Encryption Algorithms and Key Sizes for Transport Level Security

Section B.2.7 in the Message Service spec states:

ebXML Message Service Handlers MAY use any of the allowable encryption 
algorithms and key sizes specified within [RFC2246]. At a minimum ebXML Message 
Service Handlers MUST support the key sizes and algorithms necessary for 
backward compatibility with [SSL3].

The following cipher suites are defined in 
[RFC2246]:

CipherSuite                      
Is       
Key          
Cipher      
Hash
                             
Exportable 
Exchange

TLS_NULL_WITH_NULL_NULL               
* NULL           
NULL        
NULL
TLS_RSA_WITH_NULL_MD5                 
* RSA            
NULL         
MD5
TLS_RSA_WITH_NULL_SHA                 
* RSA            
NULL         
SHA
TLS_RSA_EXPORT_WITH_RC4_40_MD5        
* RSA_EXPORT     RC4_40       
MD5
TLS_RSA_WITH_RC4_128_MD5                
RSA            
RC4_128      
MD5
TLS_RSA_WITH_RC4_128_SHA                
RSA            
RC4_128      
SHA
TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5    * 
RSA_EXPORT     RC2_CBC_40   
MD5
TLS_RSA_WITH_IDEA_CBC_SHA               
RSA            
IDEA_CBC     
SHA
TLS_RSA_EXPORT_WITH_DES40_CBC_SHA     * 
RSA_EXPORT     DES40_CBC    
SHA
TLS_RSA_WITH_DES_CBC_SHA                
RSA            
DES_CBC      
SHA
TLS_RSA_WITH_3DES_EDE_CBC_SHA           
RSA            
3DES_EDE_CBC SHA
TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA  * 
DH_DSS_EXPORT  DES40_CBC    
SHA
TLS_DH_DSS_WITH_DES_CBC_SHA             
DH_DSS         
DES_CBC      
SHA
TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA        
DH_DSS         3DES_EDE_CBC 
SHA
TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA  * DH_RSA_EXPORT  
DES40_CBC    
SHA
TLS_DH_RSA_WITH_DES_CBC_SHA             
DH_RSA         
DES_CBC      
SHA
TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA        
DH_RSA         3DES_EDE_CBC 
SHA
TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA * DHE_DSS_EXPORT 
DES40_CBC    
SHA
TLS_DHE_DSS_WITH_DES_CBC_SHA            
DHE_DSS        
DES_CBC      
SHA
TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA       
DHE_DSS        3DES_EDE_CBC 
SHA
TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA * DHE_RSA_EXPORT 
DES40_CBC    
SHA
TLS_DHE_RSA_WITH_DES_CBC_SHA            
DHE_RSA        
DES_CBC      
SHA
TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA       
DHE_RSA        3DES_EDE_CBC 
SHA
TLS_DH_anon_EXPORT_WITH_RC4_40_MD5    * DH_anon_EXPORT 
RC4_40       
MD5
TLS_DH_anon_WITH_RC4_128_MD5            
DH_anon        
RC4_128      
MD5
TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA   
DH_anon        DES40_CBC    
SHA
TLS_DH_anon_WITH_DES_CBC_SHA            
DH_anon        
DES_CBC      
SHA
TLS_DH_anon_WITH_3DES_EDE_CBC_SHA       
DH_anon        3DES_EDE_CBC 
SHA

   * Indicates IsExportable is True

 

Do we have to add a CipherSuites element to the 
TransportSecurity element to indicate the cipher suites that are supported by 
the destination party?

 

-Arvola