Schannel supports the following cipher suites. The suites are
listed in the default order in which they are chosen by the Microsoft Schannel
Provider.
|
Cipher suite |
Ciphersuite # |
Supported Curves |
Protocols |
|
TLS_RSA_WITH_AES_128_CBC_SHA256 |
0x003C |
TLS 1.2 |
|
|
TLS_RSA_WITH_AES_128_CBC_SHA |
0x002F |
All Supported |
|
|
TLS_RSA_WITH_AES_256_CBC_SHA256 |
0x003D |
TLS 1.2 |
|
|
TLS_RSA_WITH_AES_256_CBC_SHA |
0x0035 |
All Supported |
|
|
TLS_RSA_WITH_RC4_128_SHA |
0x0005 |
All Supported |
|
|
TLS_RSA_WITH_3DES_EDE_CBC_SHA |
0x000A |
All Supported |
|
|
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 |
0xC027 |
P256, P384, P521 |
TLS 1.2 |
|
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA |
0xC013 |
P256, P384, P521 |
TLS 1.0, 1.1, 1.2 |
|
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 |
0xC028 |
P256, P384, P521 |
TLS 1.2 |
|
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA |
0xC014 |
P256, P384, P521 |
TLS 1.0, 1.1, 1.2 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 |
0xC023 |
P256, P384, P521 |
TLS 1.2 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA |
0xC009 |
P256, P384, P521 |
TLS 1.0, 1.1, 1.2 |
|
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 |
0xC024 |
P384, P521 |
TLS 1.2 |
|
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA |
0xC00A |
P256, P384, P521 |
TLS 1.0, 1.1, 1.2 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 |
0xC02B |
P256, P384, P521 |
TLS 1.2 |
|
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 |
0xC02C |
P384, P521 |
TLS 1.2 |
|
TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 |
0x0040 |
TLS 1.2 |
|
|
TLS_DHE_DSS_WITH_AES_128_CBC_SHA |
0x0032 |
All Supported |
|
|
TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 |
0x006A |
TLS 1.2 |
|
|
TLS_DHE_DSS_WITH_AES_256_CBC_SHA |
0x003 |
All Supported |
|
|
TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA |
0x0013 |
All Supported |
|
|
TLS_RSA_WITH_RC4_128_MD5 |
0x0004 |
All Supported |
|
|
SSL_CK_RC4_128_WITH_MD5 |
0x10080 |
SSL 2.0 |
|
|
SSL_CK_DES_192_EDE3_CBC_WITH_MD5 |
0x700c0 |
SSL 2.0 |