Overview#

Cipher_suites (TLS 1.3) is a list of the symmetric Key Cryptography cipher options supported by the client, specifically the record protection algorithm (including secret key length) and a hash to be used with HKDF, in descending order of client preference.

If the Cipher_suites list contains Cipher Suites the server does not recognize, support, or wish to use, the server MUST ignore those Cipher Suites, and process the remaining ones as usual. Values are defined in TLS 1.3 Appendix B.4.

If the client is attempting a PSK key establishment, it SHOULD advertise at least one Cipher Suites indicating a Hash associated with the PSK.

More Information#

There might be more information for this subject on one of the following:

• Cipher Suite
• ClientHello
• HelloRetryRequest
• ServerHello