Red Hat DIRECTORY SERVER 8.0 - ADMINISTRATION Administration Manual page 377

• Message Authentication. SHA stands for Secure Hash Algorithm.
http://www.mozilla.org/projects/security/pki/nss/nss-3.11/nss-3.11-algorithms.html
The Mozilla site,
definitions and explanations of the encryption algorithms.
NOTE
Directory Server supports ciphers for TLSv1 (recommended) and SSLv3. SSLv2 support
is deprecated and not enabled by default in Directory Server.
Directory Server provides the following TLSv1 ciphers:
Directory Server Key Exchange
Name
tls_dhe_dss_aes_128_sha DHE with DHS
tls_dhe_rsa_aes_128_sha DHE with RSA
tls_rsa_aes_256_sha RSA
tls_dhe_dss_aes_256_sha DHE with DSS
tls_dhe_rsa_aes_256_sha DHE with RSA
tls_dhe_dss_1024_rc4_sha DHE with DSS
1024 bit public
key
tls_dhe_dss_rc4_128_sha DHE with DSS
tls_rsa_export1024_with_rc4_56_sha RSA with 1024 bit
public key
tls_rsa_export1024_with_des_cbc_sha RSA with 1024 bit
public key
Table 11.2. TLSv1 Ciphers
Directory Server provides the following SSLv3 ciphers:
Directory Server Key Exchange
Name
dhe_rsa_3des_sha DHE with RSA
dhe_rsa_des_sha DHE with RSA
dhe_dss_3des_sha DHE with DSS
dhe_dss_des_sha DHE with DSS
rsa_des_sha RSA
rsa_3des_sha RSA
rsa_fips_des_sha RSA
rsa_fips_3des_sha RSA
rsa_rc4_128_md5 RSA
rsa_rc4_40_md5 RSA
rsa_rc2_40_md5 RSA
rsa_null_md5 RSA
Encryption Symmetric Key
Algorithm Bit Size
AES 128
AES 128
AES 256
AES 256
AES 256
RC4 56
RC4 128
RC4 56
DES 56
Encryption Symmetric Key
Algorithm Bit Size
3DES 168
DES 56
3DES 168
DES 56
DES 56
3DES 168
DES 56
3DES 168
RC4 128
RC4 40
RC2 40
null (none) N/A
Available Ciphers
for
Message
Authentication
SHA
SHA
SHA
SHA
SHA
SHA
SHA
SHA
SHA
Message
Authentication
SHA
SHA
SHA
SHA
SHA
SHA
SHA
SHA
MD5
MD5
MD5
MD5
359