Old Algorithms Removed
This topic lists which algorithms were removed from EFT and which are the default.
The following algorithms were removed/ desupported in v8.0.5:
TLS_AES_256_GCM_SHA384
TLS_CHACHA20_POLY1305_SHA256
TLS_AES_128_GCM_SHA256
ECDHE-ECDSA-CHACHA20-POLY1305
ECDHE-RSA-CHACHA20-POLY1305
DHE-RSA-CHACHA20-POLY1305
ECDHE-ECDSA-AES256-CCM8
AES256-CCM8
ECDHE-ECDSA-AES256-CCM
DHE-RSA-AES256-CCM
AES256-CCM
ECDHE-ECDSA-ARIA256-GCM-SHA384
ECDHE-ARIA256-GCM-SHA384
DHE-RSA-ARIA256-GCM-SHA384
DHE-DSS-ARIA256-GCM-SHA384
ARIA256-GCM-SHA384
ECDHE-ECDSA-AES128-CCM8
DHE-RSA-AES128-CCM8
AES128-CCM8
ECDHE-ECDSA-AES128-CCM
DHE-RSA-AES128-CCM
AES128-CCM
ECDHE-ECDSA-ARIA128-GCM-SHA256
ECDHE-ARIA128-GCM-SHA256
DHE-RSA-ARIA128-GCM-SHA256
DHE-DSS-ARIA128-GCM-SHA256
ARIA128-GCM-SHA256
ECDHE-ECDSA-CAMELLIA256-SHA384
ECDHE-RSA-CAMELLIA256-SHA384
DHE-RSA-CAMELLIA256-SHA256
DHE-DSS-CAMELLIA256-SHA256
ADH-CAMELLIA256-SHA256
CAMELLIA256-SHA256
ECDHE-RSA-CAMELLIA128-SHA256
DHE-RSA-CAMELLIA128-SHA256
DHE-DSS-CAMELLIA128-SHA256
ADH-CAMELLIA128-SHA256
CAMELLIA128-SHA256
DHE-RSA-DES-CBC3-SHA
DHE-DSS-DES-CBC3-SHA
DHE-RSA-AES256-CCM8
ECDHE-ECDSA-CAMELLIA128-SHA256
The following 25 ciphers are enabled by default:
TLS_AES_256_GCM_SHA384
ECDHE-ECDSA-AES256-GCM-SHA384
ECDHE-RSA-AES256-GCM-SHA384
AES256-GCM-SHA384
TLS_CHACHA20_POLY1305_SHA256
ECDHE-ECDSA-CHACHA20-POLY1305
ECDHE-RSA-CHACHA20-POLY1305
TLS_AES_128_GCM_SHA256
ECDHE-ECDSA-AES128-GCM-SHA256
ECDHE-RSA-AES128-GCM-SHA256
AES128-GCM-SHA256
ECDHE-ECDSA-AES256-CCM8
AES256-CCM8
ECDHE-ECDSA-AES256-CCM
AES256-CCM
ECDHE-ECDSA-AES128-CCM8
AES128-CCM8
ECDHE-ECDSA-AES128-CCM
AES128-CCM
ECDHE-ECDSA-AES256-SHA384
ECDHE-RSA-AES256-SHA384
AES256-SHA256
ECDHE-ECDSA-AES128-SHA256
ECDHE-RSA-AES128-SHA256
AES128-SHA256
Default Settings for SSL TLS:
FIPS mode was unchanged: