TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

TLS 1.2 | 256-bit + Forward Secrecy Recommended

Cipher Suite Details

Cipher Suite Name
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
Hex Value
0xCCA8
Decimal Code
52392
TLS Version
TLS 1.2
Security Level
256-bit + Forward Secrecy
Recommended
Yes

What is TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256?

TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 brings ChaCha20-Poly1305 to TLS 1.2, providing excellent performance on mobile devices without AES hardware acceleration. This cipher suite combines ECDHE for forward secrecy, RSA authentication, and ChaCha20-Poly1305 for encryption. Google introduced this cipher suite in 2013 (RFC 7905) to improve mobile browsing performance on ARM-based Android devices. Chrome and Android browsers prefer this cipher on mobile platforms. It is also resistant to timing attacks that affect some AES-GCM implementations. This cipher suite is widely supported and recommended for mobile-first websites.

Role in JA3 Fingerprinting

The TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 cipher suite is part of the TLS Client Hello that JA3 analyzes. Cipher suite order and selection are key indicators of browser type and version.

JA3 Format: TLS_VERSION,CIPHERS,EXTENSIONS,CURVES,POINT_FORMATS

Different browsers prioritize different cipher suites (Chrome prefers ChaCha20 on mobile, Firefox prioritizes AES-GCM, etc.), making cipher suite ordering a reliable fingerprint.

Test Your Cipher Suites

See which cipher suites your browser advertises, including TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256.