Differences
This shows you the differences between the selected revisions of the page.
| tls_ciphersuites 2017-12-21 | tls_ciphersuites 2021-06-24 (current) | ||
| Line 1: | Line 1: | ||
| ====== TLS/SSL Cipher Suites ====== | ====== TLS/SSL Cipher Suites ====== | ||
| - | WinSCP supports following cipher suites with [[ftps|FTP over TLS/SSL]], [[WebDAV]] and [[S3]] over [[tls|TLS/SSL]] (sorted by preference order): | + | WinSCP supports the following cipher suites with [[tls|TLS/SSL]] (used with [[ftps|FTPS]], [[WebDAV]] and [[S3]]) -- sorted by preference order. |
| - | ··* ECDHE-RSA-AES256-GCM-SHA384 | + | To see algorithms supported by your specific version of WinSCP, use [[commandline#info|''/info'' command-line switch]]. |
| + | |||
| + | * TLS_AES_256_GCM_SHA384 | ||
| + | * TLS_CHACHA20_POLY1305_SHA256 | ||
| + | * TLS_AES_128_GCM_SHA256 | ||
| * ECDHE-ECDSA-AES256-GCM-SHA384 | * ECDHE-ECDSA-AES256-GCM-SHA384 | ||
| - | * ECDHE-RSA-AES256-SHA384 | + | * ECDHE-RSA-AES256-GCM-SHA384 |
| - | * ECDHE-ECDSA-AES256-SHA384 | + | * DHE-RSA-AES256-GCM-SHA384 |
| - | * ECDHE-RSA-AES256-SHA | + | |
| - | * ECDHE-ECDSA-AES256-SHA | + | |
| ~~AD~~ | ~~AD~~ | ||
| - | * SRP-DSS-AES-256-CBC-SHA | + | * ECDHE-ECDSA-CHACHA20-POLY1305 |
| - | * SRP-RSA-AES-256-CBC-SHA | + | * ECDHE-RSA-CHACHA20-POLY1305 |
| - | * DHE-DSS-AES256-GCM-SHA384 | + | * DHE-RSA-CHACHA20-POLY1305 |
| - | * DHE-RSA-AES256-GCM-SHA384 | + | * ECDHE-ECDSA-AES128-GCM-SHA256 |
| + | * ECDHE-RSA-AES128-GCM-SHA256 | ||
| + | * DHE-RSA-AES128-GCM-SHA256 | ||
| + | * ECDHE-ECDSA-AES256-SHA384 | ||
| + | * ECDHE-RSA-AES256-SHA384 | ||
| * DHE-RSA-AES256-SHA256 | * DHE-RSA-AES256-SHA256 | ||
| - | * DHE-DSS-AES256-SHA256 | + | * ECDHE-ECDSA-AES128-SHA256 |
| + | * ECDHE-RSA-AES128-SHA256 | ||
| + | ··* DHE-RSA-AES128-SHA256 | ||
| + | * ECDHE-ECDSA-AES256-SHA | ||
| + | * ECDHE-RSA-AES256-SHA | ||
| * DHE-RSA-AES256-SHA | * DHE-RSA-AES256-SHA | ||
| - | * DHE-DSS-AES256-SHA | + | * ECDHE-ECDSA-AES128-SHA |
| - | * ECDH-RSA-AES256-GCM-SHA384 | + | * ECDHE-RSA-AES128-SHA |
| - | * ECDH-ECDSA-AES256-GCM-SHA384 | + | * DHE-RSA-AES128-SHA |
| - | * ECDH-RSA-AES256-SHA384 | + | * RSA-PSK-AES256-GCM-SHA384 |
| - | * ECDH-ECDSA-AES256-SHA384 | + | * DHE-PSK-AES256-GCM-SHA384 |
| - | * ECDH-RSA-AES256-SHA | + | * RSA-PSK-CHACHA20-POLY1305 |
| - | * ECDH-ECDSA-AES256-SHA | + | * DHE-PSK-CHACHA20-POLY1305 |
| + | * ECDHE-PSK-CHACHA20-POLY1305 | ||
| * AES256-GCM-SHA384 | * AES256-GCM-SHA384 | ||
| + | * PSK-AES256-GCM-SHA384 | ||
| + | * PSK-CHACHA20-POLY1305 | ||
| + | * RSA-PSK-AES128-GCM-SHA256 | ||
| + | * DHE-PSK-AES128-GCM-SHA256 | ||
| + | * AES128-GCM-SHA256 | ||
| + | * PSK-AES128-GCM-SHA256 | ||
| * AES256-SHA256 | * AES256-SHA256 | ||
| + | * AES128-SHA256 | ||
| + | * ECDHE-PSK-AES256-CBC-SHA384 | ||
| + | * ECDHE-PSK-AES256-CBC-SHA | ||
| + | * SRP-RSA-AES-256-CBC-SHA | ||
| + | * SRP-AES-256-CBC-SHA | ||
| + | * RSA-PSK-AES256-CBC-SHA384 | ||
| + | * DHE-PSK-AES256-CBC-SHA384 | ||
| + | * RSA-PSK-AES256-CBC-SHA | ||
| + | * DHE-PSK-AES256-CBC-SHA | ||
| * AES256-SHA | * AES256-SHA | ||
| + | * PSK-AES256-CBC-SHA384 | ||
| * PSK-AES256-CBC-SHA | * PSK-AES256-CBC-SHA | ||
| - | * ECDHE-RSA-DES-CBC3-SHA | + | * ECDHE-PSK-AES128-CBC-SHA256 |
| - | * ECDHE-ECDSA-DES-CBC3-SHA | + | * ECDHE-PSK-AES128-CBC-SHA |
| - | * SRP-DSS-3DES-EDE-CBC-SHA | + | |
| - | * SRP-RSA-3DES-EDE-CBC-SHA | + | |
| - | * EDH-RSA-DES-CBC3-SHA | + | |
| - | * EDH-DSS-DES-CBC3-SHA | + | |
| - | * ECDH-RSA-DES-CBC3-SHA | + | |
| - | * ECDH-ECDSA-DES-CBC3-SHA | + | |
| - | * DES-CBC3-SHA | + | |
| - | * PSK-3DES-EDE-CBC-SHA | + | |
| - | * ECDHE-RSA-AES128-GCM-SHA256 | + | |
| - | * ECDHE-ECDSA-AES128-GCM-SHA256 | + | |
| - | * ECDHE-RSA-AES128-SHA256 | + | |
| - | * ECDHE-ECDSA-AES128-SHA256 | + | |
| - | * ECDHE-RSA-AES128-SHA | + | |
| - | * ECDHE-ECDSA-AES128-SHA | + | |
| - | * SRP-DSS-AES-128-CBC-SHA | + | |
| * SRP-RSA-AES-128-CBC-SHA | * SRP-RSA-AES-128-CBC-SHA | ||
| - | * DHE-DSS-AES128-GCM-SHA256 | + | * SRP-AES-128-CBC-SHA |
| - | * DHE-RSA-AES128-GCM-SHA256 | + | * RSA-PSK-AES128-CBC-SHA256 |
| - | * DHE-RSA-AES128-SHA256 | + | * DHE-PSK-AES128-CBC-SHA256 |
| - | * DHE-DSS-AES128-SHA256 | + | * RSA-PSK-AES128-CBC-SHA |
| - | * DHE-RSA-AES128-SHA | + | * DHE-PSK-AES128-CBC-SHA |
| - | * DHE-DSS-AES128-SHA | + | |
| - | * ECDH-RSA-AES128-GCM-SHA256 | + | |
| - | * ECDH-ECDSA-AES128-GCM-SHA256 | + | |
| - | * ECDH-RSA-AES128-SHA256 | + | |
| - | * ECDH-ECDSA-AES128-SHA256 | + | |
| - | * ECDH-RSA-AES128-SHA | + | |
| - | * ECDH-ECDSA-AES128-SHA | + | |
| - | * AES128-GCM-SHA256 | + | |
| - | * AES128-SHA256 | + | |
| * AES128-SHA | * AES128-SHA | ||
| - | * IDEA-CBC-SHA | + | * PSK-AES128-CBC-SHA256 |
| * PSK-AES128-CBC-SHA | * PSK-AES128-CBC-SHA | ||
| - | * ECDHE-RSA-RC4-SHA | + | |
| - | * ECDHE-ECDSA-RC4-SHA | + | |
| - | * ECDH-RSA-RC4-SHA | + | |
| - | * ECDH-ECDSA-RC4-SHA | + | |
| - | * RC4-SHA | + | |
| - | * RC4-MD5 | + | |
| - | * PSK-RC4-SHA | + | |
| - | * EDH-RSA-DES-CBC-SHA | + | |
| - | * EDH-DSS-DES-CBC-SHA | + | |
| - | * DES-CBC-SHA | + | |
| - | * EXP-EDH-RSA-DES-CBC-SHA | + | |
| - | * EXP-EDH-DSS-DES-CBC-SHA | + | |
| - | * EXP-DES-CBC-SHA | + | |
| - | * EXP-RC2-CBC-MD5 | + | |
| - | * EXP-RC4-MD5 | + | |