/work/mbedtls-2.28.8/include/mbedtls/ssl_ciphersuites.h
Line  | Count  | Source  | 
1  |  | /**  | 
2  |  |  * \file ssl_ciphersuites.h  | 
3  |  |  *  | 
4  |  |  * \brief SSL Ciphersuites for Mbed TLS  | 
5  |  |  */  | 
6  |  | /*  | 
7  |  |  *  Copyright The Mbed TLS Contributors  | 
8  |  |  *  SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later  | 
9  |  |  */  | 
10  |  | #ifndef MBEDTLS_SSL_CIPHERSUITES_H  | 
11  |  | #define MBEDTLS_SSL_CIPHERSUITES_H  | 
12  |  |  | 
13  |  | #if !defined(MBEDTLS_CONFIG_FILE)  | 
14  |  | #include "mbedtls/config.h"  | 
15  |  | #else  | 
16  |  | #include MBEDTLS_CONFIG_FILE  | 
17  |  | #endif  | 
18  |  |  | 
19  |  | #include "mbedtls/pk.h"  | 
20  |  | #include "mbedtls/cipher.h"  | 
21  |  | #include "mbedtls/md.h"  | 
22  |  |  | 
23  |  | #ifdef __cplusplus  | 
24  |  | extern "C" { | 
25  |  | #endif  | 
26  |  |  | 
27  |  | /*  | 
28  |  |  * Supported ciphersuites (Official IANA names)  | 
29  |  |  */  | 
30  |  | #define MBEDTLS_TLS_RSA_WITH_NULL_MD5                    0x01   /**< Weak! */  | 
31  |  | #define MBEDTLS_TLS_RSA_WITH_NULL_SHA                    0x02   /**< Weak! */  | 
32  |  |  | 
33  |  | #define MBEDTLS_TLS_RSA_WITH_RC4_128_MD5                 0x04  | 
34  |  | #define MBEDTLS_TLS_RSA_WITH_RC4_128_SHA                 0x05  | 
35  |  | #define MBEDTLS_TLS_RSA_WITH_DES_CBC_SHA                 0x09   /**< Weak! Not in TLS 1.2 */  | 
36  |  |  | 
37  |  | #define MBEDTLS_TLS_RSA_WITH_3DES_EDE_CBC_SHA            0x0A  | 
38  |  |  | 
39  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_DES_CBC_SHA             0x15   /**< Weak! Not in TLS 1.2 */  | 
40  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA        0x16  | 
41  |  |  | 
42  |  | #define MBEDTLS_TLS_PSK_WITH_NULL_SHA                    0x2C   /**< Weak! */  | 
43  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA                0x2D   /**< Weak! */  | 
44  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA                0x2E   /**< Weak! */  | 
45  |  | #define MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA             0x2F  | 
46  |  |  | 
47  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA         0x33  | 
48  |  | #define MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA             0x35  | 
49  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA         0x39  | 
50  |  |  | 
51  |  | #define MBEDTLS_TLS_RSA_WITH_NULL_SHA256                 0x3B   /**< Weak! */  | 
52  |  | #define MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA256          0x3C   /**< TLS 1.2 */  | 
53  |  | #define MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA256          0x3D   /**< TLS 1.2 */  | 
54  |  |  | 
55  |  | #define MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA        0x41  | 
56  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA    0x45  | 
57  |  |  | 
58  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA256      0x67   /**< TLS 1.2 */  | 
59  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA256      0x6B   /**< TLS 1.2 */  | 
60  |  |  | 
61  |  | #define MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA        0x84  | 
62  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA    0x88  | 
63  |  |  | 
64  |  | #define MBEDTLS_TLS_PSK_WITH_RC4_128_SHA                 0x8A  | 
65  |  | #define MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA            0x8B  | 
66  |  | #define MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA             0x8C  | 
67  |  | #define MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA             0x8D  | 
68  |  |  | 
69  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA             0x8E  | 
70  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA        0x8F  | 
71  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA         0x90  | 
72  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA         0x91  | 
73  |  |  | 
74  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA             0x92  | 
75  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA        0x93  | 
76  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA         0x94  | 
77  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA         0x95  | 
78  |  |  | 
79  |  | #define MBEDTLS_TLS_RSA_WITH_AES_128_GCM_SHA256          0x9C   /**< TLS 1.2 */  | 
80  |  | #define MBEDTLS_TLS_RSA_WITH_AES_256_GCM_SHA384          0x9D   /**< TLS 1.2 */  | 
81  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256      0x9E   /**< TLS 1.2 */  | 
82  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384      0x9F   /**< TLS 1.2 */  | 
83  |  |  | 
84  |  | #define MBEDTLS_TLS_PSK_WITH_AES_128_GCM_SHA256          0xA8   /**< TLS 1.2 */  | 
85  |  | #define MBEDTLS_TLS_PSK_WITH_AES_256_GCM_SHA384          0xA9   /**< TLS 1.2 */  | 
86  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_AES_128_GCM_SHA256      0xAA   /**< TLS 1.2 */  | 
87  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_AES_256_GCM_SHA384      0xAB   /**< TLS 1.2 */  | 
88  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_AES_128_GCM_SHA256      0xAC   /**< TLS 1.2 */  | 
89  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_AES_256_GCM_SHA384      0xAD   /**< TLS 1.2 */  | 
90  |  |  | 
91  |  | #define MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA256          0xAE  | 
92  |  | #define MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA384          0xAF  | 
93  |  | #define MBEDTLS_TLS_PSK_WITH_NULL_SHA256                 0xB0   /**< Weak! */  | 
94  |  | #define MBEDTLS_TLS_PSK_WITH_NULL_SHA384                 0xB1   /**< Weak! */  | 
95  |  |  | 
96  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA256      0xB2  | 
97  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA384      0xB3  | 
98  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA256             0xB4   /**< Weak! */  | 
99  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA384             0xB5   /**< Weak! */  | 
100  |  |  | 
101  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA256      0xB6  | 
102  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA384      0xB7  | 
103  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA256             0xB8   /**< Weak! */  | 
104  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA384             0xB9   /**< Weak! */  | 
105  |  |  | 
106  |  | #define MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256     0xBA   /**< TLS 1.2 */  | 
107  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 0xBE   /**< TLS 1.2 */  | 
108  |  |  | 
109  |  | #define MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256     0xC0   /**< TLS 1.2 */  | 
110  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 0xC4   /**< TLS 1.2 */  | 
111  |  |  | 
112  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_NULL_SHA             0xC001 /**< Weak! */  | 
113  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_RC4_128_SHA          0xC002 /**< Not in SSL3! */  | 
114  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA     0xC003 /**< Not in SSL3! */  | 
115  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA      0xC004 /**< Not in SSL3! */  | 
116  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA      0xC005 /**< Not in SSL3! */  | 
117  |  |  | 
118  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_NULL_SHA            0xC006 /**< Weak! */  | 
119  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_RC4_128_SHA         0xC007 /**< Not in SSL3! */  | 
120  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA    0xC008 /**< Not in SSL3! */  | 
121  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA     0xC009 /**< Not in SSL3! */  | 
122  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA     0xC00A /**< Not in SSL3! */  | 
123  |  |  | 
124  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_NULL_SHA               0xC00B /**< Weak! */  | 
125  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_RC4_128_SHA            0xC00C /**< Not in SSL3! */  | 
126  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA       0xC00D /**< Not in SSL3! */  | 
127  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA        0xC00E /**< Not in SSL3! */  | 
128  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA        0xC00F /**< Not in SSL3! */  | 
129  |  |  | 
130  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_NULL_SHA              0xC010 /**< Weak! */  | 
131  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_RC4_128_SHA           0xC011 /**< Not in SSL3! */  | 
132  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA      0xC012 /**< Not in SSL3! */  | 
133  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA       0xC013 /**< Not in SSL3! */  | 
134  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA       0xC014 /**< Not in SSL3! */  | 
135  |  |  | 
136  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256  0xC023 /**< TLS 1.2 */  | 
137  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384  0xC024 /**< TLS 1.2 */  | 
138  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256   0xC025 /**< TLS 1.2 */  | 
139  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384   0xC026 /**< TLS 1.2 */  | 
140  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256    0xC027 /**< TLS 1.2 */  | 
141  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384    0xC028 /**< TLS 1.2 */  | 
142  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256     0xC029 /**< TLS 1.2 */  | 
143  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384     0xC02A /**< TLS 1.2 */  | 
144  |  |  | 
145  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256  0xC02B /**< TLS 1.2 */  | 
146  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384  0xC02C /**< TLS 1.2 */  | 
147  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256   0xC02D /**< TLS 1.2 */  | 
148  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384   0xC02E /**< TLS 1.2 */  | 
149  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256    0xC02F /**< TLS 1.2 */  | 
150  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384    0xC030 /**< TLS 1.2 */  | 
151  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256     0xC031 /**< TLS 1.2 */  | 
152  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384     0xC032 /**< TLS 1.2 */  | 
153  |  |  | 
154  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA           0xC033 /**< Not in SSL3! */  | 
155  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA      0xC034 /**< Not in SSL3! */  | 
156  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA       0xC035 /**< Not in SSL3! */  | 
157  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA       0xC036 /**< Not in SSL3! */  | 
158  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256    0xC037 /**< Not in SSL3! */  | 
159  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384    0xC038 /**< Not in SSL3! */  | 
160  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA              0xC039 /**< Weak! No SSL3! */  | 
161  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA256           0xC03A /**< Weak! No SSL3! */  | 
162  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA384           0xC03B /**< Weak! No SSL3! */  | 
163  |  |  | 
164  |  | #define MBEDTLS_TLS_RSA_WITH_ARIA_128_CBC_SHA256         0xC03C /**< TLS 1.2 */  | 
165  |  | #define MBEDTLS_TLS_RSA_WITH_ARIA_256_CBC_SHA384         0xC03D /**< TLS 1.2 */  | 
166  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256     0xC044 /**< TLS 1.2 */  | 
167  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384     0xC045 /**< TLS 1.2 */  | 
168  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256 0xC048 /**< TLS 1.2 */  | 
169  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384 0xC049 /**< TLS 1.2 */  | 
170  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256  0xC04A /**< TLS 1.2 */  | 
171  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384  0xC04B /**< TLS 1.2 */  | 
172  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256   0xC04C /**< TLS 1.2 */  | 
173  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384   0xC04D /**< TLS 1.2 */  | 
174  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256    0xC04E /**< TLS 1.2 */  | 
175  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384    0xC04F /**< TLS 1.2 */  | 
176  |  | #define MBEDTLS_TLS_RSA_WITH_ARIA_128_GCM_SHA256         0xC050 /**< TLS 1.2 */  | 
177  |  | #define MBEDTLS_TLS_RSA_WITH_ARIA_256_GCM_SHA384         0xC051 /**< TLS 1.2 */  | 
178  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256     0xC052 /**< TLS 1.2 */  | 
179  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384     0xC053 /**< TLS 1.2 */  | 
180  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 0xC05C /**< TLS 1.2 */  | 
181  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 0xC05D /**< TLS 1.2 */  | 
182  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256  0xC05E /**< TLS 1.2 */  | 
183  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384  0xC05F /**< TLS 1.2 */  | 
184  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256   0xC060 /**< TLS 1.2 */  | 
185  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384   0xC061 /**< TLS 1.2 */  | 
186  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256    0xC062 /**< TLS 1.2 */  | 
187  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384    0xC063 /**< TLS 1.2 */  | 
188  |  | #define MBEDTLS_TLS_PSK_WITH_ARIA_128_CBC_SHA256         0xC064 /**< TLS 1.2 */  | 
189  |  | #define MBEDTLS_TLS_PSK_WITH_ARIA_256_CBC_SHA384         0xC065 /**< TLS 1.2 */  | 
190  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256     0xC066 /**< TLS 1.2 */  | 
191  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384     0xC067 /**< TLS 1.2 */  | 
192  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256     0xC068 /**< TLS 1.2 */  | 
193  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384     0xC069 /**< TLS 1.2 */  | 
194  |  | #define MBEDTLS_TLS_PSK_WITH_ARIA_128_GCM_SHA256         0xC06A /**< TLS 1.2 */  | 
195  |  | #define MBEDTLS_TLS_PSK_WITH_ARIA_256_GCM_SHA384         0xC06B /**< TLS 1.2 */  | 
196  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256     0xC06C /**< TLS 1.2 */  | 
197  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384     0xC06D /**< TLS 1.2 */  | 
198  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256     0xC06E /**< TLS 1.2 */  | 
199  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384     0xC06F /**< TLS 1.2 */  | 
200  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256   0xC070 /**< TLS 1.2 */  | 
201  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384   0xC071 /**< TLS 1.2 */  | 
202  |  |  | 
203  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 0xC072 /**< Not in SSL3! */  | 
204  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 0xC073 /**< Not in SSL3! */  | 
205  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256  0xC074 /**< Not in SSL3! */  | 
206  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384  0xC075 /**< Not in SSL3! */  | 
207  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256   0xC076 /**< Not in SSL3! */  | 
208  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384   0xC077 /**< Not in SSL3! */  | 
209  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256    0xC078 /**< Not in SSL3! */  | 
210  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384    0xC079 /**< Not in SSL3! */  | 
211  |  |  | 
212  |  | #define MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256         0xC07A /**< TLS 1.2 */  | 
213  |  | #define MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384         0xC07B /**< TLS 1.2 */  | 
214  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256     0xC07C /**< TLS 1.2 */  | 
215  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384     0xC07D /**< TLS 1.2 */  | 
216  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 0xC086 /**< TLS 1.2 */  | 
217  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 0xC087 /**< TLS 1.2 */  | 
218  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256  0xC088 /**< TLS 1.2 */  | 
219  |  | #define MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384  0xC089 /**< TLS 1.2 */  | 
220  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256   0xC08A /**< TLS 1.2 */  | 
221  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384   0xC08B /**< TLS 1.2 */  | 
222  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256    0xC08C /**< TLS 1.2 */  | 
223  |  | #define MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384    0xC08D /**< TLS 1.2 */  | 
224  |  |  | 
225  |  | #define MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256       0xC08E /**< TLS 1.2 */  | 
226  |  | #define MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384       0xC08F /**< TLS 1.2 */  | 
227  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256   0xC090 /**< TLS 1.2 */  | 
228  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384   0xC091 /**< TLS 1.2 */  | 
229  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256   0xC092 /**< TLS 1.2 */  | 
230  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384   0xC093 /**< TLS 1.2 */  | 
231  |  |  | 
232  |  | #define MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256       0xC094  | 
233  |  | #define MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384       0xC095  | 
234  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256   0xC096  | 
235  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384   0xC097  | 
236  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256   0xC098  | 
237  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384   0xC099  | 
238  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 0xC09A /**< Not in SSL3! */  | 
239  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 0xC09B /**< Not in SSL3! */  | 
240  |  |  | 
241  |  | #define MBEDTLS_TLS_RSA_WITH_AES_128_CCM                0xC09C  /**< TLS 1.2 */  | 
242  |  | #define MBEDTLS_TLS_RSA_WITH_AES_256_CCM                0xC09D  /**< TLS 1.2 */  | 
243  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CCM            0xC09E  /**< TLS 1.2 */  | 
244  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CCM            0xC09F  /**< TLS 1.2 */  | 
245  |  | #define MBEDTLS_TLS_RSA_WITH_AES_128_CCM_8              0xC0A0  /**< TLS 1.2 */  | 
246  |  | #define MBEDTLS_TLS_RSA_WITH_AES_256_CCM_8              0xC0A1  /**< TLS 1.2 */  | 
247  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CCM_8          0xC0A2  /**< TLS 1.2 */  | 
248  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CCM_8          0xC0A3  /**< TLS 1.2 */  | 
249  |  | #define MBEDTLS_TLS_PSK_WITH_AES_128_CCM                0xC0A4  /**< TLS 1.2 */  | 
250  |  | #define MBEDTLS_TLS_PSK_WITH_AES_256_CCM                0xC0A5  /**< TLS 1.2 */  | 
251  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CCM            0xC0A6  /**< TLS 1.2 */  | 
252  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CCM            0xC0A7  /**< TLS 1.2 */  | 
253  |  | #define MBEDTLS_TLS_PSK_WITH_AES_128_CCM_8              0xC0A8  /**< TLS 1.2 */  | 
254  |  | #define MBEDTLS_TLS_PSK_WITH_AES_256_CCM_8              0xC0A9  /**< TLS 1.2 */  | 
255  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CCM_8          0xC0AA  /**< TLS 1.2 */  | 
256  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CCM_8          0xC0AB  /**< TLS 1.2 */  | 
257  |  | /* The last two are named with PSK_DHE in the RFC, which looks like a typo */  | 
258  |  |  | 
259  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CCM        0xC0AC  /**< TLS 1.2 */  | 
260  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM        0xC0AD  /**< TLS 1.2 */  | 
261  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8      0xC0AE  /**< TLS 1.2 */  | 
262  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8      0xC0AF  /**< TLS 1.2 */  | 
263  |  |  | 
264  |  | #define MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8          0xC0FF  /**< experimental */  | 
265  |  |  | 
266  |  | /* RFC 7905 */  | 
267  |  | #define MBEDTLS_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256   0xCCA8 /**< TLS 1.2 */  | 
268  |  | #define MBEDTLS_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 0xCCA9 /**< TLS 1.2 */  | 
269  |  | #define MBEDTLS_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256     0xCCAA /**< TLS 1.2 */  | 
270  |  | #define MBEDTLS_TLS_PSK_WITH_CHACHA20_POLY1305_SHA256         0xCCAB /**< TLS 1.2 */  | 
271  |  | #define MBEDTLS_TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256   0xCCAC /**< TLS 1.2 */  | 
272  |  | #define MBEDTLS_TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256     0xCCAD /**< TLS 1.2 */  | 
273  |  | #define MBEDTLS_TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256     0xCCAE /**< TLS 1.2 */  | 
274  |  |  | 
275  |  | /* Reminder: update mbedtls_ssl_premaster_secret when adding a new key exchange.  | 
276  |  |  * Reminder: update MBEDTLS_KEY_EXCHANGE__xxx below  | 
277  |  |  */  | 
278  |  | typedef enum { | 
279  |  |     MBEDTLS_KEY_EXCHANGE_NONE = 0,  | 
280  |  |     MBEDTLS_KEY_EXCHANGE_RSA,  | 
281  |  |     MBEDTLS_KEY_EXCHANGE_DHE_RSA,  | 
282  |  |     MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,  | 
283  |  |     MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,  | 
284  |  |     MBEDTLS_KEY_EXCHANGE_PSK,  | 
285  |  |     MBEDTLS_KEY_EXCHANGE_DHE_PSK,  | 
286  |  |     MBEDTLS_KEY_EXCHANGE_RSA_PSK,  | 
287  |  |     MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,  | 
288  |  |     MBEDTLS_KEY_EXCHANGE_ECDH_RSA,  | 
289  |  |     MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,  | 
290  |  |     MBEDTLS_KEY_EXCHANGE_ECJPAKE,  | 
291  |  | } mbedtls_key_exchange_type_t;  | 
292  |  |  | 
293  |  | /* Key exchanges using a certificate */  | 
294  |  | #if defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED)           || \  | 
295  |  |     defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED)       || \  | 
296  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED)     || \  | 
297  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED)   || \  | 
298  |  |     defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED)       || \  | 
299  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED)      || \  | 
300  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED)  | 
301  |  | #define MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED  | 
302  |  | #endif  | 
303  |  |  | 
304  |  | /* Key exchanges allowing client certificate requests */  | 
305  |  | #if defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED)           ||       \  | 
306  |  |     defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED)       ||       \  | 
307  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED)      ||       \  | 
308  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED)     ||       \  | 
309  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED)    ||       \  | 
310  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED)  | 
311  |  | #define MBEDTLS_KEY_EXCHANGE_CERT_REQ_ALLOWED_ENABLED  | 
312  |  | #endif  | 
313  |  |  | 
314  |  | /* Key exchanges involving server signature in ServerKeyExchange */  | 
315  |  | #if defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED)       || \  | 
316  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED)     || \  | 
317  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED)  | 
318  |  | #define MBEDTLS_KEY_EXCHANGE_WITH_SERVER_SIGNATURE_ENABLED  | 
319  |  | #endif  | 
320  |  |  | 
321  |  | /* Key exchanges using ECDH */  | 
322  |  | #if defined(MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED)      || \  | 
323  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED)  | 
324  |  | #define MBEDTLS_KEY_EXCHANGE_SOME_ECDH_ENABLED  | 
325  |  | #endif  | 
326  |  |  | 
327  |  | /* Key exchanges that don't involve ephemeral keys */  | 
328  |  | #if defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED)           || \  | 
329  |  |     defined(MBEDTLS_KEY_EXCHANGE_PSK_ENABLED)           || \  | 
330  |  |     defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED)       || \  | 
331  |  |     defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDH_ENABLED)  | 
332  |  | #define MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED  | 
333  |  | #endif  | 
334  |  |  | 
335  |  | /* Key exchanges that involve ephemeral keys */  | 
336  |  | #if defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED)       || \  | 
337  |  |     defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED)       || \  | 
338  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED)     || \  | 
339  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED)     || \  | 
340  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED)   || \  | 
341  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)  | 
342  |  | #define MBEDTLS_KEY_EXCHANGE_SOME_PFS_ENABLED  | 
343  |  | #endif  | 
344  |  |  | 
345  |  | /* Key exchanges using a PSK */  | 
346  |  | #if defined(MBEDTLS_KEY_EXCHANGE_PSK_ENABLED)           || \  | 
347  |  |     defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED)       || \  | 
348  |  |     defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED)       || \  | 
349  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED)  | 
350  |  | #define MBEDTLS_KEY_EXCHANGE_SOME_PSK_ENABLED  | 
351  |  | #endif  | 
352  |  |  | 
353  |  | /* Key exchanges using DHE */  | 
354  |  | #if defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED)       || \  | 
355  |  |     defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED)  | 
356  |  | #define MBEDTLS_KEY_EXCHANGE_SOME_DHE_ENABLED  | 
357  |  | #endif  | 
358  |  |  | 
359  |  | /* Key exchanges using ECDHE */  | 
360  |  | #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED)     || \  | 
361  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED)   || \  | 
362  |  |     defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED)  | 
363  |  | #define MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED  | 
364  |  | #endif  | 
365  |  |  | 
366  |  | typedef struct mbedtls_ssl_ciphersuite_t mbedtls_ssl_ciphersuite_t;  | 
367  |  |  | 
368  |  | #define MBEDTLS_CIPHERSUITE_WEAK       0x01    /**< Weak ciphersuite flag  */  | 
369  |  | #define MBEDTLS_CIPHERSUITE_SHORT_TAG  0x02    /**< Short authentication tag,  | 
370  |  |                                                      eg for CCM_8 */  | 
371  |  | #define MBEDTLS_CIPHERSUITE_NODTLS     0x04    /**< Can't be used with DTLS */  | 
372  |  |  | 
373  |  | /**  | 
374  |  |  * \brief   This structure is used for storing ciphersuite information  | 
375  |  |  */  | 
376  |  | struct mbedtls_ssl_ciphersuite_t { | 
377  |  |     int id;  | 
378  |  |     const char *name;  | 
379  |  |  | 
380  |  |     mbedtls_cipher_type_t cipher;  | 
381  |  |     mbedtls_md_type_t mac;  | 
382  |  |     mbedtls_key_exchange_type_t key_exchange;  | 
383  |  |  | 
384  |  |     int min_major_ver;  | 
385  |  |     int min_minor_ver;  | 
386  |  |     int max_major_ver;  | 
387  |  |     int max_minor_ver;  | 
388  |  |  | 
389  |  |     unsigned char flags;  | 
390  |  | };  | 
391  |  |  | 
392  |  | const int *mbedtls_ssl_list_ciphersuites(void);  | 
393  |  |  | 
394  |  | const mbedtls_ssl_ciphersuite_t *mbedtls_ssl_ciphersuite_from_string(const char *ciphersuite_name);  | 
395  |  | const mbedtls_ssl_ciphersuite_t *mbedtls_ssl_ciphersuite_from_id(int ciphersuite_id);  | 
396  |  |  | 
397  |  | #if defined(MBEDTLS_PK_C)  | 
398  |  | mbedtls_pk_type_t mbedtls_ssl_get_ciphersuite_sig_pk_alg(const mbedtls_ssl_ciphersuite_t *info);  | 
399  |  | mbedtls_pk_type_t mbedtls_ssl_get_ciphersuite_sig_alg(const mbedtls_ssl_ciphersuite_t *info);  | 
400  |  | #endif  | 
401  |  |  | 
402  |  | int mbedtls_ssl_ciphersuite_uses_ec(const mbedtls_ssl_ciphersuite_t *info);  | 
403  |  | int mbedtls_ssl_ciphersuite_uses_psk(const mbedtls_ssl_ciphersuite_t *info);  | 
404  |  |  | 
405  |  | #if defined(MBEDTLS_KEY_EXCHANGE_SOME_PFS_ENABLED)  | 
406  |  | static inline int mbedtls_ssl_ciphersuite_has_pfs(const mbedtls_ssl_ciphersuite_t *info)  | 
407  | 0  | { | 
408  | 0  |     switch (info->key_exchange) { | 
409  | 0  |         case MBEDTLS_KEY_EXCHANGE_DHE_RSA:  | 
410  | 0  |         case MBEDTLS_KEY_EXCHANGE_DHE_PSK:  | 
411  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_RSA:  | 
412  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_PSK:  | 
413  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA:  | 
414  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECJPAKE:  | 
415  | 0  |             return 1;  | 
416  | 0  | 
  | 
417  | 0  |         default:  | 
418  | 0  |             return 0;  | 
419  | 0  |     }  | 
420  | 0  | } Unexecuted instantiation: bignum.c:mbedtls_ssl_ciphersuite_has_pfs Unexecuted instantiation: constant_time.c:mbedtls_ssl_ciphersuite_has_pfs Unexecuted instantiation: rsa.c:mbedtls_ssl_ciphersuite_has_pfs Unexecuted instantiation: base64.c:mbedtls_ssl_ciphersuite_has_pfs Unexecuted instantiation: cipher.c:mbedtls_ssl_ciphersuite_has_pfs  | 
421  |  | #endif /* MBEDTLS_KEY_EXCHANGE_SOME_PFS_ENABLED */  | 
422  |  |  | 
423  |  | #if defined(MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED)  | 
424  |  | static inline int mbedtls_ssl_ciphersuite_no_pfs(const mbedtls_ssl_ciphersuite_t *info)  | 
425  | 0  | { | 
426  | 0  |     switch (info->key_exchange) { | 
427  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDH_RSA:  | 
428  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA:  | 
429  | 0  |         case MBEDTLS_KEY_EXCHANGE_RSA:  | 
430  | 0  |         case MBEDTLS_KEY_EXCHANGE_PSK:  | 
431  | 0  |         case MBEDTLS_KEY_EXCHANGE_RSA_PSK:  | 
432  | 0  |             return 1;  | 
433  | 0  | 
  | 
434  | 0  |         default:  | 
435  | 0  |             return 0;  | 
436  | 0  |     }  | 
437  | 0  | } Unexecuted instantiation: bignum.c:mbedtls_ssl_ciphersuite_no_pfs Unexecuted instantiation: constant_time.c:mbedtls_ssl_ciphersuite_no_pfs Unexecuted instantiation: rsa.c:mbedtls_ssl_ciphersuite_no_pfs Unexecuted instantiation: base64.c:mbedtls_ssl_ciphersuite_no_pfs Unexecuted instantiation: cipher.c:mbedtls_ssl_ciphersuite_no_pfs  | 
438  |  | #endif /* MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED */  | 
439  |  |  | 
440  |  | #if defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDH_ENABLED)  | 
441  |  | static inline int mbedtls_ssl_ciphersuite_uses_ecdh(const mbedtls_ssl_ciphersuite_t *info)  | 
442  | 0  | { | 
443  | 0  |     switch (info->key_exchange) { | 
444  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDH_RSA:  | 
445  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA:  | 
446  | 0  |             return 1;  | 
447  | 0  | 
  | 
448  | 0  |         default:  | 
449  | 0  |             return 0;  | 
450  | 0  |     }  | 
451  | 0  | } Unexecuted instantiation: bignum.c:mbedtls_ssl_ciphersuite_uses_ecdh Unexecuted instantiation: constant_time.c:mbedtls_ssl_ciphersuite_uses_ecdh Unexecuted instantiation: rsa.c:mbedtls_ssl_ciphersuite_uses_ecdh Unexecuted instantiation: base64.c:mbedtls_ssl_ciphersuite_uses_ecdh Unexecuted instantiation: cipher.c:mbedtls_ssl_ciphersuite_uses_ecdh  | 
452  |  | #endif /* MBEDTLS_KEY_EXCHANGE_SOME_ECDH_ENABLED */  | 
453  |  |  | 
454  |  | static inline int mbedtls_ssl_ciphersuite_cert_req_allowed(const mbedtls_ssl_ciphersuite_t *info)  | 
455  | 0  | { | 
456  | 0  |     switch (info->key_exchange) { | 
457  | 0  |         case MBEDTLS_KEY_EXCHANGE_RSA:  | 
458  | 0  |         case MBEDTLS_KEY_EXCHANGE_DHE_RSA:  | 
459  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDH_RSA:  | 
460  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_RSA:  | 
461  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA:  | 
462  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA:  | 
463  | 0  |             return 1;  | 
464  | 0  | 
  | 
465  | 0  |         default:  | 
466  | 0  |             return 0;  | 
467  | 0  |     }  | 
468  | 0  | } Unexecuted instantiation: bignum.c:mbedtls_ssl_ciphersuite_cert_req_allowed Unexecuted instantiation: constant_time.c:mbedtls_ssl_ciphersuite_cert_req_allowed Unexecuted instantiation: rsa.c:mbedtls_ssl_ciphersuite_cert_req_allowed Unexecuted instantiation: base64.c:mbedtls_ssl_ciphersuite_cert_req_allowed Unexecuted instantiation: cipher.c:mbedtls_ssl_ciphersuite_cert_req_allowed  | 
469  |  |  | 
470  |  | static inline int mbedtls_ssl_ciphersuite_uses_srv_cert(const mbedtls_ssl_ciphersuite_t *info)  | 
471  | 0  | { | 
472  | 0  |     switch (info->key_exchange) { | 
473  | 0  |         case MBEDTLS_KEY_EXCHANGE_RSA:  | 
474  | 0  |         case MBEDTLS_KEY_EXCHANGE_RSA_PSK:  | 
475  | 0  |         case MBEDTLS_KEY_EXCHANGE_DHE_RSA:  | 
476  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDH_RSA:  | 
477  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_RSA:  | 
478  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA:  | 
479  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA:  | 
480  | 0  |             return 1;  | 
481  | 0  | 
  | 
482  | 0  |         default:  | 
483  | 0  |             return 0;  | 
484  | 0  |     }  | 
485  | 0  | } Unexecuted instantiation: bignum.c:mbedtls_ssl_ciphersuite_uses_srv_cert Unexecuted instantiation: constant_time.c:mbedtls_ssl_ciphersuite_uses_srv_cert Unexecuted instantiation: rsa.c:mbedtls_ssl_ciphersuite_uses_srv_cert Unexecuted instantiation: base64.c:mbedtls_ssl_ciphersuite_uses_srv_cert Unexecuted instantiation: cipher.c:mbedtls_ssl_ciphersuite_uses_srv_cert  | 
486  |  |  | 
487  |  | #if defined(MBEDTLS_KEY_EXCHANGE_SOME_DHE_ENABLED)  | 
488  |  | static inline int mbedtls_ssl_ciphersuite_uses_dhe(const mbedtls_ssl_ciphersuite_t *info)  | 
489  | 0  | { | 
490  | 0  |     switch (info->key_exchange) { | 
491  | 0  |         case MBEDTLS_KEY_EXCHANGE_DHE_RSA:  | 
492  | 0  |         case MBEDTLS_KEY_EXCHANGE_DHE_PSK:  | 
493  | 0  |             return 1;  | 
494  | 0  | 
  | 
495  | 0  |         default:  | 
496  | 0  |             return 0;  | 
497  | 0  |     }  | 
498  | 0  | } Unexecuted instantiation: bignum.c:mbedtls_ssl_ciphersuite_uses_dhe Unexecuted instantiation: constant_time.c:mbedtls_ssl_ciphersuite_uses_dhe Unexecuted instantiation: rsa.c:mbedtls_ssl_ciphersuite_uses_dhe Unexecuted instantiation: base64.c:mbedtls_ssl_ciphersuite_uses_dhe Unexecuted instantiation: cipher.c:mbedtls_ssl_ciphersuite_uses_dhe  | 
499  |  | #endif /* MBEDTLS_KEY_EXCHANGE_SOME_DHE_ENABLED) */  | 
500  |  |  | 
501  |  | #if defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED)  | 
502  |  | static inline int mbedtls_ssl_ciphersuite_uses_ecdhe(const mbedtls_ssl_ciphersuite_t *info)  | 
503  | 0  | { | 
504  | 0  |     switch (info->key_exchange) { | 
505  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA:  | 
506  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_RSA:  | 
507  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_PSK:  | 
508  | 0  |             return 1;  | 
509  | 0  | 
  | 
510  | 0  |         default:  | 
511  | 0  |             return 0;  | 
512  | 0  |     }  | 
513  | 0  | } Unexecuted instantiation: bignum.c:mbedtls_ssl_ciphersuite_uses_ecdhe Unexecuted instantiation: constant_time.c:mbedtls_ssl_ciphersuite_uses_ecdhe Unexecuted instantiation: rsa.c:mbedtls_ssl_ciphersuite_uses_ecdhe Unexecuted instantiation: base64.c:mbedtls_ssl_ciphersuite_uses_ecdhe Unexecuted instantiation: cipher.c:mbedtls_ssl_ciphersuite_uses_ecdhe  | 
514  |  | #endif /* MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED) */  | 
515  |  |  | 
516  |  | #if defined(MBEDTLS_KEY_EXCHANGE_WITH_SERVER_SIGNATURE_ENABLED)  | 
517  |  | static inline int mbedtls_ssl_ciphersuite_uses_server_signature(  | 
518  |  |     const mbedtls_ssl_ciphersuite_t *info)  | 
519  | 0  | { | 
520  | 0  |     switch (info->key_exchange) { | 
521  | 0  |         case MBEDTLS_KEY_EXCHANGE_DHE_RSA:  | 
522  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_RSA:  | 
523  | 0  |         case MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA:  | 
524  | 0  |             return 1;  | 
525  | 0  | 
  | 
526  | 0  |         default:  | 
527  | 0  |             return 0;  | 
528  | 0  |     }  | 
529  | 0  | } Unexecuted instantiation: bignum.c:mbedtls_ssl_ciphersuite_uses_server_signature Unexecuted instantiation: constant_time.c:mbedtls_ssl_ciphersuite_uses_server_signature Unexecuted instantiation: rsa.c:mbedtls_ssl_ciphersuite_uses_server_signature Unexecuted instantiation: base64.c:mbedtls_ssl_ciphersuite_uses_server_signature Unexecuted instantiation: cipher.c:mbedtls_ssl_ciphersuite_uses_server_signature  | 
530  |  | #endif /* MBEDTLS_KEY_EXCHANGE_WITH_SERVER_SIGNATURE_ENABLED */  | 
531  |  |  | 
532  |  | #ifdef __cplusplus  | 
533  |  | }  | 
534  |  | #endif  | 
535  |  |  | 
536  |  | #endif /* ssl_ciphersuites.h */  |