CipherSpecs and CipherSuites in IBM MQ
IBM MQ supports TLS 1.2 CipherSpecs, and RSA and Diffie-Hellman algorithms. However, we can enable deprecated CipherSpecs, if we need to do so.
See Enable CipherSpecs for information on:
- CipherSpecs supported by IBM MQ.
- How you enable deprecated SSL 3.0 and TLS 1.0 CipherSpecs.
IBM MQ supports the RSA and Diffie-Hellman key exchange and authentication algorithms. The size of the key used during the TLS handshake can depend on the digital certificate we use, but some CipherSpecs include a specification of the handshake key size. Larger handshake key sizes provide stronger authentication. With smaller key sizes, the handshake is faster.
Parent topic: TLS security protocols in IBM MQ
Related concepts