Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

I have a webserver which support only TLS 1.0

Which is the better cipher in this group for the best security?

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
TLS_ECDHE_ECDSA_WITH_RC4_128_SHA (0xc007)
TLS_ECDHE_RSA_WITH_RC4_128_SHA (0xc011)
TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA (0xc008)
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (0xc012)

I choosed only ciphers with ECDHE for Perfect Forward Secrecy.

EDIT I removed NULL was an error.

Speed is not very important, for me secure is better.

This ciphers are used in my java application for get data from https website. My doubt was due to the fact that the CBC Ciphers are vulnerable to BEAST Attack

share|improve this question
    
I'm assuming you don't really want NULL as that means no confidentiality (in other words your data is sent unencrypted). I'd avoid RC4. As to what is left, what are your goals? How important is speed? In other words, what does "better" mean? Does your processor support AES-NI? Why only SHA and nothing from SHA2 family? –  mikeazo Jan 17 at 14:16
    
At minimum you can eliminate 3DES, it's strictly worse than AES. And NULL is obviously not useful either when you're interested in confidentiality. –  CodesInChaos Jan 17 at 14:45
    
Well, if you are interested in "best security", you should probably use anything with AES and SHA at the end, the rest is kinda personal preference: AES 128 and AES 256 are both considered secure, it depends mostly on how large your blocks should be. Choosing RSA or ECDSA as signature algorithm is both fine (it depends more on the according parameters to achieve a secure level) –  tylo Jan 17 at 16:57
2  
@tylo: nit: AES-128 and AES-256 has the same block size; they differ in the size of their keys. –  poncho Jan 17 at 17:16
    
I know AES 256 is better. But with TLS 1.0 CBC Ciphers are vulnerable to Beast Attack. My processor not support AES-NI. My application is developed with java 7 and the list of cipher is extracted from DefaultCipherSupported. –  Giovanni Nervi Jan 17 at 17:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.