跳到主要内容

Appendix C. Cipher Suite Definitions (密码套件定义)

本附录定义 TLS 1.2 中新增或更新的 cipher suite.

C.1. AES Cipher Suites​

以下 cipher suite 使用 AES algorithm:

CipherSuite TLS_RSA_WITH_AES_128_CBC_SHA      = { 0x00,0x2F };
CipherSuite TLS_DH_DSS_WITH_AES_128_CBC_SHA   = { 0x00,0x30 };
CipherSuite TLS_DH_RSA_WITH_AES_128_CBC_SHA   = { 0x00,0x31 };
CipherSuite TLS_DHE_DSS_WITH_AES_128_CBC_SHA  = { 0x00,0x32 };
CipherSuite TLS_DHE_RSA_WITH_AES_128_CBC_SHA  = { 0x00,0x33 };
CipherSuite TLS_DH_anon_WITH_AES_128_CBC_SHA  = { 0x00,0x34 };

CipherSuite TLS_RSA_WITH_AES_256_CBC_SHA      = { 0x00,0x35 };
CipherSuite TLS_DH_DSS_WITH_AES_256_CBC_SHA   = { 0x00,0x36 };
CipherSuite TLS_DH_RSA_WITH_AES_256_CBC_SHA   = { 0x00,0x37 };
CipherSuite TLS_DHE_DSS_WITH_AES_256_CBC_SHA  = { 0x00,0x38 };
CipherSuite TLS_DHE_RSA_WITH_AES_256_CBC_SHA  = { 0x00,0x39 };
CipherSuite TLS_DH_anon_WITH_AES_256_CBC_SHA  = { 0x00,0x3A };

C.2. AES Cipher Suites with SHA-256​

TLS 1.2 引入使用 SHA-256 的 AES cipher suite:

CipherSuite TLS_RSA_WITH_AES_128_CBC_SHA256      = { 0x00,0x3C };
CipherSuite TLS_DH_DSS_WITH_AES_128_CBC_SHA256   = { 0x00,0x3E };
CipherSuite TLS_DH_RSA_WITH_AES_128_CBC_SHA256   = { 0x00,0x3F };
CipherSuite TLS_DHE_DSS_WITH_AES_128_CBC_SHA256  = { 0x00,0x40 };

CipherSuite TLS_RSA_WITH_AES_256_CBC_SHA256      = { 0x00,0x3D };
CipherSuite TLS_DH_DSS_WITH_AES_256_CBC_SHA256   = { 0x00,0x68 };
CipherSuite TLS_DH_RSA_WITH_AES_256_CBC_SHA256   = { 0x00,0x69 };
CipherSuite TLS_DHE_DSS_WITH_AES_256_CBC_SHA256  = { 0x00,0x6A };
CipherSuite TLS_DHE_RSA_WITH_AES_256_CBC_SHA256  = { 0x00,0x6B };
CipherSuite TLS_DH_anon_WITH_AES_128_CBC_SHA256  = { 0x00,0x6C };
CipherSuite TLS_DH_anon_WITH_AES_256_CBC_SHA256  = { 0x00,0x6D };

例如 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 的 cipher specification parameter 为:

  • Key Exchange: DHE_RSA
  • Bulk Cipher: AES_128_CBC
  • MAC Algorithm: HMAC-SHA256
  • Pseudorandom Function: PRF (SHA-256)

C.3. NULL Cipher Suites​

以下 cipher suite 使用 NULL encryption, 仅用于测试, 不应该用于生产环境:

CipherSuite TLS_RSA_WITH_NULL_SHA256 = { 0x00,0x3B };

C.4. Cipher Suite Naming Conventions (命名约定)​

TLS cipher suite 名称遵循如下格式:

TLS_{KeyExchange}_{Authentication}_WITH_{Cipher}_{MAC}

选择 cipher suite 时应优先考虑 forward secrecy, 足够 key length, SHA-256 或更强 MAC, 并避免 RC4, DES, MD5 等已知弱算法.

最后于 更新