SSL/TLS Cipher Suites

The following table identifies all SSL/TLS 1.2 cipher suites provided by Stonebranch, Inc. for use with Universal Command.

Cipher Suite Name	Description
AES256-GCM-SHA384	256-bit AES encryption in Galois Counter Mode, SHA-2 384-bit message digest.
AES256-SHA	256-bit AES encryption with SHA-1 message digest.
AES128-GCM-SHA256	128-bit AES encryption in Galois Counter Mode, SHA-2 256-bit message digest.
AES128-SHA	128-bit AES encryption with SHA-1 message digest.
ECDHE-RSA-AES256-GCM-SHA384	Ephemeral Elliptic Curve Diffie-Hellman Key Exchange, RSA authentication, 256-bit AES encryption in Galois Counter Mode, SHA-2 384-bit message digest.
ECDHE-ECDSA-AES256-GCM-SHA384	Ephemeral Elliptic Curve Diffie-Hellman Key Exchange, ECDSA authentication, 256-bit AES encryption in Galois Counter Mode, SHA-2 384-bit message digest.
ECDHE-RSA-AES128-GCM-SHA256	Ephemeral Elliptic Curve Diffie-Hellman Key Exchange, RSA authentication, 128-bit AES encryption in Galois Counter Mode, SHA-2 256-bit message digest.
ECDHE-ECDSA-AES128-GCM-SHA256	Ephemeral Elliptic Curve Diffie-Hellman Key Exchange, ECDSA authentication, 128-bit AES encryption in Galois Counter Mode, SHA-2 256-bit message digest.
RC4-SHA	128-bit RC4 encryption with SHA-1 message digest.
RC4-MD5	128-bit RC4 encryption with MD5 message digest.
DES-CBC3-SHA	128-bit Triple-DES encryption with SHA-1 message digest.
DES-CBC-SHA	128-bit DES encryption with SHA-1 message digest. Note As of Universal Agent 6.7.0.0, DES-CBC-SHA is supported only on HP-UX. Additionally, any Agents on HP-UX that accept connections from, or attempt connections to, Agents on other platforms must be configured with at least one currently supported cipher suite besides DES-CBC-SHA. Therefore, those HP-UX Agents cannot be configured only with DES-CBC-SHA in their list of cipher suites.
NULL-SHA256	No encryption and SHA-2 256-bit message digest.
NULL-SHA	No encryption and SHA-1 message digest.
NULL-MD5	No encryption and MD5 message digest.
NULL-NULL	No encryption, no data authentication, SSL/TLS is not used; instead, Universal V2 Protocol(UNVv2) is used.

SSL/TLS 1.3 Cipher Suites

The following table identifies all SSL/TLS 1.3 cipher suites provided by Stonebranch, Inc. for use with Universal Broker.

The list is in default order, with the most preferred suite first and the least preferred suite last.

Cipher Suite	Description
TLS_AES_256_GCM_SHA384	256-bit AES encryption in Galois Counter Mode, SHA-2 384-bit message digest
TLS_CHACHA20_POLY1305_SHA256	256-bit CHACHA encryption with POLY1305 message authentication, SHA-2 256-bit message digest
TLS_AES_128_GCM_SHA256	128-bit AES encryption in Galois Counter Mode, SHA-2 256-bit message digest

Browser not supported