Sorry if I missed which community to ask.
Recently I stumbled upon the fact that the same cipher suite can be designated by two different IDs, and this is not a typo, nor has it happened on a single occasion.
- TLS_ECDH_ECDSA_WITH_NULL_SHA is
- TLS_ECDH_ECDSA_WITH_RC4_128_SHA is
- SSL_RSA_FIPS_WITH_DES_CBC_SHA is
- SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA is
And few others more, like TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA and TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA.
So, the question is: why are two codes used to designate the same cipher suite? Is it a marker of legacy (broken?), used to distinguish an implementation, or just a merger of two standards? Or is it something else?