Sun Java(TM) System Administration Server Online Help |
Cipher Preference Dialog
A cipher is an algorithm used to encrypt data. This dialog box displays the ciphers available with the selected certificate for Secure Sockets Layer (SSL) and Transport Layer Security (TLS). You may select which ciphers are enabled, and the chosen certificate will only work with the enabled ciphers. For example, you may not wish to use ciphers with fewer bits because they are known to be vulnerable.
The table on each tab contains the following information about each cipher:
Enabled - This column contains a checkbox to determine which ciphers are enabled. Select the checkbox to enable the cipher and deselect the checkbox to not use that cipher.
Cipher - Lists the name of each ciphers.
Bits - Shows the length of the private key, in bits. In general, longer keys are more secure than shorter ones.
Message Digest - Shows the algorithm used by this cipher to determine if a digital signature has been tampered with.
The following table lists the most common ciphers available for SSL 2.0, 3.0, and TLS:
Cipher Name
Description
None
No encryption, only MD5 message authentication (rsa_null_md5).
RC2 (Export)
RC2 cipher with 40-bit encryption and MD5 message authentication (rsa_rc2_40_md5).
RC4 (Export)
RC4 cipher with 40-bit encryption and MD5 message authentication (rsa_rc4_40_md5).
RC4 (Export, 56 bits)
RC4 cipher with 56-bit encryption and SHA message authentication (rsa_rc4_56_sha).
RC2 (128 bits)
RC2 cipher with 128-bit encryption and MD5 message authentication (rsa_rc2_128_md5).
RC4 (128 bits)
RC4 cipher with 128-bit encryption and MD5 message authentication (rsa_rc4_128_md5).
DES (56 bits)
DES with 56-bit encryption and SHA message authentication (rsa_des_sha).
DES (168 bits)
DES with 168-bit encryption and MD5 message authentication (rsa_3des_md5).
DES (FIPS)
FIPS DES with 56-bit encryption and SHA message authentication. This cipher meets the FIPS 140-1 U.S. government standard for implementations of cryptographic modules (rsa_fips_des_sha).
Triple-DES
Triple DES with 168-bit encryption and SHA message authentication (rsa_3des_sha).
Triple-DES (FIPS)
FIPS Triple DES with 168-bit encryption and SHA message authentication. This cipher meets the FIPS 140-1 U.S. government standard for implementations of cryptographic modules (rsa_fips_3des_sha).
Fortezza
Fortezza cipher with 80-bit encryption and SHA message authentication.
RC4 (Fortezza)
Fortezza RC4 cipher with 128-bit encryption and SHA message authentication.
None (Fortezza)
No encryption, only Fortezza SHA message authentication.