TLS 1.2RecommendedForward Secrecy
ECDHE-RSA-AES256-GCM-SHA384
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDHE-RSA-AES256-GCM-SHA384 is the 256-bit version of the recommended TLS 1.2 cipher suite. It provides stronger encryption for high-security and compliance-focused deployments. Often required by FIPS 140-2 compliant systems and government procurement standards.
Key Exchange
ECDHE
Authentication
RSA
Encryption
AES-256-GCM
MAC / Integrity
SHA-384 (AEAD – integrated)
Details
This cipher suite is identical to ECDHE-RSA-AES128-GCM-SHA256 except for the 256-bit AES key and SHA-384. The extra security margin is rarely needed for practical security but is mandated by some regulatory frameworks. Performance is slightly lower than the 128-bit variant on hardware without AES-NI.