Supported TLS Cipher Suites

This appendix and the helm values.yaml file both use the OpenSSL project’s identifiers for TLS Cipher Suites.

Recommended Cipher Suites: The Default List

The following TLS Cipher Suites are supported by Keysafe 5, and are configured for use by default. It is strongly recommended that this default set of cipher suites, or a subset of it, is used.

Less Secure Cipher Suites: Not Recommended

The following TLS Cipher Suites are supported by Keysafe 5, but only if explicitly configured for use by the user. These are less secure cipher suites and should only be configured for use after a thorough threat analysis of the operating environment.

TLSv1.3 Cipher Suites: Not Configurable

The following TLS Cipher Suites are supported by Keysafe 5 and cannot be explicitly configured. These are all secure TLSv1.3 cipher suites.