All tools · 🌐 Network Tools
🔐 TLS Cipher Suites Reference
A cipher suite name like ECDHE-RSA-AES256-GCM-SHA384 packs four algorithm choices into one string: key exchange, server authentication, bulk encryption, and MAC. This reference parses common cipher suites and flags ones that should not be enabled anymore.
Loading tool…
Examples
Modern safe
Output
TLS_AES_256_GCM_SHA384 (TLS 1.3) · ECDHE-RSA-AES256-GCM-SHA384 (TLS 1.2) · ECDHE-ECDSA-CHACHA20-POLY1305Frequently asked questions
What is forward secrecy?
Property where compromising the server's private key does not let an attacker decrypt past sessions. Provided by ECDHE and DHE key exchanges. Always prefer cipher suites that include ECDHE.
About this calculator
TLS Cipher Suites Reference runs entirely in your browser using standard formulas. No data is sent to any server. We don't share your inputs with lenders, brokers, or anyone else — there's no funnel and no follow-up email.
Related tools
- 🔒 TLS / SSL Versions Reference — SSL 2.0 through TLS 1.3 — release dates, deprecation status, key features.
- 📑 Networking RFC Reference — Important networking RFCs by number and topic.
Why this tool
vs typical free network-tools sites
| NetToolset | Typical free site | |
|---|---|---|
| Price | Free | Free |
| Signup required | No | Often (for advanced features) |
| Ads inside the tool | No | Yes (banner + interstitial) |
| Logs your IP / queries | No | Yes (often resold) |
| Data sent to a server | Math runs in browser; lookups hit Cloudflare DoH directly | Yes (all goes through their server) |
| Open source | Yes | No |
| Bookmarkable URL per tool | Yes | Mixed |
| Multilingual | EN / ES / PT / FR / DE | Usually EN only |
| Loads in under 1s | Yes (static) | Often slow (ad tracking) |