cipher-suites.md

title	pcx_content_type	weight	layout	meta
Cipher suites	reference	6	wide	title description Cipher suites — Origin Review a list of cipher suites that Cloudflare presents to origins during an SSL/TLS handshake.

Cipher suites — Origin

Refer to the following list to know what cipher suites Cloudflare presents to origin servers during an SSL/TLS handshake.

{{

}} Refer to cipher suites supported at Cloudflare's global network to know what cipher suites Cloudflare presents to browsers and other user agents. {{}}

The list order is based on how the cipher suites appear in the ClientHello, communicating Cloudflare's preference.

Supported cipher suites by protocol

Cipher name	TLS 1.0	TLS 1.1	TLS 1.2	TLS 1.3
AEAD-AES128-GCM-SHA256 1	❌	❌	❌	✅
AEAD-AES256-GCM-SHA384 1	❌	❌	❌	✅
AEAD-CHACHA20-POLY1305-SHA256 1	❌	❌	❌	✅
ECDHE-ECDSA-AES128-GCM-SHA256	❌	❌	✅	❌
ECDHE-RSA-AES128-GCM-SHA256	❌	❌	✅	❌
ECDHE-RSA-AES128-SHA	✅	✅	✅	❌
AES128-GCM-SHA256	❌	❌	✅	❌
AES128-SHA	✅	✅	✅	❌
ECDHE-ECDSA-AES256-GCM-SHA384	❌	❌	✅	❌
ECDHE-RSA-AES256-GCM-SHA384	❌	❌	✅	❌
ECDHE-RSA-AES256-SHA384	❌	❌	✅	❌
AES256-SHA	✅	✅	✅	❌
DES-CBC3-SHA	✅	❌	❌	❌

Footnotes

1. Although TLS 1.3 uses the same cipher suite space as previous versions of TLS, TLS 1.3 cipher suites are defined differently, only specifying the symmetric ciphers, and cannot be used for TLS 1.2. Similarly, TLS 1.2 and lower cipher suites cannot be used with TLS 1.3 (IETF TLS 1.3 draft 21). BoringSSL also hard-codes cipher preferences in this order for TLS 1.3. ↩ ↩² ↩³