The cipher algorithms used for key exchange and mass symmetric encryption are specified by the attributes ssl.client_ssl_ciphers and ssl.server_ssl_ciphers. These attributes contain a cipher specification as specified by the OpenSSL manuals, see the manual page ciphers(ssl) for further details.

The default set of ciphers can be set by using the following predefined variables.

Cipher specifications, as defined above, are sorted by key length. The cipher providing the best key length will be the most preferred one.