Cryptographic Standards - Cisco FirePOWER ASA 5500 series Configuration Manual

VPN Specifications

Cryptographic Standards

The security appliance supports numerous cryptographic standards and related third-party products and
services, including those shown in
Table A-12
Type
Asymmetric (public key) encryption algorithms
Symmetric encryption algorithms
Perfect forward secrecy (Diffie-Hellman key
negotiation)
Hash algorithms
X.509 certificate authorities
X.509 certificate enrollment methods
Cisco Security Appliance Command Line Configuration Guide
A-12
Table A-12.
Cryptographic Standards
Appendix A Feature Licenses and Specifications
Description
RSA public/private key pairs, 512 bits to 4096 bits
DSA public/private key pairs, 512 bits to 1024 bits
AES—128, 192, and 256 bits
DES—56 bits
3DES—168 bits
RC4—40, 56, 64, and 128 bits
Group 1— 768 bits
Group 2—1024 bits
Group 5— 1536 bits
Group 7—163 bits (Elliptic Curve Diffie-Hellman)
MD5—128 bits
SHA-1—160 bits
Cisco IOS software
Baltimore UniCERT
Entrust Authority
iPlanet/Netscape CMS
Microsoft Certificate Services
RSA Keon
VeriSign OnSite
SCEP
PKCS #7 and #10
OL-10088-01