Cipher Suites

Choosing ciphers suites can be difficult and their names may look complex but they can be easily broken down into their components. Take the following suite:

​

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

The components are:

​

TLS - the protocol used

ECDHE - the key exchange mechanism

ECDSA - the algorithm of the authentication key

AES - the symmetric encryption algorithm

128 - the key size of the above

GCM - the mode of the above

SHA256 - the MAC used by the algorithm