Apache Pocket Ref

Use of Cipher Suites

SSL uses public key cryptography only while establishing a

session; symmetric encryption is used thereafter, as it is much

faster. Cipher suites define the cryptographic algorithms used.

These vary in strength and are listed in the following table.

Tag Description

Key Exchange Algorithms

kRSA RSA key exchange

kDHr Diffie-Hellman key exchange with RSA key

kDHd Diffie-Hellman key exchange with DSA key

kEDH Ephemeral Diffie-Hellman key exchange (no certificate)

Authentication Algorithms

aNULL No authentication

aRSA RSA authentication

aDSS DSS authentication

aDH Diffie-Hellman authentication

Cipher Encoding Algorithms

eNULL No encoding

DES DES encoding

3DES Triple-DES encoding

RC4 RC4 encoding

RC2 RC2 encoding

IDEA IDEA encoding

MAC Digest Algorithms

MD5 MD5 hash function

SHA1 SHA1 hash function

SHA SHA hash function

Aliases

SSLv2 All SSL version 2.0 ciphers

SSLv3 All SSL version 3.0 ciphers

Secure Versions of Apache 91

Tag Description

EXP All export-crippled ciphers

LOW All low strength ciphers (no export, single DES)

MEDIUM All ciphers with 128–bit encryption

HIGH All ciphers that use Triple-DES

RSA All ciphers that use RSA key exchange

DH All ciphers that use Diffie-Hellman key exchange

EDH All ciphers that use Ephemeral Diffie-Hellman key ...