150+ cipher reference · grade pasted lists · csv export · runs locally
| openssl | grade | notes |
|---|---|---|
| TLS_AES_256_GCM_SHA384 | A | TLS 1.3 |
| TLS_AES_128_GCM_SHA256 | A | TLS 1.3 |
| TLS_CHACHA20_POLY1305_SHA256 | A | TLS 1.3 |
| ECDHE-RSA-AES256-GCM-SHA384 | A | — |
| ECDHE-RSA-AES128-GCM-SHA256 | A | — |
| ECDHE-ECDSA-AES256-GCM-SHA384 | A | — |
| ECDHE-ECDSA-AES128-GCM-SHA256 | A | — |
| ECDHE-RSA-CHACHA20-POLY1305 | A | — |
| ECDHE-ECDSA-CHACHA20-POLY1305 | A | — |
| DHE-RSA-AES256-GCM-SHA384 | B | DHE — verify params |
| DHE-RSA-AES128-GCM-SHA256 | B | — |
| AES256-GCM-SHA384 | B | no forward secrecy |
| AES128-GCM-SHA256 | B | — |
| ECDHE-RSA-AES256-SHA384 | C | CBC mode |
| ECDHE-RSA-AES128-SHA256 | C | — |
| ECDHE-RSA-AES256-SHA | D | SHA-1 MAC |
| ECDHE-RSA-AES128-SHA | D | — |
| AES256-SHA256 | C | — |
| AES128-SHA256 | C | — |
| AES256-SHA | D | — |
| AES128-SHA | D | — |
| DES-CBC3-SHA | F | SWEET32 · deprecated |
| ECDHE-RSA-DES-CBC3-SHA | F | — |
| RC4-SHA | F | broken |
| RC4-MD5 | F | — |
| NULL-SHA | F | no encryption |
| NULL-MD5 | F | — |
| ECDHE-RSA-NULL-SHA | F | — |
| PSK-AES256-GCM-SHA384 | B | pre-shared key |
| PSK-AES128-GCM-SHA256 | B | — |
| IDEA-CBC-SHA | F | legacy |
| DES-CBC-SHA | F | 56-bit |
| EDH-RSA-DES-CBC-SHA | F | — |
| ADH-AES256-GCM-SHA384 | F | no authentication |
| ADH-AES128-GCM-SHA256 | F | — |
| ECDHE-RSA-CAMELLIA256-SHA384 | C | — |
| ECDHE-RSA-CAMELLIA128-SHA256 | C | — |
| CAMELLIA256-SHA | D | — |
| CAMELLIA128-SHA | D | — |
| ECDHE-ECDSA-AES256-SHA384 | C | — |
| ECDHE-ECDSA-AES128-SHA256 | C | — |
| ECDHE-ECDSA-AES256-SHA | D | — |
| ECDHE-ECDSA-AES128-SHA | D | — |
| SRP-RSA-AES-256-CBC-SHA | C | SRP auth |
| SRP-AES-256-CBC-SHA | C | — |
| TLS_EMPTY_RENEGOTIATION_INFO | A | signaling cipher |
| RSA-WITH-AES-256-GCM-SHA256 | B | — |
| RSA-WITH-AES-128-GCM-SHA384 | B | — |
| RSA-WITH-AES-256-CBC-SHA384 | C | — |
| RSA-WITH-AES-256-CBC-SHA1 | D | — |
| RSA-WITH-AES-256-CBC-MD5 | D | — |
| RSA-WITH-AES-128-CBC-SHA384 | C | — |
| RSA-WITH-AES-128-CBC-SHA1 | D | — |
| RSA-WITH-AES-128-CBC-MD5 | D | — |
| RSA-WITH-ChaCha20-SHA384 | B | — |
| RSA-WITH-ChaCha20-SHA256 | B | — |
| RSA-WITH-ChaCha20-SHA1 | B | — |
| RSA-WITH-ChaCha20-MD5 | B | — |
| RSA-WITH-3DES-SHA384 | F | — |
| RSA-WITH-3DES-SHA256 | F | — |
| RSA-WITH-3DES-SHA1 | F | — |
| RSA-WITH-3DES-MD5 | F | — |
| RSA-WITH-RC4-SHA384 | F | — |
| RSA-WITH-RC4-SHA256 | F | — |
| RSA-WITH-RC4-SHA1 | F | — |
| RSA-WITH-RC4-MD5 | F | — |
| DHE-WITH-AES-256-GCM-SHA384 | B | — |
| DHE-WITH-AES-256-GCM-SHA256 | B | — |
| DHE-WITH-AES-128-GCM-SHA384 | B | — |
| DHE-WITH-AES-128-GCM-SHA256 | B | — |
| DHE-WITH-AES-256-CBC-SHA384 | C | — |
| DHE-WITH-AES-256-CBC-SHA256 | C | — |
| DHE-WITH-AES-256-CBC-SHA1 | D | — |
| DHE-WITH-AES-256-CBC-MD5 | D | — |
| DHE-WITH-AES-128-CBC-SHA384 | C | — |
| DHE-WITH-AES-128-CBC-SHA256 | C | — |
| DHE-WITH-AES-128-CBC-SHA1 | D | — |
| DHE-WITH-AES-128-CBC-MD5 | D | — |
| DHE-WITH-ChaCha20-SHA384 | B | — |
| DHE-WITH-ChaCha20-SHA256 | B | — |