Cipher Suite Explained Component by Component

Key Exchange How the keys are exchanged. Example :DH,DHE (Diffie Hillman Ephamarel 1.e short lived), ADH(Anonymous DH), ECDHE (Eliptic curve ), RSA Authentication This is digital signature algorithm. This is needed to confirm if the client is sending to the correct server. Server sends the certificate back to the client (That certificate contains the public key). Examples : RSA, ECDSA (Elliptic Curve Digital Signature Algorithm ) Bulk Encryption Cipher It is used to encrypt the data being sent. There are 2 kinds of Bult Ciphers: Stream Cipher: A stream cipher, which operates on data 1 byte at a time, converts a key to a keystream to encrypt data and produce ciphertext. The remote end converts the shared key to the same keystream and decrypts the plaintext data. Block Cipher: A block cipher operates on data in groups (or blocks) of bytes. Stream ciphers perform better than block ciphers. However, block ciphers provide better security. DES (56-bit), Triple-Data Encryption Standard (TDES)