ssl_ciphersuites.c 79 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841
  1. /*
  2. * Copyright (C) 2015-2018 Alibaba Group Holding Limited
  3. */
  4. #if !defined(MBEDTLS_CONFIG_FILE)
  5. #include "mbedtls/config.h"
  6. #else
  7. #include MBEDTLS_CONFIG_FILE
  8. #endif
  9. #if defined(MBEDTLS_SSL_TLS_C)
  10. #if defined(MBEDTLS_PLATFORM_C)
  11. #include "mbedtls/platform.h"
  12. #else
  13. #include <stdlib.h>
  14. #endif
  15. #include "mbedtls/ssl_ciphersuites.h"
  16. #include "mbedtls/ssl.h"
  17. #include <string.h>
  18. /*
  19. * Ordered from most preferred to least preferred in terms of security.
  20. *
  21. * Current rule (except rc4, weak and null which come last):
  22. * 1. By key exchange:
  23. * Forward-secure non-PSK > forward-secure PSK > ECJPAKE > other non-PSK > other PSK
  24. * 2. By key length and cipher:
  25. * AES-256 > Camellia-256 > AES-128 > Camellia-128 > 3DES
  26. * 3. By cipher mode when relevant GCM > CCM > CBC > CCM_8
  27. * 4. By hash function used when relevant
  28. * 5. By key exchange/auth again: EC > non-EC
  29. */
  30. static const int ciphersuite_preference[] =
  31. {
  32. #if defined(MBEDTLS_SSL_CIPHERSUITES)
  33. MBEDTLS_SSL_CIPHERSUITES,
  34. #else
  35. /* All AES-256 ephemeral suites */
  36. MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
  37. MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
  38. MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,
  39. MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM,
  40. MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CCM,
  41. MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,
  42. MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
  43. MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,
  44. MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
  45. MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
  46. MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
  47. MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8,
  48. MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CCM_8,
  49. /* All CAMELLIA-256 ephemeral suites */
  50. MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384,
  51. MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384,
  52. MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384,
  53. MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,
  54. MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384,
  55. MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256,
  56. MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
  57. /* All AES-128 ephemeral suites */
  58. MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
  59. MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
  60. MBEDTLS_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,
  61. MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CCM,
  62. MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CCM,
  63. MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
  64. MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
  65. MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,
  66. MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
  67. MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
  68. MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA,
  69. MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8,
  70. MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CCM_8,
  71. /* All CAMELLIA-128 ephemeral suites */
  72. MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,
  73. MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256,
  74. MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256,
  75. MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,
  76. MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
  77. MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
  78. MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
  79. /* All remaining >= 128-bit ephemeral suites */
  80. MBEDTLS_TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,
  81. MBEDTLS_TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,
  82. MBEDTLS_TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,
  83. /* The PSK ephemeral suites */
  84. MBEDTLS_TLS_DHE_PSK_WITH_AES_256_GCM_SHA384,
  85. MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CCM,
  86. MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384,
  87. MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA384,
  88. MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA,
  89. MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA,
  90. MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384,
  91. MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
  92. MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
  93. MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CCM_8,
  94. MBEDTLS_TLS_DHE_PSK_WITH_AES_128_GCM_SHA256,
  95. MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CCM,
  96. MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256,
  97. MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA256,
  98. MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA,
  99. MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA,
  100. MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256,
  101. MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
  102. MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
  103. MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CCM_8,
  104. MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA,
  105. MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA,
  106. /* The ECJPAKE suite */
  107. MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8,
  108. /* All AES-256 suites */
  109. MBEDTLS_TLS_RSA_WITH_AES_256_GCM_SHA384,
  110. MBEDTLS_TLS_RSA_WITH_AES_256_CCM,
  111. MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA256,
  112. MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA,
  113. MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,
  114. MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,
  115. MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,
  116. MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,
  117. MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384,
  118. MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,
  119. MBEDTLS_TLS_RSA_WITH_AES_256_CCM_8,
  120. /* All CAMELLIA-256 suites */
  121. MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384,
  122. MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256,
  123. MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA,
  124. MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384,
  125. MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384,
  126. MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384,
  127. MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,
  128. /* All AES-128 suites */
  129. MBEDTLS_TLS_RSA_WITH_AES_128_GCM_SHA256,
  130. MBEDTLS_TLS_RSA_WITH_AES_128_CCM,
  131. MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA256,
  132. MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA,
  133. MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,
  134. MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,
  135. MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,
  136. MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,
  137. MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,
  138. MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,
  139. MBEDTLS_TLS_RSA_WITH_AES_128_CCM_8,
  140. /* All CAMELLIA-128 suites */
  141. MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256,
  142. MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256,
  143. MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA,
  144. MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256,
  145. MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256,
  146. MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,
  147. MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,
  148. /* All remaining >= 128-bit suites */
  149. MBEDTLS_TLS_RSA_WITH_3DES_EDE_CBC_SHA,
  150. MBEDTLS_TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,
  151. MBEDTLS_TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,
  152. /* The RSA PSK suites */
  153. MBEDTLS_TLS_RSA_PSK_WITH_AES_256_GCM_SHA384,
  154. MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA384,
  155. MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA,
  156. MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384,
  157. MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384,
  158. MBEDTLS_TLS_RSA_PSK_WITH_AES_128_GCM_SHA256,
  159. MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA256,
  160. MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA,
  161. MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256,
  162. MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256,
  163. MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA,
  164. /* The PSK suites */
  165. MBEDTLS_TLS_PSK_WITH_AES_256_GCM_SHA384,
  166. MBEDTLS_TLS_PSK_WITH_AES_256_CCM,
  167. MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA384,
  168. MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA,
  169. MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384,
  170. MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384,
  171. MBEDTLS_TLS_PSK_WITH_AES_256_CCM_8,
  172. MBEDTLS_TLS_PSK_WITH_AES_128_GCM_SHA256,
  173. MBEDTLS_TLS_PSK_WITH_AES_128_CCM,
  174. MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA256,
  175. MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA,
  176. MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256,
  177. MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256,
  178. MBEDTLS_TLS_PSK_WITH_AES_128_CCM_8,
  179. MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA,
  180. /* RC4 suites */
  181. MBEDTLS_TLS_ECDHE_ECDSA_WITH_RC4_128_SHA,
  182. MBEDTLS_TLS_ECDHE_RSA_WITH_RC4_128_SHA,
  183. MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA,
  184. MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA,
  185. MBEDTLS_TLS_RSA_WITH_RC4_128_SHA,
  186. MBEDTLS_TLS_RSA_WITH_RC4_128_MD5,
  187. MBEDTLS_TLS_ECDH_RSA_WITH_RC4_128_SHA,
  188. MBEDTLS_TLS_ECDH_ECDSA_WITH_RC4_128_SHA,
  189. MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA,
  190. MBEDTLS_TLS_PSK_WITH_RC4_128_SHA,
  191. /* Weak suites */
  192. MBEDTLS_TLS_DHE_RSA_WITH_DES_CBC_SHA,
  193. MBEDTLS_TLS_RSA_WITH_DES_CBC_SHA,
  194. /* NULL suites */
  195. MBEDTLS_TLS_ECDHE_ECDSA_WITH_NULL_SHA,
  196. MBEDTLS_TLS_ECDHE_RSA_WITH_NULL_SHA,
  197. MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA384,
  198. MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA256,
  199. MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA,
  200. MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA384,
  201. MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA256,
  202. MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA,
  203. MBEDTLS_TLS_RSA_WITH_NULL_SHA256,
  204. MBEDTLS_TLS_RSA_WITH_NULL_SHA,
  205. MBEDTLS_TLS_RSA_WITH_NULL_MD5,
  206. MBEDTLS_TLS_ECDH_RSA_WITH_NULL_SHA,
  207. MBEDTLS_TLS_ECDH_ECDSA_WITH_NULL_SHA,
  208. MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA384,
  209. MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA256,
  210. MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA,
  211. MBEDTLS_TLS_PSK_WITH_NULL_SHA384,
  212. MBEDTLS_TLS_PSK_WITH_NULL_SHA256,
  213. MBEDTLS_TLS_PSK_WITH_NULL_SHA,
  214. #endif /* MBEDTLS_SSL_CIPHERSUITES */
  215. 0
  216. };
  217. static const mbedtls_ssl_ciphersuite_t ciphersuite_definitions[] =
  218. {
  219. #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED)
  220. #if defined(MBEDTLS_AES_C)
  221. #if defined(MBEDTLS_SHA1_C)
  222. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  223. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, "TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA",
  224. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  225. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  226. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  227. 0 },
  228. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, "TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA",
  229. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  230. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  231. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  232. 0 },
  233. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  234. #endif /* MBEDTLS_SHA1_C */
  235. #if defined(MBEDTLS_SHA256_C)
  236. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  237. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, "TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256",
  238. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  239. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  240. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  241. 0 },
  242. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  243. #if defined(MBEDTLS_GCM_C)
  244. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, "TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256",
  245. MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  246. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  247. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  248. 0 },
  249. #endif /* MBEDTLS_GCM_C */
  250. #endif /* MBEDTLS_SHA256_C */
  251. #if defined(MBEDTLS_SHA512_C)
  252. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  253. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, "TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384",
  254. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  255. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  256. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  257. 0 },
  258. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  259. #if defined(MBEDTLS_GCM_C)
  260. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, "TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384",
  261. MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  262. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  263. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  264. 0 },
  265. #endif /* MBEDTLS_GCM_C */
  266. #endif /* MBEDTLS_SHA512_C */
  267. #if defined(MBEDTLS_CCM_C)
  268. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM, "TLS-ECDHE-ECDSA-WITH-AES-256-CCM",
  269. MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  270. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  271. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  272. 0 },
  273. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8, "TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8",
  274. MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  275. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  276. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  277. MBEDTLS_CIPHERSUITE_SHORT_TAG },
  278. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CCM, "TLS-ECDHE-ECDSA-WITH-AES-128-CCM",
  279. MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  280. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  281. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  282. 0 },
  283. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8, "TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8",
  284. MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  285. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  286. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  287. MBEDTLS_CIPHERSUITE_SHORT_TAG },
  288. #endif /* MBEDTLS_CCM_C */
  289. #endif /* MBEDTLS_AES_C */
  290. #if defined(MBEDTLS_CAMELLIA_C)
  291. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  292. #if defined(MBEDTLS_SHA256_C)
  293. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256, "TLS-ECDHE-ECDSA-WITH-CAMELLIA-128-CBC-SHA256",
  294. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  295. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  296. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  297. 0 },
  298. #endif /* MBEDTLS_SHA256_C */
  299. #if defined(MBEDTLS_SHA512_C)
  300. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384, "TLS-ECDHE-ECDSA-WITH-CAMELLIA-256-CBC-SHA384",
  301. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  302. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  303. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  304. 0 },
  305. #endif /* MBEDTLS_SHA512_C */
  306. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  307. #if defined(MBEDTLS_GCM_C)
  308. #if defined(MBEDTLS_SHA256_C)
  309. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256, "TLS-ECDHE-ECDSA-WITH-CAMELLIA-128-GCM-SHA256",
  310. MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  311. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  312. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  313. 0 },
  314. #endif /* MBEDTLS_SHA256_C */
  315. #if defined(MBEDTLS_SHA512_C)
  316. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384, "TLS-ECDHE-ECDSA-WITH-CAMELLIA-256-GCM-SHA384",
  317. MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  318. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  319. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  320. 0 },
  321. #endif /* MBEDTLS_SHA512_C */
  322. #endif /* MBEDTLS_GCM_C */
  323. #endif /* MBEDTLS_CAMELLIA_C */
  324. #if defined(MBEDTLS_DES_C)
  325. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  326. #if defined(MBEDTLS_SHA1_C)
  327. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, "TLS-ECDHE-ECDSA-WITH-3DES-EDE-CBC-SHA",
  328. MBEDTLS_CIPHER_DES_EDE3_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  329. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  330. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  331. 0 },
  332. #endif /* MBEDTLS_SHA1_C */
  333. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  334. #endif /* MBEDTLS_DES_C */
  335. #if defined(MBEDTLS_ARC4_C)
  336. #if defined(MBEDTLS_SHA1_C)
  337. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, "TLS-ECDHE-ECDSA-WITH-RC4-128-SHA",
  338. MBEDTLS_CIPHER_ARC4_128, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  339. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  340. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  341. MBEDTLS_CIPHERSUITE_NODTLS },
  342. #endif /* MBEDTLS_SHA1_C */
  343. #endif /* MBEDTLS_ARC4_C */
  344. #if defined(MBEDTLS_CIPHER_NULL_CIPHER)
  345. #if defined(MBEDTLS_SHA1_C)
  346. { MBEDTLS_TLS_ECDHE_ECDSA_WITH_NULL_SHA, "TLS-ECDHE-ECDSA-WITH-NULL-SHA",
  347. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA,
  348. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  349. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  350. MBEDTLS_CIPHERSUITE_WEAK },
  351. #endif /* MBEDTLS_SHA1_C */
  352. #endif /* MBEDTLS_CIPHER_NULL_CIPHER */
  353. #endif /* MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED */
  354. #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED)
  355. #if defined(MBEDTLS_AES_C)
  356. #if defined(MBEDTLS_SHA1_C)
  357. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  358. { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, "TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA",
  359. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  360. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  361. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  362. 0 },
  363. { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, "TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA",
  364. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  365. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  366. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  367. 0 },
  368. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  369. #endif /* MBEDTLS_SHA1_C */
  370. #if defined(MBEDTLS_SHA256_C)
  371. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  372. { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, "TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256",
  373. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  374. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  375. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  376. 0 },
  377. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  378. #if defined(MBEDTLS_GCM_C)
  379. { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, "TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256",
  380. MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  381. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  382. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  383. 0 },
  384. #endif /* MBEDTLS_GCM_C */
  385. #endif /* MBEDTLS_SHA256_C */
  386. #if defined(MBEDTLS_SHA512_C)
  387. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  388. { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, "TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384",
  389. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  390. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  391. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  392. 0 },
  393. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  394. #if defined(MBEDTLS_GCM_C)
  395. { MBEDTLS_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, "TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384",
  396. MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  397. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  398. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  399. 0 },
  400. #endif /* MBEDTLS_GCM_C */
  401. #endif /* MBEDTLS_SHA512_C */
  402. #endif /* MBEDTLS_AES_C */
  403. #if defined(MBEDTLS_CAMELLIA_C)
  404. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  405. #if defined(MBEDTLS_SHA256_C)
  406. { MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256, "TLS-ECDHE-RSA-WITH-CAMELLIA-128-CBC-SHA256",
  407. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  408. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  409. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  410. 0 },
  411. #endif /* MBEDTLS_SHA256_C */
  412. #if defined(MBEDTLS_SHA512_C)
  413. { MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384, "TLS-ECDHE-RSA-WITH-CAMELLIA-256-CBC-SHA384",
  414. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  415. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  416. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  417. 0 },
  418. #endif /* MBEDTLS_SHA512_C */
  419. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  420. #if defined(MBEDTLS_GCM_C)
  421. #if defined(MBEDTLS_SHA256_C)
  422. { MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256, "TLS-ECDHE-RSA-WITH-CAMELLIA-128-GCM-SHA256",
  423. MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  424. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  425. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  426. 0 },
  427. #endif /* MBEDTLS_SHA256_C */
  428. #if defined(MBEDTLS_SHA512_C)
  429. { MBEDTLS_TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384, "TLS-ECDHE-RSA-WITH-CAMELLIA-256-GCM-SHA384",
  430. MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  431. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  432. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  433. 0 },
  434. #endif /* MBEDTLS_SHA512_C */
  435. #endif /* MBEDTLS_GCM_C */
  436. #endif /* MBEDTLS_CAMELLIA_C */
  437. #if defined(MBEDTLS_DES_C)
  438. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  439. #if defined(MBEDTLS_SHA1_C)
  440. { MBEDTLS_TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, "TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA",
  441. MBEDTLS_CIPHER_DES_EDE3_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  442. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  443. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  444. 0 },
  445. #endif /* MBEDTLS_SHA1_C */
  446. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  447. #endif /* MBEDTLS_DES_C */
  448. #if defined(MBEDTLS_ARC4_C)
  449. #if defined(MBEDTLS_SHA1_C)
  450. { MBEDTLS_TLS_ECDHE_RSA_WITH_RC4_128_SHA, "TLS-ECDHE-RSA-WITH-RC4-128-SHA",
  451. MBEDTLS_CIPHER_ARC4_128, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  452. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  453. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  454. MBEDTLS_CIPHERSUITE_NODTLS },
  455. #endif /* MBEDTLS_SHA1_C */
  456. #endif /* MBEDTLS_ARC4_C */
  457. #if defined(MBEDTLS_CIPHER_NULL_CIPHER)
  458. #if defined(MBEDTLS_SHA1_C)
  459. { MBEDTLS_TLS_ECDHE_RSA_WITH_NULL_SHA, "TLS-ECDHE-RSA-WITH-NULL-SHA",
  460. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_RSA,
  461. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  462. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  463. MBEDTLS_CIPHERSUITE_WEAK },
  464. #endif /* MBEDTLS_SHA1_C */
  465. #endif /* MBEDTLS_CIPHER_NULL_CIPHER */
  466. #endif /* MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED */
  467. #if defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED)
  468. #if defined(MBEDTLS_AES_C)
  469. #if defined(MBEDTLS_SHA512_C) && defined(MBEDTLS_GCM_C)
  470. { MBEDTLS_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, "TLS-DHE-RSA-WITH-AES-256-GCM-SHA384",
  471. MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  472. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  473. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  474. 0 },
  475. #endif /* MBEDTLS_SHA512_C && MBEDTLS_GCM_C */
  476. #if defined(MBEDTLS_SHA256_C)
  477. #if defined(MBEDTLS_GCM_C)
  478. { MBEDTLS_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, "TLS-DHE-RSA-WITH-AES-128-GCM-SHA256",
  479. MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  480. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  481. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  482. 0 },
  483. #endif /* MBEDTLS_GCM_C */
  484. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  485. { MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, "TLS-DHE-RSA-WITH-AES-128-CBC-SHA256",
  486. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  487. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  488. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  489. 0 },
  490. { MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, "TLS-DHE-RSA-WITH-AES-256-CBC-SHA256",
  491. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  492. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  493. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  494. 0 },
  495. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  496. #endif /* MBEDTLS_SHA256_C */
  497. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  498. #if defined(MBEDTLS_SHA1_C)
  499. { MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CBC_SHA, "TLS-DHE-RSA-WITH-AES-128-CBC-SHA",
  500. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  501. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  502. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  503. 0 },
  504. { MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CBC_SHA, "TLS-DHE-RSA-WITH-AES-256-CBC-SHA",
  505. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  506. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  507. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  508. 0 },
  509. #endif /* MBEDTLS_SHA1_C */
  510. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  511. #if defined(MBEDTLS_CCM_C)
  512. { MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CCM, "TLS-DHE-RSA-WITH-AES-256-CCM",
  513. MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  514. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  515. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  516. 0 },
  517. { MBEDTLS_TLS_DHE_RSA_WITH_AES_256_CCM_8, "TLS-DHE-RSA-WITH-AES-256-CCM-8",
  518. MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  519. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  520. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  521. MBEDTLS_CIPHERSUITE_SHORT_TAG },
  522. { MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CCM, "TLS-DHE-RSA-WITH-AES-128-CCM",
  523. MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  524. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  525. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  526. 0 },
  527. { MBEDTLS_TLS_DHE_RSA_WITH_AES_128_CCM_8, "TLS-DHE-RSA-WITH-AES-128-CCM-8",
  528. MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  529. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  530. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  531. MBEDTLS_CIPHERSUITE_SHORT_TAG },
  532. #endif /* MBEDTLS_CCM_C */
  533. #endif /* MBEDTLS_AES_C */
  534. #if defined(MBEDTLS_CAMELLIA_C)
  535. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  536. #if defined(MBEDTLS_SHA256_C)
  537. { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256, "TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256",
  538. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  539. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  540. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  541. 0 },
  542. { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256, "TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256",
  543. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  544. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  545. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  546. 0 },
  547. #endif /* MBEDTLS_SHA256_C */
  548. #if defined(MBEDTLS_SHA1_C)
  549. { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA, "TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA",
  550. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  551. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  552. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  553. 0 },
  554. { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA, "TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA",
  555. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  556. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  557. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  558. 0 },
  559. #endif /* MBEDTLS_SHA1_C */
  560. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  561. #if defined(MBEDTLS_GCM_C)
  562. #if defined(MBEDTLS_SHA256_C)
  563. { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256, "TLS-DHE-RSA-WITH-CAMELLIA-128-GCM-SHA256",
  564. MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  565. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  566. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  567. 0 },
  568. #endif /* MBEDTLS_SHA256_C */
  569. #if defined(MBEDTLS_SHA512_C)
  570. { MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384, "TLS-DHE-RSA-WITH-CAMELLIA-256-GCM-SHA384",
  571. MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  572. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  573. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  574. 0 },
  575. #endif /* MBEDTLS_SHA512_C */
  576. #endif /* MBEDTLS_GCM_C */
  577. #endif /* MBEDTLS_CAMELLIA_C */
  578. #if defined(MBEDTLS_DES_C)
  579. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  580. #if defined(MBEDTLS_SHA1_C)
  581. { MBEDTLS_TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA, "TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA",
  582. MBEDTLS_CIPHER_DES_EDE3_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  583. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  584. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  585. 0 },
  586. #endif /* MBEDTLS_SHA1_C */
  587. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  588. #endif /* MBEDTLS_DES_C */
  589. #endif /* MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED */
  590. #if defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED)
  591. #if defined(MBEDTLS_AES_C)
  592. #if defined(MBEDTLS_SHA512_C) && defined(MBEDTLS_GCM_C)
  593. { MBEDTLS_TLS_RSA_WITH_AES_256_GCM_SHA384, "TLS-RSA-WITH-AES-256-GCM-SHA384",
  594. MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_RSA,
  595. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  596. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  597. 0 },
  598. #endif /* MBEDTLS_SHA512_C && MBEDTLS_GCM_C */
  599. #if defined(MBEDTLS_SHA256_C)
  600. #if defined(MBEDTLS_GCM_C)
  601. { MBEDTLS_TLS_RSA_WITH_AES_128_GCM_SHA256, "TLS-RSA-WITH-AES-128-GCM-SHA256",
  602. MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,
  603. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  604. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  605. 0 },
  606. #endif /* MBEDTLS_GCM_C */
  607. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  608. { MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA256, "TLS-RSA-WITH-AES-128-CBC-SHA256",
  609. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,
  610. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  611. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  612. 0 },
  613. { MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA256, "TLS-RSA-WITH-AES-256-CBC-SHA256",
  614. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,
  615. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  616. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  617. 0 },
  618. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  619. #endif /* MBEDTLS_SHA256_C */
  620. #if defined(MBEDTLS_SHA1_C)
  621. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  622. { MBEDTLS_TLS_RSA_WITH_AES_128_CBC_SHA, "TLS-RSA-WITH-AES-128-CBC-SHA",
  623. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,
  624. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  625. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  626. 0 },
  627. { MBEDTLS_TLS_RSA_WITH_AES_256_CBC_SHA, "TLS-RSA-WITH-AES-256-CBC-SHA",
  628. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,
  629. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  630. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  631. 0 },
  632. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  633. #endif /* MBEDTLS_SHA1_C */
  634. #if defined(MBEDTLS_CCM_C)
  635. { MBEDTLS_TLS_RSA_WITH_AES_256_CCM, "TLS-RSA-WITH-AES-256-CCM",
  636. MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,
  637. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  638. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  639. 0 },
  640. { MBEDTLS_TLS_RSA_WITH_AES_256_CCM_8, "TLS-RSA-WITH-AES-256-CCM-8",
  641. MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,
  642. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  643. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  644. MBEDTLS_CIPHERSUITE_SHORT_TAG },
  645. { MBEDTLS_TLS_RSA_WITH_AES_128_CCM, "TLS-RSA-WITH-AES-128-CCM",
  646. MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,
  647. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  648. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  649. 0 },
  650. { MBEDTLS_TLS_RSA_WITH_AES_128_CCM_8, "TLS-RSA-WITH-AES-128-CCM-8",
  651. MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,
  652. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  653. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  654. MBEDTLS_CIPHERSUITE_SHORT_TAG },
  655. #endif /* MBEDTLS_CCM_C */
  656. #endif /* MBEDTLS_AES_C */
  657. #if defined(MBEDTLS_CAMELLIA_C)
  658. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  659. #if defined(MBEDTLS_SHA256_C)
  660. { MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256, "TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256",
  661. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,
  662. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  663. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  664. 0 },
  665. { MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256, "TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256",
  666. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,
  667. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  668. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  669. 0 },
  670. #endif /* MBEDTLS_SHA256_C */
  671. #if defined(MBEDTLS_SHA1_C)
  672. { MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_CBC_SHA, "TLS-RSA-WITH-CAMELLIA-128-CBC-SHA",
  673. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,
  674. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  675. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  676. 0 },
  677. { MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_CBC_SHA, "TLS-RSA-WITH-CAMELLIA-256-CBC-SHA",
  678. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,
  679. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  680. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  681. 0 },
  682. #endif /* MBEDTLS_SHA1_C */
  683. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  684. #if defined(MBEDTLS_GCM_C)
  685. #if defined(MBEDTLS_SHA256_C)
  686. { MBEDTLS_TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256, "TLS-RSA-WITH-CAMELLIA-128-GCM-SHA256",
  687. MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,
  688. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  689. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  690. 0 },
  691. #endif /* MBEDTLS_SHA256_C */
  692. #if defined(MBEDTLS_SHA1_C)
  693. { MBEDTLS_TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384, "TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384",
  694. MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_RSA,
  695. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  696. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  697. 0 },
  698. #endif /* MBEDTLS_SHA1_C */
  699. #endif /* MBEDTLS_GCM_C */
  700. #endif /* MBEDTLS_CAMELLIA_C */
  701. #if defined(MBEDTLS_DES_C)
  702. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  703. #if defined(MBEDTLS_SHA1_C)
  704. { MBEDTLS_TLS_RSA_WITH_3DES_EDE_CBC_SHA, "TLS-RSA-WITH-3DES-EDE-CBC-SHA",
  705. MBEDTLS_CIPHER_DES_EDE3_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,
  706. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  707. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  708. 0 },
  709. #endif /* MBEDTLS_SHA1_C */
  710. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  711. #endif /* MBEDTLS_DES_C */
  712. #if defined(MBEDTLS_ARC4_C)
  713. #if defined(MBEDTLS_MD5_C)
  714. { MBEDTLS_TLS_RSA_WITH_RC4_128_MD5, "TLS-RSA-WITH-RC4-128-MD5",
  715. MBEDTLS_CIPHER_ARC4_128, MBEDTLS_MD_MD5, MBEDTLS_KEY_EXCHANGE_RSA,
  716. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  717. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  718. MBEDTLS_CIPHERSUITE_NODTLS },
  719. #endif
  720. #if defined(MBEDTLS_SHA1_C)
  721. { MBEDTLS_TLS_RSA_WITH_RC4_128_SHA, "TLS-RSA-WITH-RC4-128-SHA",
  722. MBEDTLS_CIPHER_ARC4_128, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,
  723. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  724. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  725. MBEDTLS_CIPHERSUITE_NODTLS },
  726. #endif
  727. #endif /* MBEDTLS_ARC4_C */
  728. #endif /* MBEDTLS_KEY_EXCHANGE_RSA_ENABLED */
  729. #if defined(MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED)
  730. #if defined(MBEDTLS_AES_C)
  731. #if defined(MBEDTLS_SHA1_C)
  732. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  733. { MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, "TLS-ECDH-RSA-WITH-AES-128-CBC-SHA",
  734. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  735. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  736. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  737. 0 },
  738. { MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, "TLS-ECDH-RSA-WITH-AES-256-CBC-SHA",
  739. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  740. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  741. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  742. 0 },
  743. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  744. #endif /* MBEDTLS_SHA1_C */
  745. #if defined(MBEDTLS_SHA256_C)
  746. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  747. { MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, "TLS-ECDH-RSA-WITH-AES-128-CBC-SHA256",
  748. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  749. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  750. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  751. 0 },
  752. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  753. #if defined(MBEDTLS_GCM_C)
  754. { MBEDTLS_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, "TLS-ECDH-RSA-WITH-AES-128-GCM-SHA256",
  755. MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  756. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  757. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  758. 0 },
  759. #endif /* MBEDTLS_GCM_C */
  760. #endif /* MBEDTLS_SHA256_C */
  761. #if defined(MBEDTLS_SHA512_C)
  762. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  763. { MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, "TLS-ECDH-RSA-WITH-AES-256-CBC-SHA384",
  764. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  765. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  766. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  767. 0 },
  768. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  769. #if defined(MBEDTLS_GCM_C)
  770. { MBEDTLS_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, "TLS-ECDH-RSA-WITH-AES-256-GCM-SHA384",
  771. MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  772. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  773. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  774. 0 },
  775. #endif /* MBEDTLS_GCM_C */
  776. #endif /* MBEDTLS_SHA512_C */
  777. #endif /* MBEDTLS_AES_C */
  778. #if defined(MBEDTLS_CAMELLIA_C)
  779. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  780. #if defined(MBEDTLS_SHA256_C)
  781. { MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256, "TLS-ECDH-RSA-WITH-CAMELLIA-128-CBC-SHA256",
  782. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  783. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  784. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  785. 0 },
  786. #endif /* MBEDTLS_SHA256_C */
  787. #if defined(MBEDTLS_SHA512_C)
  788. { MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384, "TLS-ECDH-RSA-WITH-CAMELLIA-256-CBC-SHA384",
  789. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  790. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  791. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  792. 0 },
  793. #endif /* MBEDTLS_SHA512_C */
  794. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  795. #if defined(MBEDTLS_GCM_C)
  796. #if defined(MBEDTLS_SHA256_C)
  797. { MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256, "TLS-ECDH-RSA-WITH-CAMELLIA-128-GCM-SHA256",
  798. MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  799. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  800. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  801. 0 },
  802. #endif /* MBEDTLS_SHA256_C */
  803. #if defined(MBEDTLS_SHA512_C)
  804. { MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384, "TLS-ECDH-RSA-WITH-CAMELLIA-256-GCM-SHA384",
  805. MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  806. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  807. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  808. 0 },
  809. #endif /* MBEDTLS_SHA512_C */
  810. #endif /* MBEDTLS_GCM_C */
  811. #endif /* MBEDTLS_CAMELLIA_C */
  812. #if defined(MBEDTLS_DES_C)
  813. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  814. #if defined(MBEDTLS_SHA1_C)
  815. { MBEDTLS_TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, "TLS-ECDH-RSA-WITH-3DES-EDE-CBC-SHA",
  816. MBEDTLS_CIPHER_DES_EDE3_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  817. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  818. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  819. 0 },
  820. #endif /* MBEDTLS_SHA1_C */
  821. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  822. #endif /* MBEDTLS_DES_C */
  823. #if defined(MBEDTLS_ARC4_C)
  824. #if defined(MBEDTLS_SHA1_C)
  825. { MBEDTLS_TLS_ECDH_RSA_WITH_RC4_128_SHA, "TLS-ECDH-RSA-WITH-RC4-128-SHA",
  826. MBEDTLS_CIPHER_ARC4_128, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  827. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  828. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  829. MBEDTLS_CIPHERSUITE_NODTLS },
  830. #endif /* MBEDTLS_SHA1_C */
  831. #endif /* MBEDTLS_ARC4_C */
  832. #if defined(MBEDTLS_CIPHER_NULL_CIPHER)
  833. #if defined(MBEDTLS_SHA1_C)
  834. { MBEDTLS_TLS_ECDH_RSA_WITH_NULL_SHA, "TLS-ECDH-RSA-WITH-NULL-SHA",
  835. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_RSA,
  836. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  837. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  838. MBEDTLS_CIPHERSUITE_WEAK },
  839. #endif /* MBEDTLS_SHA1_C */
  840. #endif /* MBEDTLS_CIPHER_NULL_CIPHER */
  841. #endif /* MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED */
  842. #if defined(MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED)
  843. #if defined(MBEDTLS_AES_C)
  844. #if defined(MBEDTLS_SHA1_C)
  845. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  846. { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, "TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA",
  847. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  848. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  849. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  850. 0 },
  851. { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, "TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA",
  852. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  853. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  854. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  855. 0 },
  856. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  857. #endif /* MBEDTLS_SHA1_C */
  858. #if defined(MBEDTLS_SHA256_C)
  859. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  860. { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, "TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA256",
  861. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  862. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  863. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  864. 0 },
  865. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  866. #if defined(MBEDTLS_GCM_C)
  867. { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, "TLS-ECDH-ECDSA-WITH-AES-128-GCM-SHA256",
  868. MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  869. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  870. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  871. 0 },
  872. #endif /* MBEDTLS_GCM_C */
  873. #endif /* MBEDTLS_SHA256_C */
  874. #if defined(MBEDTLS_SHA512_C)
  875. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  876. { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, "TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA384",
  877. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  878. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  879. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  880. 0 },
  881. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  882. #if defined(MBEDTLS_GCM_C)
  883. { MBEDTLS_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, "TLS-ECDH-ECDSA-WITH-AES-256-GCM-SHA384",
  884. MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  885. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  886. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  887. 0 },
  888. #endif /* MBEDTLS_GCM_C */
  889. #endif /* MBEDTLS_SHA512_C */
  890. #endif /* MBEDTLS_AES_C */
  891. #if defined(MBEDTLS_CAMELLIA_C)
  892. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  893. #if defined(MBEDTLS_SHA256_C)
  894. { MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256, "TLS-ECDH-ECDSA-WITH-CAMELLIA-128-CBC-SHA256",
  895. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  896. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  897. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  898. 0 },
  899. #endif /* MBEDTLS_SHA256_C */
  900. #if defined(MBEDTLS_SHA512_C)
  901. { MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384, "TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384",
  902. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  903. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  904. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  905. 0 },
  906. #endif /* MBEDTLS_SHA512_C */
  907. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  908. #if defined(MBEDTLS_GCM_C)
  909. #if defined(MBEDTLS_SHA256_C)
  910. { MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256, "TLS-ECDH-ECDSA-WITH-CAMELLIA-128-GCM-SHA256",
  911. MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  912. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  913. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  914. 0 },
  915. #endif /* MBEDTLS_SHA256_C */
  916. #if defined(MBEDTLS_SHA512_C)
  917. { MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384, "TLS-ECDH-ECDSA-WITH-CAMELLIA-256-GCM-SHA384",
  918. MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  919. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  920. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  921. 0 },
  922. #endif /* MBEDTLS_SHA512_C */
  923. #endif /* MBEDTLS_GCM_C */
  924. #endif /* MBEDTLS_CAMELLIA_C */
  925. #if defined(MBEDTLS_DES_C)
  926. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  927. #if defined(MBEDTLS_SHA1_C)
  928. { MBEDTLS_TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, "TLS-ECDH-ECDSA-WITH-3DES-EDE-CBC-SHA",
  929. MBEDTLS_CIPHER_DES_EDE3_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  930. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  931. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  932. 0 },
  933. #endif /* MBEDTLS_SHA1_C */
  934. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  935. #endif /* MBEDTLS_DES_C */
  936. #if defined(MBEDTLS_ARC4_C)
  937. #if defined(MBEDTLS_SHA1_C)
  938. { MBEDTLS_TLS_ECDH_ECDSA_WITH_RC4_128_SHA, "TLS-ECDH-ECDSA-WITH-RC4-128-SHA",
  939. MBEDTLS_CIPHER_ARC4_128, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  940. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  941. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  942. MBEDTLS_CIPHERSUITE_NODTLS },
  943. #endif /* MBEDTLS_SHA1_C */
  944. #endif /* MBEDTLS_ARC4_C */
  945. #if defined(MBEDTLS_CIPHER_NULL_CIPHER)
  946. #if defined(MBEDTLS_SHA1_C)
  947. { MBEDTLS_TLS_ECDH_ECDSA_WITH_NULL_SHA, "TLS-ECDH-ECDSA-WITH-NULL-SHA",
  948. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA,
  949. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  950. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  951. MBEDTLS_CIPHERSUITE_WEAK },
  952. #endif /* MBEDTLS_SHA1_C */
  953. #endif /* MBEDTLS_CIPHER_NULL_CIPHER */
  954. #endif /* MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED */
  955. #if defined(MBEDTLS_KEY_EXCHANGE_PSK_ENABLED)
  956. #if defined(MBEDTLS_AES_C)
  957. #if defined(MBEDTLS_GCM_C)
  958. #if defined(MBEDTLS_SHA256_C)
  959. { MBEDTLS_TLS_PSK_WITH_AES_128_GCM_SHA256, "TLS-PSK-WITH-AES-128-GCM-SHA256",
  960. MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,
  961. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  962. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  963. 0 },
  964. #endif /* MBEDTLS_SHA256_C */
  965. #if defined(MBEDTLS_SHA512_C)
  966. { MBEDTLS_TLS_PSK_WITH_AES_256_GCM_SHA384, "TLS-PSK-WITH-AES-256-GCM-SHA384",
  967. MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_PSK,
  968. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  969. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  970. 0 },
  971. #endif /* MBEDTLS_SHA512_C */
  972. #endif /* MBEDTLS_GCM_C */
  973. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  974. #if defined(MBEDTLS_SHA256_C)
  975. { MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA256, "TLS-PSK-WITH-AES-128-CBC-SHA256",
  976. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,
  977. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  978. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  979. 0 },
  980. #endif /* MBEDTLS_SHA256_C */
  981. #if defined(MBEDTLS_SHA512_C)
  982. { MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA384, "TLS-PSK-WITH-AES-256-CBC-SHA384",
  983. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_PSK,
  984. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  985. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  986. 0 },
  987. #endif /* MBEDTLS_SHA512_C */
  988. #if defined(MBEDTLS_SHA1_C)
  989. { MBEDTLS_TLS_PSK_WITH_AES_128_CBC_SHA, "TLS-PSK-WITH-AES-128-CBC-SHA",
  990. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_PSK,
  991. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  992. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  993. 0 },
  994. { MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA, "TLS-PSK-WITH-AES-256-CBC-SHA",
  995. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_PSK,
  996. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  997. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  998. 0 },
  999. #endif /* MBEDTLS_SHA1_C */
  1000. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1001. #if defined(MBEDTLS_CCM_C)
  1002. { MBEDTLS_TLS_PSK_WITH_AES_256_CCM, "TLS-PSK-WITH-AES-256-CCM",
  1003. MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,
  1004. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1005. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1006. 0 },
  1007. { MBEDTLS_TLS_PSK_WITH_AES_256_CCM_8, "TLS-PSK-WITH-AES-256-CCM-8",
  1008. MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,
  1009. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1010. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1011. MBEDTLS_CIPHERSUITE_SHORT_TAG },
  1012. { MBEDTLS_TLS_PSK_WITH_AES_128_CCM, "TLS-PSK-WITH-AES-128-CCM",
  1013. MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,
  1014. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1015. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1016. 0 },
  1017. { MBEDTLS_TLS_PSK_WITH_AES_128_CCM_8, "TLS-PSK-WITH-AES-128-CCM-8",
  1018. MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,
  1019. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1020. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1021. MBEDTLS_CIPHERSUITE_SHORT_TAG },
  1022. #endif /* MBEDTLS_CCM_C */
  1023. #endif /* MBEDTLS_AES_C */
  1024. #if defined(MBEDTLS_CAMELLIA_C)
  1025. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1026. #if defined(MBEDTLS_SHA256_C)
  1027. { MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256, "TLS-PSK-WITH-CAMELLIA-128-CBC-SHA256",
  1028. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,
  1029. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1030. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1031. 0 },
  1032. #endif /* MBEDTLS_SHA256_C */
  1033. #if defined(MBEDTLS_SHA512_C)
  1034. { MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384, "TLS-PSK-WITH-CAMELLIA-256-CBC-SHA384",
  1035. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_PSK,
  1036. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1037. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1038. 0 },
  1039. #endif /* MBEDTLS_SHA512_C */
  1040. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1041. #if defined(MBEDTLS_GCM_C)
  1042. #if defined(MBEDTLS_SHA256_C)
  1043. { MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256, "TLS-PSK-WITH-CAMELLIA-128-GCM-SHA256",
  1044. MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,
  1045. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1046. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1047. 0 },
  1048. #endif /* MBEDTLS_SHA256_C */
  1049. #if defined(MBEDTLS_SHA512_C)
  1050. { MBEDTLS_TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384, "TLS-PSK-WITH-CAMELLIA-256-GCM-SHA384",
  1051. MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_PSK,
  1052. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1053. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1054. 0 },
  1055. #endif /* MBEDTLS_SHA512_C */
  1056. #endif /* MBEDTLS_GCM_C */
  1057. #endif /* MBEDTLS_CAMELLIA_C */
  1058. #if defined(MBEDTLS_DES_C)
  1059. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1060. #if defined(MBEDTLS_SHA1_C)
  1061. { MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA, "TLS-PSK-WITH-3DES-EDE-CBC-SHA",
  1062. MBEDTLS_CIPHER_DES_EDE3_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_PSK,
  1063. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1064. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1065. 0 },
  1066. #endif /* MBEDTLS_SHA1_C */
  1067. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1068. #endif /* MBEDTLS_DES_C */
  1069. #if defined(MBEDTLS_ARC4_C)
  1070. #if defined(MBEDTLS_SHA1_C)
  1071. { MBEDTLS_TLS_PSK_WITH_RC4_128_SHA, "TLS-PSK-WITH-RC4-128-SHA",
  1072. MBEDTLS_CIPHER_ARC4_128, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_PSK,
  1073. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1074. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1075. MBEDTLS_CIPHERSUITE_NODTLS },
  1076. #endif /* MBEDTLS_SHA1_C */
  1077. #endif /* MBEDTLS_ARC4_C */
  1078. #endif /* MBEDTLS_KEY_EXCHANGE_PSK_ENABLED */
  1079. #if defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED)
  1080. #if defined(MBEDTLS_AES_C)
  1081. #if defined(MBEDTLS_GCM_C)
  1082. #if defined(MBEDTLS_SHA256_C)
  1083. { MBEDTLS_TLS_DHE_PSK_WITH_AES_128_GCM_SHA256, "TLS-DHE-PSK-WITH-AES-128-GCM-SHA256",
  1084. MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1085. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1086. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1087. 0 },
  1088. #endif /* MBEDTLS_SHA256_C */
  1089. #if defined(MBEDTLS_SHA512_C)
  1090. { MBEDTLS_TLS_DHE_PSK_WITH_AES_256_GCM_SHA384, "TLS-DHE-PSK-WITH-AES-256-GCM-SHA384",
  1091. MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1092. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1093. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1094. 0 },
  1095. #endif /* MBEDTLS_SHA512_C */
  1096. #endif /* MBEDTLS_GCM_C */
  1097. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1098. #if defined(MBEDTLS_SHA256_C)
  1099. { MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA256, "TLS-DHE-PSK-WITH-AES-128-CBC-SHA256",
  1100. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1101. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1102. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1103. 0 },
  1104. #endif /* MBEDTLS_SHA256_C */
  1105. #if defined(MBEDTLS_SHA512_C)
  1106. { MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA384, "TLS-DHE-PSK-WITH-AES-256-CBC-SHA384",
  1107. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1108. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1109. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1110. 0 },
  1111. #endif /* MBEDTLS_SHA512_C */
  1112. #if defined(MBEDTLS_SHA1_C)
  1113. { MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CBC_SHA, "TLS-DHE-PSK-WITH-AES-128-CBC-SHA",
  1114. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1115. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1116. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1117. 0 },
  1118. { MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CBC_SHA, "TLS-DHE-PSK-WITH-AES-256-CBC-SHA",
  1119. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1120. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1121. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1122. 0 },
  1123. #endif /* MBEDTLS_SHA1_C */
  1124. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1125. #if defined(MBEDTLS_CCM_C)
  1126. { MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CCM, "TLS-DHE-PSK-WITH-AES-256-CCM",
  1127. MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1128. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1129. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1130. 0 },
  1131. { MBEDTLS_TLS_DHE_PSK_WITH_AES_256_CCM_8, "TLS-DHE-PSK-WITH-AES-256-CCM-8",
  1132. MBEDTLS_CIPHER_AES_256_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1133. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1134. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1135. MBEDTLS_CIPHERSUITE_SHORT_TAG },
  1136. { MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CCM, "TLS-DHE-PSK-WITH-AES-128-CCM",
  1137. MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1138. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1139. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1140. 0 },
  1141. { MBEDTLS_TLS_DHE_PSK_WITH_AES_128_CCM_8, "TLS-DHE-PSK-WITH-AES-128-CCM-8",
  1142. MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1143. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1144. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1145. MBEDTLS_CIPHERSUITE_SHORT_TAG },
  1146. #endif /* MBEDTLS_CCM_C */
  1147. #endif /* MBEDTLS_AES_C */
  1148. #if defined(MBEDTLS_CAMELLIA_C)
  1149. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1150. #if defined(MBEDTLS_SHA256_C)
  1151. { MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256, "TLS-DHE-PSK-WITH-CAMELLIA-128-CBC-SHA256",
  1152. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1153. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1154. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1155. 0 },
  1156. #endif /* MBEDTLS_SHA256_C */
  1157. #if defined(MBEDTLS_SHA512_C)
  1158. { MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384, "TLS-DHE-PSK-WITH-CAMELLIA-256-CBC-SHA384",
  1159. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1160. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1161. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1162. 0 },
  1163. #endif /* MBEDTLS_SHA512_C */
  1164. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1165. #if defined(MBEDTLS_GCM_C)
  1166. #if defined(MBEDTLS_SHA256_C)
  1167. { MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256, "TLS-DHE-PSK-WITH-CAMELLIA-128-GCM-SHA256",
  1168. MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1169. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1170. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1171. 0 },
  1172. #endif /* MBEDTLS_SHA256_C */
  1173. #if defined(MBEDTLS_SHA512_C)
  1174. { MBEDTLS_TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384, "TLS-DHE-PSK-WITH-CAMELLIA-256-GCM-SHA384",
  1175. MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1176. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1177. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1178. 0 },
  1179. #endif /* MBEDTLS_SHA512_C */
  1180. #endif /* MBEDTLS_GCM_C */
  1181. #endif /* MBEDTLS_CAMELLIA_C */
  1182. #if defined(MBEDTLS_DES_C)
  1183. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1184. #if defined(MBEDTLS_SHA1_C)
  1185. { MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA, "TLS-DHE-PSK-WITH-3DES-EDE-CBC-SHA",
  1186. MBEDTLS_CIPHER_DES_EDE3_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1187. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1188. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1189. 0 },
  1190. #endif /* MBEDTLS_SHA1_C */
  1191. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1192. #endif /* MBEDTLS_DES_C */
  1193. #if defined(MBEDTLS_ARC4_C)
  1194. #if defined(MBEDTLS_SHA1_C)
  1195. { MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA, "TLS-DHE-PSK-WITH-RC4-128-SHA",
  1196. MBEDTLS_CIPHER_ARC4_128, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1197. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1198. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1199. MBEDTLS_CIPHERSUITE_NODTLS },
  1200. #endif /* MBEDTLS_SHA1_C */
  1201. #endif /* MBEDTLS_ARC4_C */
  1202. #endif /* MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED */
  1203. #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED)
  1204. #if defined(MBEDTLS_AES_C)
  1205. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1206. #if defined(MBEDTLS_SHA256_C)
  1207. { MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256, "TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA256",
  1208. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,
  1209. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1210. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1211. 0 },
  1212. #endif /* MBEDTLS_SHA256_C */
  1213. #if defined(MBEDTLS_SHA512_C)
  1214. { MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384, "TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384",
  1215. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,
  1216. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1217. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1218. 0 },
  1219. #endif /* MBEDTLS_SHA512_C */
  1220. #if defined(MBEDTLS_SHA1_C)
  1221. { MBEDTLS_TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA, "TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA",
  1222. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,
  1223. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1224. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1225. 0 },
  1226. { MBEDTLS_TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA, "TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA",
  1227. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,
  1228. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1229. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1230. 0 },
  1231. #endif /* MBEDTLS_SHA1_C */
  1232. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1233. #endif /* MBEDTLS_AES_C */
  1234. #if defined(MBEDTLS_CAMELLIA_C)
  1235. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1236. #if defined(MBEDTLS_SHA256_C)
  1237. { MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256, "TLS-ECDHE-PSK-WITH-CAMELLIA-128-CBC-SHA256",
  1238. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,
  1239. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1240. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1241. 0 },
  1242. #endif /* MBEDTLS_SHA256_C */
  1243. #if defined(MBEDTLS_SHA512_C)
  1244. { MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384, "TLS-ECDHE-PSK-WITH-CAMELLIA-256-CBC-SHA384",
  1245. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,
  1246. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1247. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1248. 0 },
  1249. #endif /* MBEDTLS_SHA512_C */
  1250. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1251. #endif /* MBEDTLS_CAMELLIA_C */
  1252. #if defined(MBEDTLS_DES_C)
  1253. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1254. #if defined(MBEDTLS_SHA1_C)
  1255. { MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA, "TLS-ECDHE-PSK-WITH-3DES-EDE-CBC-SHA",
  1256. MBEDTLS_CIPHER_DES_EDE3_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,
  1257. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1258. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1259. 0 },
  1260. #endif /* MBEDTLS_SHA1_C */
  1261. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1262. #endif /* MBEDTLS_DES_C */
  1263. #if defined(MBEDTLS_ARC4_C)
  1264. #if defined(MBEDTLS_SHA1_C)
  1265. { MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA, "TLS-ECDHE-PSK-WITH-RC4-128-SHA",
  1266. MBEDTLS_CIPHER_ARC4_128, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,
  1267. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1268. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1269. MBEDTLS_CIPHERSUITE_NODTLS },
  1270. #endif /* MBEDTLS_SHA1_C */
  1271. #endif /* MBEDTLS_ARC4_C */
  1272. #endif /* MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED */
  1273. #if defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED)
  1274. #if defined(MBEDTLS_AES_C)
  1275. #if defined(MBEDTLS_GCM_C)
  1276. #if defined(MBEDTLS_SHA256_C)
  1277. { MBEDTLS_TLS_RSA_PSK_WITH_AES_128_GCM_SHA256, "TLS-RSA-PSK-WITH-AES-128-GCM-SHA256",
  1278. MBEDTLS_CIPHER_AES_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1279. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1280. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1281. 0 },
  1282. #endif /* MBEDTLS_SHA256_C */
  1283. #if defined(MBEDTLS_SHA512_C)
  1284. { MBEDTLS_TLS_RSA_PSK_WITH_AES_256_GCM_SHA384, "TLS-RSA-PSK-WITH-AES-256-GCM-SHA384",
  1285. MBEDTLS_CIPHER_AES_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1286. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1287. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1288. 0 },
  1289. #endif /* MBEDTLS_SHA512_C */
  1290. #endif /* MBEDTLS_GCM_C */
  1291. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1292. #if defined(MBEDTLS_SHA256_C)
  1293. { MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA256, "TLS-RSA-PSK-WITH-AES-128-CBC-SHA256",
  1294. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1295. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1296. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1297. 0 },
  1298. #endif /* MBEDTLS_SHA256_C */
  1299. #if defined(MBEDTLS_SHA512_C)
  1300. { MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA384, "TLS-RSA-PSK-WITH-AES-256-CBC-SHA384",
  1301. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1302. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1303. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1304. 0 },
  1305. #endif /* MBEDTLS_SHA512_C */
  1306. #if defined(MBEDTLS_SHA1_C)
  1307. { MBEDTLS_TLS_RSA_PSK_WITH_AES_128_CBC_SHA, "TLS-RSA-PSK-WITH-AES-128-CBC-SHA",
  1308. MBEDTLS_CIPHER_AES_128_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1309. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1310. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1311. 0 },
  1312. { MBEDTLS_TLS_RSA_PSK_WITH_AES_256_CBC_SHA, "TLS-RSA-PSK-WITH-AES-256-CBC-SHA",
  1313. MBEDTLS_CIPHER_AES_256_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1314. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1315. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1316. 0 },
  1317. #endif /* MBEDTLS_SHA1_C */
  1318. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1319. #endif /* MBEDTLS_AES_C */
  1320. #if defined(MBEDTLS_CAMELLIA_C)
  1321. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1322. #if defined(MBEDTLS_SHA256_C)
  1323. { MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256, "TLS-RSA-PSK-WITH-CAMELLIA-128-CBC-SHA256",
  1324. MBEDTLS_CIPHER_CAMELLIA_128_CBC, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1325. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1326. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1327. 0 },
  1328. #endif /* MBEDTLS_SHA256_C */
  1329. #if defined(MBEDTLS_SHA512_C)
  1330. { MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384, "TLS-RSA-PSK-WITH-CAMELLIA-256-CBC-SHA384",
  1331. MBEDTLS_CIPHER_CAMELLIA_256_CBC, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1332. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1333. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1334. 0 },
  1335. #endif /* MBEDTLS_SHA512_C */
  1336. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1337. #if defined(MBEDTLS_GCM_C)
  1338. #if defined(MBEDTLS_SHA256_C)
  1339. { MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256, "TLS-RSA-PSK-WITH-CAMELLIA-128-GCM-SHA256",
  1340. MBEDTLS_CIPHER_CAMELLIA_128_GCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1341. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1342. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1343. 0 },
  1344. #endif /* MBEDTLS_SHA256_C */
  1345. #if defined(MBEDTLS_SHA512_C)
  1346. { MBEDTLS_TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384, "TLS-RSA-PSK-WITH-CAMELLIA-256-GCM-SHA384",
  1347. MBEDTLS_CIPHER_CAMELLIA_256_GCM, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1348. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1349. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1350. 0 },
  1351. #endif /* MBEDTLS_SHA512_C */
  1352. #endif /* MBEDTLS_GCM_C */
  1353. #endif /* MBEDTLS_CAMELLIA_C */
  1354. #if defined(MBEDTLS_DES_C)
  1355. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1356. #if defined(MBEDTLS_SHA1_C)
  1357. { MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA, "TLS-RSA-PSK-WITH-3DES-EDE-CBC-SHA",
  1358. MBEDTLS_CIPHER_DES_EDE3_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1359. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1360. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1361. 0 },
  1362. #endif /* MBEDTLS_SHA1_C */
  1363. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1364. #endif /* MBEDTLS_DES_C */
  1365. #if defined(MBEDTLS_ARC4_C)
  1366. #if defined(MBEDTLS_SHA1_C)
  1367. { MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA, "TLS-RSA-PSK-WITH-RC4-128-SHA",
  1368. MBEDTLS_CIPHER_ARC4_128, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1369. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1370. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1371. MBEDTLS_CIPHERSUITE_NODTLS },
  1372. #endif /* MBEDTLS_SHA1_C */
  1373. #endif /* MBEDTLS_ARC4_C */
  1374. #endif /* MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED */
  1375. #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
  1376. #if defined(MBEDTLS_AES_C)
  1377. #if defined(MBEDTLS_CCM_C)
  1378. { MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8, "TLS-ECJPAKE-WITH-AES-128-CCM-8",
  1379. MBEDTLS_CIPHER_AES_128_CCM, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECJPAKE,
  1380. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1381. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1382. MBEDTLS_CIPHERSUITE_SHORT_TAG },
  1383. #endif /* MBEDTLS_CCM_C */
  1384. #endif /* MBEDTLS_AES_C */
  1385. #endif /* MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED */
  1386. #if defined(MBEDTLS_ENABLE_WEAK_CIPHERSUITES)
  1387. #if defined(MBEDTLS_CIPHER_NULL_CIPHER)
  1388. #if defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED)
  1389. #if defined(MBEDTLS_MD5_C)
  1390. { MBEDTLS_TLS_RSA_WITH_NULL_MD5, "TLS-RSA-WITH-NULL-MD5",
  1391. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_MD5, MBEDTLS_KEY_EXCHANGE_RSA,
  1392. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1393. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1394. MBEDTLS_CIPHERSUITE_WEAK },
  1395. #endif
  1396. #if defined(MBEDTLS_SHA1_C)
  1397. { MBEDTLS_TLS_RSA_WITH_NULL_SHA, "TLS-RSA-WITH-NULL-SHA",
  1398. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,
  1399. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1400. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1401. MBEDTLS_CIPHERSUITE_WEAK },
  1402. #endif
  1403. #if defined(MBEDTLS_SHA256_C)
  1404. { MBEDTLS_TLS_RSA_WITH_NULL_SHA256, "TLS-RSA-WITH-NULL-SHA256",
  1405. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA,
  1406. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1407. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1408. MBEDTLS_CIPHERSUITE_WEAK },
  1409. #endif
  1410. #endif /* MBEDTLS_KEY_EXCHANGE_RSA_ENABLED */
  1411. #if defined(MBEDTLS_KEY_EXCHANGE_PSK_ENABLED)
  1412. #if defined(MBEDTLS_SHA1_C)
  1413. { MBEDTLS_TLS_PSK_WITH_NULL_SHA, "TLS-PSK-WITH-NULL-SHA",
  1414. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_PSK,
  1415. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1416. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1417. MBEDTLS_CIPHERSUITE_WEAK },
  1418. #endif /* MBEDTLS_SHA1_C */
  1419. #if defined(MBEDTLS_SHA256_C)
  1420. { MBEDTLS_TLS_PSK_WITH_NULL_SHA256, "TLS-PSK-WITH-NULL-SHA256",
  1421. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_PSK,
  1422. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1423. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1424. MBEDTLS_CIPHERSUITE_WEAK },
  1425. #endif
  1426. #if defined(MBEDTLS_SHA512_C)
  1427. { MBEDTLS_TLS_PSK_WITH_NULL_SHA384, "TLS-PSK-WITH-NULL-SHA384",
  1428. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_PSK,
  1429. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1430. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1431. MBEDTLS_CIPHERSUITE_WEAK },
  1432. #endif
  1433. #endif /* MBEDTLS_KEY_EXCHANGE_PSK_ENABLED */
  1434. #if defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED)
  1435. #if defined(MBEDTLS_SHA1_C)
  1436. { MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA, "TLS-DHE-PSK-WITH-NULL-SHA",
  1437. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1438. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1439. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1440. MBEDTLS_CIPHERSUITE_WEAK },
  1441. #endif /* MBEDTLS_SHA1_C */
  1442. #if defined(MBEDTLS_SHA256_C)
  1443. { MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA256, "TLS-DHE-PSK-WITH-NULL-SHA256",
  1444. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1445. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1446. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1447. MBEDTLS_CIPHERSUITE_WEAK },
  1448. #endif
  1449. #if defined(MBEDTLS_SHA512_C)
  1450. { MBEDTLS_TLS_DHE_PSK_WITH_NULL_SHA384, "TLS-DHE-PSK-WITH-NULL-SHA384",
  1451. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_DHE_PSK,
  1452. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1453. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1454. MBEDTLS_CIPHERSUITE_WEAK },
  1455. #endif
  1456. #endif /* MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED */
  1457. #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED)
  1458. #if defined(MBEDTLS_SHA1_C)
  1459. { MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA, "TLS-ECDHE-PSK-WITH-NULL-SHA",
  1460. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,
  1461. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1462. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1463. MBEDTLS_CIPHERSUITE_WEAK },
  1464. #endif /* MBEDTLS_SHA1_C */
  1465. #if defined(MBEDTLS_SHA256_C)
  1466. { MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA256, "TLS-ECDHE-PSK-WITH-NULL-SHA256",
  1467. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,
  1468. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1469. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1470. MBEDTLS_CIPHERSUITE_WEAK },
  1471. #endif
  1472. #if defined(MBEDTLS_SHA512_C)
  1473. { MBEDTLS_TLS_ECDHE_PSK_WITH_NULL_SHA384, "TLS-ECDHE-PSK-WITH-NULL-SHA384",
  1474. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_ECDHE_PSK,
  1475. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1476. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1477. MBEDTLS_CIPHERSUITE_WEAK },
  1478. #endif
  1479. #endif /* MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED */
  1480. #if defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED)
  1481. #if defined(MBEDTLS_SHA1_C)
  1482. { MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA, "TLS-RSA-PSK-WITH-NULL-SHA",
  1483. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1484. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1485. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1486. MBEDTLS_CIPHERSUITE_WEAK },
  1487. #endif /* MBEDTLS_SHA1_C */
  1488. #if defined(MBEDTLS_SHA256_C)
  1489. { MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA256, "TLS-RSA-PSK-WITH-NULL-SHA256",
  1490. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA256, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1491. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1492. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1493. MBEDTLS_CIPHERSUITE_WEAK },
  1494. #endif
  1495. #if defined(MBEDTLS_SHA512_C)
  1496. { MBEDTLS_TLS_RSA_PSK_WITH_NULL_SHA384, "TLS-RSA-PSK-WITH-NULL-SHA384",
  1497. MBEDTLS_CIPHER_NULL, MBEDTLS_MD_SHA384, MBEDTLS_KEY_EXCHANGE_RSA_PSK,
  1498. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_1,
  1499. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1500. MBEDTLS_CIPHERSUITE_WEAK },
  1501. #endif
  1502. #endif /* MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED */
  1503. #endif /* MBEDTLS_CIPHER_NULL_CIPHER */
  1504. #if defined(MBEDTLS_DES_C)
  1505. #if defined(MBEDTLS_CIPHER_MODE_CBC)
  1506. #if defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED)
  1507. #if defined(MBEDTLS_SHA1_C)
  1508. { MBEDTLS_TLS_DHE_RSA_WITH_DES_CBC_SHA, "TLS-DHE-RSA-WITH-DES-CBC-SHA",
  1509. MBEDTLS_CIPHER_DES_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_DHE_RSA,
  1510. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1511. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1512. MBEDTLS_CIPHERSUITE_WEAK },
  1513. #endif /* MBEDTLS_SHA1_C */
  1514. #endif /* MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED */
  1515. #if defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED)
  1516. #if defined(MBEDTLS_SHA1_C)
  1517. { MBEDTLS_TLS_RSA_WITH_DES_CBC_SHA, "TLS-RSA-WITH-DES-CBC-SHA",
  1518. MBEDTLS_CIPHER_DES_CBC, MBEDTLS_MD_SHA1, MBEDTLS_KEY_EXCHANGE_RSA,
  1519. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_0,
  1520. MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3,
  1521. MBEDTLS_CIPHERSUITE_WEAK },
  1522. #endif /* MBEDTLS_SHA1_C */
  1523. #endif /* MBEDTLS_KEY_EXCHANGE_RSA_ENABLED */
  1524. #endif /* MBEDTLS_CIPHER_MODE_CBC */
  1525. #endif /* MBEDTLS_DES_C */
  1526. #endif /* MBEDTLS_ENABLE_WEAK_CIPHERSUITES */
  1527. { 0, "",
  1528. MBEDTLS_CIPHER_NONE, MBEDTLS_MD_NONE, MBEDTLS_KEY_EXCHANGE_NONE,
  1529. 0, 0, 0, 0, 0 }
  1530. };
  1531. #if defined(MBEDTLS_SSL_CIPHERSUITES)
  1532. const int *mbedtls_ssl_list_ciphersuites( void )
  1533. {
  1534. return( ciphersuite_preference );
  1535. }
  1536. #else
  1537. #define MAX_CIPHERSUITES sizeof( ciphersuite_definitions ) / \
  1538. sizeof( ciphersuite_definitions[0] )
  1539. static int supported_ciphersuites[MAX_CIPHERSUITES];
  1540. static int supported_init = 0;
  1541. const int *mbedtls_ssl_list_ciphersuites( void )
  1542. {
  1543. /*
  1544. * On initial call filter out all ciphersuites not supported by current
  1545. * build based on presence in the ciphersuite_definitions.
  1546. */
  1547. if( supported_init == 0 )
  1548. {
  1549. const int *p;
  1550. int *q;
  1551. for( p = ciphersuite_preference, q = supported_ciphersuites;
  1552. *p != 0 && q < supported_ciphersuites + MAX_CIPHERSUITES - 1;
  1553. p++ )
  1554. {
  1555. #if defined(MBEDTLS_REMOVE_ARC4_CIPHERSUITES)
  1556. const mbedtls_ssl_ciphersuite_t *cs_info;
  1557. if( ( cs_info = mbedtls_ssl_ciphersuite_from_id( *p ) ) != NULL &&
  1558. cs_info->cipher != MBEDTLS_CIPHER_ARC4_128 )
  1559. #else
  1560. if( mbedtls_ssl_ciphersuite_from_id( *p ) != NULL )
  1561. #endif
  1562. *(q++) = *p;
  1563. }
  1564. *q = 0;
  1565. supported_init = 1;
  1566. }
  1567. return( supported_ciphersuites );
  1568. }
  1569. #endif /* MBEDTLS_SSL_CIPHERSUITES */
  1570. const mbedtls_ssl_ciphersuite_t *mbedtls_ssl_ciphersuite_from_string(
  1571. const char *ciphersuite_name )
  1572. {
  1573. const mbedtls_ssl_ciphersuite_t *cur = ciphersuite_definitions;
  1574. if( NULL == ciphersuite_name )
  1575. return( NULL );
  1576. while( cur->id != 0 )
  1577. {
  1578. if( 0 == strcmp( cur->name, ciphersuite_name ) )
  1579. return( cur );
  1580. cur++;
  1581. }
  1582. return( NULL );
  1583. }
  1584. const mbedtls_ssl_ciphersuite_t *mbedtls_ssl_ciphersuite_from_id( int ciphersuite )
  1585. {
  1586. const mbedtls_ssl_ciphersuite_t *cur = ciphersuite_definitions;
  1587. while( cur->id != 0 )
  1588. {
  1589. if( cur->id == ciphersuite )
  1590. return( cur );
  1591. cur++;
  1592. }
  1593. return( NULL );
  1594. }
  1595. const char *mbedtls_ssl_get_ciphersuite_name( const int ciphersuite_id )
  1596. {
  1597. const mbedtls_ssl_ciphersuite_t *cur;
  1598. cur = mbedtls_ssl_ciphersuite_from_id( ciphersuite_id );
  1599. if( cur == NULL )
  1600. return( "unknown" );
  1601. return( cur->name );
  1602. }
  1603. int mbedtls_ssl_get_ciphersuite_id( const char *ciphersuite_name )
  1604. {
  1605. const mbedtls_ssl_ciphersuite_t *cur;
  1606. cur = mbedtls_ssl_ciphersuite_from_string( ciphersuite_name );
  1607. if( cur == NULL )
  1608. return( 0 );
  1609. return( cur->id );
  1610. }
  1611. #if defined(MBEDTLS_PK_C)
  1612. mbedtls_pk_type_t mbedtls_ssl_get_ciphersuite_sig_pk_alg( const mbedtls_ssl_ciphersuite_t *info )
  1613. {
  1614. switch( info->key_exchange )
  1615. {
  1616. case MBEDTLS_KEY_EXCHANGE_RSA:
  1617. case MBEDTLS_KEY_EXCHANGE_DHE_RSA:
  1618. case MBEDTLS_KEY_EXCHANGE_ECDHE_RSA:
  1619. case MBEDTLS_KEY_EXCHANGE_RSA_PSK:
  1620. return( MBEDTLS_PK_RSA );
  1621. case MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA:
  1622. return( MBEDTLS_PK_ECDSA );
  1623. case MBEDTLS_KEY_EXCHANGE_ECDH_RSA:
  1624. case MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA:
  1625. return( MBEDTLS_PK_ECKEY );
  1626. default:
  1627. return( MBEDTLS_PK_NONE );
  1628. }
  1629. }
  1630. #endif /* MBEDTLS_PK_C */
  1631. #if defined(MBEDTLS_ECDH_C) || defined(MBEDTLS_ECDSA_C)
  1632. int mbedtls_ssl_ciphersuite_uses_ec( const mbedtls_ssl_ciphersuite_t *info )
  1633. {
  1634. switch( info->key_exchange )
  1635. {
  1636. case MBEDTLS_KEY_EXCHANGE_ECDHE_RSA:
  1637. case MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA:
  1638. case MBEDTLS_KEY_EXCHANGE_ECDHE_PSK:
  1639. case MBEDTLS_KEY_EXCHANGE_ECDH_RSA:
  1640. case MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA:
  1641. return( 1 );
  1642. default:
  1643. return( 0 );
  1644. }
  1645. }
  1646. #endif /* MBEDTLS_ECDH_C || MBEDTLS_ECDSA_C */
  1647. #if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED)
  1648. int mbedtls_ssl_ciphersuite_uses_psk( const mbedtls_ssl_ciphersuite_t *info )
  1649. {
  1650. switch( info->key_exchange )
  1651. {
  1652. case MBEDTLS_KEY_EXCHANGE_PSK:
  1653. case MBEDTLS_KEY_EXCHANGE_RSA_PSK:
  1654. case MBEDTLS_KEY_EXCHANGE_DHE_PSK:
  1655. case MBEDTLS_KEY_EXCHANGE_ECDHE_PSK:
  1656. return( 1 );
  1657. default:
  1658. return( 0 );
  1659. }
  1660. }
  1661. #endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */
  1662. #endif /* MBEDTLS_SSL_TLS_C */