Transport Layer Security
Cipher

Transport Layer Security

Section Title: Cipher
Table Section Text: None

Cipher	Protocol version	Status

Type	Algorithm	Nominal strength (bits)	SSL 2.0	SSL 3.0	TLS 1.0	TLS 1.1	TLS 1.2	TLS 1.3

Block cipher with mode of operation	AES GCM	256, 128	N/A	N/A	N/A	N/A	Secure	Secure	Defined for TLS 1.2 in RFCs

AES CCM	N/A	N/A	N/A	N/A	Secure	Secure

AES CBC	N/A	N/A	Depends on mitigations	Depends on mitigations	Depends on mitigations	N/A

Camellia GCM	256, 128	N/A	N/A	N/A	N/A	Secure	N/A

Camellia CBC	N/A	N/A	Depends on mitigations	Depends on mitigations	Depends on mitigations	N/A

ARIA GCM	256, 128	N/A	N/A	N/A	N/A	Secure	N/A

ARIA CBC	N/A	N/A	Depends on mitigations	Depends on mitigations	Depends on mitigations	N/A

SEED CBC	128	N/A	N/A	Depends on mitigations	Depends on mitigations	Depends on mitigations	N/A

3DES EDE CBC	112	Insecure	Insecure	Insecure	Insecure	Insecure	N/A

GOST 28147-89 CNT	256	N/A	N/A	Insecure	Insecure	Insecure	N/A	Defined in RFC 4357

IDEA CBC	128	Insecure	Insecure	Insecure	Insecure	N/A	N/A	Removed from TLS 1.2

DES CBC	56	Insecure	Insecure	Insecure	Insecure	N/A	N/A

40	Insecure	Insecure	Insecure	N/A	N/A	N/A	Forbidden in TLS 1.1 and later

RC2 CBC	40	Insecure	Insecure	Insecure	N/A	N/A	N/A

Stream cipher	ChaCha20-Poly1305	256	N/A	N/A	N/A	N/A	Secure	Secure	Defined for TLS 1.2 in RFCs

RC4	128	Insecure	Insecure	Insecure	Insecure	Insecure	N/A	Prohibited in all versions of TLS by RFC 7465

40	Insecure	Insecure	Insecure	N/A	N/A	N/A

None	Null	–	N/A	Insecure	Insecure	Insecure	Insecure	N/A	Defined for TLS 1.2 in RFCs

Sentence(s)

Use of RC4 in all versions of TLS is prohibited by RFC 7465.

final_sentence: Use of RC4 in all versions of TLS is prohibited by RFC 7465.