TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

TLS 1.2 | 128-bit + Forward Secrecy Recommended

Cipher Suite Details

Cipher Suite Name
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Hex Value
0xC02F
Decimal Code
49199
TLS Version
TLS 1.2
Security Level
128-bit + Forward Secrecy
Recommended
Yes

What is TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256?

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 is the most common TLS 1.2 cipher suite, providing perfect forward secrecy through ECDHE (Elliptic Curve Diffie-Hellman Ephemeral) key exchange. RSA is used for server authentication (certificate signature). AES-128-GCM provides authenticated encryption. Forward secrecy ensures that compromise of the server's private key does not compromise past session keys. This cipher suite is supported by all modern browsers and servers. It is the recommended choice for TLS 1.2, offering strong security and excellent performance. However, TLS 1.3 cipher suites are preferred when available.

Role in JA3 Fingerprinting

The TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher suite is part of the TLS Client Hello that JA3 analyzes. Cipher suite order and selection are key indicators of browser type and version.

JA3 Format: TLS_VERSION,CIPHERS,EXTENSIONS,CURVES,POINT_FORMATS

Different browsers prioritize different cipher suites (Chrome prefers ChaCha20 on mobile, Firefox prioritizes AES-GCM, etc.), making cipher suite ordering a reliable fingerprint.

Test Your Cipher Suites

See which cipher suites your browser advertises, including TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256.