/**

 * \file ssl_ciphersuites.c

 *

 * \brief SSL ciphersuites for Mbed TLS

 *

 *  Copyright The Mbed TLS Contributors

 *  SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later

 */

#include "common.h"

#if defined(MBEDTLS_SSL_TLS_C)

#include "mbedtls/platform.h"

#include "mbedtls/ssl_ciphersuites.h"

#include "mbedtls/ssl.h"

#include "ssl_misc.h"

#if defined(MBEDTLS_USE_PSA_CRYPTO)

#include "mbedtls/psa_util.h"

#endif

#include <string.h>

/*

 * Ordered from most preferred to least preferred in terms of security.

 *

 * Current rule (except weak and null which come last):

 * 1. By key exchange:

 *    Forward-secure non-PSK > forward-secure PSK > ECJPAKE > other non-PSK > other PSK

 * 2. By key length and cipher:

 *    ChaCha > AES-256 > Camellia-256 > ARIA-256 > AES-128 > Camellia-128 > ARIA-128

 * 3. By cipher mode when relevant GCM > CCM > CBC > CCM_8

 * 4. By hash function used when relevant

 * 5. By key exchange/auth again: EC > non-EC

 */

static const int ciphersuite_preference[] =

{

#if defined(MBEDTLS_SSL_CIPHERSUITES)

    MBEDTLS_SSL_CIPHERSUITES,

#else

#if defined(MBEDTLS_SSL_PROTO_TLS1_3)

    /* TLS 1.3 ciphersuites */

    MBEDTLS_TLS1_3_CHACHA20_POLY1305_SHA256,

    MBEDTLS_TLS1_3_AES_256_GCM_SHA384,

    MBEDTLS_TLS1_3_AES_128_GCM_SHA256,

    MBEDTLS_TLS1_3_AES_128_CCM_SHA256,

    MBEDTLS_TLS1_3_AES_128_CCM_8_SHA256,

#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */

    /* Chacha-Poly ephemeral suites */

    MBEDTLS_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,

    MBEDTLS_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256,

    /* All AES-256 ephemeral suites */

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,

    MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,

    MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM,

    MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CCM,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,

    MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,

    MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,

    MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,

    MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8,

    MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CCM_8,

    /* All CAMELLIA-256 ephemeral suites */

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384,

    MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384,

    MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,

    MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384,

    MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256,

    MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,

    /* All ARIA-256 ephemeral suites */

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384,

    MBEDTLS_TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384,

    MBEDTLS_TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384,

    MBEDTLS_TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384,

    MBEDTLS_TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384,

    /* All AES-128 ephemeral suites */

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,

    MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,

    MBEDTLS_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CCM,

    MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CCM,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,

    MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,

    MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,

    MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,

    MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8,

    MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CCM_8,

    /* All CAMELLIA-128 ephemeral suites */

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,

    MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256,

    MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,

    MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,

    MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,

    MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,

    /* All ARIA-128 ephemeral suites */

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256,

    MBEDTLS_TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256,

    MBEDTLS_TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256,

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256,

    MBEDTLS_TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256,

    MBEDTLS_TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256,

    /* The PSK ephemeral suites */

    MBEDTLS_TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256,

    MBEDTLS_TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256,

    MBEDTLS_TLS_DHE_PSK_WITH_AES_256_GCM_SHA384,

    MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CCM,

    MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384,

    MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA384,

    MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA,

    MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA,

    MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384,

    MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,

    MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,

    MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CCM_8,

    MBEDTLS_TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384,

    MBEDTLS_TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384,

    MBEDTLS_TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384,

    MBEDTLS_TLS_DHE_PSK_WITH_AES_128_GCM_SHA256,

    MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CCM,

    MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256,

    MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA256,

    MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA,

    MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA,

    MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256,

    MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,

    MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,

    MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CCM_8,

    MBEDTLS_TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256,

    MBEDTLS_TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256,

    MBEDTLS_TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256,

    /* The ECJPAKE suite */

    MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8,

    /* All AES-256 suites */

    MBEDTLS_TLS_RSA_WITH_AES_256_GCM_SHA384,

    MBEDTLS_TLS_RSA_WITH_AES_256_CCM,

    MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA256,

    MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA,

    MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,

    MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,

    MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,

    MBEDTLS_TLS_RSA_WITH_AES_256_CCM_8,

    /* All CAMELLIA-256 suites */

    MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384,

    MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256,

    MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA,

    MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384,

    MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,

    /* All ARIA-256 suites */

    MBEDTLS_TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384,

    MBEDTLS_TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384,

    MBEDTLS_TLS_RSA_WITH_ARIA_256_GCM_SHA384,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384,

    MBEDTLS_TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384,

    MBEDTLS_TLS_RSA_WITH_ARIA_256_CBC_SHA384,

    /* All AES-128 suites */

    MBEDTLS_TLS_RSA_WITH_AES_128_GCM_SHA256,

    MBEDTLS_TLS_RSA_WITH_AES_128_CCM,

    MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA256,

    MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA,

    MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,

    MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,

    MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,

    MBEDTLS_TLS_RSA_WITH_AES_128_CCM_8,

    /* All CAMELLIA-128 suites */

    MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256,

    MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256,

    MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA,

    MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256,

    MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,

    /* All ARIA-128 suites */

    MBEDTLS_TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256,

    MBEDTLS_TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256,

    MBEDTLS_TLS_RSA_WITH_ARIA_128_GCM_SHA256,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256,

    MBEDTLS_TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256,

    MBEDTLS_TLS_RSA_WITH_ARIA_128_CBC_SHA256,

    /* The RSA PSK suites */

    MBEDTLS_TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256,

    MBEDTLS_TLS_RSA_PSK_WITH_AES_256_GCM_SHA384,

    MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA384,

    MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA,

    MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384,

    MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384,

    MBEDTLS_TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384,

    MBEDTLS_TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384,

    MBEDTLS_TLS_RSA_PSK_WITH_AES_128_GCM_SHA256,

    MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA256,

    MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA,

    MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256,

    MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256,

    MBEDTLS_TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256,

    MBEDTLS_TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256,

    /* The PSK suites */

    MBEDTLS_TLS_PSK_WITH_CHACHA20_POLY1305_SHA256,

    MBEDTLS_TLS_PSK_WITH_AES_256_GCM_SHA384,

    MBEDTLS_TLS_PSK_WITH_AES_256_CCM,

    MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA384,

    MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA,

    MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384,

    MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384,

    MBEDTLS_TLS_PSK_WITH_AES_256_CCM_8,

    MBEDTLS_TLS_PSK_WITH_ARIA_256_GCM_SHA384,

    MBEDTLS_TLS_PSK_WITH_ARIA_256_CBC_SHA384,

    MBEDTLS_TLS_PSK_WITH_AES_128_GCM_SHA256,

    MBEDTLS_TLS_PSK_WITH_AES_128_CCM,

    MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA256,

    MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA,

    MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256,

    MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256,

    MBEDTLS_TLS_PSK_WITH_AES_128_CCM_8,

    MBEDTLS_TLS_PSK_WITH_ARIA_128_GCM_SHA256,

    MBEDTLS_TLS_PSK_WITH_ARIA_128_CBC_SHA256,

    /* NULL suites */

    MBEDTLS_TLS_ECDHE_ECDSA_WITH_NULL_SHA,

    MBEDTLS_TLS_ECDHE_RSA_WITH_NULL_SHA,

    MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA384,

    MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA256,

    MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA,

    MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA384,

    MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA256,

    MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA,

    MBEDTLS_TLS_RSA_WITH_NULL_SHA256,

    MBEDTLS_TLS_RSA_WITH_NULL_SHA,

    MBEDTLS_TLS_RSA_WITH_NULL_MD5,

    MBEDTLS_TLS_ECDH_RSA_WITH_NULL_SHA,

    MBEDTLS_TLS_ECDH_ECDSA_WITH_NULL_SHA,

    MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA384,

    MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA256,

    MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA,

    MBEDTLS_TLS_PSK_WITH_NULL_SHA384,

    MBEDTLS_TLS_PSK_WITH_NULL_SHA256,

    MBEDTLS_TLS_PSK_WITH_NULL_SHA,

#endif /* MBEDTLS_SSL_CIPHERSUITES */

    0

};

static const mbedtls_ssl_ciphersuite_t ciphersuite_definitions[] =

{

#if defined(MBEDTLS_SSL_PROTO_TLS1_3)

#if defined(MBEDTLS_SSL_HAVE_AES)

#if defined(MBEDTLS_SSL_HAVE_GCM)

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS1_3_AES_256_GCM_SHA384, "TLS1-3-AES-256-GCM-SHA384",

      MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384,

      MBEDTLS_KEY_EXCHANGE_NONE, /* Key exchange not part of ciphersuite in TLS 1.3 */

      0,

      MBEDTLS_SSL_VERSION_TLS1_3, MBEDTLS_SSL_VERSION_TLS1_3 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS1_3_AES_128_GCM_SHA256, "TLS1-3-AES-128-GCM-SHA256",

      MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256,

      MBEDTLS_KEY_EXCHANGE_NONE, /* Key exchange not part of ciphersuite in TLS 1.3 */

      0,

      MBEDTLS_SSL_VERSION_TLS1_3, MBEDTLS_SSL_VERSION_TLS1_3 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#endif /* MBEDTLS_SSL_HAVE_GCM */

#if defined(MBEDTLS_SSL_HAVE_CCM) && defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS1_3_AES_128_CCM_SHA256, "TLS1-3-AES-128-CCM-SHA256",

      MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256,

      MBEDTLS_KEY_EXCHANGE_NONE, /* Key exchange not part of ciphersuite in TLS 1.3 */

      0,

      MBEDTLS_SSL_VERSION_TLS1_3, MBEDTLS_SSL_VERSION_TLS1_3 },

    { MBEDTLS_TLS1_3_AES_128_CCM_8_SHA256, "TLS1-3-AES-128-CCM-8-SHA256",

      MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256,

      MBEDTLS_KEY_EXCHANGE_NONE, /* Key exchange not part of ciphersuite in TLS 1.3 */

      MBEDTLS_CIPHERSUITE_SHORT_TAG,

      MBEDTLS_SSL_VERSION_TLS1_3, MBEDTLS_SSL_VERSION_TLS1_3 },

#endif /* MBEDTLS_MD_CAN_SHA256 && MBEDTLS_SSL_HAVE_CCM */

#endif /* MBEDTLS_SSL_HAVE_AES */

#if defined(MBEDTLS_SSL_HAVE_CHACHAPOLY) && defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS1_3_CHACHA20_POLY1305_SHA256,

      "TLS1-3-CHACHA20-POLY1305-SHA256",

      MBEDTLS_CIPHER_CHACHA20_POLY1305, MBEDTLS_MD_SHA256,

      MBEDTLS_KEY_EXCHANGE_NONE, /* Key exchange not part of ciphersuite in TLS 1.3 */

      0,

      MBEDTLS_SSL_VERSION_TLS1_3, MBEDTLS_SSL_VERSION_TLS1_3 },

#endif /* MBEDTLS_SSL_HAVE_CHACHAPOLY && MBEDTLS_MD_CAN_SHA256 */

#endif /* MBEDTLS_SSL_PROTO_TLS1_3 */

#if defined(MBEDTLS_SSL_HAVE_CHACHAPOLY) && \

    defined(MBEDTLS_MD_CAN_SHA256) && \

    defined(MBEDTLS_SSL_PROTO_TLS1_2)

#if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED)

    { MBEDTLS_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,

      "TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256",

      MBEDTLS_CIPHER_CHACHA20_POLY1305, MBEDTLS_MD_SHA256,

      MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif

#if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,

      "TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256",

      MBEDTLS_CIPHER_CHACHA20_POLY1305, MBEDTLS_MD_SHA256,

      MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif

#if defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED)

    { MBEDTLS_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256,

      "TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256",

      MBEDTLS_CIPHER_CHACHA20_POLY1305, MBEDTLS_MD_SHA256,

      MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif

#if defined(MBEDTLS_KEY_EXCHANGE_PSK_ENABLED)

    { MBEDTLS_TLS_PSK_WITH_CHACHA20_POLY1305_SHA256,

      "TLS-PSK-WITH-CHACHA20-POLY1305-SHA256",

      MBEDTLS_CIPHER_CHACHA20_POLY1305, MBEDTLS_MD_SHA256,

      MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif

#if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED)

    { MBEDTLS_TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256,

      "TLS-ECDHE-PSK-WITH-CHACHA20-POLY1305-SHA256",

      MBEDTLS_CIPHER_CHACHA20_POLY1305, MBEDTLS_MD_SHA256,

      MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif

#if defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED)

    { MBEDTLS_TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256,

      "TLS-DHE-PSK-WITH-CHACHA20-POLY1305-SHA256",

      MBEDTLS_CIPHER_CHACHA20_POLY1305, MBEDTLS_MD_SHA256,

      MBEDTLS_KEY_EXCHANGE_DHE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif

#if defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED)

    { MBEDTLS_TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256,

      "TLS-RSA-PSK-WITH-CHACHA20-POLY1305-SHA256",

      MBEDTLS_CIPHER_CHACHA20_POLY1305, MBEDTLS_MD_SHA256,

      MBEDTLS_KEY_EXCHANGE_RSA_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif

#endif /* MBEDTLS_SSL_HAVE_CHACHAPOLY &&

          MBEDTLS_MD_CAN_SHA256 &&

          MBEDTLS_SSL_PROTO_TLS1_2 */

#if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED)

#if defined(MBEDTLS_SSL_HAVE_AES)

#if defined(MBEDTLS_MD_CAN_SHA1)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, "TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, "TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#endif /* MBEDTLS_MD_CAN_SHA1 */

#if defined(MBEDTLS_MD_CAN_SHA256)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, "TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, "TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256",

      MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, "TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, "TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384",

      MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_MD_CAN_SHA384 */

#if defined(MBEDTLS_SSL_HAVE_CCM)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM, "TLS-ECDHE-ECDSA-WITH-AES-256-CCM",

      MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8, "TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8",

      MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      MBEDTLS_CIPHERSUITE_SHORT_TAG,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CCM, "TLS-ECDHE-ECDSA-WITH-AES-128-CCM",

      MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8, "TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8",

      MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      MBEDTLS_CIPHERSUITE_SHORT_TAG,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CCM */

#endif /* MBEDTLS_SSL_HAVE_AES */

#if defined(MBEDTLS_SSL_HAVE_CAMELLIA)

#if defined(MBEDTLS_SSL_HAVE_CBC)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,

      "TLS-ECDHE-ECDSA-WITH-CAMELLIA-128-CBC-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,

      "TLS-ECDHE-ECDSA-WITH-CAMELLIA-256-CBC-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,

      "TLS-ECDHE-ECDSA-WITH-CAMELLIA-128-GCM-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384,

      "TLS-ECDHE-ECDSA-WITH-CAMELLIA-256-GCM-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_SSL_HAVE_CAMELLIA */

#if defined(MBEDTLS_CIPHER_NULL_CIPHER)

#if defined(MBEDTLS_MD_CAN_SHA1)

    { MBEDTLS_TLS_ECDHE_ECDSA_WITH_NULL_SHA, "TLS-ECDHE-ECDSA-WITH-NULL-SHA",

      MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,

      MBEDTLS_CIPHERSUITE_WEAK,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA1 */

#endif /* MBEDTLS_CIPHER_NULL_CIPHER */

#endif /* MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED */

#if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED)

#if defined(MBEDTLS_SSL_HAVE_AES)

#if defined(MBEDTLS_MD_CAN_SHA1)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, "TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, "TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#endif /* MBEDTLS_MD_CAN_SHA1 */

#if defined(MBEDTLS_MD_CAN_SHA256)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, "TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, "TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256",

      MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, "TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, "TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384",

      MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_AES */

#if defined(MBEDTLS_SSL_HAVE_CAMELLIA)

#if defined(MBEDTLS_SSL_HAVE_CBC)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,

      "TLS-ECDHE-RSA-WITH-CAMELLIA-128-CBC-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384,

      "TLS-ECDHE-RSA-WITH-CAMELLIA-256-CBC-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256,

      "TLS-ECDHE-RSA-WITH-CAMELLIA-128-GCM-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384,

      "TLS-ECDHE-RSA-WITH-CAMELLIA-256-GCM-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_SSL_HAVE_CAMELLIA */

#if defined(MBEDTLS_CIPHER_NULL_CIPHER)

#if defined(MBEDTLS_MD_CAN_SHA1)

    { MBEDTLS_TLS_ECDHE_RSA_WITH_NULL_SHA, "TLS-ECDHE-RSA-WITH-NULL-SHA",

      MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,

      MBEDTLS_CIPHERSUITE_WEAK,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA1 */

#endif /* MBEDTLS_CIPHER_NULL_CIPHER */

#endif /* MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED */

#if defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED)

#if defined(MBEDTLS_SSL_HAVE_AES)

#if defined(MBEDTLS_MD_CAN_SHA384) && \

    defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, "TLS-DHE-RSA-WITH-AES-256-GCM-SHA384",

      MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 && MBEDTLS_SSL_HAVE_GCM */

#if defined(MBEDTLS_MD_CAN_SHA256)

#if defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, "TLS-DHE-RSA-WITH-AES-128-GCM-SHA256",

      MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_GCM */

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, "TLS-DHE-RSA-WITH-AES-128-CBC-SHA256",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, "TLS-DHE-RSA-WITH-AES-256-CBC-SHA256",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_SSL_HAVE_CBC)

#if defined(MBEDTLS_MD_CAN_SHA1)

    { MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA, "TLS-DHE-RSA-WITH-AES-128-CBC-SHA",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA, "TLS-DHE-RSA-WITH-AES-256-CBC-SHA",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA1 */

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_CCM)

    { MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CCM, "TLS-DHE-RSA-WITH-AES-256-CCM",

      MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CCM_8, "TLS-DHE-RSA-WITH-AES-256-CCM-8",

      MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      MBEDTLS_CIPHERSUITE_SHORT_TAG,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CCM, "TLS-DHE-RSA-WITH-AES-128-CCM",

      MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CCM_8, "TLS-DHE-RSA-WITH-AES-128-CCM-8",

      MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      MBEDTLS_CIPHERSUITE_SHORT_TAG,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CCM */

#endif /* MBEDTLS_SSL_HAVE_AES */

#if defined(MBEDTLS_SSL_HAVE_CAMELLIA)

#if defined(MBEDTLS_SSL_HAVE_CBC)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256, "TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256, "TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA1)

    { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA, "TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA",

      MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA, "TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA",

      MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA1 */

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256, "TLS-DHE-RSA-WITH-CAMELLIA-128-GCM-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384, "TLS-DHE-RSA-WITH-CAMELLIA-256-GCM-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_DHE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_SSL_HAVE_CAMELLIA */

#endif /* MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED */

#if defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED)

#if defined(MBEDTLS_SSL_HAVE_AES)

#if defined(MBEDTLS_MD_CAN_SHA384) && \

    defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_RSA_WITH_AES_256_GCM_SHA384, "TLS-RSA-WITH-AES-256-GCM-SHA384",

      MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 && MBEDTLS_SSL_HAVE_GCM */

#if defined(MBEDTLS_MD_CAN_SHA256)

#if defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_RSA_WITH_AES_128_GCM_SHA256, "TLS-RSA-WITH-AES-128-GCM-SHA256",

      MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_GCM */

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA256, "TLS-RSA-WITH-AES-128-CBC-SHA256",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA256, "TLS-RSA-WITH-AES-256-CBC-SHA256",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA1)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA, "TLS-RSA-WITH-AES-128-CBC-SHA",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA, "TLS-RSA-WITH-AES-256-CBC-SHA",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#endif /* MBEDTLS_MD_CAN_SHA1 */

#if defined(MBEDTLS_SSL_HAVE_CCM)

    { MBEDTLS_TLS_RSA_WITH_AES_256_CCM, "TLS-RSA-WITH-AES-256-CCM",

      MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_RSA_WITH_AES_256_CCM_8, "TLS-RSA-WITH-AES-256-CCM-8",

      MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,

      MBEDTLS_CIPHERSUITE_SHORT_TAG,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_RSA_WITH_AES_128_CCM, "TLS-RSA-WITH-AES-128-CCM",

      MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_RSA_WITH_AES_128_CCM_8, "TLS-RSA-WITH-AES-128-CCM-8",

      MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,

      MBEDTLS_CIPHERSUITE_SHORT_TAG,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CCM */

#endif /* MBEDTLS_SSL_HAVE_AES */

#if defined(MBEDTLS_SSL_HAVE_CAMELLIA)

#if defined(MBEDTLS_SSL_HAVE_CBC)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256, "TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256, "TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA1)

    { MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA, "TLS-RSA-WITH-CAMELLIA-128-CBC-SHA",

      MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA, "TLS-RSA-WITH-CAMELLIA-256-CBC-SHA",

      MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA1 */

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256, "TLS-RSA-WITH-CAMELLIA-128-GCM-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384, "TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_SSL_HAVE_CAMELLIA */

#endif /* MBEDTLS_KEY_EXCHANGE_RSA_ENABLED */

#if defined(MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED)

#if defined(MBEDTLS_SSL_HAVE_AES)

#if defined(MBEDTLS_MD_CAN_SHA1)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, "TLS-ECDH-RSA-WITH-AES-128-CBC-SHA",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, "TLS-ECDH-RSA-WITH-AES-256-CBC-SHA",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#endif /* MBEDTLS_MD_CAN_SHA1 */

#if defined(MBEDTLS_MD_CAN_SHA256)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, "TLS-ECDH-RSA-WITH-AES-128-CBC-SHA256",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, "TLS-ECDH-RSA-WITH-AES-128-GCM-SHA256",

      MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, "TLS-ECDH-RSA-WITH-AES-256-CBC-SHA384",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, "TLS-ECDH-RSA-WITH-AES-256-GCM-SHA384",

      MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_AES */

#if defined(MBEDTLS_SSL_HAVE_CAMELLIA)

#if defined(MBEDTLS_SSL_HAVE_CBC)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256,

      "TLS-ECDH-RSA-WITH-CAMELLIA-128-CBC-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384,

      "TLS-ECDH-RSA-WITH-CAMELLIA-256-CBC-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256,

      "TLS-ECDH-RSA-WITH-CAMELLIA-128-GCM-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384,

      "TLS-ECDH-RSA-WITH-CAMELLIA-256-GCM-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_SSL_HAVE_CAMELLIA */

#if defined(MBEDTLS_CIPHER_NULL_CIPHER)

#if defined(MBEDTLS_MD_CAN_SHA1)

    { MBEDTLS_TLS_ECDH_RSA_WITH_NULL_SHA, "TLS-ECDH-RSA-WITH-NULL-SHA",

      MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,

      MBEDTLS_CIPHERSUITE_WEAK,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA1 */

#endif /* MBEDTLS_CIPHER_NULL_CIPHER */

#endif /* MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED */

#if defined(MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED)

#if defined(MBEDTLS_SSL_HAVE_AES)

#if defined(MBEDTLS_MD_CAN_SHA1)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, "TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, "TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#endif /* MBEDTLS_MD_CAN_SHA1 */

#if defined(MBEDTLS_MD_CAN_SHA256)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, "TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA256",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, "TLS-ECDH-ECDSA-WITH-AES-128-GCM-SHA256",

      MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

#if defined(MBEDTLS_SSL_HAVE_CBC)

    { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, "TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA384",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

    { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, "TLS-ECDH-ECDSA-WITH-AES-256-GCM-SHA384",

      MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_AES */

#if defined(MBEDTLS_SSL_HAVE_CAMELLIA)

#if defined(MBEDTLS_SSL_HAVE_CBC)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,

      "TLS-ECDH-ECDSA-WITH-CAMELLIA-128-CBC-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,

      "TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,

      "TLS-ECDH-ECDSA-WITH-CAMELLIA-128-GCM-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384,

      "TLS-ECDH-ECDSA-WITH-CAMELLIA-256-GCM-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_SSL_HAVE_CAMELLIA */

#if defined(MBEDTLS_CIPHER_NULL_CIPHER)

#if defined(MBEDTLS_MD_CAN_SHA1)

    { MBEDTLS_TLS_ECDH_ECDSA_WITH_NULL_SHA, "TLS-ECDH-ECDSA-WITH-NULL-SHA",

      MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,

      MBEDTLS_CIPHERSUITE_WEAK,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA1 */

#endif /* MBEDTLS_CIPHER_NULL_CIPHER */

#endif /* MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED */

#if defined(MBEDTLS_KEY_EXCHANGE_PSK_ENABLED)

#if defined(MBEDTLS_SSL_HAVE_AES)

#if defined(MBEDTLS_SSL_HAVE_GCM)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_PSK_WITH_AES_128_GCM_SHA256, "TLS-PSK-WITH-AES-128-GCM-SHA256",

      MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_PSK_WITH_AES_256_GCM_SHA384, "TLS-PSK-WITH-AES-256-GCM-SHA384",

      MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_GCM */

#if defined(MBEDTLS_SSL_HAVE_CBC)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA256, "TLS-PSK-WITH-AES-128-CBC-SHA256",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA384, "TLS-PSK-WITH-AES-256-CBC-SHA384",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#if defined(MBEDTLS_MD_CAN_SHA1)

    { MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA, "TLS-PSK-WITH-AES-128-CBC-SHA",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA, "TLS-PSK-WITH-AES-256-CBC-SHA",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA1 */

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_CCM)

    { MBEDTLS_TLS_PSK_WITH_AES_256_CCM, "TLS-PSK-WITH-AES-256-CCM",

      MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_PSK_WITH_AES_256_CCM_8, "TLS-PSK-WITH-AES-256-CCM-8",

      MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,

      MBEDTLS_CIPHERSUITE_SHORT_TAG,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_PSK_WITH_AES_128_CCM, "TLS-PSK-WITH-AES-128-CCM",

      MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_PSK_WITH_AES_128_CCM_8, "TLS-PSK-WITH-AES-128-CCM-8",

      MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,

      MBEDTLS_CIPHERSUITE_SHORT_TAG,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_SSL_HAVE_CCM */

#endif /* MBEDTLS_SSL_HAVE_AES */

#if defined(MBEDTLS_SSL_HAVE_CAMELLIA)

#if defined(MBEDTLS_SSL_HAVE_CBC)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256, "TLS-PSK-WITH-CAMELLIA-128-CBC-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384, "TLS-PSK-WITH-CAMELLIA-256-CBC-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_GCM)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256, "TLS-PSK-WITH-CAMELLIA-128-GCM-SHA256",

      MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384, "TLS-PSK-WITH-CAMELLIA-256-GCM-SHA384",

      MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_GCM */

#endif /* MBEDTLS_SSL_HAVE_CAMELLIA */

#endif /* MBEDTLS_KEY_EXCHANGE_PSK_ENABLED */

#if defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED)

#if defined(MBEDTLS_SSL_HAVE_AES)

#if defined(MBEDTLS_SSL_HAVE_GCM)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_DHE_PSK_WITH_AES_128_GCM_SHA256, "TLS-DHE-PSK-WITH-AES-128-GCM-SHA256",

      MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_DHE_PSK_WITH_AES_256_GCM_SHA384, "TLS-DHE-PSK-WITH-AES-256-GCM-SHA384",

      MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_DHE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#endif /* MBEDTLS_SSL_HAVE_GCM */

#if defined(MBEDTLS_SSL_HAVE_CBC)

#if defined(MBEDTLS_MD_CAN_SHA256)

    { MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA256, "TLS-DHE-PSK-WITH-AES-128-CBC-SHA256",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA256 */

#if defined(MBEDTLS_MD_CAN_SHA384)

    { MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA384, "TLS-DHE-PSK-WITH-AES-256-CBC-SHA384",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_DHE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA384 */

#if defined(MBEDTLS_MD_CAN_SHA1)

    { MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA, "TLS-DHE-PSK-WITH-AES-128-CBC-SHA",

      MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA, "TLS-DHE-PSK-WITH-AES-256-CBC-SHA",

      MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

#endif /* MBEDTLS_MD_CAN_SHA1 */

#endif /* MBEDTLS_SSL_HAVE_CBC */

#if defined(MBEDTLS_SSL_HAVE_CCM)

    { MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CCM, "TLS-DHE-PSK-WITH-AES-256-CCM",

      MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CCM_8, "TLS-DHE-PSK-WITH-AES-256-CCM-8",

      MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,

      MBEDTLS_CIPHERSUITE_SHORT_TAG,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },

    { MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CCM, "TLS-DHE-PSK-WITH-AES-128-CCM",

      MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,

      0,

      MBEDTLS_SSL_VERSION_TLS1_2, MBEDTLS_SSL_VERSION_TLS1_2 },