anchor.diff:      block_decipher(fun(Key, IV, T) ->
   			   crypto:des_cbc_decrypt(Key, IV, T)
   		   end, CipherState, HashSz, Fragment);
  -decipher(?DES40, HashSz, CipherState, Fragment) ->
  -    block_decipher(fun(Key, IV, T) ->
  -			   crypto:des_cbc_decrypt(Key, IV, T)
  -		   end, CipherState, HashSz, Fragment);
  +%% decipher(?DES40, HashSz, CipherState, Fragment) ->
  +%%     block_decipher(fun(Key, IV, T) ->
  +%% 			   crypto:des_cbc_decrypt(Key, IV, T)
  +%% 		   end, CipherState, HashSz, Fragment);
   decipher(?'3DES', HashSz, CipherState, Fragment) ->
       block_decipher(fun(<<K1:8/binary, K2:8/binary, K3:8/binary>>, IV, T) ->
   			   crypto:des3_cbc_decrypt(K1, K2, K3, IV, T)
  
positive.code: openssl_suite("RC4-MD5") -> 
      ?TLS_RSA_WITH_RC4_128_MD5;
  %% TODO: Do we want to support this?
  openssl_suite("EXP1024-RC4-MD5") ->
      ?TLS_RSA_EXPORT1024_WITH_RC4_56_MD5;
  openssl_suite("EXP1024-RC2-CBC-MD5") ->
      ?TLS_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5;
  openssl_suite("EXP1024-DES-CBC-SHA") ->
      ?TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA;
  openssl_suite("EXP1024-DHE-DSS-DES-CBC-SHA") ->
      ?TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA;
  openssl_suite("EXP1024-RC4-SHA") ->
      ?TLS_RSA_EXPORT1024_WITH_RC4_56_SHA;
  openssl_suite("EXP1024-DHE-DSS-RC4-SHA") ->
      ?TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA;
  openssl_suite("DHE-DSS-RC4-SHA") ->
      ?TLS_DHE_DSS_WITH_RC4_128_SHA;
  
  openssl_suite("EDH-RSA-DES-CBC-SHA") ->
      ?TLS_DHE_RSA_WITH_DES_CBC_SHA;
  openssl_suite("DES-CBC-SHA") ->
      ?TLS_RSA_WITH_DES_CBC_SHA;
  openssl_suite("EXP-EDH-RSA-DES-CBC-SHA") ->
      ?TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA;
  openssl_suite("EXP-EDH-DSS-DES-CBC-SHA") ->
      ?TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA;
  openssl_suite("EXP-DES-CBC-SHA") ->
      ?TLS_RSA_EXPORT_WITH_DES40_CBC_SHA;
  openssl_suite("EXP-RC2-CBC-MD5") ->
      ?TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5;
  openssl_suite("EXP-RC4-MD5") -> 
      ?TLS_RSA_EXPORT_WITH_RC4_40_MD5.
  
  openssl_suite_name(?TLS_DHE_RSA_WITH_AES_256_CBC_SHA) ->
      "DHE-RSA-AES256-SHA";
  
negative.code: %%
  %% Description: Returns a security parameters record where the
  %% cipher values has been updated according to <CipherSuite> 
  %% Note: Currently not supported suites are commented away.
  %% They should be supported or removed in the future.
  %%-------------------------------------------------------------------
  %% TLS v1.1 suites
  suite_definition(?TLS_NULL_WITH_NULL_NULL) ->
      {null, null, null, ignore};
  %% suite_definition(?TLS_RSA_WITH_NULL_MD5) ->
  %%     {rsa, null, md5, ignore};
  %% suite_definition(?TLS_RSA_WITH_NULL_SHA) ->
  %%     {rsa, null, sha, ignore};	
  suite_definition(?TLS_RSA_WITH_RC4_128_MD5) ->	
      {rsa, rc4_128, md5, no_export};
  suite_definition(?TLS_RSA_WITH_RC4_128_SHA) ->	
      {rsa, rc4_128, sha, no_export};
  %% suite_definition(?TLS_RSA_WITH_IDEA_CBC_SHA) -> 
  %%     {rsa, idea_cbc, sha, no_export};
  suite_definition(?TLS_RSA_WITH_DES_CBC_SHA) ->	
      {rsa, des_cbc, sha, no_export}; 
  suite_definition(?TLS_RSA_WITH_3DES_EDE_CBC_SHA) ->
      {rsa, '3des_ede_cbc', sha, no_export}; 
  %% suite_definition(?TLS_DH_DSS_WITH_DES_CBC_SHA) ->
  %%     {dh_dss, des_cbc, sha, no_export};
  %% suite_definition(?TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA) ->
  %%     {dh_dss, '3des_ede_cbc', sha, no_export};
  %% suite_definition(?TLS_DH_RSA_WITH_DES_CBC_SHA) ->
  %%     {dh_rsa, des_cbc, sha, no_export};
  %% suite_definition(?TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA) ->
  %%     {dh_rsa, '3des_ede_cbc', sha, no_export};
  suite_definition(?TLS_DHE_DSS_WITH_DES_CBC_SHA) ->
      {dhe_dss, des_cbc, sha, no_export};
  suite_definition(?TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA) ->
  