Red Hat DIRECTORY SERVER 8.0, Administration Manual

Page: 377 / 552

Available Ciphers
359
•
Message Authentication.
SHA stands for Secure Hash Algorithm.
The Mozilla site,
http://www.mozilla.org/projects/security/pki/nss/nss-3.11/nss-3.11-algorithms.html
for
definitions and explanations of the encryption algorithms.
NOTE
Directory Server supports ciphers for TLSv1 (recommended) and SSLv3. SSLv2 support
is deprecated and not enabled by default in Directory Server.
Directory Server provides the following TLSv1 ciphers:
Directory Server
Name
Key Exchange Encryption
Algorithm
Symmetric Key
Bit Size
Message
Authentication
tls_dhe_dss_aes_128_sha DHE with DHS AES 128 SHA
tls_dhe_rsa_aes_128_sha DHE with RSA AES 128 SHA
tls_rsa_aes_256_shaRSA AES 256 SHA
tls_dhe_dss_aes_256_sha DHE with DSS AES 256 SHA
tls_dhe_rsa_aes_256_sha DHE with RSA AES 256 SHA
tls_dhe_dss_1024_rc4_sha DHE with DSS
1024 bit public
key RC4 56 SHA
tls_dhe_dss_rc4_128_sha DHE with DSS RC4 128 SHA
tls_rsa_export1024_with_rc4_56_sha RSA with 1024 bit
public key RC4 56 SHA
tls_rsa_export1024_with_des_cbc_sha RSA with 1024 bit
public key DES 56 SHA
Table 11.2. TLSv1 Ciphers
Directory Server provides the following SSLv3 ciphers:
Directory Server
Name
Key Exchange Encryption
Algorithm
Symmetric Key
Bit Size
Message
Authentication
dhe_rsa_3des_sha DHE with RSA 3DES 168 SHA
dhe_rsa_des_sha DHE with RSA DES 56 SHA
dhe_dss_3des_sha DHE with DSS 3DES 168 SHA
dhe_dss_des_sha DHE with DSS DES 56 SHA
rsa_des_sha RSA DES 56 SHA
rsa_3des_sha RSA 3DES 168 SHA
rsa_fips_des_sha RSA DES 56 SHA
rsa_fips_3des_sha RSA 3DES 168 SHA
rsa_rc4_128_md5 RSA RC4 128 MD5
rsa_rc4_40_md5 RSA RC4 40 MD5
rsa_rc2_40_md5 RSA RC2 40 MD5
rsa_null_md5 RSA null (none) N/A MD5