Xuelei Fan's Blog

Perference Order Value Description 1 0xC0,0x24 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 2 0xC0,0x28 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 3 0x00,0x3D TLS_RSA_WITH_AES_256_CBC_SHA256 4 0xC0,0x26 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 5 0xC0,0x2A TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 6 0x00,0x6B TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 7 0x00,0x6A TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 8 0xC0,0x0A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 9 0xC0,0x14 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 10 0x00,0x35 TLS_RSA_WITH_AES_256_CBC_SHA 11 0xC0,0x05 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA 12 0xC0,0x0F TLS_ECDH_RSA_WITH_AES_256_CBC_SHA 13 0x00,0x39 TLS_DHE_RSA_WITH_AES_256_CBC_SHA 14 0x00,0x38 TLS_DHE_DSS_WITH_AES_256_CBC_SHA 15 0xC0,0x23 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 16 0xC0,0x27 TLS_ECDHE_RSA_WITH_AES_1...

Perference Order Value Description 1 0x00,0x2F TLS_RSA_WITH_AES_128_CBC_SHA 2 0x00,0x35 TLS_RSA_WITH_AES_256_CBC_SHA 3 0x00,0x05 TLS_RSA_WITH_RC4_128_SHA 4 0x00,0x0A TLS_RSA_WITH_3DES_EDE_CBC_SHA 5 0xC0,0x13 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 6 0xC0,0x14 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 7 0xC0,0x09 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 8 0xC0,0x0A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 9 0x00,0x32 TLS_DHE_DSS_WITH_AES_128_CBC_SHA 10 0x00,0x38 TLS_DHE_DSS_WITH_AES_256_CBC_SHA 11 0x00,0x13 TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA 12 0x00,0x04 TLS_RSA_WITH_RC4_128_MD5 Note that the data was from the observation of the TLS ClientHello message when visiting a HTTPS web site from Safari 5.1.

Perference Order Value Description 1 0x00,0xFF TLS_EMPTY_RENEGOTIATION_INFO_SCSV [1] 2 0x00,0x6B TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 3 0x00,0x6A TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 4 0x00,0x69 TLS_DH_RSA_WITH_AES_256_CBC_SHA256 5 0x00,0x68 TLS_DH_DSS_WITH_AES_256_CBC_SHA256 6 0x00,0x3D TLS_RSA_WITH_AES_256_CBC_SHA256 7 0x00,0x39 TLS_DHE_RSA_WITH_AES_256_CBC_SHA 8 0x00,0x38 TLS_DHE_DSS_WITH_AES_256_CBC_SHA 9 0x00,0x37 TLS_DH_RSA_WITH_AES_256_CBC_SHA 10 0x00,0x36 TLS_DH_DSS_WITH_AES_256_CBC_SHA 11 0x00,0x35 TLS_RSA_WITH_AES_256_CBC_SHA 12 0x00,0x67 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 13 0x00,0x40 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 14 0x00,0x3F TLS_DH_RSA_WITH_AES_128_CBC_SHA256 15 0x00,0x3E TLS_DH_DSS_WITH_AES_128_CBC_SHA256 16 0x00,0x3C TLS_RSA_WITH_AES_128_CBC_SHA256 17 0x00...

Perference Order Value Description 1 0xC0,0x0A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 2 0xC0,0x14 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 3 0x00,0x88 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA 4 0x00,0x87 TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA 5 0x00,0x39 TLS_DHE_RSA_WITH_AES_256_CBC_SHA 6 0x00,0x38 TLS_DHE_DSS_WITH_AES_256_CBC_SHA 7 0xC0,0x0F TLS_ECDH_RSA_WITH_AES_256_CBC_SHA 8 0xC0,0x05 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA 9 0x00,0x84 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA 10 0x00,0x35 TLS_RSA_WITH_AES_256_CBC_SHA 11 0xC0,0x07 TLS_ECDHE_ECDSA_WITH_RC4_128_SHA 12 0xC0,0x09 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 13 0xC0,0x11 TLS_ECDHE_RSA_WITH_RC4_128_SHA 14 0xC0,0x13 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 15 0x00,0x45 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA 16 0x00,0x44 TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA ...

Perference Order Value Description 1 0x00,0x3C TLS_RSA_WITH_AES_128_CBC_SHA256 2 0x00,0x2F TLS_RSA_WITH_AES_128_CBC_SHA 3 0x00,0x3D TLS_RSA_WITH_AES_256_CBC_SHA256 4 0x00,0x35 TLS_RSA_WITH_AES_256_CBC_SHA 5 0x00,0x05 TLS_RSA_WITH_RC4_128_SHA 6 0x00,0x0A TLS_RSA_WITH_3DES_EDE_CBC_SHA 7 0xC0,0x27 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 8 0xC0,0x13 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 9 0xC0,0x14 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 10 0xC0,0x2B TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 11 0xC0,0x23 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 12 0xC0,0x2C TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 13 0xC0,0x24 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 14 0xC0,0x09 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 15 0xC0,0x0A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 16 0x00,0x40 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 1...

Order Value Description 1 0xC0,0x0A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 2 0xC0,0x14 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 3 0x00,0x88 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA 4 0x00,0x87 TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA 5 0x00,0x39 TLS_DHE_RSA_WITH_AES_256_CBC_SHA 6 0x00,0x38 TLS_DHE_DSS_WITH_AES_256_CBC_SHA 7 0xC0,0x0F TLS_ECDH_RSA_WITH_AES_256_CBC_SHA 8 0xC0,0x05 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA 9 0x00,0x84 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA 10 0x00,0x35 TLS_RSA_WITH_AES_256_CBC_SHA 11 0xC0,0x07 TLS_ECDHE_ECDSA_WITH_RC4_128_SHA 12 0xC0,0x09 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 13 0xC0,0x11 TLS_ECDHE_RSA_WITH_RC4_128_SHA 14 0xC0,0x13 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 15 0x00,0x45 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA 16 0x00,0x44 TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA 17 ...

The following table compares the default TLS cipher suites supported and enabled by web browsers [SOURCE] and Java SE 7. The comparison is not to show which browser is better, it is just a reference. ;-) Meanwhile, it does not mean the more cipher suites the browser supports, the better the browser is supposed to be. Value Description Reference Firefox 5.0 IE 9.0 Chrome 14.0 Opera 11.50 Safari 5.0 Java SE 7 0x00,0x00 TLS_NULL_WITH_NULL_NULL [ RFC5246 ] 0x00,0x01 TLS_RSA_WITH_NULL_MD5 [ RFC5246 ] 0x00,0x02 TLS_RSA_WITH_NULL_SHA [ RFC5246 ] 0x00,0x03 TLS_RSA_EXPORT_WITH_RC4_40_MD5 [ RFC4346 ] 0x00,0x04 TLS_RSA_WITH_RC4_128_MD5 [ RFC5246 ] √ √ √ √ √ √ 0x00,0x05 TLS_RSA_WITH_RC4_128_SHA [ RFC5246 ] √ √ √ √ √ √ 0x00,0x06 TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 [ RFC4346 ] 0x00,0x07 TLS_RSA_WITH_IDEA_CBC_SHA [ RFC5469 ] 0x00,0x08 TLS_RSA_EXPORT_WITH_DES40_CBC_SHA [ RFC4346 ] 0x00,0x09 TLS_RSA_WITH_DES_CBC_SHA [ RFC5469 ] 0x00,0x0A TLS_RSA_WITH_3DES_EDE_CBC_SHA [ RFC5246 ] √ √ √ ...

A table worth a thousand words! ;-) Value Extension name Reference Firefox 5.0 IE 9.0 Chrome 14.0 Opera 11.50 Safari 5.0 Java SE 7 0 server_name RFC 6066 √ √ √ √ √ √ 1 max_fragment_length RFC 6066 2 client_certificate_url RFC 6066 3 trusted_ca_keys RFC 6066 4 truncated_hmac RFC 6066 5 status_request RFC 6066 √ √ √ 6 user_mappin RFC 4681 7 client_authz RFC 5878 8 server_authz RFC 5878 9 cert_type RFC 6091 10 elliptic_curves RFC 4492 √ √ √ √ √ 11 ec_point_formats RFC 4492 √ √ √ √ √ 12 srp RFC 5054 13 signature_algorithms[1] RFC 5246 √ √ √ 14 use_srtp RFC 5746 35 SessionTicket TLS RFC 4507 √ √ 13172 next_protocol_negotiation[2] Draft √ 65281 renegotiation_info RFC 5746 √ √ √ √ √ √ Note that the data was from the observation of the TLS ClientHello message when visiting HTTPS web sites. [1]: The signature_algorithms extension only appears in TLS 1.2 [2]: next_protocol_negotiation extension is in draft state, no official name and value.