSL	RSA_FIPS	RSA_FIPS	DES_CBC	56	SHA
0x00FEFF	SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA	SSL	RSA_FIPS	RSA_FIPS	3DES_EDE_CBC	168	SHA
0x00FFE0	SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA	SSL	RSA_FIPS	RSA_FIPS	3DES_EDE_CBC	168	SHA
0x00FFE1	SSL_RSA_FIPS_WITH_DES_CBC_SHA	SSL	RSA_FIPS	RSA_FIPS	DES_CBC	56	SHA
0x010080	SSL2_RC4_128_WITH_MD5	SSL2	RSA	RSA	RC4_128	128	MD5
0x020080	SSL2_RC4_128_EXPORT40_WITH_MD5	SSL2	RSA	RSA	RC4_128_EXPORT40	40	MD5
0x030080	SSL2_RC2_CBC_128_CBC_WITH_MD5	SSL2	RSA	RSA	RC2_CBC_128_CBC	128	MD5
0x040080	SSL2_RC2_CBC_128_CBC_WITH_MD5	SSL2	RSA	RSA	RC2_CBC_128_CBC	128	MD5
0x050080	SSL2_IDEA_128_CBC_WITH_MD5	SSL2	RSA	RSA	IDEA_128_CBC	128	MD5
0x060040	SSL2_DES_64_CBC_WITH_MD5	SSL2	RSA	RSA	DES_64_CBC	64	MD5
0x0700C0	SSL2_DES_192_EDE3_CBC_WITH_MD5	SSL2	RSA	RSA	DES_192_EDE3_CBC	192	MD5
0x080080	SSL2_RC4_64_WITH_MD5	SSL2	RSA	RSA	RC4_64	64	MD5
0x800001	PCT_SSL_CERT_TYPE	PCT1_CERT_X509	PCT
0x800003	PCT_SSL_CERT_TYPE	PCT1_CERT_X509_CHAIN	PCT
0x810001	PCT_SSL_HASH_TYPE	PCT1_HASH_MD5	PCT
0x810003	PCT_SSL_HASH_TYPE	PCT1_HASH_SHA	PCT
0x820001	PCT_SSL_EXCH_TYPE	PCT1_EXCH_RSA_PKCS1	PCT
0x830004	PCT_SSL_CIPHER_TYPE_1ST_HALF	PCT1_CIPHER_RC4	PCT
0x842840	PCT_SSL_CIPHER_TYPE_2ND_HALF	PCT1_ENC_BITS_40	PCT1_MAC_BITS 128	PCT
0x848040	PCT_SSL_CIPHER_TYPE_2ND_HALF	PCT1_ENC_BITS_128	PCT1_MAC_BITS 128	PCT
0x8F8001	PCT_SSL_COMPAT	PCT_VERSION_1	PCT

IANA list of cipher suites:-
http://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-4


Appendix

Anon

Anonymous cipher suites with no key authentication. Highly vulnerable to man in the middle attack.

Export

Intentionally crippled cipher suite to conform to US export laws. Symmetric cipher used in export cipher suites typically does not exceed 56bits.

NULL

Null cipher suites do not provide any data encryption and/or data integrity. TLS_NULL_WITH_NULL_NULL (0x0000) cipher suite is used during initial session establishment.

Key exchange and Authentication algorithms:

RSA

Rivest, Shamir, Adleman

DH

Diffie-Hellman

DHE

Diffie-Hellman Ephemeral

ECDH

Elliptic-Curve Diffie-Hellman

KRB5

Kerberos

SRP

Secure Remote Password Protocol

PSK

Pre-shared key

DSA

Digital Signature Algorithm

ECDSA

Elliptic Curve Digital Signature Algorithm

DSS

Digital Signature Standard

Encryption and MAC algorithms:

3DES

Tripple Data Encryption Algorithm

AES

Advanced Encryption Standard

Camelia

Block cipher developed by Mitsubishi and NTT

DES

Data Encryption Standard

Fortezza

Security token based cipher

GOST

Block cipher developed in USSR

IDEA

International Data Encryption Algorithm

RC2

Rivest Cipher 4

RC4

Rivest Cipher 2

SEED

Block cipher developed by Korean Information Security Agency

SHA

Secure Hash Algorithm

MD5

Message Digiest algorithm 5