> For the complete documentation index, see [llms.txt](https://docs.exavault.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.exavault.com/using-exavault/ciphers.md).

# Ciphers

Ciphers are the encryption algorithms used to protect data in transit to and from ExaVault over SSL and TLS.

### TLS v1.2 <a href="#cipher-list" id="cipher-list"></a>

ExaVault On Premise servers support the following ciphers for TLS v1.2:

`TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA`

`TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA`

`TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256`

`TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`

`TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA`

`TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384`

`TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384`

`TLS_ECDHE_RSA_WITH_RC4_128_SHA`

`TLS_RSA_WITH_3DES_EDE_CBC_SHA`

`TLS_RSA_WITH_AES_128_CBC_SHA`

`TLS_RSA_WITH_AES_128_CBC_SHA256`

`TLS_RSA_WITH_AES_128_GCM_SHA256`

`TLS_RSA_WITH_AES_256_CBC_SHA`

`TLS_RSA_WITH_AES_256_CBC_SHA256`

`TLS_RSA_WITH_AES_256_GCM_SHA384`

`TLS_RSA_WITH_CAMELLIA_128_CBC_SHA`

`TLS_RSA_WITH_CAMELLIA_256_CBC_SHA`

`TLS_RSA_WITH_IDEA_CBC_SHA`

`TLS_RSA_WITH_RC4_128_MD5`

`TLS_RSA_WITH_RC4_128_SHA`

`TLS_RSA_WITH_SEED_CBC_SHA`

### TLS v1.1

ExaVault On Premise servers support the following ciphers for TLS v1.1:

`TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA`

`TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA`

`TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA`

`TLS_ECDHE_RSA_WITH_RC4_128_SHA`

`TLS_RSA_WITH_3DES_EDE_CBC_SHA`

`TLS_RSA_WITH_AES_128_CBC_SHA`

`TLS_RSA_WITH_AES_256_CBC_SHA`

`TLS_RSA_WITH_CAMELLIA_128_CBC_SHA`

`TLS_RSA_WITH_CAMELLIA_256_CBC_SHA`

`TLS_RSA_WITH_IDEA_CBC_SHA`

`TLS_RSA_WITH_RC4_128_MD5`

`TLS_RSA_WITH_RC4_128_SHA`

`TLS_RSA_WITH_SEED_CBC_SHA`

### SFTP

SFTP does not use TLS or SSL. It implements its own encryption standards and cipher naming.

By default, ExaVault On Premise servers support the following algorithms for SFTP:

<table data-header-hidden><thead><tr><th width="281">Type</th><th>Algorithms</th></tr></thead><tbody><tr><td><strong>Key Exchange</strong></td><td><p><code>curve25519-sha256@libssh.org</code></p><p><code>ecdh-sha2-nistp256</code></p><p><code>ecdh-sha2-nistp384</code></p><p><code>ecdh-sha2-nistp521</code></p><p><code>diffie-hellman-group16-sha512</code></p><p><code>diffie-hellman-group-exchange-sha256</code></p><p><code>diffie-hellman-group14-sha256</code></p><p><code>diffie-hellman-group-exchange-sha1</code></p><p><code>diffie-hellman-group14-sha1</code></p><p><code>diffie-hellman-group1-sha1</code></p></td></tr><tr><td><strong>Server Host Key Algorithms</strong></td><td><code>ssh-rsa</code></td></tr><tr><td><strong>Encryption</strong></td><td><p><code>aes128-ctr</code></p><p><code>aes192-ctr</code></p><p><code>aes256-ctr</code></p></td></tr><tr><td><strong>MAC</strong></td><td><code>hmac-sha1</code></td></tr></tbody></table>