While studying the list of available TLS cipher suites, I noticed the following two:


They are defined in RFC 6655, Section 4.

Is there any reason why the "DHE" and "PSK" parts are switched around? Does this only have legacy/compatibility reasons or are there actual technical differences?

1 Answer 1


It's a mistake. See Errata 3987 for this RFC:

Section 4 says:

         CipherSuite TLS_PSK_DHE_WITH_AES_128_CCM_8 = {0xC0,0xAA}
         CipherSuite TLS_PSK_DHE_WITH_AES_256_CCM_8 = {0xC0,0xAB} 

It should say:

         CipherSuite TLS_DHE_PSK_WITH_AES_128_CCM_8 = {0xC0,0xAA}
         CipherSuite TLS_DHE_PSK_WITH_AES_256_CCM_8 = {0xC0,0xAB}

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .