Skip to content

fix(docs): updated corrected cipher tables for workload configurations. #2324

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
artur-rossa-azion wants to merge 5 commits into
base: main
Choose a base branch
from
Open

fix(docs): updated corrected cipher tables for workload configurations. #2324

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
93afce1
Merge https://github.com/aziontech/docs into fix-ciphers
artur-rossa-azion Aug 28, 2026
89e0fb0
fix: Corrected TLS table of TLS options for workload
artur-rossa-azion Aug 28, 2026
e1a860a
fix: translation
artur-rossa-azion Aug 28, 2026
bc2e915
fix: translated content missing
artur-rossa-azion Aug 28, 2026
63bc461
Merge branch 'main' into fix-ciphers
artur-rossa-azion Sep 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
50 changes: 32 additions & 18 deletions src/content/docs/en/pages/main-menu/reference/secure/worklads/workloads.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -137,25 +137,39 @@ The cipher suite will determine which cryptographic algorithms will be used in t

The table below shows the ciphers available in each cipher suite.

| Cipher | TLSv1.2_2018 | TLSv1.2_2019 | TLSv1.2_2021 | TLSv1.3_2022 |
|----------------------------------|:------------:|:------------:|:------------:|:------------:|
| TLS_AES_128_GCM_SHA256 | ✔︎ | ✔︎ | ✔︎ | ✕ |
| TLS_AES_256_GCM_SHA384 | ✔︎ | ✔︎ | ✔︎ | ✕ |
| TLS_CHACHA20_POLY1305_SHA256 | ✔︎ | ✔︎ | ✔︎ | ✕ |
| ECDHE-ECDSA-AES128-GCM-SHA256 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-ECDSA-AES256-GCM-SHA384 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-ECDSA-CHACHA20-POLY1305 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-ECDSA-AES256-SHA384 | ✔︎ | ✔︎ | ✕ | ✕ |
| ECDHE-ECDSA-AES128-SHA256 | ✔︎ | ✔︎ | ✕ | ✕ |
| ECDHE-RSA-AES128-GCM-SHA256 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-RSA-AES256-GCM-SHA384 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-RSA-CHACHA20-POLY1305 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-RSA-AES128-SHA256 | ✔︎ | ✔︎ | ✕ | ✕ |
| ECDHE-RSA-AES256-SHA384 | ✔︎ | ✔︎ | ✕ | ✕ |
| AES128-GCM-SHA256 | ✔︎ | ✕ | ✕ | ✕ |
| AES256-GCM-SHA384 | ✔︎ | ✕ | ✕ | ✕ |
| AES128-SHA256 | ✔︎ | ✕ | ✕ | ✕ |

| TLS Version | Cipher | MLKEM (PQC) | TLSv1.2_2018 | TLSv1.2_2019 | TLSv1.2_2021 | TLSv1.3_2022 | Legacy_v2025Q1 | Compatible_v2025Q1 | Modern_v2025Q1 | Legacy_v2017Q1 |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| **TLS 1.3** | TLS_AES_256_GCM_SHA384 | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.3** | TLS_CHACHA20_POLY1305_SHA256 | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.3** | TLS_AES_128_GCM_SHA256 | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES256-GCM-SHA384 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES256-GCM-SHA384 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-CHACHA20-POLY1305 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-CHACHA20-POLY1305 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES128-GCM-SHA256 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES128-GCM-SHA256 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES256-SHA384 | ✕ | ✔︎ | ✔︎ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES256-SHA384 | ✕ | ✔︎ | ✔︎ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES128-SHA256 | ✕ | ✔︎ | ✔︎ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES128-SHA256 | ✕ | ✔︎ | ✔︎ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES256-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES128-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES256-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES128-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES256-GCM-SHA384 | ✕ | ✔︎ | ✕ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | AES128-GCM-SHA256 | ✕ | ✔︎ | ✕ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | AES256-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES128-SHA256 | ✕ | ✔︎ | ✕ | ✕ | ✕ | ✔︎ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES128-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES256-CCM | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES256-CCM8 | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES128-CCM | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES128-CCM8 | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |

:::note
**Post-Quantum Cryptography (MLKEM)**: TLS 1.3 ciphers support hybrid key exchange using ECDH/MLKEM (Module-Lattice-Based Key-Encapsulation Mechanism). This provides quantum-resistant encryption on TLS 1.3 connections. MLKEM is the NIST-standardized post-quantum algorithm (formerly known as Kyber).
:::
<LinkButton link="/en/documentation/products/guides/secure/ciphers/" label="Go to configure TLS cipher suite guide" severity="secondary" />

---
Expand Down
50 changes: 32 additions & 18 deletions ...ntent/docs/pt-br/pages/menu-principal/referencia/secure/workloads/workloads.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -139,24 +139,38 @@ O cipher suite determinará quais algoritmos criptográficos serão utilizados n

A tabela abaixo mostra os ciphers disponíveis em cada cipher suite.

| Cipher | TLSv1.2_2018 | TLSv1.2_2019 | TLSv1.2_2021 | TLSv1.3_2022 |
|----------------------------------|:------------:|:------------:|:------------:|:------------:|
| TLS_AES_128_GCM_SHA256 | ✔︎ | ✔︎ | ✔︎ | ✕ |
| TLS_AES_256_GCM_SHA384 | ✔︎ | ✔︎ | ✔︎ | ✕ |
| TLS_CHACHA20_POLY1305_SHA256 | ✔︎ | ✔︎ | ✔︎ | ✕ |
| ECDHE-ECDSA-AES128-GCM-SHA256 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-ECDSA-AES256-GCM-SHA384 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-ECDSA-CHACHA20-POLY1305 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-ECDSA-AES256-SHA384 | ✔︎ | ✔︎ | ✕ | ✕ |
| ECDHE-ECDSA-AES128-SHA256 | ✔︎ | ✔︎ | ✕ | ✕ |
| ECDHE-RSA-AES128-GCM-SHA256 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-RSA-AES256-GCM-SHA384 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-RSA-CHACHA20-POLY1305 | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| ECDHE-RSA-AES128-SHA256 | ✔︎ | ✔︎ | ✕ | ✕ |
| ECDHE-RSA-AES256-SHA384 | ✔︎ | ✔︎ | ✕ | ✕ |
| AES128-GCM-SHA256 | ✔︎ | ✕ | ✕ | ✕ |
| AES256-GCM-SHA384 | ✔︎ | ✕ | ✕ | ✕ |
| AES128-SHA256 | ✔︎ | ✕ | ✕ | ✕ |
| Versão TLS | Cifra | MLKEM (PQC) | TLSv1.2_2018 | TLSv1.2_2019 | TLSv1.2_2021 | TLSv1.3_2022 | Legacy_v2025Q1 | Compatible_v2025Q1 | Modern_v2025Q1 | Legacy_v2017Q1 |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| **TLS 1.3** | TLS_AES_256_GCM_SHA384 | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.3** | TLS_CHACHA20_POLY1305_SHA256 | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.3** | TLS_AES_128_GCM_SHA256 | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES256-GCM-SHA384 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES256-GCM-SHA384 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-CHACHA20-POLY1305 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-CHACHA20-POLY1305 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES128-GCM-SHA256 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES128-GCM-SHA256 | ✕ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES256-SHA384 | ✕ | ✔︎ | ✔︎ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES256-SHA384 | ✕ | ✔︎ | ✔︎ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES128-SHA256 | ✕ | ✔︎ | ✔︎ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES128-SHA256 | ✕ | ✔︎ | ✔︎ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES256-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-ECDSA-AES128-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES256-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | ECDHE-RSA-AES128-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES256-GCM-SHA384 | ✕ | ✔︎ | ✕ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | AES128-GCM-SHA256 | ✕ | ✔︎ | ✕ | ✕ | ✕ | ✔︎ | ✔︎ | ✕ | ✔︎ |
| **TLS 1.2** | AES256-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES128-SHA256 | ✕ | ✔︎ | ✕ | ✕ | ✕ | ✔︎ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES128-SHA | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES256-CCM | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES256-CCM8 | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES128-CCM | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |
| **TLS 1.2** | AES128-CCM8 | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✕ | ✔︎ |

:::note
**Criptografia Pós-Quântica (MLKEM)**: As cifras TLS 1.3 suportam troca de chaves híbrida usando ECDH/MLKEM (Module-Lattice-Based Key-Encapsulation Mechanism). Isso fornece criptografia resistente a quantum em conexões TLS 1.3. MLKEM é o algoritmo pós-quântico padronizado pelo NIST (anteriormente conhecido como Kyber).
:::

<LinkButton link="/en/documentation/products/guides/secure/ciphers/" label="ir para o guia de configuração de cipher suite TLS" severity="secondary" />

Expand Down
Loading