Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

TLS ciphers supported by Silverline

Today I was asked about what TLS ciphers that Silverline supports. Does anyone know where I can find that answer in some documentation? I was told that Silverline supports all TLS ciphers in v11.9 however, I'm looking for some documentation on this. That way I have reference to back up my claim. Thanks!

0
Rate this Question
Comments on this Question
Comment made 4 months ago by Chase Abbott

Hi David;

I just saw this question and routed it to some internal people to see if they could help shed light on what ciphers Silverline supports.

0
Comment made 4 months ago by Luke Lehman

Hi David,

The Silverline SOC curates several different sets of ciphers suites, so that over time, customers know that the SOC is ensuring that the ciphers offered are current and safe. Of course, the user can configure a custom set of ciphers as well. I'll provide the full list at the bottom of this response.

The curated cipher suites and their associated presently defined cipher string in Silverline are the following:

High

TLSv1_2+HIGH:TLSv1_1+HIGH:TLSv1+MEDIUM:TLSv1+HIGH:!RC4:!3DES:!RSA:!DHE:!EXPORT:!MD5:!ADH:@STRENGTH

Medium

TLSv1_2+HIGH:TLSv1_1+HIGH:TLSv1+MEDIUM:TLSv1+HIGH:!EXPORT:!RC4:!EXPORT:!MD5:!ADH:@STRENGTH

TLS1.1+TLS1.2

TLSv1_2:TLSv1_1:!TLSv1_2+LOW:!TLSv1_1+LOW:!EXPORT:!MD5:!ADH:@STRENGTH

TLS1.2

TLSv1_2:!TLSv1_2+LOW:!EXPORT:!MD5:!ADH:@STRENGTH

Compatible

NATIVE:!SSLv3:!SSLv2:!EXPORT:!MD5:!ADH:@STRENGTH

Please let us know if you have further questions. Thanks!

Full list of supported ciphers:

       ID  SUITE                            BITS PROT    METHOD  CIPHER  MAC     KEYX
 0: 49200  ECDHE-RSA-AES256-GCM-SHA384      256  TLS1.2  Native  AES-GCM  SHA384  ECDHE_RSA
 1: 49196  ECDHE-ECDSA-AES256-GCM-SHA384    256  TLS1.2  Native  AES-GCM  SHA384  ECDHE_ECDSA
 2: 49192  ECDHE-RSA-AES256-SHA384          256  TLS1.2  Native  AES     SHA384  ECDHE_RSA
 3: 49188  ECDHE-ECDSA-AES256-SHA384        256  TLS1.2  Native  AES     SHA384  ECDHE_ECDSA
 4: 49172  ECDHE-RSA-AES256-CBC-SHA         256  TLS1    Native  AES     SHA     ECDHE_RSA
 5: 49172  ECDHE-RSA-AES256-CBC-SHA         256  TLS1.1  Native  AES     SHA     ECDHE_RSA
 6: 49172  ECDHE-RSA-AES256-CBC-SHA         256  TLS1.2  Native  AES     SHA     ECDHE_RSA
 7: 49162  ECDHE-ECDSA-AES256-SHA           256  TLS1    Native  AES     SHA     ECDHE_ECDSA
 8: 49162  ECDHE-ECDSA-AES256-SHA           256  TLS1.1  Native  AES     SHA     ECDHE_ECDSA
 9: 49162  ECDHE-ECDSA-AES256-SHA           256  TLS1.2  Native  AES     SHA     ECDHE_ECDSA
10:   163  DHE-DSS-AES256-GCM-SHA384        256  TLS1.2  Native  AES-GCM  SHA384  DHE/DSS
11:   159  DHE-RSA-AES256-GCM-SHA384        256  TLS1.2  Native  AES-GCM  SHA384  EDH/RSA
12:   107  DHE-RSA-AES256-SHA256            256  TLS1.2  Native  AES     SHA256  EDH/RSA
13:   106  DHE-DSS-AES256-SHA256            256  TLS1.2  Native  AES     SHA256  DHE/DSS
14:    57  DHE-RSA-AES256-SHA               256  SSL3    Native  AES     SHA     EDH/RSA
15:    57  DHE-RSA-AES256-SHA               256  TLS1    Native  AES     SHA     EDH/RSA
16:    57  DHE-RSA-AES256-SHA               256  TLS1.1  Native  AES     SHA     EDH/RSA
17:    57  DHE-RSA-AES256-SHA               256  TLS1.2  Native  AES     SHA     EDH/RSA
18:    57  DHE-RSA-AES256-SHA               256  DTLS1   Native  AES     SHA     EDH/RSA
19:    56  DHE-DSS-AES256-SHA               256  SSL3    Native  AES     SHA     DHE/DSS
20:    56  DHE-DSS-AES256-SHA               256  TLS1    Native  AES     SHA     DHE/DSS
21:    56  DHE-DSS-AES256-SHA               256  TLS1.1  Native  AES     SHA     DHE/DSS
22:    56  DHE-DSS-AES256-SHA               256  TLS1.2  Native  AES     SHA     DHE/DSS
23:    56  DHE-DSS-AES256-SHA               256  DTLS1   Native  AES     SHA     DHE/DSS
24:   167  ADH-AES256-GCM-SHA384            256  TLS1.2  Native  AES-GCM  SHA384  ADH
25:    58  ADH-AES256-SHA                   256  SSL3    Native  AES     SHA     ADH
26:    58  ADH-AES256-SHA                   256  TLS1    Native  AES     SHA     ADH
27: 49202  ECDH-RSA-AES256-GCM-SHA384       256  TLS1.2  Native  AES-GCM  SHA384  ECDH_RSA
28: 49198  ECDH-ECDSA-AES256-GCM-SHA384     256  TLS1.2  Native  AES-GCM  SHA384  ECDH_ECDSA
29: 49194  ECDH-RSA-AES256-SHA384           256  TLS1.2  Native  AES     SHA384  ECDH_RSA
30: 49190  ECDH-ECDSA-AES256-SHA384         256  TLS1.2  Native  AES     SHA384  ECDH_ECDSA
31: 49167  ECDH-RSA-AES256-SHA              256  TLS1    Native  AES     SHA     ECDH_RSA
32: 49167  ECDH-RSA-AES256-SHA              256  TLS1.1  Native  AES     SHA     ECDH_RSA
33: 49167  ECDH-RSA-AES256-SHA              256  TLS1.2  Native  AES     SHA     ECDH_RSA
34: 49157  ECDH-ECDSA-AES256-SHA            256  TLS1    Native  AES     SHA     ECDH_ECDSA
35: 49157  ECDH-ECDSA-AES256-SHA            256  TLS1.1  Native  AES     SHA     ECDH_ECDSA
36: 49157  ECDH-ECDSA-AES256-SHA            256  TLS1.2  Native  AES     SHA     ECDH_ECDSA
37:   157  AES256-GCM-SHA384                256  TLS1.2  Native  AES-GCM  SHA384  RSA
38:    61  AES256-SHA256                    256  TLS1.2  Native  AES     SHA256  RSA
39:    53  AES256-SHA                       256  SSL3    Native  AES     SHA     RSA
40:    53  AES256-SHA                       256  TLS1    Native  AES     SHA     RSA
41:    53  AES256-SHA                       256  TLS1.1  Native  AES     SHA     RSA
42:    53  AES256-SHA                       256  TLS1.2  Native  AES     SHA     RSA
43:    53  AES256-SHA                       256  DTLS1   Native  AES     SHA     RSA
44: 49170  ECDHE-RSA-DES-CBC3-SHA           192  TLS1    Native  DES     SHA     ECDHE_RSA
45: 49170  ECDHE-RSA-DES-CBC3-SHA           192  TLS1.1  Native  DES     SHA     ECDHE_RSA
46: 49170  ECDHE-RSA-DES-CBC3-SHA           192  TLS1.2  Native  DES     SHA     ECDHE_RSA
47: 49160  ECDHE-ECDSA-DES-CBC3-SHA         192  TLS1    Native  DES     SHA     ECDHE_ECDSA
48: 49160  ECDHE-ECDSA-DES-CBC3-SHA         192  TLS1.1  Native  DES     SHA     ECDHE_ECDSA
49: 49160  ECDHE-ECDSA-DES-CBC3-SHA         192  TLS1.2  Native  DES     SHA     ECDHE_ECDSA
50:    22  DHE-RSA-DES-CBC3-SHA             192  SSL3    Native  DES     SHA     EDH/RSA
51:    22  DHE-RSA-DES-CBC3-SHA             192  TLS1    Native  DES     SHA     EDH/RSA
52:    22  DHE-RSA-DES-CBC3-SHA             192  TLS1.1  Native  DES     SHA     EDH/RSA
53:    22  DHE-RSA-DES-CBC3-SHA             192  TLS1.2  Native  DES     SHA     EDH/RSA
54:    22  DHE-RSA-DES-CBC3-SHA             192  DTLS1   Native  DES     SHA     EDH/RSA
55:    27  ADH-DES-CBC3-SHA                 192  SSL3    Native  DES     SHA     ADH
56:    27  ADH-DES-CBC3-SHA                 192  TLS1    Native  DES     SHA     ADH
57: 49165  ECDH-RSA-DES-CBC3-SHA            192  TLS1    Native  DES     SHA     ECDH_RSA
58: 49165  ECDH-RSA-DES-CBC3-SHA            192  TLS1.1  Native  DES     SHA     ECDH_RSA
59: 49165  ECDH-RSA-DES-CBC3-SHA            192  TLS1.2  Native  DES     SHA     ECDH_RSA
60: 49155  ECDH-ECDSA-DES-CBC3-SHA          192  TLS1    Native  DES     SHA     ECDH_ECDSA
61: 49155  ECDH-ECDSA-DES-CBC3-SHA          192  TLS1.1  Native  DES     SHA     ECDH_ECDSA
62: 49155  ECDH-ECDSA-DES-CBC3-SHA          192  TLS1.2  Native  DES     SHA     ECDH_ECDSA
63:    10  DES-CBC3-SHA                     192  SSL3    Native  DES     SHA     RSA
64:    10  DES-CBC3-SHA                     192  TLS1    Native  DES     SHA     RSA
65:    10  DES-CBC3-SHA                     192  TLS1.1  Native  DES     SHA     RSA
66:    10  DES-CBC3-SHA                     192  TLS1.2  Native  DES     SHA     RSA
67:    10  DES-CBC3-SHA                     192  DTLS1   Native  DES     SHA     RSA
68: 49199  ECDHE-RSA-AES128-GCM-SHA256      128  TLS1.2  Native  AES-GCM  SHA256  ECDHE_RSA
69: 49195  ECDHE-ECDSA-AES128-GCM-SHA256    128  TLS1.2  Native  AES-GCM  SHA256  ECDHE_ECDSA
70: 49191  ECDHE-RSA-AES128-SHA256          128  TLS1.2  Native  AES     SHA256  ECDHE_RSA
71: 49187  ECDHE-ECDSA-AES128-SHA256        128  TLS1.2  Native  AES     SHA256  ECDHE_ECDSA
72: 49171  ECDHE-RSA-AES128-CBC-SHA         128  TLS1    Native  AES     SHA     ECDHE_RSA
73: 49171  ECDHE-RSA-AES128-CBC-SHA         128  TLS1.1  Native  AES     SHA     ECDHE_RSA
74: 49171  ECDHE-RSA-AES128-CBC-SHA         128  TLS1.2  Native  AES     SHA     ECDHE_RSA
75: 49161  ECDHE-ECDSA-AES128-SHA           128  TLS1    Native  AES     SHA     ECDHE_ECDSA
76: 49161  ECDHE-ECDSA-AES128-SHA           128  TLS1.1  Native  AES     SHA     ECDHE_ECDSA
77: 49161  ECDHE-ECDSA-AES128-SHA           128  TLS1.2  Native  AES     SHA     ECDHE_ECDSA
78:   162  DHE-DSS-AES128-GCM-SHA256        128  TLS1.2  Native  AES-GCM  SHA256  DHE/DSS
79:   158  DHE-RSA-AES128-GCM-SHA256        128  TLS1.2  Native  AES-GCM  SHA256  EDH/RSA
80:   103  DHE-RSA-AES128-SHA256            128  TLS1.2  Native  AES     SHA256  EDH/RSA
81:    64  DHE-DSS-AES128-SHA256            128  TLS1.2  Native  AES     SHA256  DHE/DSS
82:    51  DHE-RSA-AES128-SHA               128  SSL3    Native  AES     SHA     EDH/RSA
83:    51  DHE-RSA-AES128-SHA               128  TLS1    Native  AES     SHA     EDH/RSA
84:    51  DHE-RSA-AES128-SHA               128  TLS1.1  Native  AES     SHA     EDH/RSA
85:    51  DHE-RSA-AES128-SHA               128  TLS1.2  Native  AES     SHA     EDH/RSA
86:    51  DHE-RSA-AES128-SHA               128  DTLS1   Native  AES     SHA     EDH/RSA
87:    50  DHE-DSS-AES128-SHA               128  SSL3    Native  AES     SHA     DHE/DSS
88:    50  DHE-DSS-AES128-SHA               128  TLS1    Native  AES     SHA     DHE/DSS
89:    50  DHE-DSS-AES128-SHA               128  TLS1.1  Native  AES     SHA     DHE/DSS
90:    50  DHE-DSS-AES128-SHA               128  TLS1.2  Native  AES     SHA     DHE/DSS
91:    50  DHE-DSS-AES128-SHA               128  DTLS1   Native  AES     SHA     DHE/DSS
92:   166  ADH-AES128-GCM-SHA256            128  TLS1.2  Native  AES-GCM  SHA256  ADH
93:    52  ADH-AES128-SHA                   128  SSL3    Native  AES     SHA     ADH
94:    52  ADH-AES128-SHA                   128  TLS1    Native  AES     SHA     ADH
95: 49201  ECDH-RSA-AES128-GCM-SHA256       128  TLS1.2  Native  AES-GCM  SHA256  ECDH_RSA
96: 49197  ECDH-ECDSA-AES128-GCM-SHA256     128  TLS1.2  Native  AES-GCM  SHA256  ECDH_ECDSA
97: 49193  ECDH-RSA-AES128-SHA256           128  TLS1.2  Native  AES     SHA256  ECDH_RSA
98: 49189  ECDH-ECDSA-AES128-SHA256         128  TLS1.2  Native  AES     SHA256  ECDH_ECDSA
99: 49166  ECDH-RSA-AES128-SHA              128  TLS1    Native  AES     SHA     ECDH_RSA
100: 49166  ECDH-RSA-AES128-SHA              128  TLS1.1  Native  AES     SHA     ECDH_RSA
101: 49166  ECDH-RSA-AES128-SHA              128  TLS1.2  Native  AES     SHA     ECDH_RSA
102: 49156  ECDH-ECDSA-AES128-SHA            128  TLS1    Native  AES     SHA     ECDH_ECDSA
103: 49156  ECDH-ECDSA-AES128-SHA            128  TLS1.1  Native  AES     SHA     ECDH_ECDSA
104: 49156  ECDH-ECDSA-AES128-SHA            128  TLS1.2  Native  AES     SHA     ECDH_ECDSA
105:   156  AES128-GCM-SHA256                128  TLS1.2  Native  AES-GCM  SHA256  RSA
106:    60  AES128-SHA256                    128  TLS1.2  Native  AES     SHA256  RSA
107:    47  AES128-SHA                       128  SSL3    Native  AES     SHA     RSA
108:    47  AES128-SHA                       128  TLS1    Native  AES     SHA     RSA
109:    47  AES128-SHA                       128  TLS1.1  Native  AES     SHA     RSA
110:    47  AES128-SHA                       128  TLS1.2  Native  AES     SHA     RSA
111:    47  AES128-SHA                       128  DTLS1   Native  AES     SHA     RSA
112:    24  ADH-RC4-MD5                      128  SSL3    Native  RC4     MD5     ADH
113:    24  ADH-RC4-MD5                      128  TLS1    Native  RC4     MD5     ADH
114:     5  RC4-SHA                          128  SSL3    Native  RC4     SHA     RSA
115:     5  RC4-SHA                          128  TLS1    Native  RC4     SHA     RSA
116:     5  RC4-SHA                          128  TLS1.1  Native  RC4     SHA     RSA
117:     5  RC4-SHA                          128  TLS1.2  Native  RC4     SHA     RSA
118:     4  RC4-MD5                          128  SSL3    Native  RC4     MD5     RSA
119:     4  RC4-MD5                          128  TLS1    Native  RC4     MD5     RSA
120:     4  RC4-MD5                          128  TLS1.1  Native  RC4     MD5     RSA
121:     4  RC4-MD5                          128  TLS1.2  Native  RC4     MD5     RSA
122:    21  DHE-RSA-DES-CBC-SHA               64  SSL3    Native  DES     SHA     EDH/RSA
123:    21  DHE-RSA-DES-CBC-SHA               64  TLS1    Native  DES     SHA     EDH/RSA
124:    21  DHE-RSA-DES-CBC-SHA               64  TLS1.1  Native  DES     SHA     EDH/RSA
125:    21  DHE-RSA-DES-CBC-SHA               64  TLS1.2  Native  DES     SHA     EDH/RSA
126:    21  DHE-RSA-DES-CBC-SHA               64  DTLS1   Native  DES     SHA     EDH/RSA
127:    26  ADH-DES-CBC-SHA                   64  SSL3    Native  DES     SHA     ADH
128:    26  ADH-DES-CBC-SHA                   64  TLS1    Native  DES     SHA     ADH
129:     9  DES-CBC-SHA                       64  SSL3    Native  DES     SHA     RSA
130:     9  DES-CBC-SHA                       64  TLS1    Native  DES     SHA     RSA
131:     9  DES-CBC-SHA                       64  TLS1.1  Native  DES     SHA     RSA
132:     9  DES-CBC-SHA                       64  DTLS1   Native  DES     SHA     RSA
133:    98  EXP1024-DES-CBC-SHA               56  SSL3    Native  DES     SHA     RSA
134:    98  EXP1024-DES-CBC-SHA               56  TLS1    Native  DES     SHA     RSA
135:    98  EXP1024-DES-CBC-SHA               56  DTLS1   Native  DES     SHA     RSA
136:   100  EXP1024-RC4-SHA                   56  SSL3    Native  RC4     SHA     RSA
137:   100  EXP1024-RC4-SHA                   56  TLS1    Native  RC4     SHA     RSA
138:     8  EXP-DES-CBC-SHA                   40  SSL3    Native  DES     SHA     RSA
139:     8  EXP-DES-CBC-SHA                   40  TLS1    Native  DES     SHA     RSA
140:     8  EXP-DES-CBC-SHA                   40  DTLS1   Native  DES     SHA     RSA
141:     3  EXP-RC4-MD5                       40  SSL3    Native  RC4     MD5     RSA
142:     3  EXP-RC4-MD5                       40  TLS1    Native  RC4     MD5     RSA
0

Answers to this Question