Security/Server Side TLS: Difference between revisions

Cipherscan is a small Bash script that connects to a target and list the preferred Ciphers. It's an easy way to test a web server for available ciphers.

The script also calculates an average handshake time in milliseconds for each cipher, but performing a given handshake X number of times.

<pre>

$ ./CiphersScan.sh localhost:443 -v

prio  ciphersuite                  avg_handshake_ms

1    ECDHE-RSA-AES256-GCM-SHA384 20

2    ECDHE-RSA-AES128-GCM-SHA256 19

3    ECDHE-RSA-RC4-SHA            18

4    DHE-RSA-AES256-GCM-SHA384   22

5    DHE-RSA-AES128-GCM-SHA256    22

6    ECDHE-RSA-AES256-SHA384      19

7    ECDHE-RSA-AES256-SHA        19

8    ECDHE-RSA-AES128-SHA256      19

9    ECDHE-RSA-AES128-SHA        19

10    RC4-SHA                     16

11    DHE-RSA-AES256-SHA256        22

12    DHE-RSA-AES256-SHA          22

13    DHE-RSA-CAMELLIA256-SHA      22

14    AES256-GCM-SHA384           17

15    AES256-SHA256                17

16    AES256-SHA                   17

17    CAMELLIA256-SHA             17

18    DHE-RSA-AES128-SHA256       23

19    DHE-RSA-AES128-SHA           23

20   DHE-RSA-CAMELLIA128-SHA      22

22    AES128-SHA256                17

23    AES128-SHA                  17

24    CAMELLIA128-SHA              17

</pre>