---
title: "Cipher suite support"
source_url: https://dev.digicert.com/trustcore-sdk/nanossl/get-started/cipher-suite-support.html
---

<a id="supported"></a>

## Supported

**Flags:**

- `__ENABLE_MOCANA_SSL_DSA_SUPPORT__`

**Cipher suites:**

- `TLS_DHE_DSS_WITH_AES_128_CBC_SHA`
- `TLS_DHE_DSS_WITH_AES_128_CBC_SHA256`

<a id="supported-not-recommended"></a>

## Supported (not recommended)

**Flags:**

- `__ENABLE_MOCANA_SSL_DH_ANON_SUPPORT__`
- `__ENABLE_MOCANA_SSL_ECDH_ANON_SUPPORT__`
- `__ENABLE_NIL_CIPHER__`

**Cipher suites:**

- `TLS_DH_anon_WITH_AES_128_GCM_SHA256`
- `TLS_DH_anon_WITH_AES_256_CBC_SHA`
- `TLS_DH_anon_WITH_AES_256_CBC_SHA256`
- `TLS_DH_anon_WITH_AES_256_GCM_SHA384`
- `TLS_ECDH_anon_WITH_AES_128_CBC_SHA`
- `TLS_ECDH_anon_WITH_AES_256_CBC_SHA`
- `TLS_RSA_WITH_NULL_MD5`
- `TLS_RSA_WITH_NULL_SHA`
- `TLS_RSA_WITH_NULL_SHA256`
- `TLS_RSA_WITH_RC4_128_SHA`

<a id="not-supported"></a>

## Not supported

- **Camellia cipher suites**
  - Any suite including "CAMELLIA" keyword
- **RC4 cipher suites**
  - `TLS_RSA_WITH_RC4_128_MD5`
- **DH DSS cipher suites**
  - `TLS_DH_DSS_WITH_AES_128_CBC_SHA`
  - `TLS_DH_DSS_WITH_AES_128_CBC_SHA256`
  - `TLS_DH_DSS_WITH_AES_128_GCM_SHA256`
  - `TLS_DH_DSS_WITH_AES_256_CBC_SHA`
  - `TLS_DH_DSS_WITH_AES_256_CBC_SHA256`
  - `TLS_DH_DSS_WITH_AES_256_GCM_SHA384`
  - `TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA`
  - `TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA`
  - `TLS_DH_DSS_WITH_SEED_CBC_SHA`
- **DH RSA cipher suites**
  - `TLS_DH_RSA_WITH_AES_128_GCM_SHA256`
  - `TLS_DH_RSA_WITH_AES_256_CBC_SHA`
  - `TLS_DH_RSA_WITH_AES_256_CBC_SHA256`
  - `TLS_DH_RSA_WITH_AES_256_GCM_SHA384`
  - `TLS_DH_RSA_WITH_AES_128_CBC_SHA`
  - `TLS_DH_RSA_WITH_AES_128_CBC_SHA256`
  - `TLS_DH_RSA_WITH_SEED_CBC_SHA`
- **DHE DSS cipher suites**
  - `TLS_DHE_DSS_WITH_SEED_CBC_SHA`
  - `TLS_DHE_DSS_WITH_AES_128_GCM_SHA256`
  - `TLS_DHE_DSS_WITH_AES_256_CBC_SHA`
  - `TLS_DHE_DSS_WITH_AES_256_CBC_SHA256`
  - `TLS_DHE_DSS_WITH_AES_256_GCM_SHA384`
- **Other cipher suites**
  - `TLS_DHE_RSA_WITH_SEED_CBC_SHA`
  - `TLS_RSA_WITH_SEED_CBC_SHA`
  - `TLS_EMPTY_RENEGOTIATION_INFO_SCSV`