SocketLabs Supported TLS Protocols

This article outlines the TLS protocols supported by SocketLabs. It details the specific TLS versions, ciphers, hashes and key-exchanges compatible with SocketLabs systems.

We are transitioning our services to newer, more secure, TLS protocols.  Presently our Portal and SocketLabs API's will support the following protocols:

Protocols

  • TLS 1.2
  • TLS 1.3

Ciphers

  • Triple DES 168
  • AES 128/128
  • AES 256/256

Hashes

  • MD5
  • SHA
  • SHA 256
  • SHA 384
  • SHA 512

Key-Exchanges

  • Diffie-Hellman
  • PKCS
  • ECDH

 These cipher suites use Microsoft's naming conventions.

Cipher Suites

  • TLS_AES_256_GCM_SHA384
  • TLS_AES_128_GCM_SHA256
  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

Our SMTP, Injection, and Engagement Tracking sites support the following protocols. These protocols will be removed in the near future:

Protocols

  • TLS 1.0  [Deprecated]
  • TLS 1.1  [Deprecated]
  • TLS 1.2

Ciphers

  • Triple DES 168
  • AES 128/128
  • AES 256/256

Hashes

  • MD5
  • SHA
  • SHA 256
  • SHA 384
  • SHA 512

Key-Exchanges

  • Diffie-Hellman
  • PKCS
  • ECDH

Cipher Suites

  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P521

  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384

  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256

  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P521

  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P384

  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256

  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P521

  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384

  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P256

  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P521

  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P384

  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256

  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P521

  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P384

  • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P521

  • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P384

  • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P256

  • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384_P521

  • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384_P384

  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P521

  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P384

  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P256

  • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P521

  • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P384

  • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P256

  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P521

  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P384

  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P256

  • TLS_RSA_WITH_AES_256_GCM_SHA384

  • TLS_RSA_WITH_AES_128_GCM_SHA256

  • TLS_RSA_WITH_AES_256_CBC_SHA256

  • TLS_RSA_WITH_AES_128_CBC_SHA256

  • TLS_RSA_WITH_AES_256_CBC_SHA

  • TLS_RSA_WITH_AES_128_CBC_SHA