Problem

Manager cipher suites

How the ciphers order is defined during a transfer between two CFT

Resolution

CFT prioritizes the cipher suites as displayed in the Order used column in the chapter 'Manager cipher suites'.

The user cannot order its preferred cipher suites.

The order is hard-coded for security reason.

Too often the users put the less secured cipher suites first.

The aim is to have a secured product even for less informed users.

The fact that AES-128 comes before AES-256 is due to a compromise between performance and security.