StreamSec Tools 4.0 includes a highly interoperable clean room implementation of TLS 1.0, TLS 1.1 and TLS 1.2.

STANDARDS
Impelemted standards from the TLS charter include:

• The TLS Protocol Version 1.0 (RFC 2246)
• The TLS Protocol Version 1.1 (RFC 4346)
• The TLS Protocol Version 1.2 (RFC 5246)
• Server name indication (RFC 6066)
• Elliptic Curve Cryptography Cipher Suites (RFC 4492, RFC 7919, RFC 8996)
• AES GCM Cipher Suites (RFC 5288, RFC 5289)
• Secure Renegotiation (RFC 5746)
• Encrypt-then-MAC (RFC 7366)
• Prohobiting RC4 Cipher Suites (RFC 7465), by default, configurable
• Prevention of Protocol Downgrade Attacks (RFC 7507)
• Deprecating SSL 3.0 (RFC 7568)

CIPHER SUITES
Cipher suites might be configured based on preference for the constituent key agreement, signature, cipher amd hash algorithm.
RC4 Cipher Suites might and should be disabled through configuration, and are disabled by default. Using these cipher suites is strongly discouraged.

• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (C0,27)
• TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (C0,2F)
• TLS_RSA_WITH_AES_128_CBC_SHA256 (0,3C)
• TLS_DH_RSA_WITH_AES_128_CBC_SHA256 (0,3F)
• TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (0,67)
• TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0,9E)
• TLS_DH_RSA_WITH_AES_128_GCM_SHA256 (0,A0)
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (C0,13)
• TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (C0,23)
• TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 (C0,29)
• TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (C0,2B)
• TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (C0,30)
• TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 (C0,31)
• TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0,33)
• TLS_RSA_WITH_AES_256_CBC_SHA256 (0,3D)
• TLS_DH_DSS_WITH_AES_128_CBC_SHA256 (0,3E)
• TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 (0,40)
• TLS_ECDH_RSA_WITH_AES_128_CBC_SHA (0,51)
• TLS_DH_RSA_WITH_AES_256_CBC_SHA256 (0,69)
• TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0,6B)
• TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0,9F)
• TLS_DH_RSA_WITH_AES_256_GCM_SHA384 (0,A1)
• TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 (0,A2)
• TLS_DH_DSS_WITH_AES_128_GCM_SHA256 (0,A4)
• TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (C0,9)
• TLS_ECDH_RSA_WITH_AES_128_CBC_SHA (C0,E)
• TLS_ECDHE_RSA_WITH_RC4_128_SHA (C0,11)
• TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (C0,12)
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (C0,14)
• TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 (C0,25)
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (C0,28)
• TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (C0,2C)
• TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 (C0,2D)
• TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 (C0,32)
• TLS_RSA_WITH_RC4_128_MD5 (0,4)
• TLS_RSA_WITH_RC4_128_SHA (0,5)
• TLS_RSA_WITH_3DES_EDE_CBC_SHA (0,A)
• TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA (0,10)
• TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (0,16)
• TLS_RSA_WITH_AES_256_CBC_SHA (0,35)
• TLS_DH_RSA_WITH_AES_256_CBC_SHA (0,37)
• TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0,39)
• TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA (0,4B)
• TLS_ECDH_RSA_WITH_RC4_128_SHA (0,4E)
• TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA (0,50)
• TLS_ECDH_RSA_WITH_AES_256_CBC_SHA (0,52)
• TLS_DH_DSS_WITH_AES_256_CBC_SHA256 (0,68)
• TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 (0,6A)
• TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 (0,A3)
• TLS_DH_DSS_WITH_AES_256_GCM_SHA384 (0,A5)
• TLS_ECDHE_ECDSA_WITH_RC4_128_SHA (C0,7)
• TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA (C0,8)
• TLS_ECDH_RSA_WITH_RC4_128_SHA (C0,C)
• TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA (C0,D)
• TLS_ECDH_RSA_WITH_AES_256_CBC_SHA (C0,F)
• TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (C0,24)
• TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 (C0,2A)
• TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 (C0,2E)
• TLS_DH_DSS_WITH_AES_256_CBC_SHA (0,36)
• TLS_DHE_DSS_WITH_AES_256_CBC_SHA (0,38)
• TLS_ECDH_ECDSA_WITH_RC4_128_SHA (0,48)
• TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA (0,4A)
• TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA (0,4C)
• TLS_DHE_DSS_WITH_RC4_128_SHA (0,66)
• TLS_ECDH_ECDSA_WITH_RC4_128_SHA (C0,2)
• TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA (C0,3)
• TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 (C0,26)