How you enable/disable specific ciphers will vary by the technology being used.
These ciphers are preferred where possible.
- AES 256 (or greater)
- RSA 2048 (or greater)
- SHA 256 (or greater)
These ciphers are acceptable, but not preferred
- AES 128
- 3DES
- RSA 1024
- SHA 128
These ciphers are specifically prohibited.
- RC2
- RC4
- MD5
- DES
- NULL ciphers
- Export grade ciphers (EXP)