Cipher Suites Used by AppDirector

The Cipher Suites parameter is used to configure SSL policies. It lets you control which cipher suites are allowed by AppDirector during the SSL handshake, see SSL Policies.

Table 7 - Complete List of the Content Of All Cipher Suites (Front-end and Back-end), page 598 shows a list of all Cipher suites including the following categories.

RSA (Default) — Cipher suite using RSA key exchange.

ALL: All cipher suites.

PCI DSS Compliance — Payment Card Industry Data Security Standard

ALL Non-Null Ciphers — All cipher suites except the NULL ciphers and ciphers offering no authentication, which must be explicitly enabled.

SSLv3 — SSL v3.0 cipher suites.

TLSv1 — TLS v1.0 and v1.1 cipher suites

Export — Export encryption algorithms including 40 and 56 bit.

Low — “Low” exception cipher suites, currently using 64 or 56 bit encryption algorithms but excluding export cipher suites.

Medium — “Medium” encryption cipher suites, currently using 128 bit encryption

High — “High” encryption cipher suites. Currently key lengths are larger than 128 bits.

RSA:RC4-128:MD5 — Cipher suites using RSA key exchange, 128 bit RC4 for encryption and MD5 for MAC.

RSA:RC4-128:SHA1 — Cipher suite using RSA key exchange, 128 bit RC4 for encryption and SHA1 hash for MAC.

RSA:DES:SHA1 — Cipher suite using RSA key exchange, 3DES for encryption and SHA1 hash for MAC.

RSA:3DES:SHA1 — Cipher suite using RSA key exchange, 3DES for encryption and SHA1 hash for MAC.

RSA:AES-128:SHA1 — Cipher suite using RSA key exchange, 128-bit AES for encryption and SHA1 hash for MAC.

RSA:AES-256:SHA1 — Cipher suite using RSA key exchange, 256-bit AES for encryption and SHA1 hash for MAC.

MSIE Export56 — 56 bit export version of Microsoft Internet Browser v 5.

User Defined — AppDirector supports all ciphers supported by the accepted OpenSSL format and more information can be found in OpenSSL documentation.

The terms used in this table are:

AES—Advanced Encryption Standard

DES—Data Encryption Standard

DSS—Digital Signature Standard

MD5—Message Digest algorithm

RC2, RC4—Rivest encryption

RSA—Rivest-Shamir-Adleman encryption

SHA-1—Secure Hash algorithm

3DES—DES applied three times

 

Complete List of the Content Of All Cipher Suites (Front-end and Back-end)

Cipher Suite Name	Kx – key exchange algorithm	Au – authentication algorithm	Enc –symmetric encryption algorithm	Mac – digest algorithm
Front End - ALL
AES256-SHA	Kx=RSA	Au=RSA	Enc=AES(256)	Mac=SHA1
DES-CBC3-SHA	Kx=RSA	Au=RSA	Enc=3DES(168)	Mac=SHA1
AES128-SHA	Kx=RSA	Au=RSA	Enc=AES(128)	Mac=SHA1
RC4-SHA	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=SHA1
RC4-MD5	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=MD5
DES-CBC-SHA	Kx=RSA	Au=RSA	Enc=DES(56)	Mac=SHA1
NULL-SHA	Kx=RSA	Au=RSA	Enc=None	Mac=SHA1
NULL-MD5	Kx=RSA	Au=RSA	Enc=None	Mac=MD5
ADH-AES256-SHA	Kx=DH	Au=None	Enc=AES(256)	Mac=SHA1
DHE-RSA-AES256-SHA	Kx=DH	Au=RSA	Enc=AES(256)	Mac=SHA1
DHE-DSS-AES256-SHA	Kx=DH	Au=DSS	Enc=AES(256)	Mac=SHA1
ADH-DES-CBC3-SHA	Kx=DH	Au=None	Enc=3DES(168)	Mac=SHA1
EDH-RSA-DES-CBC3-SHA	Kx=DH	Au=RSA	Enc=3DES(168)	Mac=MD5
EDH-DSS-DES-CBC3-SHA	Kx=DH	Au=DSS	Enc=3DES(168)	Mac=SHA1
DHE-DSS-RC4-SHA	Kx=DH	Au=DSS	Enc=RC4(128)	Mac=SHA1
ADH-AES128-SHA	Kx=DH	Au=None	Enc=AES(128)	Mac=SHA1
DHE-RSA-AES128-SHA	Kx=DH	Au=RSA	Enc=AES(128)	Mac=SHA1
DHE-DSS-AES128-SHA	Kx=DH	Au=DSS	Enc=AES(128)	Mac=SHA1
ADH-RC4-MD5	Kx=DH	Au=None	Enc=RC4(128)	Mac=MD5
ADH-DES-CBC-SHA	Kx=DH	Au=None	Enc=DES(56)	Mac=SHA1
EDH-RSA-DES-CBC-SHA	Kx=DH	Au=RSA	Enc=DES(56)	Mac=SHA1
EDH-DSS-DES-CBC-SHA	Kx=DH	Au=DSS	Enc=DES(56)	Mac=SHA1
EXP1024-RC4-SHA	Kx=RSA(1024)	Au=RSA	Enc=RC4(56)	Mac=SHA1 export
EXP1024-DES-CBC-SHA	Kx=RSA(1024)	Au=RSA	Enc=DES(56)	Mac=SHA1 export
EXP-DES-CBC-SHA	Kx=RSA(512)	Au=RSA	Enc=DES(40)	Mac=SHA1 export
EXP-RC4-MD5	Kx=RSA(512)	Au=RSA	Enc=RC4(40)	Mac=MD5  export
EXP1024-DHE-DSS-RC4-SHA	Kx=DH(1024)	Au=DSS	Enc=RC4(56)	Mac=SHA1 export
EXP1024-DHE-DSS-DES-CBC-SHA	Kx=DH(1024)	Au=DSS	Enc=DES(56)	Mac=SHA1 export
EXP-ADH-DES-CBC-SHA	Kx=DH(512)	Au=None	Enc=DES(40)	Mac=SHA1 export
EXP-ADH-RC4-MD5	Kx=DH(512)	Au=None	Enc=RC4(40)	Mac=MD5  export
EXP-EDH-RSA-DES-CBC-SHA	Kx=DH(512)	Au=RSA	Enc=DES(40)	Mac=SHA1 export
EXP-EDH-DSS-DES-CBC-SHA	Kx=DH(512)	Au=DSS	Enc=DES(40)	Mac=SHA1 export
Front End - PCI DSS Compliance
AES256-SHA	Kx=RSA	Au=RSA	Enc=AES(256)	Mac=SHA1
DES-CBC3-SHA	Kx=RSA	Au=RSA	Enc=3DES(168)	Mac=SHA1
AES128-SHA	Kx=RSA	Au=RSA	Enc=AES(128)	Mac=SHA1
RC4-SHA	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=SHA1
RC4-MD5	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=MD5
DHE-DSS-AES256-SHA	Kx=DH(512)	Au=DSS	Enc=AES(256)	Mac=SHA1
EDH-RSA-DES-CBC3-SHA	Kx=DH(512)	Au=RSA	Enc=3DES(168)	Mac=SHA1
EDH-DSS-DES-CBC3-SHA	Kx=DH(512)	Au=DSS	Enc=3DES(168)	Mac=SHA1
DHE-DSS-RC4-SHA	Kx=DH(512)	Au=DSS	Enc=RC4(128)	Mac=SHA1
DHE-DSS-AES128-SHA	Kx=DH(512)	Au=DSS	Enc=AES(128)	Mac=SHA1
Front End - All Non Null Ciphers
AES256-SHA	Kx=RSA	Au=RSA	Enc=AES(256)	Mac=SHA1
DES-CBC3-SHA	Kx=RSA	Au=RSA	Enc=3DES(168)	Mac=SHA1
AES128-SHA	Kx=RSA	Au=RSA	Enc=AES(128)	Mac=SHA1
RC4-SHA	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=SHA1
RC4-MD5	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=MD5
DES-CBC-SHA	Kx=RSA	Au=RSA	Enc=DES(56)	Mac=SHA1
DHE-RSA-AES256-SHA	Kx=DH	Au=RSA	Enc=AES(256)	Mac=SHA1
DHE-DSS-AES256-SHA	Kx=DH	Au=DSS	Enc=AES(256)	Mac=SHA1
EDH-RSA-DES-CBC3-SHA	Kx=DH	Au=RSA	Enc=3DES(168)	Mac=SHA1
EDH-DSS-DES-CBC3-SHA	Kx=DH	Au=DSS	Enc=3DES(168)	Mac=SHA1
DHE-DSS-RC4-SHA	Kx=DH	Au=DSS	Enc=RC4(128)	Mac=SHA1
DHE-RSA-AES128-SHA	Kx=DH	Au=RSA	Enc=AES(128)	Mac=SHA1
DHE-DSS-AES128-SHA	Kx=DH	Au=DSS	Enc=AES(128)	Mac=SHA1
EDH-RSA-DES-CBC-SHA	Kx=DH	Au=RSA	Enc=DES(56)	Mac=SHA1
EDH-DSS-DES-CBC-SHA	Kx=DH	Au=DSS	Enc=DES(56)	Mac=SHA1
EXP1024-RC4-SHA	Kx=RSA(1024)	Au=RSA	Enc=RC4(56)	Mac=SHA1 export
EXP1024-DES-CBC-SHA	Kx=RSA(1024)	Au=RSA	Enc=DES(56)	Mac=SHA1 export
EXP-DES-CBC-SHA	Kx=RSA(512	Au=RSA	Enc=DES(40)	Mac=SHA1 export
EXP-RC4-MD5	Kx=RSA(512	Au=RSA	Enc=RC4(40)	Mac=MD5  export
EXP1024-DHE-DSS-RC4-SHA	Kx=DH(1024)	Au=DSS	Enc=RC4(56)	Mac=SHA1 export
EXP1024-DHE-DSS-DES-CBC-SHA	Kx=DH(1024)	Au=DSS	Enc=DES(56	Mac=SHA1 export
EXP-EDH-RSA-DES-CBC-SHA	Kx=DH(512)	Au=RSA	Enc=DES(40)	Mac=SHA1 export
EXP-EDH-DSS-DES-CBC-SHA	Kx=DH(512)	Au=DSS	Enc=DES(40)	Mac=SHA1 export
Front End - SSL v3
AES256-SHA	Kx=RSA	Au=RSA	Enc=AES(256)	Mac=SHA1
DES-CBC3-SHA	Kx=RSA	Au=RSA	Enc=3DES(168)	Mac=SHA1
AES128-SHA	Kx=RSA	Au=RSA	Enc=AES(128)	Mac=SHA1
RC4-SHA	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=SHA1
RC4-MD5	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=MD5
DES-CBC-SHA	Kx=RSA	Au=RSA	Enc=DES(56)	Mac=SHA1
NULL-SHA	Kx=RSA	Au=RSA	Enc=None	Mac=SHA1
NULL-MD5	Kx=RSA	Au=RSA	Enc=None	Mac=MD5
ADH-AES256-SHA	Kx=DH	Au=None	Enc=AES(256)	Mac=SHA1
DHE-RSA-AES256-SHA	Kx=DH	Au=RSA	Enc=AES(256)	Mac=SHA1
DHE-DSS-AES256-SHA	Kx=DH	Au=DSS	Enc=AES(256)	Mac=SHA1
ADH-DES-CBC3-SHA	Kx=DH	Au=None	Enc=3DES(168)	Mac=SHA1
EDH-RSA-DES-CBC3-SHA	Kx=DH	Au=RSA	Enc=3DES(168)	Mac=SHA1
EDH-DSS-DES-CBC3-SHA	Kx=DH	Au=DSS	Enc=3DES(168)	Mac=SHA1
DHE-DSS-RC4-SHA	Kx=DH	Au=DSS	Enc=RC4(128)	Mac=SHA1
ADH-AES128-SHA	Kx=DH	Au=None	Enc=AES(128)	Mac=SHA1
DHE-RSA-AES128-SHA	Kx=DH	Au=RSA	Enc=AES(128)	Mac=SHA1
DHE-DSS-AES128-SHA	Kx=DH	Au=DSS	Enc=AES(128)	Mac=SHA1
ADH-RC4-MD5	Kx=DH	Au=None	Enc=RC4(128)	Mac=MD5
ADH-DES-CBC-SHA	Kx=DH	Au=None	Enc=DES(56)	Mac=SHA1
EDH-RSA-DES-CBC-SHA	Kx=DH	Au=RSA	Enc=DES(56)	Mac=SHA1
EDH-DSS-DES-CBC-SHA	Kx=DH	Au=DSS	Enc=DES(56)	Mac=SHA1
EXP1024-RC4-SHA	Kx=RSA(1024)	Au=RSA	Enc=RC4(56)	Mac=SHA1 export
EXP1024-DES-CBC-SHA	Kx=RSA(1024)	Au=RSA	Enc=DES(56)	Mac=SHA1 export
EXP-DES-CBC-SHA	Kx=RSA(512)	Au=RSA	Enc=DES(40)	Mac=SHA1 export
EXP-RC4-MD5	Kx=RSA(512)	Au=RSA	Enc=RC4(40)	Mac=MD5  export
EXP1024-DHE-DSS-RC4-SHA	Kx=RSA(1024)	Au=DSS	Enc=RC4(56)	Mac=SHA1 export
EXP1024-DHE-DSS-DES-CBC-SHA	Kx=RSA(1024)	Au=DSS	Enc=DES(56)	Mac=SHA1 export
EXP-ADH-DES-CBC-SHA	Kx=RSA(512)	Au=None	Enc=DES(40)	Mac=SHA1 export
EXP-ADH-RC4-MD5	Kx=RSA(512)	Au=None	Enc=RC4(40)	Mac=MD5  export
EXP-EDH-RSA-DES-CBC-SHA	Kx=RSA(512)	Au=RSA	Enc=DES(40)	Mac=SHA1 export
EXP-EDH-DSS-DES-CBC-SHA	Kx=RSA(512)	Au=DSS	Enc=DES(40)	Mac=SHA1 export
Front End - TLSv1
AES256-SHA	Kx=RSA	Au=RSA	Enc=AES(256)	Mac=SHA1
DES-CBC3-SHA	Kx=RSA	Au=RSA	Enc=3DES(168)	Mac=SHA1
AES128-SHA	Kx=RSA	Au=RSA	Enc=AES(128)	Mac=SHA1
RC4-SHA	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=SHA1
RC4-MD5	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=MD5
DES-CBC-SHA	Kx=RSA	Au=RSA	Enc=DES(56)	Mac=SHA1
NULL-SHA	Kx=RSA	Au=RSA	Enc=None	Mac=SHA1
NULL-MD5	Kx=RSA	Au=RSA	Enc=None	Mac=MD5
ADH-AES256-SHA	Kx=DH	Au=None	Enc=AES(256)	Mac=SHA1
DHE-RSA-AES256-SHA	Kx=DH	Au=RSA	Enc=AES(256)	Mac=SHA1
DHE-DSS-AES256-SHA	Kx=DH	Au=DSS	Enc=AES(256)	Mac=SHA1
ADH-DES-CBC3-SHA	Kx=DH	Au=None	Enc=3DES(168)	Mac=SHA1
EDH-RSA-DES-CBC3-SHA	Kx=DH	Au=RSA	Enc=3DES(168)	Mac=SHA1
EDH-DSS-DES-CBC3-SHA	Kx=DH	Au=DSS	Enc=3DES(168)	Mac=SHA1
DHE-DSS-RC4-SHA	Kx=DH	Au=DSS	Enc=RC4(128)	Mac=SHA1
ADH-AES128-SHA	Kx=DH	Au=None	Enc=AES(128)	Mac=SHA1
DHE-RSA-AES128-SHA	Kx=DH	Au=RSA	Enc=AES(128)	Mac=SHA1
DHE-DSS-AES128-SHA	Kx=DH	Au=DSS	Enc=AES(128)	Mac=SHA1
ADH-RC4-MD5	Kx=DH	Au=DSS	Enc=RC4(128)	Mac=MD5
ADH-DES-CBC-SHA	Kx=DH	Au=None	Enc=DES(56)	Mac=SHA1
EDH-RSA-DES-CBC-SHA	Kx=DH	Au=RSA	Enc=DES(56)	Mac=SHA1
EDH-DSS-DES-CBC-SHA	Kx=DH	Au=DSS	Enc=DES(56)	Mac=SHA1
Front End - Export
EXP1024-RC4-SHA	Kx=RSA(1024)	Au=RSA	Enc=RC4(56)	Mac=SHA1 export
EXP1024-DES-CBC-SHA	Kx=RSA(1024)	Au=RSA	Enc=DES(56)	Mac=SHA1 export
EXP-DES-CBC-SHA	Kx=RSA(512)	Au=RSA	Enc=DES(40)	Mac=SHA1 export
EXP-RC4-MD5	Kx=RSA(512)	Au=RSA	Enc=RC4(40)	Mac=MD5  export
EXP1024-DHE-DSS-RC4-SHA	Kx=DH(1024)	Au=DSS	Enc=RC4(56)	Mac=SHA1 export
EXP1024-DHE-DSS-DES-CBC-SHA	Kx=DH(1024)	Au=DSS	Enc=DES(56)	Mac=SHA1 export
EXP-ADH-DES-CBC-SHA	Kx=DH(512)	Au=None	Enc=DES(40)	Mac=SHA1 export
EXP-ADH-RC4-MD5	Kx=DH(512)	Au=None	Enc=RC4(40)	Mac=MD5  export
EXP-EDH-RSA-DES-CBC-SHA	Kx=DH(512)	Au=RSA	Enc=DES(40)	Mac=SHA1 export
EXP-EDH-DSS-DES-CBC-SHA	Kx=DH(512)	Au=DSS	Enc=DES(40)	Mac=SHA1 export
Front End - Low
DES-CBC-SHA	Kx=RSA	Au=RSA	Enc=DES(56)	Mac=SHA1
ADH-DES-CBC-SHA	Kx=DH	Au=None	Enc=DES(56)	Mac=SHA1
EDH-RSA-DES-CBC-SHA	Kx=DH	Au=RSA	Enc=DES(56)	Mac=SHA1
EDH-DSS-DES-CBC-SHA	Kx=DH	Au=DSS	Enc=DES(56)	Mac=SHA1
Front End - Medium
RC4-SHA	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=SHA1
RC4-MD5	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=MD5
DHE-DSS-RC4-SHA	Kx=DH	Au=DSS	Enc=RC4(128)	Mac=SHA1
ADH-RC4-MD5	Kx=DH	Au=None	Enc=RC4(128)	Mac=MD5
Front End - High
AES256-SHA	Kx=RSA	Au=RSA	Enc=AES(256)	Mac=SHA1
DES-CBC3-SHA	Kx=RSA	Au=RSA	Enc=3DES(168)	Mac=SHA1
AES128-SHA	Kx=RSA	Au=RSA	Enc=AES(128)	Mac=SHA1
ADH-AES256-SHA	Kx=DH	Au=None	Enc=AES(256)	Mac=SHA1
DHE-RSA-AES256-SHA	Kx=DH	Au=RSA	Enc=AES(256)	Mac=SHA1
DHE-DSS-AES256-SHA	Kx=DH	Au=DSS	Enc=AES(256)	Mac=SHA1
ADH-DES-CBC3-SHA	Kx=DH	Au=None	Enc=3DES(168)	Mac=SHA1
EDH-RSA-DES-CBC3-SHA	Kx=DH	Au=RSA	Enc=3DES(168)	Mac=SHA1
EDH-DSS-DES-CBC3-SHA	Kx=DH	Au=DSS	Enc=3DES(168)	Mac=SHA1
ADH-AES128-SHA	Kx=DH	Au=None	Enc=AES(128)	Mac=SHA1
DHE-RSA-AES128-SHA	Kx=DH	Au=RSA	Enc=AES(128)	Mac=SHA1
DHE-DSS-AES128-SHA	Kx=DH	Au=DSS	Enc=AES(128)	Mac=SHA1
RSA:RC4-128:MD5:
RC4-MD5	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=MD5
RSA:RC4-128:SHA1:
RC4-SHA	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=SHA1
RSA:DES:SHA1:
DES-CBC-SHA	Kx=RSA	Au=RSA	Enc=DES(56)	Mac=SHA1
RSA:3DES:SHA1:
DES-CBC3-SHA	Kx=RSA	Au=RSA	Enc=3DES(168)	Mac=SHA1
RSA:AES-128:SHA1:
AES128-SHA	Kx=RSA	Au=RSA	Enc=AES(128)	Mac=SHA1
RSA:AES-256:SHA1:
AES256-SHA	Kx=RSA	Au=RSA	Enc=AES(256)	Mac=SHA1
MSIE Export56
AES256-SHA	Kx=RSA	Au=RSA	Enc=AES(256)	Mac=SHA1
DES-CBC3-SHA	Kx=RSA	Au=RSA	Enc=3DES(168)	Mac=SHA1
AES128-SHA	Kx=RSA	Au=RSA	Enc=AES(128)	Mac=SHA1
RC4-SHA	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=SHA1
RC4-MD5	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=MD5
DES-CBC-SHA	Kx=RSA	Au=RSA	Enc=DES(56)	Mac=SHA1
DHE-RSA-AES256-SHA	Kx=DH	Au=RSA	Enc=AES(256)	Mac=SHA1
DHE-DSS-AES256-SHA	Kx=DH	Au=DSS	Enc=AES(256)	Mac=SHA1
EDH-RSA-DES-CBC3-SHA	Kx=DH	Au=RSA	Enc=3DES(168)	Mac=SHA1
EDH-DSS-DES-CBC3-SHA	Kx=DH	Au=DSS	Enc=3DES(168)	Mac=SHA1
DHE-RSA-AES128-SHA	Kx=DH	Au=RSA	Enc=AES(128)	Mac=SHA1
DHE-DSS-AES128-SHA	Kx=DH	Au=DSS	Enc=AES(128)	Mac=SHA1
DHE-DSS-RC4-SHA	Kx=DH	Au=DSS	Enc=RC4(128)	Mac=SHA1
EDH-RSA-DES-CBC-SHA	Kx=DH	Au=RSA	Enc=DES(56)	Mac=SHA1
EDH-DSS-DES-CBC-SHA	Kx=DH	Au=DSS	Enc=DES(56)	Mac=SHA1
EXP-DES-CBC-SHA	Kx=RSA	Au=RSA	Enc=DES(40)	Mac=SHA1 export
EXP-RC4-MD5	Kx=RSA	Au=RSA	Enc=RC4(40)	Mac=MD5  export
EXP-EDH-RSA-DES-CBC-SHA	Kx=DH(512)	Au=RSA	Enc=DES(40)	Mac=SHA1 export
EXP-EDH-DSS-DES-CBC-SHA	Kx=DH(512)	Au=DSS	Enc=DES(40)	Mac=SHA1 export
Back-End - Low
RC4-SHA	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=SHA1
RC4-MD5	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=MD5
DES-CBC-SHA	Kx=RSA	Au=RSA	Enc=DES(56)	Mac=SHA1
Back End - Medium
RC4-SHA	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=SHA1
RC4-MD5	Kx=RSA	Au=RSA	Enc=RC4(128)	Mac=MD5
Back End - High
AES256-SHA	Kx=RSA	Au=RSA	Enc=AES(256)	Mac=SHA1
DES-CBC3-SHA	Kx=RSA	Au=RSA	Enc=3DES(168)	Mac=SHA1
AES128-SHA	Kx=RSA	Au=RSA	Enc=AES(128)	Mac=SHA1