All Products
Search
Document Center

CDN:Default TLS encryption algorithms

Last Updated:Feb 27, 2024

This topic describes the default TLS encryption algorithms that are supported by Alibaba Cloud CDN.

The following section describes the default TLS encryption algorithms that are supported by Alibaba Cloud CDN.

Encryption algorithm

TLS_AES_256_GCM_SHA384

TLS_CHACHA20_POLY1305_SHA256

TLS_AES_128_GCM_SHA256

ECDHE-ECDSA-CHACHA20-POLY1305

ECDHE-RSA-CHACHA20-POLY1305

ECDHE-ECDSA-AES128-GCM-SHA256

ECDHE-RSA-AES128-GCM-SHA256

ECDHE-ECDSA-AES128-CCM8

ECDHE-ECDSA-AES128-CCM

ECDHE-ECDSA-AES128-SHA256

ECDHE-RSA-AES128-SHA256

ECDHE-ECDSA-AES128-SHA

ECDHE-RSA-AES128-SHA

ECDHE-ECDSA-AES256-GCM-SHA384

ECDHE-RSA-AES256-GCM-SHA384

ECDHE-ECDSA-AES256-CCM8

ECDHE-ECDSA-AES256-CCM

ECDHE-ECDSA-AES256-SHA384

ECDHE-RSA-AES256-SHA384

ECDHE-ECDSA-AES256-SHA

ECDHE-RSA-AES256-SHA

ECDHE-ECDSA-ARIA256-GCM-SHA384

ECDHE-ARIA256-GCM-SHA384

ECDHE-ECDSA-ARIA128-GCM-SHA256

ECDHE-ARIA128-GCM-SHA256

ECDHE-ECDSA-CAMELLIA256-SHA384

ECDHE-RSA-CAMELLIA256-SHA384

ECDHE-ECDSA-CAMELLIA128-SHA256

ECDHE-RSA-CAMELLIA128-SHA256

ECDH-RSA-AES256-GCM-SHA384

ECDH-ECDSA-AES256-GCM-SHA384

RSA-PSK-AES256-GCM-SHA384

DHE-PSK-AES256-GCM-SHA384

RSA-PSK-CHACHA20-POLY1305

DHE-PSK-CHACHA20-POLY1305

ECDHE-PSK-CHACHA20-POLY1305

DHE-PSK-AES256-CCM8

DHE-PSK-AES256-CCM

RSA-PSK-ARIA256-GCM-SHA384

DHE-PSK-ARIA256-GCM-SHA384

AES256-GCM-SHA384

AES256-CCM8:AES256-CCM

ARIA256-GCM-SHA384

PSK-AES256-GCM-SHA384

PSK-CHACHA20-POLY1305

PSK-AES256-CCM8

PSK-AES256-CCM

PSK-ARIA256-GCM-SHA384

ECDH-RSA-AES128-GCM-SHA256

ECDH-ECDSA-AES128-GCM-SHA256

RSA-PSK-AES128-GCM-SHA256

DHE-PSK-AES128-GCM-SHA256

DHE-PSK-AES128-CCM8

DHE-PSK-AES128-CCM

RSA-PSK-ARIA128-GCM-SHA256

DHE-PSK-ARIA128-GCM-SHA256

AES128-GCM-SHA256

AES128-CCM8

AES128-CCM

ARIA128-GCM-SHA256

PSK-AES128-GCM-SHA256

PSK-AES128-CCM8

PSK-AES128-CCM

PSK-ARIA128-GCM-SHA256

ECDH-RSA-AES256-SHA384

ECDH-ECDSA-AES256-SHA384

AES256-SHA256

CAMELLIA256-SHA256

ECDH-RSA-AES128-SHA256

ECDH-ECDSA-AES128-SHA256

AES128-SHA256

CAMELLIA128-SHA256

ECDHE-PSK-AES256-CBC-SHA384

ECDHE-PSK-AES256-CBC-SHA

SRP-DSS-AES-256-CBC-SHA

SRP-RSA-AES-256-CBC-SHA

SRP-AES-256-CBC-SHA

ECDH-RSA-AES256-SHA

RSA-PSK-AES256-CBC-SHA384

DHE-PSK-AES256-CBC-SHA384

RSA-PSK-AES256-CBC-SHA

DHE-PSK-AES256-CBC-SHA

ECDHE-PSK-CAMELLIA256-SHA384

RSA-PSK-CAMELLIA256-SHA384

DHE-PSK-CAMELLIA256-SHA384

AES256-SHA

CAMELLIA256-SHA

PSK-AES256-CBC-SHA384

PSK-AES256-CBC-SHA

PSK-CAMELLIA256-SHA384

ECDHE-PSK-AES128-CBC-SHA256

ECDHE-PSK-AES128-CBC-SHA

SRP-DSS-AES-128-CBC-SHA

SRP-RSA-AES-128-CBC-SHA

SRP-AES-128-CBC-SHA

ECDH-RSA-AES128-SHA

ECDH-ECDSA-AES128-SHA

RSA-PSK-AES128-CBC-SHA256

DHE-PSK-AES128-CBC-SHA256

RSA-PSK-AES128-CBC-SHA

DHE-PSK-AES128-CBC-SHA

ECDHE-PSK-CAMELLIA128-SHA256

RSA-PSK-CAMELLIA128-SHA256

DHE-PSK-CAMELLIA128-SHA256

AES128-SHA:SEED-SHA

CAMELLIA128-SHA

IDEA-CBC-SHA

PSK-AES128-CBC-SHA256

PSK-AES128-CBC-SHA

PSK-CAMELLIA128-SHA256

ECDH-ECDSA-AES256-SHA

Note

If you set the TLS Cipher Suite parameter to All Cipher Suite Groups or Enhanced Cipher Suite, you cannot modify the encryption algorithms. If you set the TLS Cipher Suite parameter to Custom Cipher Suite, you can select encryption algorithms based on your business requirements.

If you want to configure special encryption algorithms, submit a ticket.