TLS cipher suite lookup

Look up a TLS cipher suite by its 2-byte code or IANA name, on your device, for key exchange, cipher, MAC, and whether it is still recommended.

TLS cipher suite lookup accepts a 2-byte code, such as 0x1301, or its IANA name, then searches a 60-suite table from real ClientHello traffic. A match names cipher, MAC, authentication and key exchange, plus supported TLS versions and whether IANA still recommends it. The table falls short of IANA's roughly 370 registered codes, so an unlisted one returns its hex value.

Questions

What lookup formats does it accept?

A 2-byte hex code such as 0x1301 or 13,01, or the full IANA name such as TLS_AES_128_GCM_SHA256.

How complete is the table?

60 common suites that appear in real ClientHello and openssl ciphers output, not the roughly 370 code points IANA has ever registered.

What does a match show?

Key exchange, authentication, cipher, MAC, supported TLS versions, and whether the IANA registry still marks it recommended.

What happens with a code not in the table?

It still returns the parsed hex code, marked as not in the bundled table.

Does it fetch anything live from IANA?

No, the table is bundled in the tool itself; there is no network lookup.

Related Security tools

n→nX.509 certificate parserDecode a PEM or DER X.509 certificate into subject/issuer/validity/public key/extensions, parsing every certificate in a multi-cert PEM chain instead of only the first. Reports what each certificate says about itself. No chain building, no revocation check, no clock: it does not tell you whether to trust it.n→nCSR parserDecode a PEM or DER PKCS#10 certificate signing request into subject, public key and requested extensions (including subjectAltName, when present in an extensionRequest attribute). Reports the request, not a decision about whether it should be signed.n→nCRL parserDecode a PEM or DER Certificate Revocation List into issuer, update times, and each revoked serial with its revocation date/reason. Reports what the CRL states, not whether it is current, or whether a given certificate is on it if you have not checked.n→nJWK ↔ PEMConvert an RSA or EC key between JWK (JSON) and PEM (SPKI/PKCS8), via crypto.subtle import/export. Ed25519/OKP keys are not supported. On your device.n→nPEM ↔ HexConvert a PEM block to the raw hex of its DER payload, or wrap hex bytes back into PEM armor. On your device.n→nPublic key from cert / private keyExtract the public key from an X.509 certificate (always available; it is right there in the cert), or from an RSA/EC private key. RSA is always derivable (n/e are part of the private key itself); EC only when the key embeds its public point (SEC1's optional field; usually present, not guaranteed). This tool does not do elliptic-curve scalar multiplication to compute a missing one.n→nCertificate chain validatorCheck that each certificate in a PEM chain was signed by the next one, with a valid signature, a current validity window, and CA flags that line up.n→nPEM bundle splitSplit a PEM bundle, such as a certificate chain, into one file per block.