Browse and search TLS cipher suites with security ratings, protocol compatibility, and recommendation status.
Cipher Suite Reference is a searchable catalog for identifying TLS cipher suites and comparing their security rating, supported protocol versions, and recommendation status. Search by a suite identifier, such as a standardized TLS name, to narrow the catalog to relevant entries. The important distinction is that this is a reference lookup, not a connection test. It does not contact a hostname, inspect a server configuration, or prove that a browser and server will successfully negotiate the listed suite.
Enter a cipher suite identifier or a recognizable portion of one to find matching catalog entries. Each result associates the suite name with reference information such as its security rating, protocol compatibility, and recommendation status. This is useful when translating a suite name from configuration, documentation, or a TLS diagnostic report into a readable assessment.
Read protocol compatibility separately from the security rating. A suite can be defined for particular TLS versions without being suitable for a current deployment policy. TLS 1.3 suite names also describe fewer negotiation components than earlier suite names: authentication and key exchange are selected independently rather than encoded into names such as TLS_AES_128_GCM_SHA256.
No. This tool searches cipher suite reference data rather than connecting to a remote TLS service. Obtain the negotiated or supported suite names from a server scanner, browser diagnostic, command-line client, or handshake trace, then use those identifiers here to review their ratings, protocol compatibility, and recommendation status.
TLS 1.3 cipher suite names identify the authenticated-encryption algorithm and the hash used with HKDF. Key exchange and authentication are negotiated through separate TLS mechanisms, so they are not embedded in the suite name. Consequently, a TLS 1.3 suite entry does not by itself identify the certificate type or complete handshake configuration.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.