K14110264: IANA/OpenSSL cipher names for F5 TMM ciphers

https://my.f5.com/manage/s/article/K14110264
Published Date: Jun 19, 2023 UTC Updated Date: Jun 22, 2023 UTC

Applies to

BIG-IP LTM : [17.1.0, 17.1.X, 17.0.0, 17.0.X, 17.X.X, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.1.X, 16.0.1, 16.0.0, 16.0.X, 16.X.X,
15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.1.X, 15.0.1, 15.0.0, 15.0.X, 15.X.X, 14.1.5, 14.1.4,
14.1.3, 14.1.2, 14.1.0, 14.1.X, 14.0.1, 14.0.0, 14.0.X, 14.X.X, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 13.1.X, 13.0.1, 13.0.0,
13.0.X, 13.X.X, 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0, 12.1.X, 12.0.0, 12.0.X, 12.X.X]

Description
F5 TMM ciphers do not use the same naming scheme as IANA or the commonly used OpenSSL naming scheme.
This document lists F5 TMM cipher-names with their IANA and OpenSSL equivalents, ordered by hex code.

Environment
BIG-IP LTM
SSL client/server profiles

Cause
None

Recommended Actions
Use the following table to convert between F5 TMM cipher names, IANA cipher names and OpenSSL cipher names.

Hex TMM cipher name IANA cipher name

OpenSSL cipher name

------ --------------- ----------------

-------------------
0x0004 RC4-MD5 TLS_RSA_WITH_RC4_128_MD5
RC4-MD5
0x0005 RC4-SHA TLS_RSA_WITH_RC4_128_SHA
RC4-SHA
0x0009 DES-CBC-SHA TLS_RSA_WITH_DES_CBC_SHA
DES-CBC-SHA
0x000A DES-CBC3-SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA
DES-CBC3-SHA
0x0015 DHE-RSA-DES-CBC-SHA TLS_DHE_RSA_WITH_DES_CBC_SHA
EDH-RSA-DES-CBC-SHA
0x0016 DHE-RSA-DES-CBC3-SHA TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
EDH-RSA-DES-CBC3-SHA
0x0018 ADH-RC4-MD5 TLS_DH_anon_WITH_RC4_128_MD5
ADH-RC4-MD5
0x001A ADH-DES-CBC-SHA TLS_DH_anon_WITH_DES_CBC_SHA
ADH-DES-CBC-SHA
0x001B ADH-DES-CBC3-SHA TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
ADH-DES-CBC3-SHA
0x002F AES128-SHA TLS_RSA_WITH_AES_128_CBC_SHA
AES128-SHA
0x0032 DHE-DSS-AES128-SHA TLS_DHE_DSS_WITH_AES_128_CBC_SHA
DHE-DSS-AES128-SHA
0x0033 DHE-RSA-AES128-SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA
DHE-RSA-AES128-SHA
0x0034 ADH-AES128-SHA TLS_DH_anon_WITH_AES_128_CBC_SHA
ADH-AES128-SHA
0x0035 AES256-SHA TLS_RSA_WITH_AES_256_CBC_SHA
AES256-SHA
0x0038 DHE-DSS-AES256-SHA TLS_DHE_DSS_WITH_AES_256_CBC_SHA
DHE-DSS-AES256-SHA
0x0039 DHE-RSA-AES256-SHA TLS_DHE_RSA_WITH_AES_256_CBC_SHA
DHE-RSA-AES256-SHA
0x003A ADH-AES256-SHA TLS_DH_anon_WITH_AES_256_CBC_SHA
ADH-AES256-SHA
0x003C AES128-SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256
AES128-SHA256
0x003D AES256-SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256
AES256-SHA256
0x0040 DHE-DSS-AES128-SHA256 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
DHE-DSS-AES128-SHA256
0x0041 CAMELLIA128-SHA TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
CAMELLIA128-SHA
0x0044 DHE-DSS-CAMELLIA128-SHA TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
DHE-DSS-CAMELLIA128-SHA
0x0045 DHE-RSA-CAMELLIA128-SHA TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
DHE-RSA-CAMELLIA128-SHA
0x0067 DHE-RSA-AES128-SHA256 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
DHE-RSA-AES128-SHA256
0x006A DHE-DSS-AES256-SHA256 TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
DHE-DSS-AES256-SHA256
0x006B DHE-RSA-AES256-SHA256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
DHE-RSA-AES256-SHA256
0x0084 CAMELLIA256-SHA TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
CAMELLIA256-SHA
0x0087 DHE-DSS-CAMELLIA256-SHA TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
DHE-DSS-CAMELLIA256-SHA
0x0088 DHE-RSA-CAMELLIA256-SHA TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
DHE-RSA-CAMELLIA256-SHA
0x009C AES128-GCM-SHA256 TLS_RSA_WITH_AES_128_GCM_SHA256
AES128-GCM-SHA256
0x009D AES256-GCM-SHA384 TLS_RSA_WITH_AES_256_GCM_SHA384
AES256-GCM-SHA384
0x009E DHE-RSA-AES128-GCM-SHA256 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
DHE-RSA-AES128-GCM-SHA256
0x009F DHE-RSA-AES256-GCM-SHA384 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
DHE-RSA-AES256-GCM-SHA384
0x00A2 DHE-DSS-AES128-GCM-SHA256 TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
DHE-DSS-AES128-GCM-SHA256
0x00A3 DHE-DSS-AES256-GCM-SHA384 TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
DHE-DSS-AES256-GCM-SHA384
0x00A6 ADH-AES128-GCM-SHA256 TLS_DH_anon_WITH_AES_128_GCM_SHA256
ADH-AES128-GCM-SHA256
0x00A7 ADH-AES256-GCM-SHA384 TLS_DH_anon_WITH_AES_256_GCM_SHA384
ADH-AES256-GCM-SHA384
0x1301 TLS13-AES128-GCM-SHA256 TLS_AES_128_GCM_SHA256
TLS13-AES-128-GCM-SHA256
0x1302 TLS13-AES256-GCM-SHA384 TLS_AES_256_GCM_SHA384
TLS13-AES-256-GCM-SHA384
0x1303 TLS13-CHACHA20-POLY1305-SHA256 TLS_CHACHA20_POLY1305_SHA256
TLS13-CHACHA20-POLY1305-SHA256
0xC003 ECDH-ECDSA-DES-CBC3-SHA TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
ECDH-ECDSA-DES-CBC3-SHA
0xC004 ECDH-ECDSA-AES128-SHA TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
ECDH-ECDSA-AES128-SHA
0xC005 ECDH-ECDSA-AES256-SHA TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
ECDH-ECDSA-AES256-SHA
0xC008 ECDHE-ECDSA-DES-CBC3-SHA TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
ECDHE-ECDSA-DES-CBC3-SHA
0xC009 ECDHE-ECDSA-AES128-SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
ECDHE-ECDSA-AES128-SHA
0xC00A ECDHE-ECDSA-AES256-SHA TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
ECDHE-ECDSA-AES256-SHA
0xC00D ECDH-RSA-DES-CBC3-SHA TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
ECDH-RSA-DES-CBC3-SHA
0xC00E ECDH-RSA-AES128-SHA TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
ECDH-RSA-AES128-SHA
0xC00F ECDH-RSA-AES256-SHA TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
ECDH-RSA-AES256-SHA
0xC012 ECDHE-RSA-DES-CBC3-SHA TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
ECDHE-RSA-DES-CBC3-SHA
0xC013 ECDHE-RSA-AES128-CBC-SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
ECDHE-RSA-AES128-SHA
0xC014 ECDHE-RSA-AES256-CBC-SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
ECDHE-RSA-AES256-SHA
0xC023 ECDHE-ECDSA-AES128-SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
ECDHE-ECDSA-AES128-SHA256
0xC024 ECDHE-ECDSA-AES256-SHA384 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
ECDHE-ECDSA-AES256-SHA384
0xC025 ECDH-ECDSA-AES128-SHA256 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
ECDH-ECDSA-AES128-SHA256
0xC026 ECDH-ECDSA-AES256-SHA384 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
ECDH-ECDSA-AES256-SHA384
0xC027 ECDHE-RSA-AES128-SHA256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
ECDHE-RSA-AES128-SHA256
0xC028 ECDHE-RSA-AES256-SHA384 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
ECDHE-RSA-AES256-SHA384
0xC029 ECDH-RSA-AES128-SHA256 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
ECDH-RSA-AES128-SHA256
0xC02A ECDH-RSA-AES256-SHA384 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
ECDH-RSA-AES256-SHA384
0xC02B ECDHE-ECDSA-AES128-GCM-SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
ECDHE-ECDSA-AES128-GCM-SHA256
0xC02C ECDHE-ECDSA-AES256-GCM-SHA384 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
ECDHE-ECDSA-AES256-GCM-SHA384
0xC02D ECDH-ECDSA-AES128-GCM-SHA256 TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
ECDH-ECDSA-AES128-GCM-SHA256
0xC02E ECDH-ECDSA-AES256-GCM-SHA384 TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
ECDH-ECDSA-AES256-GCM-SHA384
0xC02F ECDHE-RSA-AES128-GCM-SHA256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDHE-RSA-AES128-GCM-SHA256
0xC030 ECDHE-RSA-AES256-GCM-SHA384 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDHE-RSA-AES256-GCM-SHA384
 0xC031 ECDH-RSA-AES128-GCM-SHA256 TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
ECDH-RSA-AES128-GCM-SHA256
0xC032 ECDH-RSA-AES256-GCM-SHA384 TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
ECDH-RSA-AES256-GCM-SHA384
0xC09C AES128-CCM TLS_RSA_WITH_AES_128_CCM
AES128-CCM
0xC09D AES256-CCM TLS_RSA_WITH_AES_256_CCM
AES256-CCM
0xC09E DHE-RSA-AES128-CCM TLS_DHE_RSA_WITH_AES_128_CCM
DHE-RSA-AES128-CCM
0xC09F DHE-RSA-AES256-CCM TLS_DHE_RSA_WITH_AES_256_CCM
DHE-RSA-AES256-CCM
0xC0A0 AES128-CCM8 TLS_RSA_WITH_AES_128_CCM_8
AES128-CCM8
0xC0A1 AES256-CCM8 TLS_RSA_WITH_AES_256_CCM_8
AES256-CCM8
0xC0A2 DHE-RSA-AES128-CCM8 TLS_DHE_RSA_WITH_AES_128_CCM_8
DHE-RSA-AES128-CCM8
0xC0A3 DHE-RSA-AES256-CCM8 TLS_DHE_RSA_WITH_AES_256_CCM_8
DHE-RSA-AES256-CCM8
0xCCA8 ECDHE-RSA-CHACHA20-POLY1305-SHA256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ECDHE-RSA-CHACHA20-POLY1305
0xCCA9 ECDHE-ECDSA-CHACHA20-POLY1305-SHA256 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
ECDHE-ECDSA-CHACHA20-POLY1305

Additional Information
None

Related Content
K86949400: F5 cipher names are different from SSLLabs

F5 support engineers who work directly with customers write Support Solution and Knowledge articles, which give you
immediate access to mitigation, workaround, or troubleshooting suggestions.