10. All the Supported Ciphersuites in GnuTLS

Available cipher suites:

Available certificate types:

• X.509
• OPENPGP

Available protocols:

• SSL3.0
• TLS1.0
• TLS1.1
• TLS1.2

Available ciphers:

• AES-256-CBC
• AES-128-CBC
• 3DES-CBC
• DES-CBC
• ARCFOUR-128
• ARCFOUR-40
• RC2-40
• CAMELLIA-256-CBC
• CAMELLIA-128-CBC
• NULL

Available MAC algorithms:

• SHA1
• MD5
• SHA256
• SHA384
• SHA512
• MD2
• RIPEMD160
• MAC-NULL

Available key exchange methods:

• ANON-DH
• RSA
• RSA-EXPORT
• DHE-RSA
• DHE-DSS
• SRP-DSS
• SRP-RSA
• SRP
• PSK
• DHE-PSK

Available public key algorithms:

• RSA
• DSA

Available public key signature algorithms:

• RSA-SHA1
• RSA-SHA256
• RSA-SHA384
• RSA-SHA512
• RSA-RMD160
• DSA-SHA1
• RSA-MD5
• RSA-MD2

Available compression methods:

• DEFLATE
• NULL

Some additional information regarding some of the algorithms:

RSA

RSA is public key cryptosystem designed by Ronald Rivest, Adi Shamir and Leonard Adleman. It can be used with any hash functions.

DSA

DSA is the USA’s Digital Signature Standard. It uses only the SHA-1 hash algorithm.

MD2

MD2 is a cryptographic hash algorithm designed by Ron Rivest. It is optimized for 8-bit processors. Outputs 128 bits of data. There are no known weaknesses of this algorithm but since this algorithm is rarely used and not really studied it should not be used today.

MD5

MD5 is a cryptographic hash algorithm designed by Ron Rivest. Outputs 128 bits of data. It is considered to be broken.

SHA-1

SHA is a cryptographic hash algorithm designed by NSA. Outputs 160 bits of data. It is also considered to be broken, though no practical attacks have been found.

RMD160

RIPEMD is a cryptographic hash algorithm developed in the framework of the EU project RIPE. Outputs 160 bits of data.