Changes

For details on the TLS handshake, see [https://tls.ulfheim.net/ The Illustrated TLS Connection].

For details on the TLS handshake, see [https://tls.ulfheim.net/ The Illustrated TLS Connection].

<br><br>

<br><br>

In the following table, the first column lists all ciphers which satisfy the cryptographic guidance provided in ITSP.40.111.  It is recommended that servers be configured to exclusively support the cipher suites listed in the second column, preferring them in the listed order:

In the following table, the first column lists all ciphers as found in cryptographic guidance provided in ITSP.40.111.  Departments are recommended to consider configurations that exclusively support the cipher suites listed in the second column, while preparing for CCCS updates to guidance for use of modern cipher suites of the third column (eliminating known vulnerable ciphers, and introducing approved TLS 1.3 cipher suites), preferring them in the listed order:

{| class="wikitable" border="1"  

{| class="wikitable" border="1"  

|-

|-