Prefer specific encryption cipher algorithms for TLS: registry value PreferSlowCiphers (Chrome)UserHKCU\Software\Policies\Google\Chrome
- Policy ID
- PreferSlowCiphers
- Scope
- Computer Configuration, User Configuration
- Supported on
- Microsoft Windows 7 or later
- Source
- Google Chrome Policy Templates (version 156.0.8078.80)
- Category
- Google › Google Chrome › Cryptography compliance policies
Registry
PreferSlowCiphers
REG_SZUserComputer…\Software\Policies\Google\ChromeHKCU\Software\Policies\Google\Chrome Current key
HKLM\Software\Policies\Google\Chrome
HKLM\Software\Policies\Google\Chrome
- Enabled value
- Depends on the option value
- Element
- Prefer specific encryption cipher algorithms for TLS
| Item | Stored value |
|---|---|
| Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 | cnsa |
| Use Google Chrome's default cipher order | default |
Apply with .reg · CMD · PowerShell
UserPer-account setting
.reg
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Google\Chrome] ; Options (use only one) ; Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 "PreferSlowCiphers"="cnsa" ; Use Google Chrome's default cipher order "PreferSlowCiphers"="default"
CMD
:: Options (use only one) :: Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 reg add "HKCU\Software\Policies\Google\Chrome" /v "PreferSlowCiphers" /t REG_SZ /d "cnsa" /f :: Use Google Chrome's default cipher order reg add "HKCU\Software\Policies\Google\Chrome" /v "PreferSlowCiphers" /t REG_SZ /d "default" /f
PowerShell
# Common: create the key New-Item -Path 'HKCU:\Software\Policies\Google\Chrome' -Force | Out-Null # Options (use only one) # Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'PreferSlowCiphers' -PropertyType String -Value 'cnsa' -Force | Out-Null # Use Google Chrome's default cipher order New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'PreferSlowCiphers' -PropertyType String -Value 'default' -Force | Out-Null
ComputerMachine-wide setting
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome] ; Options (use only one) ; Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 "PreferSlowCiphers"="cnsa" ; Use Google Chrome's default cipher order "PreferSlowCiphers"="default"
CMD
:: Options (use only one) :: Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 reg add "HKLM\Software\Policies\Google\Chrome" /v "PreferSlowCiphers" /t REG_SZ /d "cnsa" /f :: Use Google Chrome's default cipher order reg add "HKLM\Software\Policies\Google\Chrome" /v "PreferSlowCiphers" /t REG_SZ /d "default" /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\Software\Policies\Google\Chrome' -Force | Out-Null # Options (use only one) # Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0 New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'PreferSlowCiphers' -PropertyType String -Value 'cnsa' -Force | Out-Null # Use Google Chrome's default cipher order New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'PreferSlowCiphers' -PropertyType String -Value 'default' -Force | Out-Null