TLS/SSL Cipher Suites

WinSCP supports following cipher suites with TLS/SSL (used with FTPS, WebDAV and S3) – sorted by preference order.

In the latest stable version:

• ECDHE-RSA-AES256-GCM-SHA384
• ECDHE-ECDSA-AES256-GCM-SHA384
• ECDHE-RSA-AES256-SHA384
• ECDHE-ECDSA-AES256-SHA384
• ECDHE-RSA-AES256-SHA
• ECDHE-ECDSA-AES256-SHA

• SRP-DSS-AES-256-CBC-SHA
• SRP-RSA-AES-256-CBC-SHA
• SRP-AES-256-CBC-SHA
• DH-DSS-AES256-GCM-SHA384
• DHE-DSS-AES256-GCM-SHA384
• DH-RSA-AES256-GCM-SHA384
• DHE-RSA-AES256-GCM-SHA384
• DHE-RSA-AES256-SHA256
• DHE-DSS-AES256-SHA256
• DH-RSA-AES256-SHA256
• DH-DSS-AES256-SHA256
• DHE-RSA-AES256-SHA
• DHE-DSS-AES256-SHA
• DH-RSA-AES256-SHA
• DH-DSS-AES256-SHA
• ECDH-RSA-AES256-GCM-SHA384
• ECDH-ECDSA-AES256-GCM-SHA384
• ECDH-RSA-AES256-SHA384
• ECDH-ECDSA-AES256-SHA384
• ECDH-RSA-AES256-SHA
• ECDH-ECDSA-AES256-SHA
• AES256-GCM-SHA384
• AES256-SHA256
• AES256-SHA
• PSK-AES256-CBC-SHA
• ECDHE-RSA-AES128-GCM-SHA256
• ECDHE-ECDSA-AES128-GCM-SHA256
• ECDHE-RSA-AES128-SHA256
• ECDHE-ECDSA-AES128-SHA256
• ECDHE-RSA-AES128-SHA
• ECDHE-ECDSA-AES128-SHA
• SRP-DSS-AES-128-CBC-SHA
• SRP-RSA-AES-128-CBC-SHA
• SRP-AES-128-CBC-SHA
• DH-DSS-AES128-GCM-SHA256
• DHE-DSS-AES128-GCM-SHA256
• DH-RSA-AES128-GCM-SHA256
• DHE-RSA-AES128-GCM-SHA256
• DHE-RSA-AES128-SHA256
• DHE-DSS-AES128-SHA256
• DH-RSA-AES128-SHA256
• DH-DSS-AES128-SHA256
• DHE-RSA-AES128-SHA
• DHE-DSS-AES128-SHA
• DH-RSA-AES128-SHA
• DH-DSS-AES128-SHA
• ECDH-RSA-AES128-GCM-SHA256
• ECDH-ECDSA-AES128-GCM-SHA256
• ECDH-RSA-AES128-SHA256
• ECDH-ECDSA-AES128-SHA256
• ECDH-RSA-AES128-SHA
• ECDH-ECDSA-AES128-SHA
• AES128-GCM-SHA256
• AES128-SHA256
• AES128-SHA
• IDEA-CBC-SHA
• PSK-AES128-CBC-SHA
• ECDHE-RSA-RC4-SHA
• ECDHE-ECDSA-RC4-SHA
• ECDH-RSA-RC4-SHA
• ECDH-ECDSA-RC4-SHA
• RC4-SHA
• RC4-MD5
• PSK-RC4-SHA
• ECDHE-RSA-DES-CBC3-SHA
• ECDHE-ECDSA-DES-CBC3-SHA
• SRP-DSS-3DES-EDE-CBC-SHA
• SRP-RSA-3DES-EDE-CBC-SHA
• SRP-3DES-EDE-CBC-SHA
• EDH-RSA-DES-CBC3-SHA
• EDH-DSS-DES-CBC3-SHA
• DH-RSA-DES-CBC3-SHA
• DH-DSS-DES-CBC3-SHA
• ECDH-RSA-DES-CBC3-SHA
• ECDH-ECDSA-DES-CBC3-SHA
• DES-CBC3-SHA
• PSK-3DES-EDE-CBC-SHA

In the latest beta version:

• TLS_AES_256_GCM_SHA384
• TLS_CHACHA20_POLY1305_SHA256
• TLS_AES_128_GCM_SHA256
• ECDHE-ECDSA-AES256-GCM-SHA384
• ECDHE-RSA-AES256-GCM-SHA384
• DHE-RSA-AES256-GCM-SHA384
• ECDHE-ECDSA-CHACHA20-POLY1305
• ECDHE-RSA-CHACHA20-POLY1305
• DHE-RSA-CHACHA20-POLY1305
• ECDHE-ECDSA-AES128-GCM-SHA256
• ECDHE-RSA-AES128-GCM-SHA256
• DHE-RSA-AES128-GCM-SHA256
• ECDHE-ECDSA-AES256-SHA384
• ECDHE-RSA-AES256-SHA384
• DHE-RSA-AES256-SHA256
• ECDHE-ECDSA-AES128-SHA256
• ECDHE-RSA-AES128-SHA256
• DHE-RSA-AES128-SHA256
• ECDHE-ECDSA-AES256-SHA
• ECDHE-RSA-AES256-SHA
• DHE-RSA-AES256-SHA
• ECDHE-ECDSA-AES128-SHA
• ECDHE-RSA-AES128-SHA
• DHE-RSA-AES128-SHA
• RSA-PSK-AES256-GCM-SHA384
• DHE-PSK-AES256-GCM-SHA384
• RSA-PSK-CHACHA20-POLY1305
• DHE-PSK-CHACHA20-POLY1305
• ECDHE-PSK-CHACHA20-POLY1305
• AES256-GCM-SHA384
• PSK-AES256-GCM-SHA384
• PSK-CHACHA20-POLY1305
• RSA-PSK-AES128-GCM-SHA256
• DHE-PSK-AES128-GCM-SHA256
• AES128-GCM-SHA256
• PSK-AES128-GCM-SHA256
• AES256-SHA256
• AES128-SHA256
• ECDHE-PSK-AES256-CBC-SHA384
• ECDHE-PSK-AES256-CBC-SHA
• SRP-RSA-AES-256-CBC-SHA
• SRP-AES-256-CBC-SHA
• RSA-PSK-AES256-CBC-SHA384
• DHE-PSK-AES256-CBC-SHA384
• RSA-PSK-AES256-CBC-SHA
• DHE-PSK-AES256-CBC-SHA
• AES256-SHA
• PSK-AES256-CBC-SHA384
• PSK-AES256-CBC-SHA
• ECDHE-PSK-AES128-CBC-SHA256
• ECDHE-PSK-AES128-CBC-SHA
• SRP-RSA-AES-128-CBC-SHA
• SRP-AES-128-CBC-SHA
• RSA-PSK-AES128-CBC-SHA256
• DHE-PSK-AES128-CBC-SHA256
• RSA-PSK-AES128-CBC-SHA
• DHE-PSK-AES128-CBC-SHA
• AES128-SHA
• PSK-AES128-CBC-SHA256
• PSK-AES128-CBC-SHA