> For the complete documentation index, see [llms.txt](https://docs.exavault.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.exavault.com/administration/supported-tls-ciphers.md).

# Supported TLS Ciphers

Ciphers are the encryption algorithms used to protect data in transit to and from ExaVault over Transport Layer Security (TLS), formerly called Secure Sockets Layer (SSL). These ciphers apply to HTTPS, WebDAV, and FTPS connections to the appliance.

The supported cipher set is specific to the ExaVault on-premise appliance and differs from the [Files.com cipher set](https://www.files.com/docs/encryption/ciphers). Use the list for the product you are connecting to.

SFTP does not use TLS. It uses SSH encryption and the algorithms listed under [Supported SSH Ciphers](/connection-methods/sftp/supported-ssh-ciphers.md).

## TLS v1.2 <a href="#cipher-list" id="cipher-list"></a>

ExaVault On Premise servers support the following ciphers for TLS v1.2:

`TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA`

`TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA`

`TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256`

`TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`

`TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA`

`TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384`

`TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384`

`TLS_ECDHE_RSA_WITH_RC4_128_SHA`

`TLS_RSA_WITH_3DES_EDE_CBC_SHA`

`TLS_RSA_WITH_AES_128_CBC_SHA`

`TLS_RSA_WITH_AES_128_CBC_SHA256`

`TLS_RSA_WITH_AES_128_GCM_SHA256`

`TLS_RSA_WITH_AES_256_CBC_SHA`

`TLS_RSA_WITH_AES_256_CBC_SHA256`

`TLS_RSA_WITH_AES_256_GCM_SHA384`

`TLS_RSA_WITH_CAMELLIA_128_CBC_SHA`

`TLS_RSA_WITH_CAMELLIA_256_CBC_SHA`

`TLS_RSA_WITH_IDEA_CBC_SHA`

`TLS_RSA_WITH_RC4_128_MD5`

`TLS_RSA_WITH_RC4_128_SHA`

`TLS_RSA_WITH_SEED_CBC_SHA`

## TLS v1.1

ExaVault On Premise servers support the following ciphers for TLS v1.1:

`TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA`

`TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA`

`TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA`

`TLS_ECDHE_RSA_WITH_RC4_128_SHA`

`TLS_RSA_WITH_3DES_EDE_CBC_SHA`

`TLS_RSA_WITH_AES_128_CBC_SHA`

`TLS_RSA_WITH_AES_256_CBC_SHA`

`TLS_RSA_WITH_CAMELLIA_128_CBC_SHA`

`TLS_RSA_WITH_CAMELLIA_256_CBC_SHA`

`TLS_RSA_WITH_IDEA_CBC_SHA`

`TLS_RSA_WITH_RC4_128_MD5`

`TLS_RSA_WITH_RC4_128_SHA`

`TLS_RSA_WITH_SEED_CBC_SHA`