ssl_ciphersuites.h

Go to the documentation of this file.

 
#ifndef POLARSSL_SSL_CIPHERSUITES_H
#define POLARSSL_SSL_CIPHERSUITES_H
 
#include "pk.h"
#include "cipher.h"
#include "md.h"
 
#ifdef __cplusplus
extern "C" {
#endif
 
/*
 * Supported ciphersuites (Official IANA names)
 */
#define TLS_RSA_WITH_NULL_MD5                    0x01   
#define TLS_RSA_WITH_NULL_SHA                    0x02   
#define TLS_RSA_WITH_RC4_128_MD5                 0x04
#define TLS_RSA_WITH_RC4_128_SHA                 0x05
#define TLS_RSA_WITH_DES_CBC_SHA                 0x09   
#define TLS_RSA_WITH_3DES_EDE_CBC_SHA            0x0A
 
#define TLS_DHE_RSA_WITH_DES_CBC_SHA             0x15   
#define TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA        0x16
 
#define TLS_PSK_WITH_NULL_SHA                    0x2C   
#define TLS_DHE_PSK_WITH_NULL_SHA                0x2D   
#define TLS_RSA_PSK_WITH_NULL_SHA                0x2E   
#define TLS_RSA_WITH_AES_128_CBC_SHA             0x2F
 
#define TLS_DHE_RSA_WITH_AES_128_CBC_SHA         0x33
#define TLS_RSA_WITH_AES_256_CBC_SHA             0x35
#define TLS_DHE_RSA_WITH_AES_256_CBC_SHA         0x39
 
#define TLS_RSA_WITH_NULL_SHA256                 0x3B   
#define TLS_RSA_WITH_AES_128_CBC_SHA256          0x3C   
#define TLS_RSA_WITH_AES_256_CBC_SHA256          0x3D   
#define TLS_RSA_WITH_CAMELLIA_128_CBC_SHA        0x41
#define TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA    0x45
 
#define TLS_DHE_RSA_WITH_AES_128_CBC_SHA256      0x67   
#define TLS_DHE_RSA_WITH_AES_256_CBC_SHA256      0x6B   
#define TLS_RSA_WITH_CAMELLIA_256_CBC_SHA        0x84
#define TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA    0x88
 
#define TLS_PSK_WITH_RC4_128_SHA                 0x8A
#define TLS_PSK_WITH_3DES_EDE_CBC_SHA            0x8B
#define TLS_PSK_WITH_AES_128_CBC_SHA             0x8C
#define TLS_PSK_WITH_AES_256_CBC_SHA             0x8D
 
#define TLS_DHE_PSK_WITH_RC4_128_SHA             0x8E
#define TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA        0x8F
#define TLS_DHE_PSK_WITH_AES_128_CBC_SHA         0x90
#define TLS_DHE_PSK_WITH_AES_256_CBC_SHA         0x91
 
#define TLS_RSA_PSK_WITH_RC4_128_SHA             0x92
#define TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA        0x93
#define TLS_RSA_PSK_WITH_AES_128_CBC_SHA         0x94
#define TLS_RSA_PSK_WITH_AES_256_CBC_SHA         0x95
 
#define TLS_RSA_WITH_AES_128_GCM_SHA256          0x9C   
#define TLS_RSA_WITH_AES_256_GCM_SHA384          0x9D   
#define TLS_DHE_RSA_WITH_AES_128_GCM_SHA256      0x9E   
#define TLS_DHE_RSA_WITH_AES_256_GCM_SHA384      0x9F   
#define TLS_PSK_WITH_AES_128_GCM_SHA256          0xA8   
#define TLS_PSK_WITH_AES_256_GCM_SHA384          0xA9   
#define TLS_DHE_PSK_WITH_AES_128_GCM_SHA256      0xAA   
#define TLS_DHE_PSK_WITH_AES_256_GCM_SHA384      0xAB   
#define TLS_RSA_PSK_WITH_AES_128_GCM_SHA256      0xAC   
#define TLS_RSA_PSK_WITH_AES_256_GCM_SHA384      0xAD   
#define TLS_PSK_WITH_AES_128_CBC_SHA256          0xAE
#define TLS_PSK_WITH_AES_256_CBC_SHA384          0xAF
#define TLS_PSK_WITH_NULL_SHA256                 0xB0   
#define TLS_PSK_WITH_NULL_SHA384                 0xB1   
#define TLS_DHE_PSK_WITH_AES_128_CBC_SHA256      0xB2
#define TLS_DHE_PSK_WITH_AES_256_CBC_SHA384      0xB3
#define TLS_DHE_PSK_WITH_NULL_SHA256             0xB4   
#define TLS_DHE_PSK_WITH_NULL_SHA384             0xB5   
#define TLS_RSA_PSK_WITH_AES_128_CBC_SHA256      0xB6
#define TLS_RSA_PSK_WITH_AES_256_CBC_SHA384      0xB7
#define TLS_RSA_PSK_WITH_NULL_SHA256             0xB8   
#define TLS_RSA_PSK_WITH_NULL_SHA384             0xB9   
#define TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256     0xBA   
#define TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 0xBE   
#define TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256     0xC0   
#define TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 0xC4   
#define TLS_ECDH_ECDSA_WITH_NULL_SHA             0xC001 
#define TLS_ECDH_ECDSA_WITH_RC4_128_SHA          0xC002 
#define TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA     0xC003 
#define TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA      0xC004 
#define TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA      0xC005 
#define TLS_ECDHE_ECDSA_WITH_NULL_SHA            0xC006 
#define TLS_ECDHE_ECDSA_WITH_RC4_128_SHA         0xC007 
#define TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA    0xC008 
#define TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA     0xC009 
#define TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA     0xC00A 
#define TLS_ECDH_RSA_WITH_NULL_SHA               0xC00B 
#define TLS_ECDH_RSA_WITH_RC4_128_SHA            0xC00C 
#define TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA       0xC00D 
#define TLS_ECDH_RSA_WITH_AES_128_CBC_SHA        0xC00E 
#define TLS_ECDH_RSA_WITH_AES_256_CBC_SHA        0xC00F 
#define TLS_ECDHE_RSA_WITH_NULL_SHA              0xC010 
#define TLS_ECDHE_RSA_WITH_RC4_128_SHA           0xC011 
#define TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA      0xC012 
#define TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA       0xC013 
#define TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA       0xC014 
#define TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256  0xC023 
#define TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384  0xC024 
#define TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256   0xC025 
#define TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384   0xC026 
#define TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256    0xC027 
#define TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384    0xC028 
#define TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256     0xC029 
#define TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384     0xC02A 
#define TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256  0xC02B 
#define TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384  0xC02C 
#define TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256   0xC02D 
#define TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384   0xC02E 
#define TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256    0xC02F 
#define TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384    0xC030 
#define TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256     0xC031 
#define TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384     0xC032 
#define TLS_ECDHE_PSK_WITH_RC4_128_SHA           0xC033 
#define TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA      0xC034 
#define TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA       0xC035 
#define TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA       0xC036 
#define TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256    0xC037 
#define TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384    0xC038 
#define TLS_ECDHE_PSK_WITH_NULL_SHA              0xC039 
#define TLS_ECDHE_PSK_WITH_NULL_SHA256           0xC03A 
#define TLS_ECDHE_PSK_WITH_NULL_SHA384           0xC03B 
#define TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 0xC072 
#define TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 0xC073 
#define TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256  0xC074 
#define TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384  0xC075 
#define TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256   0xC076 
#define TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384   0xC077 
#define TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256    0xC078 
#define TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384    0xC079 
#define TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256         0xC07A 
#define TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384         0xC07B 
#define TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256     0xC07C 
#define TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384     0xC07D 
#define TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 0xC086 
#define TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 0xC087 
#define TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256  0xC088 
#define TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384  0xC089 
#define TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256   0xC08A 
#define TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384   0xC08B 
#define TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256    0xC08C 
#define TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384    0xC08D 
#define TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256       0xC08E 
#define TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384       0xC08F 
#define TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256   0xC090 
#define TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384   0xC091 
#define TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256   0xC092 
#define TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384   0xC093 
#define TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256       0xC094
#define TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384       0xC095
#define TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256   0xC096
#define TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384   0xC097
#define TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256   0xC098
#define TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384   0xC099
#define TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 0xC09A 
#define TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 0xC09B 
#define TLS_RSA_WITH_AES_128_CCM                0xC09C  
#define TLS_RSA_WITH_AES_256_CCM                0xC09D  
#define TLS_DHE_RSA_WITH_AES_128_CCM            0xC09E  
#define TLS_DHE_RSA_WITH_AES_256_CCM            0xC09F  
#define TLS_RSA_WITH_AES_128_CCM_8              0xC0A0  
#define TLS_RSA_WITH_AES_256_CCM_8              0xC0A1  
#define TLS_DHE_RSA_WITH_AES_128_CCM_8          0xC0A2  
#define TLS_DHE_RSA_WITH_AES_256_CCM_8          0xC0A3  
#define TLS_PSK_WITH_AES_128_CCM                0xC0A4  
#define TLS_PSK_WITH_AES_256_CCM                0xC0A5  
#define TLS_DHE_PSK_WITH_AES_128_CCM            0xC0A6  
#define TLS_DHE_PSK_WITH_AES_256_CCM            0xC0A7  
#define TLS_PSK_WITH_AES_128_CCM_8              0xC0A8  
#define TLS_PSK_WITH_AES_256_CCM_8              0xC0A9  
#define TLS_DHE_PSK_WITH_AES_128_CCM_8          0xC0AA  
#define TLS_DHE_PSK_WITH_AES_256_CCM_8          0xC0AB  
/* The last two are named with PSK_DHE in the RFC, which looks like a typo */
 
#define TLS_ECDHE_ECDSA_WITH_AES_128_CCM        0xC0AC  
#define TLS_ECDHE_ECDSA_WITH_AES_256_CCM        0xC0AD  
#define TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8      0xC0AE  
#define TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8      0xC0AF  
/* Reminder: update _ssl_premaster_secret when adding a new key exchange */
typedef enum {
    POLARSSL_KEY_EXCHANGE_NONE = 0,
    POLARSSL_KEY_EXCHANGE_RSA,
    POLARSSL_KEY_EXCHANGE_DHE_RSA,
    POLARSSL_KEY_EXCHANGE_ECDHE_RSA,
    POLARSSL_KEY_EXCHANGE_ECDHE_ECDSA,
    POLARSSL_KEY_EXCHANGE_PSK,
    POLARSSL_KEY_EXCHANGE_DHE_PSK,
    POLARSSL_KEY_EXCHANGE_RSA_PSK,
    POLARSSL_KEY_EXCHANGE_ECDHE_PSK,
    POLARSSL_KEY_EXCHANGE_ECDH_RSA,
    POLARSSL_KEY_EXCHANGE_ECDH_ECDSA,
} key_exchange_type_t;
 
typedef struct _ssl_ciphersuite_t ssl_ciphersuite_t;
 
#define POLARSSL_CIPHERSUITE_WEAK       0x01    
#define POLARSSL_CIPHERSUITE_SHORT_TAG  0x02    
struct _ssl_ciphersuite_t
{
    int id;
    const char * name;
 
    cipher_type_t cipher;
    md_type_t mac;
    key_exchange_type_t key_exchange;
 
    int min_major_ver;
    int min_minor_ver;
    int max_major_ver;
    int max_minor_ver;
 
    unsigned char flags;
};
 
const int *ssl_list_ciphersuites( void );
 
const ssl_ciphersuite_t *ssl_ciphersuite_from_string( const char *ciphersuite_name );
const ssl_ciphersuite_t *ssl_ciphersuite_from_id( int ciphersuite_id );
 
#if defined(POLARSSL_PK_C)
pk_type_t ssl_get_ciphersuite_sig_pk_alg( const ssl_ciphersuite_t *info );
#endif
 
int ssl_ciphersuite_uses_ec( const ssl_ciphersuite_t *info );
int ssl_ciphersuite_uses_psk( const ssl_ciphersuite_t *info );
 
#ifdef __cplusplus
}
#endif
 
#endif /* ssl_ciphersuites.h */