IBM Support

Do elliptic curve (EC) ciphers require the TLSV1.2 protocol?

Question & Answer


Question

We are implementing elliptic curve (EC) ciphers in AT-TLS. Do elliptic curve ciphers require the implementation of the TLSV1.2 protocol?

Answer

Not all EC ciphers require TLSV1.2. The EC ciphers that fall in the range C001 - C014 are compatible with TLSV1.0, TLSV1.1 or TLSV1.2.

However, EC ciphers that fall in the range C023 - C032 require TLSV1.2. Those EC ciphers will not work with TLSV1.0 or TLSV1.1.

The above information is documented in the V2R1 SSL Programming book, in Table 17: Cipher suite definitions for SSL V3, TLS V1.0, TLS V1.1, and TLS V1.2 by supported protocol, symmetric algorithm, and message authentication algorithm. (http://publibz.boulder.ibm.com/epubs/pdf/gsk2aa00.pdf)

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSSN3L","label":"z\/OS Communications Server"},"Platform":[{"code":"PF035","label":"z\/OS"}],"Component":"","Version":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]

Product Synonym

ZOSCS COMMSERVER

Document Information

Modified date:
10 April 2018

UID

dwa1256832