]> git.ipfire.org Git - thirdparty/openssl.git/blame - ssl/s3_lib.c
projects / thirdparty / openssl.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
crypto/poly1305/asm: fix armv8 pointer authentication
[thirdparty/openssl.git] / ssl / s3_lib.c
CommitLineData
846e33c7 1/*
98278b96 2 * Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved.
aa8f3d76 3 * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
c80149d9 4 * Copyright 2005 Nokia. All rights reserved.
5a4fbc69 5 *
2c18d164 6 * Licensed under the Apache License 2.0 (the "License"). You may not use
846e33c7
RS		 7 * this file except in compliance with the License. You can obtain a copy
8 * in the file LICENSE in the source distribution or at
9 * https://www.openssl.org/source/license.html
5a4fbc69 10 */
846e33c7 11
d02b48c6 12#include <stdio.h>
ec577822 13#include <openssl/objects.h>
677963e5 14#include "internal/nelem.h"
706457b7 15#include "ssl_local.h"
dbad1690 16#include <openssl/md5.h>
3c27208f 17#include <openssl/dh.h>
a3680c8f 18#include <openssl/rand.h>
77359d22 19#include <openssl/trace.h>
9f0f53b7 20#include <openssl/x509v3.h>
5f8dd0f8 21#include "internal/cryptlib.h"
d02b48c6 22
f865b081 23#define TLS13_NUM_CIPHERS OSSL_NELEM(tls13_ciphers)
b6eb9827 24#define SSL3_NUM_CIPHERS OSSL_NELEM(ssl3_ciphers)
650c6e41 25#define SSL3_NUM_SCSVS OSSL_NELEM(ssl3_scsvs)
d02b48c6 26
643a3580
MC		 27/* TLSv1.3 downgrade protection sentinel values */
28const unsigned char tls11downgrade[] = {
29 0x44, 0x4f, 0x57, 0x4e, 0x47, 0x52, 0x44, 0x00
30};
31const unsigned char tls12downgrade[] = {
32 0x44, 0x4f, 0x57, 0x4e, 0x47, 0x52, 0x44, 0x01
33};
34
f865b081
MC		 35/* The list of available TLSv1.3 ciphers */
36static SSL_CIPHER tls13_ciphers[] = {
37 {
38 1,
39 TLS1_3_RFC_AES_128_GCM_SHA256,
40 TLS1_3_RFC_AES_128_GCM_SHA256,
41 TLS1_3_CK_AES_128_GCM_SHA256,
f80c8643
MC		 42 SSL_kANY,
43 SSL_aANY,
f865b081
MC		 44 SSL_AES128GCM,
45 SSL_AEAD,
46 TLS1_3_VERSION, TLS1_3_VERSION,
f80c8643 47 0, 0,
f865b081
MC		 48 SSL_HIGH,
49 SSL_HANDSHAKE_MAC_SHA256,
50 128,
51 128,
52 }, {
53 1,
54 TLS1_3_RFC_AES_256_GCM_SHA384,
55 TLS1_3_RFC_AES_256_GCM_SHA384,
56 TLS1_3_CK_AES_256_GCM_SHA384,
57 SSL_kANY,
58 SSL_aANY,
59 SSL_AES256GCM,
60 SSL_AEAD,
61 TLS1_3_VERSION, TLS1_3_VERSION,
62 0, 0,
63 SSL_HIGH,
64 SSL_HANDSHAKE_MAC_SHA384,
65 256,
66 256,
67 },
68#if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
69 {
70 1,
71 TLS1_3_RFC_CHACHA20_POLY1305_SHA256,
72 TLS1_3_RFC_CHACHA20_POLY1305_SHA256,
73 TLS1_3_CK_CHACHA20_POLY1305_SHA256,
74 SSL_kANY,
75 SSL_aANY,
76 SSL_CHACHA20POLY1305,
77 SSL_AEAD,
78 TLS1_3_VERSION, TLS1_3_VERSION,
79 0, 0,
80 SSL_HIGH,
81 SSL_HANDSHAKE_MAC_SHA256,
82 256,
83 256,
84 },
85#endif
86 {
87 1,
88 TLS1_3_RFC_AES_128_CCM_SHA256,
89 TLS1_3_RFC_AES_128_CCM_SHA256,
90 TLS1_3_CK_AES_128_CCM_SHA256,
91 SSL_kANY,
92 SSL_aANY,
93 SSL_AES128CCM,
94 SSL_AEAD,
95 TLS1_3_VERSION, TLS1_3_VERSION,
96 0, 0,
97 SSL_NOT_DEFAULT | SSL_HIGH,
98 SSL_HANDSHAKE_MAC_SHA256,
99 128,
100 128,
101 }, {
102 1,
103 TLS1_3_RFC_AES_128_CCM_8_SHA256,
104 TLS1_3_RFC_AES_128_CCM_8_SHA256,
105 TLS1_3_CK_AES_128_CCM_8_SHA256,
106 SSL_kANY,
107 SSL_aANY,
108 SSL_AES128CCM8,
109 SSL_AEAD,
110 TLS1_3_VERSION, TLS1_3_VERSION,
111 0, 0,
112 SSL_NOT_DEFAULT | SSL_HIGH,
113 SSL_HANDSHAKE_MAC_SHA256,
114 128,
115 128,
116 }
117};
118
748f2546 119/*
ef28891b 120 * The list of available ciphers, mostly organized into the following
748f2546
RS		 121 * groups:
122 * Always there
123 * EC
124 * PSK
125 * SRP (within that: RSA EC PSK)
9bb6f829 126 * Cipher families: Chacha/poly, Camellia, Gost, IDEA, SEED
748f2546
RS		 127 * Weak ciphers
128 */
a230b26e 129static SSL_CIPHER ssl3_ciphers[] = {
0f113f3e
MC		 130 {
131 1,
132 SSL3_TXT_RSA_NULL_MD5,
bbb4ceb8 133 SSL3_RFC_RSA_NULL_MD5,
0f113f3e
MC		 134 SSL3_CK_RSA_NULL_MD5,
135 SSL_kRSA,
136 SSL_aRSA,
137 SSL_eNULL,
138 SSL_MD5,
3eb2aff4 139 SSL3_VERSION, TLS1_2_VERSION,
387cf213 140 DTLS1_BAD_VER, DTLS1_2_VERSION,
1510b5f7 141 SSL_STRONG_NONE,
0f113f3e
MC		 142 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
143 0,
144 0,
145 },
0f113f3e
MC		 146 {
147 1,
148 SSL3_TXT_RSA_NULL_SHA,
bbb4ceb8 149 SSL3_RFC_RSA_NULL_SHA,
0f113f3e
MC		 150 SSL3_CK_RSA_NULL_SHA,
151 SSL_kRSA,
152 SSL_aRSA,
153 SSL_eNULL,
154 SSL_SHA1,
3eb2aff4 155 SSL3_VERSION, TLS1_2_VERSION,
387cf213 156 DTLS1_BAD_VER, DTLS1_2_VERSION,
1510b5f7 157 SSL_STRONG_NONE | SSL_FIPS,
0f113f3e
MC		 158 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
159 0,
160 0,
161 },
d33726b9 162#ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
0f113f3e
MC		 163 {
164 1,
165 SSL3_TXT_RSA_DES_192_CBC3_SHA,
bbb4ceb8 166 SSL3_RFC_RSA_DES_192_CBC3_SHA,
0f113f3e
MC		 167 SSL3_CK_RSA_DES_192_CBC3_SHA,
168 SSL_kRSA,
169 SSL_aRSA,
170 SSL_3DES,
171 SSL_SHA1,
3eb2aff4 172 SSL3_VERSION, TLS1_2_VERSION,
387cf213 173 DTLS1_BAD_VER, DTLS1_2_VERSION,
ef28891b 174 SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
0f113f3e
MC		 175 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
176 112,
177 168,
178 },
0f113f3e
MC		 179 {
180 1,
181 SSL3_TXT_DHE_DSS_DES_192_CBC3_SHA,
bbb4ceb8 182 SSL3_RFC_DHE_DSS_DES_192_CBC3_SHA,
0f113f3e
MC		 183 SSL3_CK_DHE_DSS_DES_192_CBC3_SHA,
184 SSL_kDHE,
185 SSL_aDSS,
186 SSL_3DES,
187 SSL_SHA1,
3eb2aff4 188 SSL3_VERSION, TLS1_2_VERSION,
387cf213 189 DTLS1_BAD_VER, DTLS1_2_VERSION,
4a8e9c22 190 SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
0f113f3e
MC		 191 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
192 112,
193 168,
194 },
0f113f3e
MC		 195 {
196 1,
197 SSL3_TXT_DHE_RSA_DES_192_CBC3_SHA,
bbb4ceb8 198 SSL3_RFC_DHE_RSA_DES_192_CBC3_SHA,
0f113f3e
MC		 199 SSL3_CK_DHE_RSA_DES_192_CBC3_SHA,
200 SSL_kDHE,
201 SSL_aRSA,
202 SSL_3DES,
203 SSL_SHA1,
3eb2aff4 204 SSL3_VERSION, TLS1_2_VERSION,
387cf213 205 DTLS1_BAD_VER, DTLS1_2_VERSION,
ef28891b 206 SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
0f113f3e
MC		 207 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
208 112,
209 168,
210 },
0f113f3e
MC		 211 {
212 1,
213 SSL3_TXT_ADH_DES_192_CBC_SHA,
bbb4ceb8 214 SSL3_RFC_ADH_DES_192_CBC_SHA,
0f113f3e
MC		 215 SSL3_CK_ADH_DES_192_CBC_SHA,
216 SSL_kDHE,
217 SSL_aNULL,
218 SSL_3DES,
219 SSL_SHA1,
3eb2aff4 220 SSL3_VERSION, TLS1_2_VERSION,
387cf213 221 DTLS1_BAD_VER, DTLS1_2_VERSION,
4a8e9c22 222 SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
0f113f3e
MC		 223 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
224 112,
225 168,
226 },
d33726b9 227#endif
0f113f3e
MC		 228 {
229 1,
230 TLS1_TXT_RSA_WITH_AES_128_SHA,
bbb4ceb8 231 TLS1_RFC_RSA_WITH_AES_128_SHA,
0f113f3e
MC		 232 TLS1_CK_RSA_WITH_AES_128_SHA,
233 SSL_kRSA,
234 SSL_aRSA,
235 SSL_AES128,
236 SSL_SHA1,
3eb2aff4 237 SSL3_VERSION, TLS1_2_VERSION,
387cf213 238 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 239 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 240 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
241 128,
242 128,
243 },
0f113f3e
MC		 244 {
245 1,
246 TLS1_TXT_DHE_DSS_WITH_AES_128_SHA,
bbb4ceb8 247 TLS1_RFC_DHE_DSS_WITH_AES_128_SHA,
0f113f3e
MC		 248 TLS1_CK_DHE_DSS_WITH_AES_128_SHA,
249 SSL_kDHE,
250 SSL_aDSS,
251 SSL_AES128,
252 SSL_SHA1,
3eb2aff4 253 SSL3_VERSION, TLS1_2_VERSION,
387cf213 254 DTLS1_BAD_VER, DTLS1_2_VERSION,
a556f342 255 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 256 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
257 128,
258 128,
259 },
0f113f3e
MC		 260 {
261 1,
262 TLS1_TXT_DHE_RSA_WITH_AES_128_SHA,
bbb4ceb8 263 TLS1_RFC_DHE_RSA_WITH_AES_128_SHA,
0f113f3e
MC		 264 TLS1_CK_DHE_RSA_WITH_AES_128_SHA,
265 SSL_kDHE,
266 SSL_aRSA,
267 SSL_AES128,
268 SSL_SHA1,
3eb2aff4 269 SSL3_VERSION, TLS1_2_VERSION,
387cf213 270 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 271 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 272 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
273 128,
274 128,
275 },
0f113f3e
MC		 276 {
277 1,
278 TLS1_TXT_ADH_WITH_AES_128_SHA,
bbb4ceb8 279 TLS1_RFC_ADH_WITH_AES_128_SHA,
0f113f3e
MC		 280 TLS1_CK_ADH_WITH_AES_128_SHA,
281 SSL_kDHE,
282 SSL_aNULL,
283 SSL_AES128,
284 SSL_SHA1,
3eb2aff4 285 SSL3_VERSION, TLS1_2_VERSION,
387cf213 286 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 287 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 288 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
289 128,
290 128,
291 },
0f113f3e
MC		 292 {
293 1,
294 TLS1_TXT_RSA_WITH_AES_256_SHA,
bbb4ceb8 295 TLS1_RFC_RSA_WITH_AES_256_SHA,
0f113f3e
MC		 296 TLS1_CK_RSA_WITH_AES_256_SHA,
297 SSL_kRSA,
298 SSL_aRSA,
299 SSL_AES256,
300 SSL_SHA1,
3eb2aff4 301 SSL3_VERSION, TLS1_2_VERSION,
387cf213 302 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 303 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 304 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
305 256,
306 256,
307 },
0f113f3e
MC		 308 {
309 1,
310 TLS1_TXT_DHE_DSS_WITH_AES_256_SHA,
bbb4ceb8 311 TLS1_RFC_DHE_DSS_WITH_AES_256_SHA,
0f113f3e
MC		 312 TLS1_CK_DHE_DSS_WITH_AES_256_SHA,
313 SSL_kDHE,
314 SSL_aDSS,
315 SSL_AES256,
316 SSL_SHA1,
3eb2aff4 317 SSL3_VERSION, TLS1_2_VERSION,
387cf213 318 DTLS1_BAD_VER, DTLS1_2_VERSION,
a556f342 319 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 320 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
321 256,
322 256,
323 },
0f113f3e
MC		 324 {
325 1,
326 TLS1_TXT_DHE_RSA_WITH_AES_256_SHA,
bbb4ceb8 327 TLS1_RFC_DHE_RSA_WITH_AES_256_SHA,
0f113f3e
MC		 328 TLS1_CK_DHE_RSA_WITH_AES_256_SHA,
329 SSL_kDHE,
330 SSL_aRSA,
331 SSL_AES256,
332 SSL_SHA1,
3eb2aff4 333 SSL3_VERSION, TLS1_2_VERSION,
387cf213 334 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 335 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 336 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
337 256,
338 256,
339 },
0f113f3e
MC		 340 {
341 1,
342 TLS1_TXT_ADH_WITH_AES_256_SHA,
bbb4ceb8 343 TLS1_RFC_ADH_WITH_AES_256_SHA,
0f113f3e
MC		 344 TLS1_CK_ADH_WITH_AES_256_SHA,
345 SSL_kDHE,
346 SSL_aNULL,
347 SSL_AES256,
348 SSL_SHA1,
3eb2aff4 349 SSL3_VERSION, TLS1_2_VERSION,
387cf213 350 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 351 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 352 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
353 256,
354 256,
355 },
0f113f3e
MC		 356 {
357 1,
358 TLS1_TXT_RSA_WITH_NULL_SHA256,
bbb4ceb8 359 TLS1_RFC_RSA_WITH_NULL_SHA256,
0f113f3e
MC		 360 TLS1_CK_RSA_WITH_NULL_SHA256,
361 SSL_kRSA,
362 SSL_aRSA,
363 SSL_eNULL,
364 SSL_SHA256,
3eb2aff4
KR		 365 TLS1_2_VERSION, TLS1_2_VERSION,
366 DTLS1_2_VERSION, DTLS1_2_VERSION,
1510b5f7 367 SSL_STRONG_NONE | SSL_FIPS,
0f113f3e
MC		 368 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
369 0,
370 0,
371 },
0f113f3e
MC		 372 {
373 1,
374 TLS1_TXT_RSA_WITH_AES_128_SHA256,
bbb4ceb8 375 TLS1_RFC_RSA_WITH_AES_128_SHA256,
0f113f3e
MC		 376 TLS1_CK_RSA_WITH_AES_128_SHA256,
377 SSL_kRSA,
378 SSL_aRSA,
379 SSL_AES128,
380 SSL_SHA256,
3eb2aff4
KR		 381 TLS1_2_VERSION, TLS1_2_VERSION,
382 DTLS1_2_VERSION, DTLS1_2_VERSION,
361a1191 383 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 384 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
385 128,
386 128,
387 },
0f113f3e
MC		 388 {
389 1,
390 TLS1_TXT_RSA_WITH_AES_256_SHA256,
bbb4ceb8 391 TLS1_RFC_RSA_WITH_AES_256_SHA256,
0f113f3e
MC		 392 TLS1_CK_RSA_WITH_AES_256_SHA256,
393 SSL_kRSA,
394 SSL_aRSA,
395 SSL_AES256,
396 SSL_SHA256,
3eb2aff4
KR		 397 TLS1_2_VERSION, TLS1_2_VERSION,
398 DTLS1_2_VERSION, DTLS1_2_VERSION,
361a1191 399 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 400 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
401 256,
402 256,
403 },
0f113f3e
MC		 404 {
405 1,
406 TLS1_TXT_DHE_DSS_WITH_AES_128_SHA256,
bbb4ceb8 407 TLS1_RFC_DHE_DSS_WITH_AES_128_SHA256,
0f113f3e
MC		 408 TLS1_CK_DHE_DSS_WITH_AES_128_SHA256,
409 SSL_kDHE,
410 SSL_aDSS,
411 SSL_AES128,
412 SSL_SHA256,
3eb2aff4
KR		 413 TLS1_2_VERSION, TLS1_2_VERSION,
414 DTLS1_2_VERSION, DTLS1_2_VERSION,
a556f342 415 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 416 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
417 128,
418 128,
419 },
0f113f3e
MC		 420 {
421 1,
422 TLS1_TXT_DHE_RSA_WITH_AES_128_SHA256,
bbb4ceb8 423 TLS1_RFC_DHE_RSA_WITH_AES_128_SHA256,
0f113f3e
MC		 424 TLS1_CK_DHE_RSA_WITH_AES_128_SHA256,
425 SSL_kDHE,
426 SSL_aRSA,
427 SSL_AES128,
428 SSL_SHA256,
3eb2aff4
KR		 429 TLS1_2_VERSION, TLS1_2_VERSION,
430 DTLS1_2_VERSION, DTLS1_2_VERSION,
361a1191 431 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 432 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
433 128,
434 128,
435 },
0f113f3e
MC		 436 {
437 1,
438 TLS1_TXT_DHE_DSS_WITH_AES_256_SHA256,
bbb4ceb8 439 TLS1_RFC_DHE_DSS_WITH_AES_256_SHA256,
0f113f3e
MC		 440 TLS1_CK_DHE_DSS_WITH_AES_256_SHA256,
441 SSL_kDHE,
442 SSL_aDSS,
443 SSL_AES256,
444 SSL_SHA256,
3eb2aff4
KR		 445 TLS1_2_VERSION, TLS1_2_VERSION,
446 DTLS1_2_VERSION, DTLS1_2_VERSION,
a556f342 447 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 448 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
449 256,
450 256,
451 },
0f113f3e
MC		 452 {
453 1,
454 TLS1_TXT_DHE_RSA_WITH_AES_256_SHA256,
bbb4ceb8 455 TLS1_RFC_DHE_RSA_WITH_AES_256_SHA256,
0f113f3e
MC		 456 TLS1_CK_DHE_RSA_WITH_AES_256_SHA256,
457 SSL_kDHE,
458 SSL_aRSA,
459 SSL_AES256,
460 SSL_SHA256,
3eb2aff4
KR		 461 TLS1_2_VERSION, TLS1_2_VERSION,
462 DTLS1_2_VERSION, DTLS1_2_VERSION,
361a1191 463 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 464 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
465 256,
466 256,
467 },
0f113f3e
MC		 468 {
469 1,
470 TLS1_TXT_ADH_WITH_AES_128_SHA256,
bbb4ceb8 471 TLS1_RFC_ADH_WITH_AES_128_SHA256,
0f113f3e
MC		 472 TLS1_CK_ADH_WITH_AES_128_SHA256,
473 SSL_kDHE,
474 SSL_aNULL,
475 SSL_AES128,
476 SSL_SHA256,
3eb2aff4
KR		 477 TLS1_2_VERSION, TLS1_2_VERSION,
478 DTLS1_2_VERSION, DTLS1_2_VERSION,
361a1191 479 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 480 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
481 128,
482 128,
483 },
0f113f3e
MC		 484 {
485 1,
486 TLS1_TXT_ADH_WITH_AES_256_SHA256,
bbb4ceb8 487 TLS1_RFC_ADH_WITH_AES_256_SHA256,
0f113f3e
MC		 488 TLS1_CK_ADH_WITH_AES_256_SHA256,
489 SSL_kDHE,
490 SSL_aNULL,
491 SSL_AES256,
492 SSL_SHA256,
3eb2aff4
KR		 493 TLS1_2_VERSION, TLS1_2_VERSION,
494 DTLS1_2_VERSION, DTLS1_2_VERSION,
361a1191 495 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 496 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
497 256,
498 256,
499 },
0f113f3e
MC		 500 {
501 1,
748f2546 502 TLS1_TXT_RSA_WITH_AES_128_GCM_SHA256,
bbb4ceb8 503 TLS1_RFC_RSA_WITH_AES_128_GCM_SHA256,
748f2546
RS		 504 TLS1_CK_RSA_WITH_AES_128_GCM_SHA256,
505 SSL_kRSA,
506 SSL_aRSA,
507 SSL_AES128GCM,
508 SSL_AEAD,
509 TLS1_2_VERSION, TLS1_2_VERSION,
510 DTLS1_2_VERSION, DTLS1_2_VERSION,
511 SSL_HIGH | SSL_FIPS,
512 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
513 128,
514 128,
515 },
0f113f3e
MC		 516 {
517 1,
748f2546 518 TLS1_TXT_RSA_WITH_AES_256_GCM_SHA384,
bbb4ceb8 519 TLS1_RFC_RSA_WITH_AES_256_GCM_SHA384,
748f2546 520 TLS1_CK_RSA_WITH_AES_256_GCM_SHA384,
0f113f3e
MC		 521 SSL_kRSA,
522 SSL_aRSA,
748f2546
RS		 523 SSL_AES256GCM,
524 SSL_AEAD,
525 TLS1_2_VERSION, TLS1_2_VERSION,
526 DTLS1_2_VERSION, DTLS1_2_VERSION,
527 SSL_HIGH | SSL_FIPS,
528 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
0f113f3e
MC		 529 256,
530 256,
531 },
0f113f3e
MC		 532 {
533 1,
748f2546 534 TLS1_TXT_DHE_RSA_WITH_AES_128_GCM_SHA256,
bbb4ceb8 535 TLS1_RFC_DHE_RSA_WITH_AES_128_GCM_SHA256,
748f2546 536 TLS1_CK_DHE_RSA_WITH_AES_128_GCM_SHA256,
0f113f3e 537 SSL_kDHE,
748f2546
RS		 538 SSL_aRSA,
539 SSL_AES128GCM,
540 SSL_AEAD,
541 TLS1_2_VERSION, TLS1_2_VERSION,
542 DTLS1_2_VERSION, DTLS1_2_VERSION,
543 SSL_HIGH | SSL_FIPS,
544 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
545 128,
546 128,
0f113f3e 547 },
0f113f3e
MC		 548 {
549 1,
748f2546 550 TLS1_TXT_DHE_RSA_WITH_AES_256_GCM_SHA384,
bbb4ceb8 551 TLS1_RFC_DHE_RSA_WITH_AES_256_GCM_SHA384,
748f2546 552 TLS1_CK_DHE_RSA_WITH_AES_256_GCM_SHA384,
0f113f3e
MC		 553 SSL_kDHE,
554 SSL_aRSA,
748f2546
RS		 555 SSL_AES256GCM,
556 SSL_AEAD,
557 TLS1_2_VERSION, TLS1_2_VERSION,
558 DTLS1_2_VERSION, DTLS1_2_VERSION,
559 SSL_HIGH | SSL_FIPS,
560 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
0f113f3e
MC		 561 256,
562 256,
563 },
0f113f3e
MC		 564 {
565 1,
748f2546 566 TLS1_TXT_DHE_DSS_WITH_AES_128_GCM_SHA256,
bbb4ceb8 567 TLS1_RFC_DHE_DSS_WITH_AES_128_GCM_SHA256,
748f2546 568 TLS1_CK_DHE_DSS_WITH_AES_128_GCM_SHA256,
0f113f3e 569 SSL_kDHE,
748f2546
RS		 570 SSL_aDSS,
571 SSL_AES128GCM,
572 SSL_AEAD,
573 TLS1_2_VERSION, TLS1_2_VERSION,
574 DTLS1_2_VERSION, DTLS1_2_VERSION,
575 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
576 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
0f113f3e
MC		 577 128,
578 128,
579 },
0f113f3e
MC		 580 {
581 1,
748f2546 582 TLS1_TXT_DHE_DSS_WITH_AES_256_GCM_SHA384,
bbb4ceb8 583 TLS1_RFC_DHE_DSS_WITH_AES_256_GCM_SHA384,
748f2546
RS		 584 TLS1_CK_DHE_DSS_WITH_AES_256_GCM_SHA384,
585 SSL_kDHE,
586 SSL_aDSS,
587 SSL_AES256GCM,
588 SSL_AEAD,
589 TLS1_2_VERSION, TLS1_2_VERSION,
590 DTLS1_2_VERSION, DTLS1_2_VERSION,
591 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
592 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
593 256,
594 256,
0f113f3e 595 },
0f113f3e
MC		 596 {
597 1,
748f2546 598 TLS1_TXT_ADH_WITH_AES_128_GCM_SHA256,
bbb4ceb8 599 TLS1_RFC_ADH_WITH_AES_128_GCM_SHA256,
748f2546
RS		 600 TLS1_CK_ADH_WITH_AES_128_GCM_SHA256,
601 SSL_kDHE,
602 SSL_aNULL,
603 SSL_AES128GCM,
604 SSL_AEAD,
605 TLS1_2_VERSION, TLS1_2_VERSION,
606 DTLS1_2_VERSION, DTLS1_2_VERSION,
607 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
608 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
0f113f3e
MC		 609 128,
610 128,
611 },
0f113f3e
MC		 612 {
613 1,
748f2546 614 TLS1_TXT_ADH_WITH_AES_256_GCM_SHA384,
bbb4ceb8 615 TLS1_RFC_ADH_WITH_AES_256_GCM_SHA384,
748f2546
RS		 616 TLS1_CK_ADH_WITH_AES_256_GCM_SHA384,
617 SSL_kDHE,
618 SSL_aNULL,
619 SSL_AES256GCM,
620 SSL_AEAD,
621 TLS1_2_VERSION, TLS1_2_VERSION,
622 DTLS1_2_VERSION, DTLS1_2_VERSION,
623 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
624 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
0f113f3e
MC		 625 256,
626 256,
627 },
ea6114c6
DSH		 628 {
629 1,
748f2546 630 TLS1_TXT_RSA_WITH_AES_128_CCM,
bbb4ceb8 631 TLS1_RFC_RSA_WITH_AES_128_CCM,
748f2546
RS		 632 TLS1_CK_RSA_WITH_AES_128_CCM,
633 SSL_kRSA,
634 SSL_aRSA,
635 SSL_AES128CCM,
636 SSL_AEAD,
637 TLS1_2_VERSION, TLS1_2_VERSION,
638 DTLS1_2_VERSION, DTLS1_2_VERSION,
639 SSL_NOT_DEFAULT | SSL_HIGH,
640 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
ea6114c6
DSH		 641 128,
642 128,
643 },
ea6114c6
DSH		 644 {
645 1,
748f2546 646 TLS1_TXT_RSA_WITH_AES_256_CCM,
bbb4ceb8 647 TLS1_RFC_RSA_WITH_AES_256_CCM,
748f2546
RS		 648 TLS1_CK_RSA_WITH_AES_256_CCM,
649 SSL_kRSA,
650 SSL_aRSA,
651 SSL_AES256CCM,
652 SSL_AEAD,
653 TLS1_2_VERSION, TLS1_2_VERSION,
654 DTLS1_2_VERSION, DTLS1_2_VERSION,
655 SSL_NOT_DEFAULT | SSL_HIGH,
656 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
657 256,
658 256,
ea6114c6 659 },
ea6114c6
DSH		 660 {
661 1,
748f2546 662 TLS1_TXT_DHE_RSA_WITH_AES_128_CCM,
bbb4ceb8 663 TLS1_RFC_DHE_RSA_WITH_AES_128_CCM,
748f2546
RS		 664 TLS1_CK_DHE_RSA_WITH_AES_128_CCM,
665 SSL_kDHE,
666 SSL_aRSA,
667 SSL_AES128CCM,
668 SSL_AEAD,
669 TLS1_2_VERSION, TLS1_2_VERSION,
670 DTLS1_2_VERSION, DTLS1_2_VERSION,
671 SSL_NOT_DEFAULT | SSL_HIGH,
672 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
ea6114c6
DSH		 673 128,
674 128,
675 },
ea6114c6
DSH		 676 {
677 1,
748f2546 678 TLS1_TXT_DHE_RSA_WITH_AES_256_CCM,
bbb4ceb8 679 TLS1_RFC_DHE_RSA_WITH_AES_256_CCM,
748f2546
RS		 680 TLS1_CK_DHE_RSA_WITH_AES_256_CCM,
681 SSL_kDHE,
682 SSL_aRSA,
683 SSL_AES256CCM,
684 SSL_AEAD,
685 TLS1_2_VERSION, TLS1_2_VERSION,
686 DTLS1_2_VERSION, DTLS1_2_VERSION,
687 SSL_NOT_DEFAULT | SSL_HIGH,
688 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
ea6114c6
DSH		 689 256,
690 256,
691 },
ea6114c6
DSH		 692 {
693 1,
748f2546 694 TLS1_TXT_RSA_WITH_AES_128_CCM_8,
bbb4ceb8 695 TLS1_RFC_RSA_WITH_AES_128_CCM_8,
748f2546
RS		 696 TLS1_CK_RSA_WITH_AES_128_CCM_8,
697 SSL_kRSA,
ea6114c6 698 SSL_aRSA,
748f2546 699 SSL_AES128CCM8,
0f113f3e 700 SSL_AEAD,
3eb2aff4
KR		 701 TLS1_2_VERSION, TLS1_2_VERSION,
702 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546 703 SSL_NOT_DEFAULT | SSL_HIGH,
0f113f3e
MC		 704 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
705 128,
706 128,
707 },
0f113f3e
MC		 708 {
709 1,
748f2546 710 TLS1_TXT_RSA_WITH_AES_256_CCM_8,
bbb4ceb8 711 TLS1_RFC_RSA_WITH_AES_256_CCM_8,
748f2546 712 TLS1_CK_RSA_WITH_AES_256_CCM_8,
0f113f3e
MC		 713 SSL_kRSA,
714 SSL_aRSA,
748f2546 715 SSL_AES256CCM8,
0f113f3e 716 SSL_AEAD,
3eb2aff4
KR		 717 TLS1_2_VERSION, TLS1_2_VERSION,
718 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546
RS		 719 SSL_NOT_DEFAULT | SSL_HIGH,
720 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
0f113f3e
MC		 721 256,
722 256,
723 },
0f113f3e
MC		 724 {
725 1,
748f2546 726 TLS1_TXT_DHE_RSA_WITH_AES_128_CCM_8,
bbb4ceb8 727 TLS1_RFC_DHE_RSA_WITH_AES_128_CCM_8,
748f2546 728 TLS1_CK_DHE_RSA_WITH_AES_128_CCM_8,
0f113f3e
MC		 729 SSL_kDHE,
730 SSL_aRSA,
748f2546 731 SSL_AES128CCM8,
0f113f3e 732 SSL_AEAD,
3eb2aff4
KR		 733 TLS1_2_VERSION, TLS1_2_VERSION,
734 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546 735 SSL_NOT_DEFAULT | SSL_HIGH,
0f113f3e
MC		 736 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
737 128,
738 128,
739 },
0f113f3e
MC		 740 {
741 1,
748f2546 742 TLS1_TXT_DHE_RSA_WITH_AES_256_CCM_8,
bbb4ceb8 743 TLS1_RFC_DHE_RSA_WITH_AES_256_CCM_8,
748f2546 744 TLS1_CK_DHE_RSA_WITH_AES_256_CCM_8,
0f113f3e
MC		 745 SSL_kDHE,
746 SSL_aRSA,
748f2546 747 SSL_AES256CCM8,
0f113f3e 748 SSL_AEAD,
3eb2aff4
KR		 749 TLS1_2_VERSION, TLS1_2_VERSION,
750 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546
RS		 751 SSL_NOT_DEFAULT | SSL_HIGH,
752 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
0f113f3e
MC		 753 256,
754 256,
755 },
0f113f3e
MC		 756 {
757 1,
748f2546 758 TLS1_TXT_PSK_WITH_AES_128_CCM,
bbb4ceb8 759 TLS1_RFC_PSK_WITH_AES_128_CCM,
748f2546
RS		 760 TLS1_CK_PSK_WITH_AES_128_CCM,
761 SSL_kPSK,
762 SSL_aPSK,
763 SSL_AES128CCM,
0f113f3e 764 SSL_AEAD,
3eb2aff4
KR		 765 TLS1_2_VERSION, TLS1_2_VERSION,
766 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546 767 SSL_NOT_DEFAULT | SSL_HIGH,
0f113f3e
MC		 768 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
769 128,
770 128,
771 },
0f113f3e
MC		 772 {
773 1,
748f2546 774 TLS1_TXT_PSK_WITH_AES_256_CCM,
bbb4ceb8 775 TLS1_RFC_PSK_WITH_AES_256_CCM,
748f2546
RS		 776 TLS1_CK_PSK_WITH_AES_256_CCM,
777 SSL_kPSK,
778 SSL_aPSK,
779 SSL_AES256CCM,
0f113f3e 780 SSL_AEAD,
3eb2aff4
KR		 781 TLS1_2_VERSION, TLS1_2_VERSION,
782 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546
RS		 783 SSL_NOT_DEFAULT | SSL_HIGH,
784 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
0f113f3e
MC		 785 256,
786 256,
787 },
0f113f3e
MC		 788 {
789 1,
748f2546 790 TLS1_TXT_DHE_PSK_WITH_AES_128_CCM,
bbb4ceb8 791 TLS1_RFC_DHE_PSK_WITH_AES_128_CCM,
748f2546
RS		 792 TLS1_CK_DHE_PSK_WITH_AES_128_CCM,
793 SSL_kDHEPSK,
794 SSL_aPSK,
795 SSL_AES128CCM,
0f113f3e 796 SSL_AEAD,
3eb2aff4
KR		 797 TLS1_2_VERSION, TLS1_2_VERSION,
798 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546 799 SSL_NOT_DEFAULT | SSL_HIGH,
0f113f3e
MC		 800 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
801 128,
802 128,
803 },
0f113f3e
MC		 804 {
805 1,
748f2546 806 TLS1_TXT_DHE_PSK_WITH_AES_256_CCM,
bbb4ceb8 807 TLS1_RFC_DHE_PSK_WITH_AES_256_CCM,
748f2546
RS		 808 TLS1_CK_DHE_PSK_WITH_AES_256_CCM,
809 SSL_kDHEPSK,
810 SSL_aPSK,
811 SSL_AES256CCM,
0f113f3e 812 SSL_AEAD,
3eb2aff4
KR		 813 TLS1_2_VERSION, TLS1_2_VERSION,
814 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546
RS		 815 SSL_NOT_DEFAULT | SSL_HIGH,
816 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
0f113f3e
MC		 817 256,
818 256,
819 },
547dba74
DSH		 820 {
821 1,
748f2546 822 TLS1_TXT_PSK_WITH_AES_128_CCM_8,
bbb4ceb8 823 TLS1_RFC_PSK_WITH_AES_128_CCM_8,
748f2546 824 TLS1_CK_PSK_WITH_AES_128_CCM_8,
547dba74
DSH		 825 SSL_kPSK,
826 SSL_aPSK,
748f2546 827 SSL_AES128CCM8,
547dba74 828 SSL_AEAD,
3eb2aff4
KR		 829 TLS1_2_VERSION, TLS1_2_VERSION,
830 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546 831 SSL_NOT_DEFAULT | SSL_HIGH,
547dba74
DSH		 832 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
833 128,
834 128,
835 },
547dba74
DSH		 836 {
837 1,
748f2546 838 TLS1_TXT_PSK_WITH_AES_256_CCM_8,
bbb4ceb8 839 TLS1_RFC_PSK_WITH_AES_256_CCM_8,
748f2546 840 TLS1_CK_PSK_WITH_AES_256_CCM_8,
547dba74
DSH		 841 SSL_kPSK,
842 SSL_aPSK,
748f2546 843 SSL_AES256CCM8,
547dba74 844 SSL_AEAD,
3eb2aff4
KR		 845 TLS1_2_VERSION, TLS1_2_VERSION,
846 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546
RS		 847 SSL_NOT_DEFAULT | SSL_HIGH,
848 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
547dba74
DSH		 849 256,
850 256,
851 },
ea6114c6
DSH		 852 {
853 1,
748f2546 854 TLS1_TXT_DHE_PSK_WITH_AES_128_CCM_8,
bbb4ceb8 855 TLS1_RFC_DHE_PSK_WITH_AES_128_CCM_8,
748f2546 856 TLS1_CK_DHE_PSK_WITH_AES_128_CCM_8,
ea6114c6
DSH		 857 SSL_kDHEPSK,
858 SSL_aPSK,
748f2546 859 SSL_AES128CCM8,
ea6114c6 860 SSL_AEAD,
3eb2aff4
KR		 861 TLS1_2_VERSION, TLS1_2_VERSION,
862 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546 863 SSL_NOT_DEFAULT | SSL_HIGH,
ea6114c6
DSH		 864 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
865 128,
866 128,
867 },
ea6114c6
DSH		 868 {
869 1,
748f2546 870 TLS1_TXT_DHE_PSK_WITH_AES_256_CCM_8,
bbb4ceb8 871 TLS1_RFC_DHE_PSK_WITH_AES_256_CCM_8,
748f2546
RS		 872 TLS1_CK_DHE_PSK_WITH_AES_256_CCM_8,
873 SSL_kDHEPSK,
ea6114c6 874 SSL_aPSK,
748f2546 875 SSL_AES256CCM8,
ea6114c6 876 SSL_AEAD,
3eb2aff4
KR		 877 TLS1_2_VERSION, TLS1_2_VERSION,
878 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546
RS		 879 SSL_NOT_DEFAULT | SSL_HIGH,
880 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
ea6114c6
DSH		 881 256,
882 256,
883 },
ea6114c6
DSH		 884 {
885 1,
748f2546 886 TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CCM,
bbb4ceb8 887 TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_CCM,
748f2546
RS		 888 TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CCM,
889 SSL_kECDHE,
890 SSL_aECDSA,
891 SSL_AES128CCM,
ea6114c6 892 SSL_AEAD,
3eb2aff4
KR		 893 TLS1_2_VERSION, TLS1_2_VERSION,
894 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546 895 SSL_NOT_DEFAULT | SSL_HIGH,
ea6114c6
DSH		 896 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
897 128,
898 128,
899 },
ea6114c6
DSH		 900 {
901 1,
748f2546 902 TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CCM,
bbb4ceb8 903 TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_CCM,
748f2546
RS		 904 TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CCM,
905 SSL_kECDHE,
906 SSL_aECDSA,
907 SSL_AES256CCM,
ea6114c6 908 SSL_AEAD,
3eb2aff4
KR		 909 TLS1_2_VERSION, TLS1_2_VERSION,
910 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546
RS		 911 SSL_NOT_DEFAULT | SSL_HIGH,
912 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
ea6114c6
DSH		 913 256,
914 256,
915 },
ea6114c6
DSH		 916 {
917 1,
748f2546 918 TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CCM_8,
bbb4ceb8 919 TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_CCM_8,
748f2546
RS		 920 TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CCM_8,
921 SSL_kECDHE,
922 SSL_aECDSA,
923 SSL_AES128CCM8,
924 SSL_AEAD,
925 TLS1_2_VERSION, TLS1_2_VERSION,
926 DTLS1_2_VERSION, DTLS1_2_VERSION,
927 SSL_NOT_DEFAULT | SSL_HIGH,
928 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
ea6114c6
DSH		 929 128,
930 128,
931 },
ea6114c6
DSH		 932 {
933 1,
748f2546 934 TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CCM_8,
bbb4ceb8 935 TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_CCM_8,
748f2546
RS		 936 TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CCM_8,
937 SSL_kECDHE,
938 SSL_aECDSA,
939 SSL_AES256CCM8,
940 SSL_AEAD,
941 TLS1_2_VERSION, TLS1_2_VERSION,
942 DTLS1_2_VERSION, DTLS1_2_VERSION,
943 SSL_NOT_DEFAULT | SSL_HIGH,
944 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
ea6114c6
DSH		 945 256,
946 256,
947 },
ea6114c6
DSH		 948 {
949 1,
748f2546 950 TLS1_TXT_ECDHE_ECDSA_WITH_NULL_SHA,
bbb4ceb8 951 TLS1_RFC_ECDHE_ECDSA_WITH_NULL_SHA,
748f2546
RS		 952 TLS1_CK_ECDHE_ECDSA_WITH_NULL_SHA,
953 SSL_kECDHE,
954 SSL_aECDSA,
ea6114c6 955 SSL_eNULL,
748f2546 956 SSL_SHA1,
fe55c4a2 957 TLS1_VERSION, TLS1_2_VERSION,
387cf213 958 DTLS1_BAD_VER, DTLS1_2_VERSION,
1510b5f7 959 SSL_STRONG_NONE | SSL_FIPS,
ea6114c6
DSH		 960 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
961 0,
962 0,
963 },
d33726b9 964# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
ea6114c6
DSH		 965 {
966 1,
748f2546 967 TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA,
bbb4ceb8 968 TLS1_RFC_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA,
748f2546
RS		 969 TLS1_CK_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA,
970 SSL_kECDHE,
971 SSL_aECDSA,
972 SSL_3DES,
973 SSL_SHA1,
fe55c4a2 974 TLS1_VERSION, TLS1_2_VERSION,
387cf213 975 DTLS1_BAD_VER, DTLS1_2_VERSION,
ef28891b 976 SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
748f2546
RS		 977 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
978 112,
979 168,
ea6114c6 980 },
d33726b9 981# endif
ea6114c6
DSH		 982 {
983 1,
748f2546 984 TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
bbb4ceb8 985 TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
748f2546
RS		 986 TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
987 SSL_kECDHE,
988 SSL_aECDSA,
ea6114c6 989 SSL_AES128,
748f2546 990 SSL_SHA1,
fe55c4a2 991 TLS1_VERSION, TLS1_2_VERSION,
387cf213 992 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 993 SSL_HIGH | SSL_FIPS,
ea6114c6
DSH		 994 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
995 128,
996 128,
997 },
ea6114c6
DSH		 998 {
999 1,
748f2546 1000 TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
bbb4ceb8 1001 TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
748f2546
RS		 1002 TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
1003 SSL_kECDHE,
1004 SSL_aECDSA,
ea6114c6 1005 SSL_AES256,
748f2546 1006 SSL_SHA1,
fe55c4a2 1007 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1008 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1009 SSL_HIGH | SSL_FIPS,
748f2546 1010 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
ea6114c6
DSH		 1011 256,
1012 256,
1013 },
ea6114c6
DSH		 1014 {
1015 1,
748f2546 1016 TLS1_TXT_ECDHE_RSA_WITH_NULL_SHA,
bbb4ceb8 1017 TLS1_RFC_ECDHE_RSA_WITH_NULL_SHA,
748f2546
RS		 1018 TLS1_CK_ECDHE_RSA_WITH_NULL_SHA,
1019 SSL_kECDHE,
1020 SSL_aRSA,
ea6114c6 1021 SSL_eNULL,
748f2546 1022 SSL_SHA1,
fe55c4a2 1023 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1024 DTLS1_BAD_VER, DTLS1_2_VERSION,
1510b5f7 1025 SSL_STRONG_NONE | SSL_FIPS,
ea6114c6
DSH		 1026 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1027 0,
1028 0,
1029 },
d33726b9 1030# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
ea6114c6
DSH		 1031 {
1032 1,
748f2546 1033 TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA,
bbb4ceb8 1034 TLS1_RFC_ECDHE_RSA_WITH_DES_192_CBC3_SHA,
748f2546
RS		 1035 TLS1_CK_ECDHE_RSA_WITH_DES_192_CBC3_SHA,
1036 SSL_kECDHE,
1037 SSL_aRSA,
1038 SSL_3DES,
1039 SSL_SHA1,
fe55c4a2 1040 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1041 DTLS1_BAD_VER, DTLS1_2_VERSION,
ef28891b 1042 SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
748f2546
RS		 1043 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1044 112,
1045 168,
ea6114c6 1046 },
d33726b9 1047# endif
ea6114c6
DSH		 1048 {
1049 1,
748f2546 1050 TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA,
bbb4ceb8 1051 TLS1_RFC_ECDHE_RSA_WITH_AES_128_CBC_SHA,
748f2546
RS		 1052 TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA,
1053 SSL_kECDHE,
ea6114c6
DSH		 1054 SSL_aRSA,
1055 SSL_AES128,
748f2546 1056 SSL_SHA1,
fe55c4a2 1057 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1058 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1059 SSL_HIGH | SSL_FIPS,
ea6114c6
DSH		 1060 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1061 128,
1062 128,
1063 },
ea6114c6
DSH		 1064 {
1065 1,
748f2546 1066 TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA,
bbb4ceb8 1067 TLS1_RFC_ECDHE_RSA_WITH_AES_256_CBC_SHA,
748f2546
RS		 1068 TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA,
1069 SSL_kECDHE,
ea6114c6
DSH		 1070 SSL_aRSA,
1071 SSL_AES256,
748f2546 1072 SSL_SHA1,
fe55c4a2 1073 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1074 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1075 SSL_HIGH | SSL_FIPS,
748f2546 1076 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
ea6114c6
DSH		 1077 256,
1078 256,
1079 },
ea6114c6
DSH		 1080 {
1081 1,
748f2546 1082 TLS1_TXT_ECDH_anon_WITH_NULL_SHA,
bbb4ceb8 1083 TLS1_RFC_ECDH_anon_WITH_NULL_SHA,
748f2546
RS		 1084 TLS1_CK_ECDH_anon_WITH_NULL_SHA,
1085 SSL_kECDHE,
1086 SSL_aNULL,
ea6114c6 1087 SSL_eNULL,
748f2546 1088 SSL_SHA1,
fe55c4a2 1089 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1090 DTLS1_BAD_VER, DTLS1_2_VERSION,
1510b5f7 1091 SSL_STRONG_NONE | SSL_FIPS,
ea6114c6
DSH		 1092 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1093 0,
1094 0,
1095 },
d33726b9 1096# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
ea6114c6
DSH		 1097 {
1098 1,
748f2546 1099 TLS1_TXT_ECDH_anon_WITH_DES_192_CBC3_SHA,
bbb4ceb8 1100 TLS1_RFC_ECDH_anon_WITH_DES_192_CBC3_SHA,
748f2546
RS		 1101 TLS1_CK_ECDH_anon_WITH_DES_192_CBC3_SHA,
1102 SSL_kECDHE,
1103 SSL_aNULL,
1104 SSL_3DES,
1105 SSL_SHA1,
fe55c4a2 1106 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1107 DTLS1_BAD_VER, DTLS1_2_VERSION,
4a8e9c22 1108 SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
748f2546
RS		 1109 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1110 112,
1111 168,
ea6114c6 1112 },
d33726b9 1113# endif
0f113f3e
MC		 1114 {
1115 1,
748f2546 1116 TLS1_TXT_ECDH_anon_WITH_AES_128_CBC_SHA,
bbb4ceb8 1117 TLS1_RFC_ECDH_anon_WITH_AES_128_CBC_SHA,
748f2546
RS		 1118 TLS1_CK_ECDH_anon_WITH_AES_128_CBC_SHA,
1119 SSL_kECDHE,
1120 SSL_aNULL,
1121 SSL_AES128,
1122 SSL_SHA1,
fe55c4a2 1123 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1124 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1125 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
1126 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1127 128,
1128 128,
1129 },
0f113f3e
MC		 1130 {
1131 1,
748f2546 1132 TLS1_TXT_ECDH_anon_WITH_AES_256_CBC_SHA,
bbb4ceb8 1133 TLS1_RFC_ECDH_anon_WITH_AES_256_CBC_SHA,
748f2546
RS		 1134 TLS1_CK_ECDH_anon_WITH_AES_256_CBC_SHA,
1135 SSL_kECDHE,
1136 SSL_aNULL,
1137 SSL_AES256,
1138 SSL_SHA1,
fe55c4a2 1139 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1140 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1141 SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
1142 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1143 256,
1144 256,
1145 },
1146 {
1147 1,
1148 TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_SHA256,
bbb4ceb8 1149 TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_SHA256,
748f2546
RS		 1150 TLS1_CK_ECDHE_ECDSA_WITH_AES_128_SHA256,
1151 SSL_kECDHE,
1152 SSL_aECDSA,
1153 SSL_AES128,
0f113f3e 1154 SSL_SHA256,
3eb2aff4
KR		 1155 TLS1_2_VERSION, TLS1_2_VERSION,
1156 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546 1157 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 1158 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
1159 128,
1160 128,
1161 },
0f113f3e
MC		 1162 {
1163 1,
748f2546 1164 TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_SHA384,
bbb4ceb8 1165 TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_SHA384,
748f2546
RS		 1166 TLS1_CK_ECDHE_ECDSA_WITH_AES_256_SHA384,
1167 SSL_kECDHE,
1168 SSL_aECDSA,
1169 SSL_AES256,
1170 SSL_SHA384,
3eb2aff4
KR		 1171 TLS1_2_VERSION, TLS1_2_VERSION,
1172 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546
RS		 1173 SSL_HIGH | SSL_FIPS,
1174 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
1175 256,
1176 256,
0f113f3e 1177 },
0f113f3e
MC		 1178 {
1179 1,
748f2546 1180 TLS1_TXT_ECDHE_RSA_WITH_AES_128_SHA256,
bbb4ceb8 1181 TLS1_RFC_ECDHE_RSA_WITH_AES_128_SHA256,
748f2546
RS		 1182 TLS1_CK_ECDHE_RSA_WITH_AES_128_SHA256,
1183 SSL_kECDHE,
1184 SSL_aRSA,
1185 SSL_AES128,
0f113f3e 1186 SSL_SHA256,
3eb2aff4
KR		 1187 TLS1_2_VERSION, TLS1_2_VERSION,
1188 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546 1189 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 1190 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
1191 128,
1192 128,
1193 },
0f113f3e
MC		 1194 {
1195 1,
748f2546 1196 TLS1_TXT_ECDHE_RSA_WITH_AES_256_SHA384,
bbb4ceb8 1197 TLS1_RFC_ECDHE_RSA_WITH_AES_256_SHA384,
748f2546
RS		 1198 TLS1_CK_ECDHE_RSA_WITH_AES_256_SHA384,
1199 SSL_kECDHE,
0f113f3e 1200 SSL_aRSA,
748f2546
RS		 1201 SSL_AES256,
1202 SSL_SHA384,
3eb2aff4
KR		 1203 TLS1_2_VERSION, TLS1_2_VERSION,
1204 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546
RS		 1205 SSL_HIGH | SSL_FIPS,
1206 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
0f113f3e
MC		 1207 256,
1208 256,
1209 },
0f113f3e
MC		 1210 {
1211 1,
748f2546 1212 TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
bbb4ceb8 1213 TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
748f2546
RS		 1214 TLS1_CK_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
1215 SSL_kECDHE,
1216 SSL_aECDSA,
1217 SSL_AES128GCM,
1218 SSL_AEAD,
3eb2aff4
KR		 1219 TLS1_2_VERSION, TLS1_2_VERSION,
1220 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546 1221 SSL_HIGH | SSL_FIPS,
0f113f3e 1222 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
748f2546
RS		 1223 128,
1224 128,
1225 },
1226 {
1227 1,
1228 TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
bbb4ceb8 1229 TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
748f2546
RS		 1230 TLS1_CK_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
1231 SSL_kECDHE,
1232 SSL_aECDSA,
1233 SSL_AES256GCM,
1234 SSL_AEAD,
1235 TLS1_2_VERSION, TLS1_2_VERSION,
1236 DTLS1_2_VERSION, DTLS1_2_VERSION,
1237 SSL_HIGH | SSL_FIPS,
1238 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
0f113f3e
MC		 1239 256,
1240 256,
1241 },
0f113f3e
MC		 1242 {
1243 1,
748f2546 1244 TLS1_TXT_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
bbb4ceb8 1245 TLS1_RFC_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
748f2546
RS		 1246 TLS1_CK_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
1247 SSL_kECDHE,
0f113f3e 1248 SSL_aRSA,
748f2546
RS		 1249 SSL_AES128GCM,
1250 SSL_AEAD,
3eb2aff4
KR		 1251 TLS1_2_VERSION, TLS1_2_VERSION,
1252 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546 1253 SSL_HIGH | SSL_FIPS,
0f113f3e 1254 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
748f2546
RS		 1255 128,
1256 128,
0f113f3e 1257 },
0f113f3e
MC		 1258 {
1259 1,
748f2546 1260 TLS1_TXT_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
bbb4ceb8 1261 TLS1_RFC_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
748f2546
RS		 1262 TLS1_CK_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
1263 SSL_kECDHE,
1264 SSL_aRSA,
1265 SSL_AES256GCM,
1266 SSL_AEAD,
3eb2aff4
KR		 1267 TLS1_2_VERSION, TLS1_2_VERSION,
1268 DTLS1_2_VERSION, DTLS1_2_VERSION,
748f2546
RS		 1269 SSL_HIGH | SSL_FIPS,
1270 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
0f113f3e
MC		 1271 256,
1272 256,
1273 },
0f113f3e
MC		 1274 {
1275 1,
748f2546 1276 TLS1_TXT_PSK_WITH_NULL_SHA,
bbb4ceb8 1277 TLS1_RFC_PSK_WITH_NULL_SHA,
748f2546
RS		 1278 TLS1_CK_PSK_WITH_NULL_SHA,
1279 SSL_kPSK,
1280 SSL_aPSK,
0f113f3e
MC		 1281 SSL_eNULL,
1282 SSL_SHA1,
3eb2aff4 1283 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1284 DTLS1_BAD_VER, DTLS1_2_VERSION,
1510b5f7 1285 SSL_STRONG_NONE | SSL_FIPS,
0f113f3e
MC		 1286 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1287 0,
1288 0,
1289 },
0f113f3e
MC		 1290 {
1291 1,
748f2546 1292 TLS1_TXT_DHE_PSK_WITH_NULL_SHA,
bbb4ceb8 1293 TLS1_RFC_DHE_PSK_WITH_NULL_SHA,
748f2546
RS		 1294 TLS1_CK_DHE_PSK_WITH_NULL_SHA,
1295 SSL_kDHEPSK,
1296 SSL_aPSK,
1297 SSL_eNULL,
0f113f3e 1298 SSL_SHA1,
3eb2aff4 1299 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1300 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546 1301 SSL_STRONG_NONE | SSL_FIPS,
0f113f3e 1302 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
748f2546
RS		 1303 0,
1304 0,
0f113f3e 1305 },
0f113f3e
MC		 1306 {
1307 1,
748f2546 1308 TLS1_TXT_RSA_PSK_WITH_NULL_SHA,
bbb4ceb8 1309 TLS1_RFC_RSA_PSK_WITH_NULL_SHA,
748f2546
RS		 1310 TLS1_CK_RSA_PSK_WITH_NULL_SHA,
1311 SSL_kRSAPSK,
1312 SSL_aRSA,
1313 SSL_eNULL,
1314 SSL_SHA1,
1315 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1316 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1317 SSL_STRONG_NONE | SSL_FIPS,
1318 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1319 0,
1320 0,
1321 },
d33726b9 1322# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
748f2546
RS		 1323 {
1324 1,
1325 TLS1_TXT_PSK_WITH_3DES_EDE_CBC_SHA,
bbb4ceb8 1326 TLS1_RFC_PSK_WITH_3DES_EDE_CBC_SHA,
748f2546
RS		 1327 TLS1_CK_PSK_WITH_3DES_EDE_CBC_SHA,
1328 SSL_kPSK,
1329 SSL_aPSK,
0f113f3e
MC		 1330 SSL_3DES,
1331 SSL_SHA1,
3eb2aff4 1332 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1333 DTLS1_BAD_VER, DTLS1_2_VERSION,
ef28891b 1334 SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
0f113f3e
MC		 1335 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1336 112,
1337 168,
1338 },
d33726b9 1339# endif
0f113f3e
MC		 1340 {
1341 1,
748f2546 1342 TLS1_TXT_PSK_WITH_AES_128_CBC_SHA,
bbb4ceb8 1343 TLS1_RFC_PSK_WITH_AES_128_CBC_SHA,
748f2546
RS		 1344 TLS1_CK_PSK_WITH_AES_128_CBC_SHA,
1345 SSL_kPSK,
1346 SSL_aPSK,
0f113f3e
MC		 1347 SSL_AES128,
1348 SSL_SHA1,
3eb2aff4 1349 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1350 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1351 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 1352 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1353 128,
1354 128,
1355 },
0f113f3e
MC		 1356 {
1357 1,
748f2546 1358 TLS1_TXT_PSK_WITH_AES_256_CBC_SHA,
bbb4ceb8 1359 TLS1_RFC_PSK_WITH_AES_256_CBC_SHA,
748f2546
RS		 1360 TLS1_CK_PSK_WITH_AES_256_CBC_SHA,
1361 SSL_kPSK,
1362 SSL_aPSK,
0f113f3e
MC		 1363 SSL_AES256,
1364 SSL_SHA1,
3eb2aff4 1365 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1366 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1367 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 1368 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1369 256,
1370 256,
1371 },
d33726b9 1372# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
0f113f3e
MC		 1373 {
1374 1,
748f2546 1375 TLS1_TXT_DHE_PSK_WITH_3DES_EDE_CBC_SHA,
bbb4ceb8 1376 TLS1_RFC_DHE_PSK_WITH_3DES_EDE_CBC_SHA,
748f2546
RS		 1377 TLS1_CK_DHE_PSK_WITH_3DES_EDE_CBC_SHA,
1378 SSL_kDHEPSK,
1379 SSL_aPSK,
1380 SSL_3DES,
0f113f3e 1381 SSL_SHA1,
3eb2aff4 1382 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1383 DTLS1_BAD_VER, DTLS1_2_VERSION,
ef28891b 1384 SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
0f113f3e 1385 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
748f2546
RS		 1386 112,
1387 168,
0f113f3e 1388 },
d33726b9 1389# endif
0f113f3e
MC		 1390 {
1391 1,
748f2546 1392 TLS1_TXT_DHE_PSK_WITH_AES_128_CBC_SHA,
bbb4ceb8 1393 TLS1_RFC_DHE_PSK_WITH_AES_128_CBC_SHA,
748f2546
RS		 1394 TLS1_CK_DHE_PSK_WITH_AES_128_CBC_SHA,
1395 SSL_kDHEPSK,
1396 SSL_aPSK,
1397 SSL_AES128,
1398 SSL_SHA1,
1399 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1400 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546 1401 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 1402 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1403 128,
1404 128,
1405 },
0f113f3e
MC		 1406 {
1407 1,
748f2546 1408 TLS1_TXT_DHE_PSK_WITH_AES_256_CBC_SHA,
bbb4ceb8 1409 TLS1_RFC_DHE_PSK_WITH_AES_256_CBC_SHA,
748f2546
RS		 1410 TLS1_CK_DHE_PSK_WITH_AES_256_CBC_SHA,
1411 SSL_kDHEPSK,
1412 SSL_aPSK,
1413 SSL_AES256,
1414 SSL_SHA1,
1415 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1416 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1417 SSL_HIGH | SSL_FIPS,
1418 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1419 256,
1420 256,
1421 },
d33726b9 1422# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
748f2546
RS		 1423 {
1424 1,
1425 TLS1_TXT_RSA_PSK_WITH_3DES_EDE_CBC_SHA,
bbb4ceb8 1426 TLS1_RFC_RSA_PSK_WITH_3DES_EDE_CBC_SHA,
748f2546
RS		 1427 TLS1_CK_RSA_PSK_WITH_3DES_EDE_CBC_SHA,
1428 SSL_kRSAPSK,
0f113f3e
MC		 1429 SSL_aRSA,
1430 SSL_3DES,
1431 SSL_SHA1,
3eb2aff4 1432 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1433 DTLS1_BAD_VER, DTLS1_2_VERSION,
ef28891b 1434 SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
0f113f3e
MC		 1435 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1436 112,
1437 168,
1438 },
d33726b9 1439# endif
0f113f3e
MC		 1440 {
1441 1,
748f2546 1442 TLS1_TXT_RSA_PSK_WITH_AES_128_CBC_SHA,
bbb4ceb8 1443 TLS1_RFC_RSA_PSK_WITH_AES_128_CBC_SHA,
748f2546
RS		 1444 TLS1_CK_RSA_PSK_WITH_AES_128_CBC_SHA,
1445 SSL_kRSAPSK,
0f113f3e
MC		 1446 SSL_aRSA,
1447 SSL_AES128,
1448 SSL_SHA1,
3eb2aff4 1449 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1450 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1451 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 1452 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1453 128,
1454 128,
1455 },
0f113f3e
MC		 1456 {
1457 1,
748f2546 1458 TLS1_TXT_RSA_PSK_WITH_AES_256_CBC_SHA,
bbb4ceb8 1459 TLS1_RFC_RSA_PSK_WITH_AES_256_CBC_SHA,
748f2546
RS		 1460 TLS1_CK_RSA_PSK_WITH_AES_256_CBC_SHA,
1461 SSL_kRSAPSK,
0f113f3e
MC		 1462 SSL_aRSA,
1463 SSL_AES256,
1464 SSL_SHA1,
3eb2aff4 1465 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1466 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1467 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 1468 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1469 256,
1470 256,
1471 },
0f113f3e
MC		 1472 {
1473 1,
748f2546 1474 TLS1_TXT_PSK_WITH_AES_128_GCM_SHA256,
bbb4ceb8 1475 TLS1_RFC_PSK_WITH_AES_128_GCM_SHA256,
748f2546
RS		 1476 TLS1_CK_PSK_WITH_AES_128_GCM_SHA256,
1477 SSL_kPSK,
1478 SSL_aPSK,
1479 SSL_AES128GCM,
1480 SSL_AEAD,
1481 TLS1_2_VERSION, TLS1_2_VERSION,
1482 DTLS1_2_VERSION, DTLS1_2_VERSION,
1483 SSL_HIGH | SSL_FIPS,
1484 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
0f113f3e
MC		 1485 128,
1486 128,
1487 },
0f113f3e
MC		 1488 {
1489 1,
748f2546 1490 TLS1_TXT_PSK_WITH_AES_256_GCM_SHA384,
bbb4ceb8 1491 TLS1_RFC_PSK_WITH_AES_256_GCM_SHA384,
748f2546
RS		 1492 TLS1_CK_PSK_WITH_AES_256_GCM_SHA384,
1493 SSL_kPSK,
1494 SSL_aPSK,
1495 SSL_AES256GCM,
1496 SSL_AEAD,
1497 TLS1_2_VERSION, TLS1_2_VERSION,
1498 DTLS1_2_VERSION, DTLS1_2_VERSION,
1499 SSL_HIGH | SSL_FIPS,
1500 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
1501 256,
1502 256,
0f113f3e 1503 },
0f113f3e
MC		 1504 {
1505 1,
748f2546 1506 TLS1_TXT_DHE_PSK_WITH_AES_128_GCM_SHA256,
bbb4ceb8 1507 TLS1_RFC_DHE_PSK_WITH_AES_128_GCM_SHA256,
748f2546
RS		 1508 TLS1_CK_DHE_PSK_WITH_AES_128_GCM_SHA256,
1509 SSL_kDHEPSK,
1510 SSL_aPSK,
1511 SSL_AES128GCM,
1512 SSL_AEAD,
1513 TLS1_2_VERSION, TLS1_2_VERSION,
1514 DTLS1_2_VERSION, DTLS1_2_VERSION,
1515 SSL_HIGH | SSL_FIPS,
1516 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
0f113f3e
MC		 1517 128,
1518 128,
1519 },
0f113f3e
MC		 1520 {
1521 1,
748f2546 1522 TLS1_TXT_DHE_PSK_WITH_AES_256_GCM_SHA384,
bbb4ceb8 1523 TLS1_RFC_DHE_PSK_WITH_AES_256_GCM_SHA384,
748f2546
RS		 1524 TLS1_CK_DHE_PSK_WITH_AES_256_GCM_SHA384,
1525 SSL_kDHEPSK,
1526 SSL_aPSK,
1527 SSL_AES256GCM,
1528 SSL_AEAD,
1529 TLS1_2_VERSION, TLS1_2_VERSION,
1530 DTLS1_2_VERSION, DTLS1_2_VERSION,
1531 SSL_HIGH | SSL_FIPS,
1532 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
0f113f3e
MC		 1533 256,
1534 256,
1535 },
0f113f3e
MC		 1536 {
1537 1,
748f2546 1538 TLS1_TXT_RSA_PSK_WITH_AES_128_GCM_SHA256,
bbb4ceb8 1539 TLS1_RFC_RSA_PSK_WITH_AES_128_GCM_SHA256,
748f2546
RS		 1540 TLS1_CK_RSA_PSK_WITH_AES_128_GCM_SHA256,
1541 SSL_kRSAPSK,
0f113f3e 1542 SSL_aRSA,
748f2546
RS		 1543 SSL_AES128GCM,
1544 SSL_AEAD,
1545 TLS1_2_VERSION, TLS1_2_VERSION,
1546 DTLS1_2_VERSION, DTLS1_2_VERSION,
1547 SSL_HIGH | SSL_FIPS,
1548 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
1549 128,
1550 128,
0f113f3e 1551 },
0f113f3e
MC		 1552 {
1553 1,
748f2546 1554 TLS1_TXT_RSA_PSK_WITH_AES_256_GCM_SHA384,
bbb4ceb8 1555 TLS1_RFC_RSA_PSK_WITH_AES_256_GCM_SHA384,
748f2546
RS		 1556 TLS1_CK_RSA_PSK_WITH_AES_256_GCM_SHA384,
1557 SSL_kRSAPSK,
1558 SSL_aRSA,
1559 SSL_AES256GCM,
1560 SSL_AEAD,
1561 TLS1_2_VERSION, TLS1_2_VERSION,
1562 DTLS1_2_VERSION, DTLS1_2_VERSION,
1563 SSL_HIGH | SSL_FIPS,
1564 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
1565 256,
1566 256,
0f113f3e 1567 },
0f113f3e
MC		 1568 {
1569 1,
748f2546 1570 TLS1_TXT_PSK_WITH_AES_128_CBC_SHA256,
bbb4ceb8 1571 TLS1_RFC_PSK_WITH_AES_128_CBC_SHA256,
748f2546
RS		 1572 TLS1_CK_PSK_WITH_AES_128_CBC_SHA256,
1573 SSL_kPSK,
1574 SSL_aPSK,
0f113f3e 1575 SSL_AES128,
748f2546
RS		 1576 SSL_SHA256,
1577 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1578 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546 1579 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 1580 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1581 128,
1582 128,
1583 },
0f113f3e
MC		 1584 {
1585 1,
748f2546 1586 TLS1_TXT_PSK_WITH_AES_256_CBC_SHA384,
bbb4ceb8 1587 TLS1_RFC_PSK_WITH_AES_256_CBC_SHA384,
748f2546
RS		 1588 TLS1_CK_PSK_WITH_AES_256_CBC_SHA384,
1589 SSL_kPSK,
1590 SSL_aPSK,
1591 SSL_AES256,
1592 SSL_SHA384,
1593 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1594 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1595 SSL_HIGH | SSL_FIPS,
1596 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
1597 256,
1598 256,
0f113f3e 1599 },
0f113f3e
MC		 1600 {
1601 1,
748f2546 1602 TLS1_TXT_PSK_WITH_NULL_SHA256,
bbb4ceb8 1603 TLS1_RFC_PSK_WITH_NULL_SHA256,
748f2546
RS		 1604 TLS1_CK_PSK_WITH_NULL_SHA256,
1605 SSL_kPSK,
1606 SSL_aPSK,
1607 SSL_eNULL,
1608 SSL_SHA256,
1609 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1610 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546 1611 SSL_STRONG_NONE | SSL_FIPS,
0f113f3e 1612 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
748f2546
RS		 1613 0,
1614 0,
0f113f3e 1615 },
0f113f3e
MC		 1616 {
1617 1,
748f2546 1618 TLS1_TXT_PSK_WITH_NULL_SHA384,
bbb4ceb8 1619 TLS1_RFC_PSK_WITH_NULL_SHA384,
748f2546
RS		 1620 TLS1_CK_PSK_WITH_NULL_SHA384,
1621 SSL_kPSK,
1622 SSL_aPSK,
1623 SSL_eNULL,
1624 SSL_SHA384,
1625 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1626 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1627 SSL_STRONG_NONE | SSL_FIPS,
1628 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
1629 0,
1630 0,
0f113f3e 1631 },
0f113f3e
MC		 1632 {
1633 1,
748f2546 1634 TLS1_TXT_DHE_PSK_WITH_AES_128_CBC_SHA256,
bbb4ceb8 1635 TLS1_RFC_DHE_PSK_WITH_AES_128_CBC_SHA256,
748f2546
RS		 1636 TLS1_CK_DHE_PSK_WITH_AES_128_CBC_SHA256,
1637 SSL_kDHEPSK,
1638 SSL_aPSK,
1639 SSL_AES128,
1640 SSL_SHA256,
1641 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1642 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546 1643 SSL_HIGH | SSL_FIPS,
0f113f3e 1644 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
748f2546
RS		 1645 128,
1646 128,
0f113f3e 1647 },
0f113f3e
MC		 1648 {
1649 1,
748f2546 1650 TLS1_TXT_DHE_PSK_WITH_AES_256_CBC_SHA384,
bbb4ceb8 1651 TLS1_RFC_DHE_PSK_WITH_AES_256_CBC_SHA384,
748f2546
RS		 1652 TLS1_CK_DHE_PSK_WITH_AES_256_CBC_SHA384,
1653 SSL_kDHEPSK,
1654 SSL_aPSK,
0f113f3e 1655 SSL_AES256,
748f2546
RS		 1656 SSL_SHA384,
1657 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1658 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1659 SSL_HIGH | SSL_FIPS,
1660 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
0f113f3e
MC		 1661 256,
1662 256,
1663 },
0f113f3e
MC		 1664 {
1665 1,
748f2546 1666 TLS1_TXT_DHE_PSK_WITH_NULL_SHA256,
bbb4ceb8 1667 TLS1_RFC_DHE_PSK_WITH_NULL_SHA256,
748f2546
RS		 1668 TLS1_CK_DHE_PSK_WITH_NULL_SHA256,
1669 SSL_kDHEPSK,
1670 SSL_aPSK,
1671 SSL_eNULL,
0f113f3e 1672 SSL_SHA256,
748f2546 1673 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1674 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1675 SSL_STRONG_NONE | SSL_FIPS,
1676 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1677 0,
1678 0,
0f113f3e 1679 },
0f113f3e
MC		 1680 {
1681 1,
748f2546 1682 TLS1_TXT_DHE_PSK_WITH_NULL_SHA384,
bbb4ceb8 1683 TLS1_RFC_DHE_PSK_WITH_NULL_SHA384,
748f2546
RS		 1684 TLS1_CK_DHE_PSK_WITH_NULL_SHA384,
1685 SSL_kDHEPSK,
1686 SSL_aPSK,
1687 SSL_eNULL,
0f113f3e 1688 SSL_SHA384,
748f2546 1689 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1690 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546 1691 SSL_STRONG_NONE | SSL_FIPS,
0f113f3e 1692 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
748f2546
RS		 1693 0,
1694 0,
0f113f3e 1695 },
0f113f3e
MC		 1696 {
1697 1,
748f2546 1698 TLS1_TXT_RSA_PSK_WITH_AES_128_CBC_SHA256,
bbb4ceb8 1699 TLS1_RFC_RSA_PSK_WITH_AES_128_CBC_SHA256,
748f2546
RS		 1700 TLS1_CK_RSA_PSK_WITH_AES_128_CBC_SHA256,
1701 SSL_kRSAPSK,
0f113f3e
MC		 1702 SSL_aRSA,
1703 SSL_AES128,
1704 SSL_SHA256,
748f2546 1705 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1706 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1707 SSL_HIGH | SSL_FIPS,
748f2546 1708 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
0f113f3e
MC		 1709 128,
1710 128,
1711 },
0f113f3e
MC		 1712 {
1713 1,
748f2546 1714 TLS1_TXT_RSA_PSK_WITH_AES_256_CBC_SHA384,
bbb4ceb8 1715 TLS1_RFC_RSA_PSK_WITH_AES_256_CBC_SHA384,
748f2546
RS		 1716 TLS1_CK_RSA_PSK_WITH_AES_256_CBC_SHA384,
1717 SSL_kRSAPSK,
0f113f3e
MC		 1718 SSL_aRSA,
1719 SSL_AES256,
1720 SSL_SHA384,
748f2546 1721 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1722 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1723 SSL_HIGH | SSL_FIPS,
0f113f3e
MC		 1724 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
1725 256,
1726 256,
1727 },
0f113f3e
MC		 1728 {
1729 1,
748f2546 1730 TLS1_TXT_RSA_PSK_WITH_NULL_SHA256,
bbb4ceb8 1731 TLS1_RFC_RSA_PSK_WITH_NULL_SHA256,
748f2546
RS		 1732 TLS1_CK_RSA_PSK_WITH_NULL_SHA256,
1733 SSL_kRSAPSK,
0f113f3e 1734 SSL_aRSA,
748f2546
RS		 1735 SSL_eNULL,
1736 SSL_SHA256,
1737 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1738 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1739 SSL_STRONG_NONE | SSL_FIPS,
1740 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1741 0,
1742 0,
0f113f3e 1743 },
0f113f3e
MC		 1744 {
1745 1,
748f2546 1746 TLS1_TXT_RSA_PSK_WITH_NULL_SHA384,
bbb4ceb8 1747 TLS1_RFC_RSA_PSK_WITH_NULL_SHA384,
748f2546
RS		 1748 TLS1_CK_RSA_PSK_WITH_NULL_SHA384,
1749 SSL_kRSAPSK,
0f113f3e 1750 SSL_aRSA,
748f2546
RS		 1751 SSL_eNULL,
1752 SSL_SHA384,
1753 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1754 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546 1755 SSL_STRONG_NONE | SSL_FIPS,
0f113f3e 1756 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
748f2546
RS		 1757 0,
1758 0,
ea6114c6 1759 },
d33726b9 1760# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
ea6114c6
DSH		 1761 {
1762 1,
1763 TLS1_TXT_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA,
bbb4ceb8 1764 TLS1_RFC_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA,
ea6114c6
DSH		 1765 TLS1_CK_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA,
1766 SSL_kECDHEPSK,
1767 SSL_aPSK,
1768 SSL_3DES,
1769 SSL_SHA1,
fe55c4a2 1770 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1771 DTLS1_BAD_VER, DTLS1_2_VERSION,
ef28891b 1772 SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
ea6114c6
DSH		 1773 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1774 112,
1775 168,
1776 },
d33726b9 1777# endif
ea6114c6
DSH		 1778 {
1779 1,
1780 TLS1_TXT_ECDHE_PSK_WITH_AES_128_CBC_SHA,
bbb4ceb8 1781 TLS1_RFC_ECDHE_PSK_WITH_AES_128_CBC_SHA,
ea6114c6
DSH		 1782 TLS1_CK_ECDHE_PSK_WITH_AES_128_CBC_SHA,
1783 SSL_kECDHEPSK,
1784 SSL_aPSK,
1785 SSL_AES128,
1786 SSL_SHA1,
fe55c4a2 1787 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1788 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1789 SSL_HIGH | SSL_FIPS,
ea6114c6
DSH		 1790 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1791 128,
1792 128,
1793 },
ea6114c6
DSH		 1794 {
1795 1,
1796 TLS1_TXT_ECDHE_PSK_WITH_AES_256_CBC_SHA,
bbb4ceb8 1797 TLS1_RFC_ECDHE_PSK_WITH_AES_256_CBC_SHA,
ea6114c6
DSH		 1798 TLS1_CK_ECDHE_PSK_WITH_AES_256_CBC_SHA,
1799 SSL_kECDHEPSK,
1800 SSL_aPSK,
1801 SSL_AES256,
1802 SSL_SHA1,
fe55c4a2 1803 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1804 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1805 SSL_HIGH | SSL_FIPS,
ea6114c6
DSH		 1806 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1807 256,
1808 256,
1809 },
ea6114c6
DSH		 1810 {
1811 1,
1812 TLS1_TXT_ECDHE_PSK_WITH_AES_128_CBC_SHA256,
bbb4ceb8 1813 TLS1_RFC_ECDHE_PSK_WITH_AES_128_CBC_SHA256,
ea6114c6
DSH		 1814 TLS1_CK_ECDHE_PSK_WITH_AES_128_CBC_SHA256,
1815 SSL_kECDHEPSK,
1816 SSL_aPSK,
1817 SSL_AES128,
1818 SSL_SHA256,
3eb2aff4 1819 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1820 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1821 SSL_HIGH | SSL_FIPS,
ea6114c6
DSH		 1822 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1823 128,
1824 128,
1825 },
ea6114c6
DSH		 1826 {
1827 1,
1828 TLS1_TXT_ECDHE_PSK_WITH_AES_256_CBC_SHA384,
bbb4ceb8 1829 TLS1_RFC_ECDHE_PSK_WITH_AES_256_CBC_SHA384,
ea6114c6
DSH		 1830 TLS1_CK_ECDHE_PSK_WITH_AES_256_CBC_SHA384,
1831 SSL_kECDHEPSK,
1832 SSL_aPSK,
1833 SSL_AES256,
1834 SSL_SHA384,
3eb2aff4 1835 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1836 DTLS1_BAD_VER, DTLS1_2_VERSION,
361a1191 1837 SSL_HIGH | SSL_FIPS,
ea6114c6
DSH		 1838 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
1839 256,
1840 256,
1841 },
ea6114c6
DSH		 1842 {
1843 1,
1844 TLS1_TXT_ECDHE_PSK_WITH_NULL_SHA,
bbb4ceb8 1845 TLS1_RFC_ECDHE_PSK_WITH_NULL_SHA,
ea6114c6
DSH		 1846 TLS1_CK_ECDHE_PSK_WITH_NULL_SHA,
1847 SSL_kECDHEPSK,
1848 SSL_aPSK,
1849 SSL_eNULL,
1850 SSL_SHA1,
fe55c4a2 1851 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1852 DTLS1_BAD_VER, DTLS1_2_VERSION,
1510b5f7 1853 SSL_STRONG_NONE | SSL_FIPS,
ea6114c6
DSH		 1854 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1855 0,
1856 0,
1857 },
ea6114c6
DSH		 1858 {
1859 1,
1860 TLS1_TXT_ECDHE_PSK_WITH_NULL_SHA256,
bbb4ceb8 1861 TLS1_RFC_ECDHE_PSK_WITH_NULL_SHA256,
ea6114c6
DSH		 1862 TLS1_CK_ECDHE_PSK_WITH_NULL_SHA256,
1863 SSL_kECDHEPSK,
1864 SSL_aPSK,
1865 SSL_eNULL,
1866 SSL_SHA256,
3eb2aff4 1867 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1868 DTLS1_BAD_VER, DTLS1_2_VERSION,
1510b5f7 1869 SSL_STRONG_NONE | SSL_FIPS,
ea6114c6
DSH		 1870 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1871 0,
1872 0,
1873 },
ea6114c6
DSH		 1874 {
1875 1,
1876 TLS1_TXT_ECDHE_PSK_WITH_NULL_SHA384,
bbb4ceb8 1877 TLS1_RFC_ECDHE_PSK_WITH_NULL_SHA384,
ea6114c6
DSH		 1878 TLS1_CK_ECDHE_PSK_WITH_NULL_SHA384,
1879 SSL_kECDHEPSK,
1880 SSL_aPSK,
1881 SSL_eNULL,
1882 SSL_SHA384,
3eb2aff4 1883 TLS1_VERSION, TLS1_2_VERSION,
387cf213 1884 DTLS1_BAD_VER, DTLS1_2_VERSION,
1510b5f7 1885 SSL_STRONG_NONE | SSL_FIPS,
ea6114c6
DSH		 1886 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
1887 0,
1888 0,
1889 },
1890
d33726b9 1891# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
748f2546
RS		 1892 {
1893 1,
1894 TLS1_TXT_SRP_SHA_WITH_3DES_EDE_CBC_SHA,
bbb4ceb8 1895 TLS1_RFC_SRP_SHA_WITH_3DES_EDE_CBC_SHA,
748f2546
RS		 1896 TLS1_CK_SRP_SHA_WITH_3DES_EDE_CBC_SHA,
1897 SSL_kSRP,
1898 SSL_aSRP,
1899 SSL_3DES,
1900 SSL_SHA1,
1901 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1902 DTLS1_BAD_VER, DTLS1_2_VERSION,
ef28891b 1903 SSL_NOT_DEFAULT | SSL_MEDIUM,
748f2546
RS		 1904 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1905 112,
1906 168,
1907 },
1908 {
1909 1,
1910 TLS1_TXT_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA,
bbb4ceb8 1911 TLS1_RFC_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA,
748f2546
RS		 1912 TLS1_CK_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA,
1913 SSL_kSRP,
1914 SSL_aRSA,
1915 SSL_3DES,
1916 SSL_SHA1,
1917 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1918 DTLS1_BAD_VER, DTLS1_2_VERSION,
ef28891b 1919 SSL_NOT_DEFAULT | SSL_MEDIUM,
748f2546
RS		 1920 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1921 112,
1922 168,
1923 },
1924 {
1925 1,
1926 TLS1_TXT_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA,
bbb4ceb8 1927 TLS1_RFC_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA,
748f2546
RS		 1928 TLS1_CK_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA,
1929 SSL_kSRP,
1930 SSL_aDSS,
1931 SSL_3DES,
1932 SSL_SHA1,
1933 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1934 DTLS1_BAD_VER, DTLS1_2_VERSION,
4a8e9c22 1935 SSL_NOT_DEFAULT | SSL_MEDIUM,
748f2546
RS		 1936 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1937 112,
1938 168,
1939 },
d33726b9 1940# endif
748f2546
RS		 1941 {
1942 1,
1943 TLS1_TXT_SRP_SHA_WITH_AES_128_CBC_SHA,
bbb4ceb8 1944 TLS1_RFC_SRP_SHA_WITH_AES_128_CBC_SHA,
748f2546
RS		 1945 TLS1_CK_SRP_SHA_WITH_AES_128_CBC_SHA,
1946 SSL_kSRP,
1947 SSL_aSRP,
1948 SSL_AES128,
1949 SSL_SHA1,
1950 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1951 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1952 SSL_HIGH,
1953 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1954 128,
1955 128,
1956 },
1957 {
1958 1,
1959 TLS1_TXT_SRP_SHA_RSA_WITH_AES_128_CBC_SHA,
bbb4ceb8 1960 TLS1_RFC_SRP_SHA_RSA_WITH_AES_128_CBC_SHA,
748f2546
RS		 1961 TLS1_CK_SRP_SHA_RSA_WITH_AES_128_CBC_SHA,
1962 SSL_kSRP,
1963 SSL_aRSA,
1964 SSL_AES128,
1965 SSL_SHA1,
1966 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1967 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1968 SSL_HIGH,
1969 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1970 128,
1971 128,
1972 },
1973 {
1974 1,
1975 TLS1_TXT_SRP_SHA_DSS_WITH_AES_128_CBC_SHA,
bbb4ceb8 1976 TLS1_RFC_SRP_SHA_DSS_WITH_AES_128_CBC_SHA,
748f2546
RS		 1977 TLS1_CK_SRP_SHA_DSS_WITH_AES_128_CBC_SHA,
1978 SSL_kSRP,
1979 SSL_aDSS,
1980 SSL_AES128,
1981 SSL_SHA1,
1982 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1983 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 1984 SSL_NOT_DEFAULT | SSL_HIGH,
1985 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
1986 128,
1987 128,
1988 },
1989 {
1990 1,
1991 TLS1_TXT_SRP_SHA_WITH_AES_256_CBC_SHA,
bbb4ceb8 1992 TLS1_RFC_SRP_SHA_WITH_AES_256_CBC_SHA,
748f2546
RS		 1993 TLS1_CK_SRP_SHA_WITH_AES_256_CBC_SHA,
1994 SSL_kSRP,
1995 SSL_aSRP,
1996 SSL_AES256,
1997 SSL_SHA1,
1998 SSL3_VERSION, TLS1_2_VERSION,
387cf213 1999 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2000 SSL_HIGH,
2001 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2002 256,
2003 256,
2004 },
2005 {
2006 1,
2007 TLS1_TXT_SRP_SHA_RSA_WITH_AES_256_CBC_SHA,
bbb4ceb8 2008 TLS1_RFC_SRP_SHA_RSA_WITH_AES_256_CBC_SHA,
748f2546
RS		 2009 TLS1_CK_SRP_SHA_RSA_WITH_AES_256_CBC_SHA,
2010 SSL_kSRP,
2011 SSL_aRSA,
2012 SSL_AES256,
2013 SSL_SHA1,
2014 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2015 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2016 SSL_HIGH,
2017 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2018 256,
2019 256,
2020 },
2021 {
2022 1,
2023 TLS1_TXT_SRP_SHA_DSS_WITH_AES_256_CBC_SHA,
bbb4ceb8 2024 TLS1_RFC_SRP_SHA_DSS_WITH_AES_256_CBC_SHA,
748f2546
RS		 2025 TLS1_CK_SRP_SHA_DSS_WITH_AES_256_CBC_SHA,
2026 SSL_kSRP,
2027 SSL_aDSS,
2028 SSL_AES256,
2029 SSL_SHA1,
2030 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2031 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2032 SSL_NOT_DEFAULT | SSL_HIGH,
2033 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2034 256,
2035 256,
2036 },
748f2546
RS		 2037
2038#if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
748f2546
RS		 2039 {
2040 1,
2041 TLS1_TXT_DHE_RSA_WITH_CHACHA20_POLY1305,
bbb4ceb8 2042 TLS1_RFC_DHE_RSA_WITH_CHACHA20_POLY1305,
748f2546
RS		 2043 TLS1_CK_DHE_RSA_WITH_CHACHA20_POLY1305,
2044 SSL_kDHE,
2045 SSL_aRSA,
2046 SSL_CHACHA20POLY1305,
2047 SSL_AEAD,
2048 TLS1_2_VERSION, TLS1_2_VERSION,
2049 DTLS1_2_VERSION, DTLS1_2_VERSION,
2050 SSL_HIGH,
2051 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2052 256,
2053 256,
2054 },
748f2546
RS		 2055 {
2056 1,
2057 TLS1_TXT_ECDHE_RSA_WITH_CHACHA20_POLY1305,
bbb4ceb8 2058 TLS1_RFC_ECDHE_RSA_WITH_CHACHA20_POLY1305,
748f2546
RS		 2059 TLS1_CK_ECDHE_RSA_WITH_CHACHA20_POLY1305,
2060 SSL_kECDHE,
2061 SSL_aRSA,
2062 SSL_CHACHA20POLY1305,
2063 SSL_AEAD,
2064 TLS1_2_VERSION, TLS1_2_VERSION,
2065 DTLS1_2_VERSION, DTLS1_2_VERSION,
2066 SSL_HIGH,
2067 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2068 256,
2069 256,
2070 },
2071 {
2072 1,
2073 TLS1_TXT_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
bbb4ceb8 2074 TLS1_RFC_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
748f2546
RS		 2075 TLS1_CK_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
2076 SSL_kECDHE,
2077 SSL_aECDSA,
2078 SSL_CHACHA20POLY1305,
2079 SSL_AEAD,
2080 TLS1_2_VERSION, TLS1_2_VERSION,
2081 DTLS1_2_VERSION, DTLS1_2_VERSION,
2082 SSL_HIGH,
2083 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2084 256,
2085 256,
2086 },
748f2546
RS		 2087 {
2088 1,
2089 TLS1_TXT_PSK_WITH_CHACHA20_POLY1305,
bbb4ceb8 2090 TLS1_RFC_PSK_WITH_CHACHA20_POLY1305,
748f2546
RS		 2091 TLS1_CK_PSK_WITH_CHACHA20_POLY1305,
2092 SSL_kPSK,
2093 SSL_aPSK,
2094 SSL_CHACHA20POLY1305,
2095 SSL_AEAD,
2096 TLS1_2_VERSION, TLS1_2_VERSION,
2097 DTLS1_2_VERSION, DTLS1_2_VERSION,
2098 SSL_HIGH,
2099 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2100 256,
2101 256,
2102 },
2103 {
2104 1,
2105 TLS1_TXT_ECDHE_PSK_WITH_CHACHA20_POLY1305,
bbb4ceb8 2106 TLS1_RFC_ECDHE_PSK_WITH_CHACHA20_POLY1305,
748f2546
RS		 2107 TLS1_CK_ECDHE_PSK_WITH_CHACHA20_POLY1305,
2108 SSL_kECDHEPSK,
2109 SSL_aPSK,
2110 SSL_CHACHA20POLY1305,
2111 SSL_AEAD,
2112 TLS1_2_VERSION, TLS1_2_VERSION,
2113 DTLS1_2_VERSION, DTLS1_2_VERSION,
2114 SSL_HIGH,
2115 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2116 256,
2117 256,
2118 },
2119 {
2120 1,
2121 TLS1_TXT_DHE_PSK_WITH_CHACHA20_POLY1305,
bbb4ceb8 2122 TLS1_RFC_DHE_PSK_WITH_CHACHA20_POLY1305,
748f2546
RS		 2123 TLS1_CK_DHE_PSK_WITH_CHACHA20_POLY1305,
2124 SSL_kDHEPSK,
2125 SSL_aPSK,
2126 SSL_CHACHA20POLY1305,
2127 SSL_AEAD,
2128 TLS1_2_VERSION, TLS1_2_VERSION,
2129 DTLS1_2_VERSION, DTLS1_2_VERSION,
2130 SSL_HIGH,
2131 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2132 256,
2133 256,
2134 },
2135 {
2136 1,
2137 TLS1_TXT_RSA_PSK_WITH_CHACHA20_POLY1305,
bbb4ceb8 2138 TLS1_RFC_RSA_PSK_WITH_CHACHA20_POLY1305,
748f2546
RS		 2139 TLS1_CK_RSA_PSK_WITH_CHACHA20_POLY1305,
2140 SSL_kRSAPSK,
2141 SSL_aRSA,
2142 SSL_CHACHA20POLY1305,
2143 SSL_AEAD,
2144 TLS1_2_VERSION, TLS1_2_VERSION,
2145 DTLS1_2_VERSION, DTLS1_2_VERSION,
2146 SSL_HIGH,
2147 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2148 256,
2149 256,
2150 },
a230b26e
EK		 2151#endif /* !defined(OPENSSL_NO_CHACHA) &&
2152 * !defined(OPENSSL_NO_POLY1305) */
748f2546
RS		 2153
2154#ifndef OPENSSL_NO_CAMELLIA
2155 {
2156 1,
2157 TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA256,
bbb4ceb8 2158 TLS1_RFC_RSA_WITH_CAMELLIA_128_CBC_SHA256,
748f2546
RS		 2159 TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA256,
2160 SSL_kRSA,
2161 SSL_aRSA,
2162 SSL_CAMELLIA128,
2163 SSL_SHA256,
2164 TLS1_2_VERSION, TLS1_2_VERSION,
2165 DTLS1_2_VERSION, DTLS1_2_VERSION,
2166 SSL_NOT_DEFAULT | SSL_HIGH,
2167 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2168 128,
2169 128,
2170 },
2171 {
2172 1,
2173 TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256,
bbb4ceb8 2174 TLS1_RFC_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256,
748f2546
RS		 2175 TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256,
2176 SSL_kEDH,
2177 SSL_aDSS,
2178 SSL_CAMELLIA128,
2179 SSL_SHA256,
2180 TLS1_2_VERSION, TLS1_2_VERSION,
2181 DTLS1_2_VERSION, DTLS1_2_VERSION,
2182 SSL_NOT_DEFAULT | SSL_HIGH,
2183 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2184 128,
2185 128,
2186 },
2187 {
2188 1,
2189 TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
bbb4ceb8 2190 TLS1_RFC_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
748f2546
RS		 2191 TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
2192 SSL_kEDH,
2193 SSL_aRSA,
2194 SSL_CAMELLIA128,
2195 SSL_SHA256,
2196 TLS1_2_VERSION, TLS1_2_VERSION,
2197 DTLS1_2_VERSION, DTLS1_2_VERSION,
2198 SSL_NOT_DEFAULT | SSL_HIGH,
2199 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2200 128,
2201 128,
2202 },
2203 {
2204 1,
2205 TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA256,
bbb4ceb8 2206 TLS1_RFC_ADH_WITH_CAMELLIA_128_CBC_SHA256,
748f2546
RS		 2207 TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA256,
2208 SSL_kEDH,
2209 SSL_aNULL,
2210 SSL_CAMELLIA128,
2211 SSL_SHA256,
2212 TLS1_2_VERSION, TLS1_2_VERSION,
2213 DTLS1_2_VERSION, DTLS1_2_VERSION,
2214 SSL_NOT_DEFAULT | SSL_HIGH,
2215 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2216 128,
2217 128,
2218 },
2219 {
2220 1,
2221 TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA256,
bbb4ceb8 2222 TLS1_RFC_RSA_WITH_CAMELLIA_256_CBC_SHA256,
748f2546
RS		 2223 TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA256,
2224 SSL_kRSA,
2225 SSL_aRSA,
2226 SSL_CAMELLIA256,
2227 SSL_SHA256,
2228 TLS1_2_VERSION, TLS1_2_VERSION,
2229 DTLS1_2_VERSION, DTLS1_2_VERSION,
2230 SSL_NOT_DEFAULT | SSL_HIGH,
2231 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2232 256,
2233 256,
2234 },
2235 {
2236 1,
2237 TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256,
bbb4ceb8 2238 TLS1_RFC_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256,
748f2546
RS		 2239 TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256,
2240 SSL_kEDH,
2241 SSL_aDSS,
2242 SSL_CAMELLIA256,
2243 SSL_SHA256,
2244 TLS1_2_VERSION, TLS1_2_VERSION,
2245 DTLS1_2_VERSION, DTLS1_2_VERSION,
2246 SSL_NOT_DEFAULT | SSL_HIGH,
2247 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2248 256,
2249 256,
2250 },
2251 {
2252 1,
2253 TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256,
bbb4ceb8 2254 TLS1_RFC_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256,
748f2546
RS		 2255 TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256,
2256 SSL_kEDH,
2257 SSL_aRSA,
2258 SSL_CAMELLIA256,
2259 SSL_SHA256,
2260 TLS1_2_VERSION, TLS1_2_VERSION,
2261 DTLS1_2_VERSION, DTLS1_2_VERSION,
2262 SSL_NOT_DEFAULT | SSL_HIGH,
2263 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2264 256,
2265 256,
2266 },
2267 {
2268 1,
2269 TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA256,
bbb4ceb8 2270 TLS1_RFC_ADH_WITH_CAMELLIA_256_CBC_SHA256,
748f2546
RS		 2271 TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA256,
2272 SSL_kEDH,
2273 SSL_aNULL,
2274 SSL_CAMELLIA256,
2275 SSL_SHA256,
2276 TLS1_2_VERSION, TLS1_2_VERSION,
2277 DTLS1_2_VERSION, DTLS1_2_VERSION,
2278 SSL_NOT_DEFAULT | SSL_HIGH,
2279 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2280 256,
2281 256,
2282 },
2283 {
2284 1,
2285 TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA,
bbb4ceb8 2286 TLS1_RFC_RSA_WITH_CAMELLIA_256_CBC_SHA,
748f2546
RS		 2287 TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA,
2288 SSL_kRSA,
2289 SSL_aRSA,
2290 SSL_CAMELLIA256,
2291 SSL_SHA1,
2292 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2293 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2294 SSL_NOT_DEFAULT | SSL_HIGH,
2295 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2296 256,
2297 256,
2298 },
2299 {
2300 1,
2301 TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,
bbb4ceb8 2302 TLS1_RFC_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,
748f2546
RS		 2303 TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,
2304 SSL_kDHE,
2305 SSL_aDSS,
2306 SSL_CAMELLIA256,
2307 SSL_SHA1,
2308 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2309 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2310 SSL_NOT_DEFAULT | SSL_HIGH,
2311 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2312 256,
2313 256,
2314 },
2315 {
2316 1,
2317 TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
bbb4ceb8 2318 TLS1_RFC_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
748f2546
RS		 2319 TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
2320 SSL_kDHE,
2321 SSL_aRSA,
2322 SSL_CAMELLIA256,
2323 SSL_SHA1,
2324 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2325 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2326 SSL_NOT_DEFAULT | SSL_HIGH,
2327 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2328 256,
2329 256,
2330 },
2331 {
2332 1,
2333 TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA,
bbb4ceb8 2334 TLS1_RFC_ADH_WITH_CAMELLIA_256_CBC_SHA,
748f2546
RS		 2335 TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA,
2336 SSL_kDHE,
2337 SSL_aNULL,
2338 SSL_CAMELLIA256,
2339 SSL_SHA1,
2340 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2341 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2342 SSL_NOT_DEFAULT | SSL_HIGH,
2343 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2344 256,
2345 256,
2346 },
2347 {
2348 1,
2349 TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA,
bbb4ceb8 2350 TLS1_RFC_RSA_WITH_CAMELLIA_128_CBC_SHA,
748f2546
RS		 2351 TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA,
2352 SSL_kRSA,
2353 SSL_aRSA,
2354 SSL_CAMELLIA128,
2355 SSL_SHA1,
2356 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2357 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2358 SSL_NOT_DEFAULT | SSL_HIGH,
2359 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2360 128,
2361 128,
2362 },
2363 {
2364 1,
2365 TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,
bbb4ceb8 2366 TLS1_RFC_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,
748f2546
RS		 2367 TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,
2368 SSL_kDHE,
2369 SSL_aDSS,
2370 SSL_CAMELLIA128,
2371 SSL_SHA1,
2372 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2373 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2374 SSL_NOT_DEFAULT | SSL_HIGH,
2375 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2376 128,
2377 128,
2378 },
2379 {
2380 1,
2381 TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
bbb4ceb8 2382 TLS1_RFC_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
748f2546
RS		 2383 TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
2384 SSL_kDHE,
2385 SSL_aRSA,
2386 SSL_CAMELLIA128,
2387 SSL_SHA1,
2388 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2389 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2390 SSL_NOT_DEFAULT | SSL_HIGH,
2391 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2392 128,
2393 128,
2394 },
2395 {
2396 1,
2397 TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA,
bbb4ceb8 2398 TLS1_RFC_ADH_WITH_CAMELLIA_128_CBC_SHA,
748f2546
RS		 2399 TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA,
2400 SSL_kDHE,
2401 SSL_aNULL,
2402 SSL_CAMELLIA128,
2403 SSL_SHA1,
2404 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2405 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2406 SSL_NOT_DEFAULT | SSL_HIGH,
2407 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2408 128,
2409 128,
2410 },
748f2546 2411 {
0f113f3e
MC		 2412 1,
2413 TLS1_TXT_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,
bbb4ceb8 2414 TLS1_RFC_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,
0f113f3e
MC		 2415 TLS1_CK_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,
2416 SSL_kECDHE,
2417 SSL_aECDSA,
2418 SSL_CAMELLIA128,
2419 SSL_SHA256,
3eb2aff4
KR		 2420 TLS1_2_VERSION, TLS1_2_VERSION,
2421 DTLS1_2_VERSION, DTLS1_2_VERSION,
a556f342 2422 SSL_NOT_DEFAULT | SSL_HIGH,
0f113f3e
MC		 2423 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2424 128,
a230b26e
EK		 2425 128,
2426 },
748f2546 2427 {
0f113f3e
MC		 2428 1,
2429 TLS1_TXT_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,
bbb4ceb8 2430 TLS1_RFC_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,
0f113f3e
MC		 2431 TLS1_CK_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,
2432 SSL_kECDHE,
2433 SSL_aECDSA,
2434 SSL_CAMELLIA256,
2435 SSL_SHA384,
3eb2aff4
KR		 2436 TLS1_2_VERSION, TLS1_2_VERSION,
2437 DTLS1_2_VERSION, DTLS1_2_VERSION,
a556f342 2438 SSL_NOT_DEFAULT | SSL_HIGH,
0f113f3e
MC		 2439 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
2440 256,
a230b26e
EK		 2441 256,
2442 },
748f2546 2443 {
0f113f3e
MC		 2444 1,
2445 TLS1_TXT_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
bbb4ceb8 2446 TLS1_RFC_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
0f113f3e
MC		 2447 TLS1_CK_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
2448 SSL_kECDHE,
2449 SSL_aRSA,
2450 SSL_CAMELLIA128,
2451 SSL_SHA256,
3eb2aff4
KR		 2452 TLS1_2_VERSION, TLS1_2_VERSION,
2453 DTLS1_2_VERSION, DTLS1_2_VERSION,
a556f342 2454 SSL_NOT_DEFAULT | SSL_HIGH,
0f113f3e
MC		 2455 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2456 128,
a230b26e
EK		 2457 128,
2458 },
748f2546 2459 {
0f113f3e
MC		 2460 1,
2461 TLS1_TXT_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384,
bbb4ceb8 2462 TLS1_RFC_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384,
0f113f3e
MC		 2463 TLS1_CK_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384,
2464 SSL_kECDHE,
2465 SSL_aRSA,
2466 SSL_CAMELLIA256,
2467 SSL_SHA384,
3eb2aff4
KR		 2468 TLS1_2_VERSION, TLS1_2_VERSION,
2469 DTLS1_2_VERSION, DTLS1_2_VERSION,
a556f342 2470 SSL_NOT_DEFAULT | SSL_HIGH,
0f113f3e
MC		 2471 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
2472 256,
a230b26e
EK		 2473 256,
2474 },
748f2546 2475 {
69a3a9f5
DSH		 2476 1,
2477 TLS1_TXT_PSK_WITH_CAMELLIA_128_CBC_SHA256,
bbb4ceb8 2478 TLS1_RFC_PSK_WITH_CAMELLIA_128_CBC_SHA256,
69a3a9f5
DSH		 2479 TLS1_CK_PSK_WITH_CAMELLIA_128_CBC_SHA256,
2480 SSL_kPSK,
2481 SSL_aPSK,
2482 SSL_CAMELLIA128,
2483 SSL_SHA256,
3eb2aff4 2484 TLS1_VERSION, TLS1_2_VERSION,
387cf213 2485 DTLS1_BAD_VER, DTLS1_2_VERSION,
a556f342 2486 SSL_NOT_DEFAULT | SSL_HIGH,
69a3a9f5
DSH		 2487 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2488 128,
a230b26e
EK		 2489 128,
2490 },
748f2546 2491 {
69a3a9f5
DSH		 2492 1,
2493 TLS1_TXT_PSK_WITH_CAMELLIA_256_CBC_SHA384,
bbb4ceb8 2494 TLS1_RFC_PSK_WITH_CAMELLIA_256_CBC_SHA384,
69a3a9f5
DSH		 2495 TLS1_CK_PSK_WITH_CAMELLIA_256_CBC_SHA384,
2496 SSL_kPSK,
2497 SSL_aPSK,
2498 SSL_CAMELLIA256,
2499 SSL_SHA384,
3eb2aff4 2500 TLS1_VERSION, TLS1_2_VERSION,
387cf213 2501 DTLS1_BAD_VER, DTLS1_2_VERSION,
a556f342 2502 SSL_NOT_DEFAULT | SSL_HIGH,
69a3a9f5
DSH		 2503 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
2504 256,
a230b26e
EK		 2505 256,
2506 },
748f2546 2507 {
69a3a9f5
DSH		 2508 1,
2509 TLS1_TXT_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
bbb4ceb8 2510 TLS1_RFC_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
69a3a9f5
DSH		 2511 TLS1_CK_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
2512 SSL_kDHEPSK,
2513 SSL_aPSK,
2514 SSL_CAMELLIA128,
2515 SSL_SHA256,
3eb2aff4 2516 TLS1_VERSION, TLS1_2_VERSION,
387cf213 2517 DTLS1_BAD_VER, DTLS1_2_VERSION,
a556f342 2518 SSL_NOT_DEFAULT | SSL_HIGH,
69a3a9f5
DSH		 2519 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2520 128,
a230b26e
EK		 2521 128,
2522 },
748f2546 2523 {
69a3a9f5
DSH		 2524 1,
2525 TLS1_TXT_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
bbb4ceb8 2526 TLS1_RFC_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
69a3a9f5
DSH		 2527 TLS1_CK_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
2528 SSL_kDHEPSK,
2529 SSL_aPSK,
2530 SSL_CAMELLIA256,
2531 SSL_SHA384,
3eb2aff4 2532 TLS1_VERSION, TLS1_2_VERSION,
387cf213 2533 DTLS1_BAD_VER, DTLS1_2_VERSION,
a556f342 2534 SSL_NOT_DEFAULT | SSL_HIGH,
69a3a9f5
DSH		 2535 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
2536 256,
a230b26e
EK		 2537 256,
2538 },
748f2546 2539 {
69a3a9f5
DSH		 2540 1,
2541 TLS1_TXT_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256,
bbb4ceb8 2542 TLS1_RFC_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256,
69a3a9f5
DSH		 2543 TLS1_CK_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256,
2544 SSL_kRSAPSK,
2545 SSL_aRSA,
2546 SSL_CAMELLIA128,
2547 SSL_SHA256,
3eb2aff4 2548 TLS1_VERSION, TLS1_2_VERSION,
387cf213 2549 DTLS1_BAD_VER, DTLS1_2_VERSION,
a556f342 2550 SSL_NOT_DEFAULT | SSL_HIGH,
69a3a9f5
DSH		 2551 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2552 128,
a230b26e
EK		 2553 128,
2554 },
748f2546 2555 {
69a3a9f5
DSH		 2556 1,
2557 TLS1_TXT_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384,
bbb4ceb8 2558 TLS1_RFC_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384,
69a3a9f5
DSH		 2559 TLS1_CK_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384,
2560 SSL_kRSAPSK,
2561 SSL_aRSA,
2562 SSL_CAMELLIA256,
2563 SSL_SHA384,
3eb2aff4 2564 TLS1_VERSION, TLS1_2_VERSION,
387cf213 2565 DTLS1_BAD_VER, DTLS1_2_VERSION,
a556f342 2566 SSL_NOT_DEFAULT | SSL_HIGH,
69a3a9f5
DSH		 2567 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
2568 256,
a230b26e
EK		 2569 256,
2570 },
176f85a2
DSH		 2571 {
2572 1,
748f2546 2573 TLS1_TXT_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
bbb4ceb8 2574 TLS1_RFC_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
748f2546
RS		 2575 TLS1_CK_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
2576 SSL_kECDHEPSK,
176f85a2 2577 SSL_aPSK,
748f2546
RS		 2578 SSL_CAMELLIA128,
2579 SSL_SHA256,
2580 TLS1_VERSION, TLS1_2_VERSION,
387cf213 2581 DTLS1_BAD_VER, DTLS1_2_VERSION,
a556f342 2582 SSL_NOT_DEFAULT | SSL_HIGH,
748f2546 2583 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
176f85a2 2584 128,
a230b26e
EK		 2585 128,
2586 },
176f85a2
DSH		 2587 {
2588 1,
748f2546 2589 TLS1_TXT_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
bbb4ceb8 2590 TLS1_RFC_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
748f2546
RS		 2591 TLS1_CK_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
2592 SSL_kECDHEPSK,
176f85a2 2593 SSL_aPSK,
748f2546
RS		 2594 SSL_CAMELLIA256,
2595 SSL_SHA384,
2596 TLS1_VERSION, TLS1_2_VERSION,
387cf213 2597 DTLS1_BAD_VER, DTLS1_2_VERSION,
a556f342 2598 SSL_NOT_DEFAULT | SSL_HIGH,
748f2546 2599 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
176f85a2 2600 256,
a230b26e
EK		 2601 256,
2602 },
a230b26e 2603#endif /* OPENSSL_NO_CAMELLIA */
176f85a2 2604
580731af 2605#ifndef OPENSSL_NO_GOST
176f85a2
DSH		 2606 {
2607 1,
748f2546 2608 "GOST2001-GOST89-GOST89",
bbb4ceb8 2609 "TLS_GOSTR341001_WITH_28147_CNT_IMIT",
748f2546
RS		 2610 0x3000081,
2611 SSL_kGOST,
2612 SSL_aGOST01,
2613 SSL_eGOST2814789CNT,
2614 SSL_GOST89MAC,
2615 TLS1_VERSION, TLS1_2_VERSION,
48c16012 2616 0, 0,
748f2546
RS		 2617 SSL_HIGH,
2618 SSL_HANDSHAKE_MAC_GOST94 | TLS1_PRF_GOST94 | TLS1_STREAM_MAC,
176f85a2 2619 256,
a230b26e
EK		 2620 256,
2621 },
748f2546
RS		 2622 {
2623 1,
2624 "GOST2001-NULL-GOST94",
bbb4ceb8 2625 "TLS_GOSTR341001_WITH_NULL_GOSTR3411",
748f2546
RS		 2626 0x3000083,
2627 SSL_kGOST,
2628 SSL_aGOST01,
2629 SSL_eNULL,
2630 SSL_GOST94,
2631 TLS1_VERSION, TLS1_2_VERSION,
48c16012 2632 0, 0,
748f2546
RS		 2633 SSL_STRONG_NONE,
2634 SSL_HANDSHAKE_MAC_GOST94 | TLS1_PRF_GOST94,
2635 0,
a230b26e
EK		 2636 0,
2637 },
748f2546
RS		 2638 {
2639 1,
98278b96
NM		 2640 "IANA-GOST2012-GOST8912-GOST8912",
2641 NULL,
2642 0x0300c102,
2643 SSL_kGOST,
2644 SSL_aGOST12 | SSL_aGOST01,
2645 SSL_eGOST2814789CNT12,
2646 SSL_GOST89MAC12,
2647 TLS1_VERSION, TLS1_2_VERSION,
2648 0, 0,
2649 SSL_HIGH,
2650 SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_STREAM_MAC,
2651 256,
2652 256,
2653 },
2654 {
2655 1,
2656 "LEGACY-GOST2012-GOST8912-GOST8912",
bbb4ceb8 2657 NULL,
748f2546
RS		 2658 0x0300ff85,
2659 SSL_kGOST,
2660 SSL_aGOST12 | SSL_aGOST01,
2661 SSL_eGOST2814789CNT12,
2662 SSL_GOST89MAC12,
2663 TLS1_VERSION, TLS1_2_VERSION,
48c16012 2664 0, 0,
748f2546
RS		 2665 SSL_HIGH,
2666 SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_STREAM_MAC,
176f85a2 2667 256,
a230b26e
EK		 2668 256,
2669 },
748f2546
RS		 2670 {
2671 1,
2672 "GOST2012-NULL-GOST12",
bbb4ceb8 2673 NULL,
748f2546
RS		 2674 0x0300ff87,
2675 SSL_kGOST,
2676 SSL_aGOST12 | SSL_aGOST01,
2677 SSL_eNULL,
2678 SSL_GOST12_256,
2679 TLS1_VERSION, TLS1_2_VERSION,
48c16012 2680 0, 0,
748f2546
RS		 2681 SSL_STRONG_NONE,
2682 SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_STREAM_MAC,
2683 0,
a230b26e
EK		 2684 0,
2685 },
5a5530a2
DB		 2686 {
2687 1,
2688 "GOST2012-KUZNYECHIK-KUZNYECHIKOMAC",
2689 NULL,
2690 0x0300C100,
2691 SSL_kGOST18,
2692 SSL_aGOST12,
2693 SSL_KUZNYECHIK,
2694 SSL_KUZNYECHIKOMAC,
2695 TLS1_2_VERSION, TLS1_2_VERSION,
2696 0, 0,
2697 SSL_HIGH,
2698 SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_TLSTREE,
2699 256,
2700 256,
2701 },
2702 {
2703 1,
2704 "GOST2012-MAGMA-MAGMAOMAC",
2705 NULL,
2706 0x0300C101,
2707 SSL_kGOST18,
2708 SSL_aGOST12,
2709 SSL_MAGMA,
2710 SSL_MAGMAOMAC,
2711 TLS1_2_VERSION, TLS1_2_VERSION,
2712 0, 0,
2713 SSL_HIGH,
2714 SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_TLSTREE,
2715 256,
2716 256,
2717 },
a230b26e 2718#endif /* OPENSSL_NO_GOST */
176f85a2 2719
748f2546 2720#ifndef OPENSSL_NO_IDEA
176f85a2
DSH		 2721 {
2722 1,
748f2546 2723 SSL3_TXT_RSA_IDEA_128_SHA,
bbb4ceb8 2724 SSL3_RFC_RSA_IDEA_128_SHA,
748f2546
RS		 2725 SSL3_CK_RSA_IDEA_128_SHA,
2726 SSL_kRSA,
2727 SSL_aRSA,
2728 SSL_IDEA,
2729 SSL_SHA1,
2730 SSL3_VERSION, TLS1_1_VERSION,
387cf213 2731 DTLS1_BAD_VER, DTLS1_VERSION,
748f2546
RS		 2732 SSL_NOT_DEFAULT | SSL_MEDIUM,
2733 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
176f85a2
DSH		 2734 128,
2735 128,
2736 },
748f2546 2737#endif
176f85a2 2738
748f2546 2739#ifndef OPENSSL_NO_SEED
176f85a2
DSH		 2740 {
2741 1,
748f2546 2742 TLS1_TXT_RSA_WITH_SEED_SHA,
bbb4ceb8 2743 TLS1_RFC_RSA_WITH_SEED_SHA,
748f2546
RS		 2744 TLS1_CK_RSA_WITH_SEED_SHA,
2745 SSL_kRSA,
2746 SSL_aRSA,
2747 SSL_SEED,
2748 SSL_SHA1,
2749 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2750 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2751 SSL_NOT_DEFAULT | SSL_MEDIUM,
2752 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2753 128,
2754 128,
176f85a2 2755 },
176f85a2
DSH		 2756 {
2757 1,
748f2546 2758 TLS1_TXT_DHE_DSS_WITH_SEED_SHA,
bbb4ceb8 2759 TLS1_RFC_DHE_DSS_WITH_SEED_SHA,
748f2546
RS		 2760 TLS1_CK_DHE_DSS_WITH_SEED_SHA,
2761 SSL_kDHE,
2762 SSL_aDSS,
2763 SSL_SEED,
2764 SSL_SHA1,
2765 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2766 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2767 SSL_NOT_DEFAULT | SSL_MEDIUM,
2768 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
176f85a2
DSH		 2769 128,
2770 128,
2771 },
176f85a2
DSH		 2772 {
2773 1,
748f2546 2774 TLS1_TXT_DHE_RSA_WITH_SEED_SHA,
bbb4ceb8 2775 TLS1_RFC_DHE_RSA_WITH_SEED_SHA,
748f2546
RS		 2776 TLS1_CK_DHE_RSA_WITH_SEED_SHA,
2777 SSL_kDHE,
2778 SSL_aRSA,
2779 SSL_SEED,
2780 SSL_SHA1,
2781 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2782 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2783 SSL_NOT_DEFAULT | SSL_MEDIUM,
2784 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2785 128,
2786 128,
176f85a2 2787 },
176f85a2
DSH		 2788 {
2789 1,
748f2546 2790 TLS1_TXT_ADH_WITH_SEED_SHA,
bbb4ceb8 2791 TLS1_RFC_ADH_WITH_SEED_SHA,
748f2546
RS		 2792 TLS1_CK_ADH_WITH_SEED_SHA,
2793 SSL_kDHE,
2794 SSL_aNULL,
2795 SSL_SEED,
2796 SSL_SHA1,
2797 SSL3_VERSION, TLS1_2_VERSION,
387cf213 2798 DTLS1_BAD_VER, DTLS1_2_VERSION,
748f2546
RS		 2799 SSL_NOT_DEFAULT | SSL_MEDIUM,
2800 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
176f85a2
DSH		 2801 128,
2802 128,
2803 },
a230b26e 2804#endif /* OPENSSL_NO_SEED */
176f85a2 2805
748f2546
RS		 2806#ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
2807 {
2808 1,
2809 SSL3_TXT_RSA_RC4_128_MD5,
bbb4ceb8 2810 SSL3_RFC_RSA_RC4_128_MD5,
748f2546
RS		 2811 SSL3_CK_RSA_RC4_128_MD5,
2812 SSL_kRSA,
2813 SSL_aRSA,
2814 SSL_RC4,
2815 SSL_MD5,
2816 SSL3_VERSION, TLS1_2_VERSION,
2817 0, 0,
2818 SSL_NOT_DEFAULT | SSL_MEDIUM,
2819 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2820 128,
2821 128,
2822 },
176f85a2
DSH		 2823 {
2824 1,
748f2546 2825 SSL3_TXT_RSA_RC4_128_SHA,
bbb4ceb8 2826 SSL3_RFC_RSA_RC4_128_SHA,
748f2546
RS		 2827 SSL3_CK_RSA_RC4_128_SHA,
2828 SSL_kRSA,
2829 SSL_aRSA,
2830 SSL_RC4,
2831 SSL_SHA1,
2832 SSL3_VERSION, TLS1_2_VERSION,
2833 0, 0,
2834 SSL_NOT_DEFAULT | SSL_MEDIUM,
2835 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2836 128,
2837 128,
176f85a2 2838 },
176f85a2
DSH		 2839 {
2840 1,
748f2546 2841 SSL3_TXT_ADH_RC4_128_MD5,
bbb4ceb8 2842 SSL3_RFC_ADH_RC4_128_MD5,
748f2546
RS		 2843 SSL3_CK_ADH_RC4_128_MD5,
2844 SSL_kDHE,
2845 SSL_aNULL,
2846 SSL_RC4,
2847 SSL_MD5,
2848 SSL3_VERSION, TLS1_2_VERSION,
2849 0, 0,
2850 SSL_NOT_DEFAULT | SSL_MEDIUM,
2851 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
176f85a2
DSH		 2852 128,
2853 128,
2854 },
176f85a2
DSH		 2855 {
2856 1,
748f2546 2857 TLS1_TXT_ECDHE_PSK_WITH_RC4_128_SHA,
bbb4ceb8 2858 TLS1_RFC_ECDHE_PSK_WITH_RC4_128_SHA,
748f2546
RS		 2859 TLS1_CK_ECDHE_PSK_WITH_RC4_128_SHA,
2860 SSL_kECDHEPSK,
2861 SSL_aPSK,
2862 SSL_RC4,
2863 SSL_SHA1,
fe55c4a2 2864 TLS1_VERSION, TLS1_2_VERSION,
748f2546
RS		 2865 0, 0,
2866 SSL_NOT_DEFAULT | SSL_MEDIUM,
2867 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2868 128,
2869 128,
176f85a2 2870 },
a76ba82c
AP		 2871 {
2872 1,
748f2546 2873 TLS1_TXT_ECDH_anon_WITH_RC4_128_SHA,
bbb4ceb8 2874 TLS1_RFC_ECDH_anon_WITH_RC4_128_SHA,
748f2546 2875 TLS1_CK_ECDH_anon_WITH_RC4_128_SHA,
a76ba82c 2876 SSL_kECDHE,
748f2546
RS		 2877 SSL_aNULL,
2878 SSL_RC4,
2879 SSL_SHA1,
fe55c4a2 2880 TLS1_VERSION, TLS1_2_VERSION,
748f2546
RS		 2881 0, 0,
2882 SSL_NOT_DEFAULT | SSL_MEDIUM,
2883 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2884 128,
2885 128,
a76ba82c 2886 },
a76ba82c
AP		 2887 {
2888 1,
748f2546 2889 TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA,
bbb4ceb8 2890 TLS1_RFC_ECDHE_ECDSA_WITH_RC4_128_SHA,
748f2546 2891 TLS1_CK_ECDHE_ECDSA_WITH_RC4_128_SHA,
a76ba82c
AP		 2892 SSL_kECDHE,
2893 SSL_aECDSA,
748f2546
RS		 2894 SSL_RC4,
2895 SSL_SHA1,
fe55c4a2 2896 TLS1_VERSION, TLS1_2_VERSION,
748f2546
RS		 2897 0, 0,
2898 SSL_NOT_DEFAULT | SSL_MEDIUM,
2899 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2900 128,
2901 128,
a76ba82c 2902 },
a76ba82c
AP		 2903 {
2904 1,
748f2546 2905 TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA,
bbb4ceb8 2906 TLS1_RFC_ECDHE_RSA_WITH_RC4_128_SHA,
748f2546
RS		 2907 TLS1_CK_ECDHE_RSA_WITH_RC4_128_SHA,
2908 SSL_kECDHE,
a76ba82c 2909 SSL_aRSA,
748f2546
RS		 2910 SSL_RC4,
2911 SSL_SHA1,
fe55c4a2 2912 TLS1_VERSION, TLS1_2_VERSION,
748f2546
RS		 2913 0, 0,
2914 SSL_NOT_DEFAULT | SSL_MEDIUM,
2915 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2916 128,
2917 128,
a76ba82c 2918 },
a76ba82c
AP		 2919 {
2920 1,
748f2546 2921 TLS1_TXT_PSK_WITH_RC4_128_SHA,
bbb4ceb8 2922 TLS1_RFC_PSK_WITH_RC4_128_SHA,
748f2546 2923 TLS1_CK_PSK_WITH_RC4_128_SHA,
a76ba82c
AP		 2924 SSL_kPSK,
2925 SSL_aPSK,
748f2546
RS		 2926 SSL_RC4,
2927 SSL_SHA1,
2928 SSL3_VERSION, TLS1_2_VERSION,
2929 0, 0,
2930 SSL_NOT_DEFAULT | SSL_MEDIUM,
2931 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2932 128,
2933 128,
a76ba82c 2934 },
a76ba82c
AP		 2935 {
2936 1,
748f2546 2937 TLS1_TXT_RSA_PSK_WITH_RC4_128_SHA,
bbb4ceb8 2938 TLS1_RFC_RSA_PSK_WITH_RC4_128_SHA,
748f2546
RS		 2939 TLS1_CK_RSA_PSK_WITH_RC4_128_SHA,
2940 SSL_kRSAPSK,
2941 SSL_aRSA,
2942 SSL_RC4,
2943 SSL_SHA1,
2944 SSL3_VERSION, TLS1_2_VERSION,
2945 0, 0,
2946 SSL_NOT_DEFAULT | SSL_MEDIUM,
2947 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2948 128,
2949 128,
a76ba82c 2950 },
a76ba82c
AP		 2951 {
2952 1,
748f2546 2953 TLS1_TXT_DHE_PSK_WITH_RC4_128_SHA,
bbb4ceb8 2954 TLS1_RFC_DHE_PSK_WITH_RC4_128_SHA,
748f2546 2955 TLS1_CK_DHE_PSK_WITH_RC4_128_SHA,
a76ba82c
AP		 2956 SSL_kDHEPSK,
2957 SSL_aPSK,
748f2546
RS		 2958 SSL_RC4,
2959 SSL_SHA1,
2960 SSL3_VERSION, TLS1_2_VERSION,
2961 0, 0,
2962 SSL_NOT_DEFAULT | SSL_MEDIUM,
2963 SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
2964 128,
2965 128,
a76ba82c 2966 },
a230b26e 2967#endif /* OPENSSL_NO_WEAK_SSL_CIPHERS */
e44380a9 2968
bc326738
JS		 2969#ifndef OPENSSL_NO_ARIA
2970 {
2971 1,
2972 TLS1_TXT_RSA_WITH_ARIA_128_GCM_SHA256,
2973 TLS1_RFC_RSA_WITH_ARIA_128_GCM_SHA256,
2974 TLS1_CK_RSA_WITH_ARIA_128_GCM_SHA256,
2975 SSL_kRSA,
2976 SSL_aRSA,
2977 SSL_ARIA128GCM,
2978 SSL_AEAD,
2979 TLS1_2_VERSION, TLS1_2_VERSION,
2980 DTLS1_2_VERSION, DTLS1_2_VERSION,
2981 SSL_NOT_DEFAULT | SSL_HIGH,
2982 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
2983 128,
2984 128,
2985 },
2986 {
2987 1,
2988 TLS1_TXT_RSA_WITH_ARIA_256_GCM_SHA384,
2989 TLS1_RFC_RSA_WITH_ARIA_256_GCM_SHA384,
2990 TLS1_CK_RSA_WITH_ARIA_256_GCM_SHA384,
2991 SSL_kRSA,
2992 SSL_aRSA,
2993 SSL_ARIA256GCM,
2994 SSL_AEAD,
2995 TLS1_2_VERSION, TLS1_2_VERSION,
2996 DTLS1_2_VERSION, DTLS1_2_VERSION,
2997 SSL_NOT_DEFAULT | SSL_HIGH,
2998 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
2999 256,
3000 256,
3001 },
3002 {
3003 1,
3004 TLS1_TXT_DHE_RSA_WITH_ARIA_128_GCM_SHA256,
3005 TLS1_RFC_DHE_RSA_WITH_ARIA_128_GCM_SHA256,
3006 TLS1_CK_DHE_RSA_WITH_ARIA_128_GCM_SHA256,
3007 SSL_kDHE,
3008 SSL_aRSA,
3009 SSL_ARIA128GCM,
3010 SSL_AEAD,
3011 TLS1_2_VERSION, TLS1_2_VERSION,
3012 DTLS1_2_VERSION, DTLS1_2_VERSION,
3013 SSL_NOT_DEFAULT | SSL_HIGH,
3014 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
3015 128,
3016 128,
3017 },
3018 {
3019 1,
3020 TLS1_TXT_DHE_RSA_WITH_ARIA_256_GCM_SHA384,
3021 TLS1_RFC_DHE_RSA_WITH_ARIA_256_GCM_SHA384,
3022 TLS1_CK_DHE_RSA_WITH_ARIA_256_GCM_SHA384,
3023 SSL_kDHE,
3024 SSL_aRSA,
3025 SSL_ARIA256GCM,
3026 SSL_AEAD,
3027 TLS1_2_VERSION, TLS1_2_VERSION,
3028 DTLS1_2_VERSION, DTLS1_2_VERSION,
3029 SSL_NOT_DEFAULT | SSL_HIGH,
3030 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
3031 256,
3032 256,
3033 },
3034 {
3035 1,
3036 TLS1_TXT_DHE_DSS_WITH_ARIA_128_GCM_SHA256,
3037 TLS1_RFC_DHE_DSS_WITH_ARIA_128_GCM_SHA256,
3038 TLS1_CK_DHE_DSS_WITH_ARIA_128_GCM_SHA256,
3039 SSL_kDHE,
3040 SSL_aDSS,
3041 SSL_ARIA128GCM,
3042 SSL_AEAD,
3043 TLS1_2_VERSION, TLS1_2_VERSION,
3044 DTLS1_2_VERSION, DTLS1_2_VERSION,
3045 SSL_NOT_DEFAULT | SSL_HIGH,
3046 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
3047 128,
3048 128,
3049 },
3050 {
3051 1,
3052 TLS1_TXT_DHE_DSS_WITH_ARIA_256_GCM_SHA384,
3053 TLS1_RFC_DHE_DSS_WITH_ARIA_256_GCM_SHA384,
3054 TLS1_CK_DHE_DSS_WITH_ARIA_256_GCM_SHA384,
3055 SSL_kDHE,
3056 SSL_aDSS,
3057 SSL_ARIA256GCM,
3058 SSL_AEAD,
3059 TLS1_2_VERSION, TLS1_2_VERSION,
3060 DTLS1_2_VERSION, DTLS1_2_VERSION,
3061 SSL_NOT_DEFAULT | SSL_HIGH,
3062 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
3063 256,
3064 256,
3065 },
3066 {
3067 1,
3068 TLS1_TXT_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256,
3069 TLS1_RFC_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256,
3070 TLS1_CK_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256,
3071 SSL_kECDHE,
3072 SSL_aECDSA,
3073 SSL_ARIA128GCM,
3074 SSL_AEAD,
3075 TLS1_2_VERSION, TLS1_2_VERSION,
3076 DTLS1_2_VERSION, DTLS1_2_VERSION,
3077 SSL_NOT_DEFAULT | SSL_HIGH,
3078 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
3079 128,
3080 128,
3081 },
3082 {
3083 1,
3084 TLS1_TXT_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384,
3085 TLS1_RFC_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384,
3086 TLS1_CK_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384,
3087 SSL_kECDHE,
3088 SSL_aECDSA,
3089 SSL_ARIA256GCM,
3090 SSL_AEAD,
3091 TLS1_2_VERSION, TLS1_2_VERSION,
3092 DTLS1_2_VERSION, DTLS1_2_VERSION,
3093 SSL_NOT_DEFAULT | SSL_HIGH,
3094 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
3095 256,
3096 256,
3097 },
bc326738
JS		 3098 {
3099 1,
3100 TLS1_TXT_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256,
3101 TLS1_RFC_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256,
3102 TLS1_CK_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256,
3103 SSL_kECDHE,
3104 SSL_aRSA,
3105 SSL_ARIA128GCM,
3106 SSL_AEAD,
3107 TLS1_2_VERSION, TLS1_2_VERSION,
3108 DTLS1_2_VERSION, DTLS1_2_VERSION,
3109 SSL_NOT_DEFAULT | SSL_HIGH,
3110 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
3111 128,
3112 128,
3113 },
3114 {
3115 1,
3116 TLS1_TXT_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384,
3117 TLS1_RFC_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384,
3118 TLS1_CK_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384,
3119 SSL_kECDHE,
3120 SSL_aRSA,
3121 SSL_ARIA256GCM,
3122 SSL_AEAD,
3123 TLS1_2_VERSION, TLS1_2_VERSION,
3124 DTLS1_2_VERSION, DTLS1_2_VERSION,
3125 SSL_NOT_DEFAULT | SSL_HIGH,
3126 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
3127 256,
3128 256,
3129 },
3130 {
3131 1,
3132 TLS1_TXT_PSK_WITH_ARIA_128_GCM_SHA256,
3133 TLS1_RFC_PSK_WITH_ARIA_128_GCM_SHA256,
3134 TLS1_CK_PSK_WITH_ARIA_128_GCM_SHA256,
3135 SSL_kPSK,
3136 SSL_aPSK,
3137 SSL_ARIA128GCM,
3138 SSL_AEAD,
3139 TLS1_2_VERSION, TLS1_2_VERSION,
3140 DTLS1_2_VERSION, DTLS1_2_VERSION,
3141 SSL_NOT_DEFAULT | SSL_HIGH,
3142 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
3143 128,
3144 128,
3145 },
3146 {
3147 1,
3148 TLS1_TXT_PSK_WITH_ARIA_256_GCM_SHA384,
3149 TLS1_RFC_PSK_WITH_ARIA_256_GCM_SHA384,
3150 TLS1_CK_PSK_WITH_ARIA_256_GCM_SHA384,
3151 SSL_kPSK,
3152 SSL_aPSK,
3153 SSL_ARIA256GCM,
3154 SSL_AEAD,
3155 TLS1_2_VERSION, TLS1_2_VERSION,
3156 DTLS1_2_VERSION, DTLS1_2_VERSION,
3157 SSL_NOT_DEFAULT | SSL_HIGH,
3158 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
3159 256,
3160 256,
3161 },
3162 {
3163 1,
3164 TLS1_TXT_DHE_PSK_WITH_ARIA_128_GCM_SHA256,
3165 TLS1_RFC_DHE_PSK_WITH_ARIA_128_GCM_SHA256,
3166 TLS1_CK_DHE_PSK_WITH_ARIA_128_GCM_SHA256,
3167 SSL_kDHEPSK,
3168 SSL_aPSK,
3169 SSL_ARIA128GCM,
3170 SSL_AEAD,
3171 TLS1_2_VERSION, TLS1_2_VERSION,
3172 DTLS1_2_VERSION, DTLS1_2_VERSION,
3173 SSL_NOT_DEFAULT | SSL_HIGH,
3174 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
3175 128,
3176 128,
3177 },
3178 {
3179 1,
3180 TLS1_TXT_DHE_PSK_WITH_ARIA_256_GCM_SHA384,
3181 TLS1_RFC_DHE_PSK_WITH_ARIA_256_GCM_SHA384,
3182 TLS1_CK_DHE_PSK_WITH_ARIA_256_GCM_SHA384,
3183 SSL_kDHEPSK,
3184 SSL_aPSK,
3185 SSL_ARIA256GCM,
3186 SSL_AEAD,
3187 TLS1_2_VERSION, TLS1_2_VERSION,
3188 DTLS1_2_VERSION, DTLS1_2_VERSION,
3189 SSL_NOT_DEFAULT | SSL_HIGH,
3190 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
3191 256,
3192 256,
3193 },
bc326738
JS		 3194 {
3195 1,
3196 TLS1_TXT_RSA_PSK_WITH_ARIA_128_GCM_SHA256,
3197 TLS1_RFC_RSA_PSK_WITH_ARIA_128_GCM_SHA256,
3198 TLS1_CK_RSA_PSK_WITH_ARIA_128_GCM_SHA256,
3199 SSL_kRSAPSK,
3200 SSL_aRSA,
3201 SSL_ARIA128GCM,
3202 SSL_AEAD,
3203 TLS1_2_VERSION, TLS1_2_VERSION,
3204 DTLS1_2_VERSION, DTLS1_2_VERSION,
3205 SSL_NOT_DEFAULT | SSL_HIGH,
3206 SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
3207 128,
3208 128,
3209 },
3210 {
3211 1,
3212 TLS1_TXT_RSA_PSK_WITH_ARIA_256_GCM_SHA384,
3213 TLS1_RFC_RSA_PSK_WITH_ARIA_256_GCM_SHA384,
3214 TLS1_CK_RSA_PSK_WITH_ARIA_256_GCM_SHA384,
3215 SSL_kRSAPSK,
3216 SSL_aRSA,
3217 SSL_ARIA256GCM,
3218 SSL_AEAD,
3219 TLS1_2_VERSION, TLS1_2_VERSION,
3220 DTLS1_2_VERSION, DTLS1_2_VERSION,
3221 SSL_NOT_DEFAULT | SSL_HIGH,
3222 SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
3223 256,
3224 256,
3225 },
3226#endif /* OPENSSL_NO_ARIA */
0f113f3e
MC		 3227};
3228
650c6e41
BK		 3229/*
3230 * The list of known Signalling Cipher-Suite Value "ciphers", non-valid
3231 * values stuffed into the ciphers field of the wire protocol for signalling
3232 * purposes.
3233 */
3234static SSL_CIPHER ssl3_scsvs[] = {
3235 {
3236 0,
3237 "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
bbb4ceb8 3238 "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
650c6e41
BK		 3239 SSL3_CK_SCSV,
3240 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
3241 },
3242 {
3243 0,
3244 "TLS_FALLBACK_SCSV",
bbb4ceb8 3245 "TLS_FALLBACK_SCSV",
650c6e41
BK		 3246 SSL3_CK_FALLBACK_SCSV,
3247 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
3248 },
3249};
3250
748f2546
RS		 3251static int cipher_compare(const void *a, const void *b)
3252{
3253 const SSL_CIPHER *ap = (const SSL_CIPHER *)a;
3254 const SSL_CIPHER *bp = (const SSL_CIPHER *)b;
3255
a7ff5796
RL		 3256 if (ap->id == bp->id)
3257 return 0;
3258 return ap->id < bp->id ? -1 : 1;
748f2546
RS		 3259}
3260
3261void ssl_sort_cipher_list(void)
3262{
f865b081
MC		 3263 qsort(tls13_ciphers, TLS13_NUM_CIPHERS, sizeof(tls13_ciphers[0]),
3264 cipher_compare);
cbe29648 3265 qsort(ssl3_ciphers, SSL3_NUM_CIPHERS, sizeof(ssl3_ciphers[0]),
748f2546 3266 cipher_compare);
cbe29648 3267 qsort(ssl3_scsvs, SSL3_NUM_SCSVS, sizeof(ssl3_scsvs[0]), cipher_compare);
748f2546
RS		 3268}
3269
fce78bd4
BE		 3270static int ssl_undefined_function_1(SSL *ssl, unsigned char *r, size_t s,
3271 const char * t, size_t u,
3272 const unsigned char * v, size_t w, int x)
3273{
3274 (void)r;
3275 (void)s;
3276 (void)t;
3277 (void)u;
3278 (void)v;
3279 (void)w;
3280 (void)x;
3281 return ssl_undefined_function(ssl);
3282}
3283
0f113f3e
MC		 3284const SSL3_ENC_METHOD SSLv3_enc_data = {
3285 ssl3_enc,
3286 n_ssl3_mac,
3287 ssl3_setup_key_block,
3288 ssl3_generate_master_secret,
3289 ssl3_change_cipher_state,
3290 ssl3_final_finish_mac,
0f113f3e
MC		 3291 SSL3_MD_CLIENT_FINISHED_CONST, 4,
3292 SSL3_MD_SERVER_FINISHED_CONST, 4,
3293 ssl3_alert_code,
fce78bd4 3294 ssl_undefined_function_1,
0f113f3e 3295 0,
a29fa98c 3296 ssl3_set_handshake_header,
2c7b4dbc 3297 tls_close_construct_packet,
0f113f3e
MC		 3298 ssl3_handshake_write
3299};
58964a49 3300
f3b656b2 3301long ssl3_default_timeout(void)
0f113f3e
MC		 3302{
3303 /*
3304 * 2 hours, the 24 hours mentioned in the SSLv3 spec is way too long for
3305 * http, the cache would over fill
3306 */
3307 return (60 * 60 * 2);
3308}
d02b48c6 3309
6b691a5c 3310int ssl3_num_ciphers(void)
0f113f3e 3311{
26a7d938 3312 return SSL3_NUM_CIPHERS;
0f113f3e 3313}
d02b48c6 3314
babb3798 3315const SSL_CIPHER *ssl3_get_cipher(unsigned int u)
0f113f3e
MC		 3316{
3317 if (u < SSL3_NUM_CIPHERS)
26a7d938 3318 return &(ssl3_ciphers[SSL3_NUM_CIPHERS - 1 - u]);
0f113f3e 3319 else
26a7d938 3320 return NULL;
0f113f3e 3321}
d02b48c6 3322
a29fa98c 3323int ssl3_set_handshake_header(SSL *s, WPACKET *pkt, int htype)
2c7b4dbc 3324{
4a01c59f
MC		 3325 /* No header in the event of a CCS */
3326 if (htype == SSL3_MT_CHANGE_CIPHER_SPEC)
3327 return 1;
3328
2c7b4dbc 3329 /* Set the content type and 3 bytes for the message len */
08029dfa 3330 if (!WPACKET_put_bytes_u8(pkt, htype)
de451856 3331 || !WPACKET_start_sub_packet_u24(pkt))
2c7b4dbc
MC		 3332 return 0;
3333
3334 return 1;
3335}
3336
173e72e6 3337int ssl3_handshake_write(SSL *s)
0f113f3e
MC		 3338{
3339 return ssl3_do_write(s, SSL3_RT_HANDSHAKE);
3340}
173e72e6 3341
6b691a5c 3342int ssl3_new(SSL *s)
0f113f3e 3343{
edc032b5 3344#ifndef OPENSSL_NO_SRP
61986d32 3345 if (!SSL_SRP_CTX_init(s))
e8fb288c 3346 return 0;
edc032b5 3347#endif
b77f3ed1
MC		 3348
3349 if (!s->method->ssl_clear(s))
3350 return 0;
3351
a89325e4 3352 return 1;
0f113f3e 3353}
d02b48c6 3354
6b691a5c 3355void ssl3_free(SSL *s)
0f113f3e 3356{
555cbb32 3357 if (s == NULL)
0f113f3e 3358 return;
e03ddfae 3359
0f113f3e 3360 ssl3_cleanup_key_block(s);
8d92c1f8 3361
fb79abe3 3362#if !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH)
555cbb32
TS		 3363 EVP_PKEY_free(s->s3.peer_tmp);
3364 s->s3.peer_tmp = NULL;
3365 EVP_PKEY_free(s->s3.tmp.pkey);
3366 s->s3.tmp.pkey = NULL;
ea262260
BM		 3367#endif
3368
c8f6c28a
MC		 3369 ssl_evp_cipher_free(s->s3.tmp.new_sym_enc);
3370 ssl_evp_md_free(s->s3.tmp.new_hash);
3371
555cbb32
TS		 3372 OPENSSL_free(s->s3.tmp.ctype);
3373 sk_X509_NAME_pop_free(s->s3.tmp.peer_ca_names, X509_NAME_free);
3374 OPENSSL_free(s->s3.tmp.ciphers_raw);
3375 OPENSSL_clear_free(s->s3.tmp.pms, s->s3.tmp.pmslen);
3376 OPENSSL_free(s->s3.tmp.peer_sigalgs);
3377 OPENSSL_free(s->s3.tmp.peer_cert_sigalgs);
85fb6fda 3378 ssl3_free_digest_list(s);
555cbb32
TS		 3379 OPENSSL_free(s->s3.alpn_selected);
3380 OPENSSL_free(s->s3.alpn_proposed);
6f017a8f 3381
edc032b5 3382#ifndef OPENSSL_NO_SRP
0f113f3e 3383 SSL_SRP_CTX_free(s);
edc032b5 3384#endif
555cbb32 3385 memset(&s->s3, 0, sizeof(s->s3));
0f113f3e 3386}
d02b48c6 3387
b77f3ed1 3388int ssl3_clear(SSL *s)
0f113f3e 3389{
0f113f3e 3390 ssl3_cleanup_key_block(s);
555cbb32
TS		 3391 OPENSSL_free(s->s3.tmp.ctype);
3392 sk_X509_NAME_pop_free(s->s3.tmp.peer_ca_names, X509_NAME_free);
3393 OPENSSL_free(s->s3.tmp.ciphers_raw);
3394 OPENSSL_clear_free(s->s3.tmp.pms, s->s3.tmp.pmslen);
3395 OPENSSL_free(s->s3.tmp.peer_sigalgs);
3396 OPENSSL_free(s->s3.tmp.peer_cert_sigalgs);
d02b48c6 3397
fb79abe3 3398#if !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH)
555cbb32
TS		 3399 EVP_PKEY_free(s->s3.tmp.pkey);
3400 EVP_PKEY_free(s->s3.peer_tmp);
a230b26e 3401#endif /* !OPENSSL_NO_EC */
0f113f3e 3402
85fb6fda 3403 ssl3_free_digest_list(s);
e481f9b9 3404
555cbb32
TS		 3405 OPENSSL_free(s->s3.alpn_selected);
3406 OPENSSL_free(s->s3.alpn_proposed);
e481f9b9 3407
817cd0d5 3408 /* NULL/zero-out everything in the s3 struct */
555cbb32 3409 memset(&s->s3, 0, sizeof(s->s3));
0f113f3e 3410
b77f3ed1
MC		 3411 if (!ssl_free_wbio_buffer(s))
3412 return 0;
0f113f3e 3413
0f113f3e 3414 s->version = SSL3_VERSION;
ee2ffc27 3415
e481f9b9 3416#if !defined(OPENSSL_NO_NEXTPROTONEG)
aff8c126
RS		 3417 OPENSSL_free(s->ext.npn);
3418 s->ext.npn = NULL;
3419 s->ext.npn_len = 0;
ee2ffc27 3420#endif
b77f3ed1
MC		 3421
3422 return 1;
0f113f3e 3423}
d02b48c6 3424
edc032b5 3425#ifndef OPENSSL_NO_SRP
0f113f3e
MC		 3426static char *srp_password_from_info_cb(SSL *s, void *arg)
3427{
7644a9ae 3428 return OPENSSL_strdup(s->srp_ctx.info);
0f113f3e 3429}
edc032b5
BL		 3430#endif
3431
a230b26e 3432static int ssl3_set_req_cert_type(CERT *c, const unsigned char *p, size_t len);
9f27b1ee 3433
a661b653 3434long ssl3_ctrl(SSL *s, int cmd, long larg, void *parg)
0f113f3e
MC		 3435{
3436 int ret = 0;
58964a49 3437
0f113f3e 3438 switch (cmd) {
0f113f3e
MC		 3439 case SSL_CTRL_GET_CLIENT_CERT_REQUEST:
3440 break;
3441 case SSL_CTRL_GET_NUM_RENEGOTIATIONS:
555cbb32 3442 ret = s->s3.num_renegotiations;
0f113f3e
MC		 3443 break;
3444 case SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS:
555cbb32
TS		 3445 ret = s->s3.num_renegotiations;
3446 s->s3.num_renegotiations = 0;
0f113f3e
MC		 3447 break;
3448 case SSL_CTRL_GET_TOTAL_RENEGOTIATIONS:
555cbb32 3449 ret = s->s3.total_renegotiations;
0f113f3e
MC		 3450 break;
3451 case SSL_CTRL_GET_FLAGS:
555cbb32 3452 ret = (int)(s->s3.flags);
0f113f3e 3453 break;
bc36ee62 3454#ifndef OPENSSL_NO_DH
0f113f3e
MC		 3455 case SSL_CTRL_SET_TMP_DH:
3456 {
3457 DH *dh = (DH *)parg;
e2b420fd 3458 EVP_PKEY *pkdh = NULL;
0f113f3e
MC		 3459 if (dh == NULL) {
3460 SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
d9720a59 3461 return 0;
0f113f3e 3462 }
e2b420fd
DSH		 3463 pkdh = ssl_dh_to_pkey(dh);
3464 if (pkdh == NULL) {
3465 SSLerr(SSL_F_SSL3_CTRL, ERR_R_MALLOC_FAILURE);
3466 return 0;
3467 }
0f113f3e 3468 if (!ssl_security(s, SSL_SECOP_TMP_DH,
e2b420fd 3469 EVP_PKEY_security_bits(pkdh), 0, pkdh)) {
0f113f3e 3470 SSLerr(SSL_F_SSL3_CTRL, SSL_R_DH_KEY_TOO_SMALL);
e2b420fd 3471 EVP_PKEY_free(pkdh);
d9720a59 3472 return 0;
0f113f3e 3473 }
e2b420fd
DSH		 3474 EVP_PKEY_free(s->cert->dh_tmp);
3475 s->cert->dh_tmp = pkdh;
d9720a59 3476 return 1;
0f113f3e
MC		 3477 }
3478 break;
3479 case SSL_CTRL_SET_TMP_DH_CB:
3480 {
3481 SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
26a7d938 3482 return ret;
0f113f3e 3483 }
0f113f3e
MC		 3484 case SSL_CTRL_SET_DH_AUTO:
3485 s->cert->dh_tmp_auto = larg;
3486 return 1;
d3442bc7 3487#endif
10bf4fc2 3488#ifndef OPENSSL_NO_EC
0f113f3e
MC		 3489 case SSL_CTRL_SET_TMP_ECDH:
3490 {
6977e8ee
KR		 3491 const EC_GROUP *group = NULL;
3492 int nid;
0f113f3e
MC		 3493
3494 if (parg == NULL) {
3495 SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
6977e8ee 3496 return 0;
0f113f3e 3497 }
6977e8ee
KR		 3498 group = EC_KEY_get0_group((const EC_KEY *)parg);
3499 if (group == NULL) {
3500 SSLerr(SSL_F_SSL3_CTRL, EC_R_MISSING_PARAMETERS);
3501 return 0;
0f113f3e 3502 }
6977e8ee
KR		 3503 nid = EC_GROUP_get_curve_name(group);
3504 if (nid == NID_undef)
3505 return 0;
aff8c126
RS		 3506 return tls1_set_groups(&s->ext.supportedgroups,
3507 &s->ext.supportedgroups_len,
6977e8ee 3508 &nid, 1);
0f113f3e
MC		 3509 }
3510 break;
10bf4fc2 3511#endif /* !OPENSSL_NO_EC */
0f113f3e 3512 case SSL_CTRL_SET_TLSEXT_HOSTNAME:
c5d1fb78
BK		 3513 /*
3514 * TODO(OpenSSL1.2)
3515 * This API is only used for a client to set what SNI it will request
3516 * from the server, but we currently allow it to be used on servers
3517 * as well, which is a programming error. Currently we just clear
3518 * the field in SSL_do_handshake() for server SSLs, but when we can
3519 * make ABI-breaking changes, we may want to make use of this API
3520 * an error on server SSLs.
3521 */
0f113f3e 3522 if (larg == TLSEXT_NAMETYPE_host_name) {
0982ecaa
VD		 3523 size_t len;
3524
aff8c126
RS		 3525 OPENSSL_free(s->ext.hostname);
3526 s->ext.hostname = NULL;
0f113f3e
MC		 3527
3528 ret = 1;
3529 if (parg == NULL)
3530 break;
0982ecaa
VD		 3531 len = strlen((char *)parg);
3532 if (len == 0 || len > TLSEXT_MAXLEN_host_name) {
0f113f3e
MC		 3533 SSLerr(SSL_F_SSL3_CTRL, SSL_R_SSL3_EXT_INVALID_SERVERNAME);
3534 return 0;
3535 }
aff8c126 3536 if ((s->ext.hostname = OPENSSL_strdup((char *)parg)) == NULL) {
0f113f3e
MC		 3537 SSLerr(SSL_F_SSL3_CTRL, ERR_R_INTERNAL_ERROR);
3538 return 0;
3539 }
3540 } else {
3541 SSLerr(SSL_F_SSL3_CTRL, SSL_R_SSL3_EXT_INVALID_SERVERNAME_TYPE);
3542 return 0;
3543 }
3544 break;
3545 case SSL_CTRL_SET_TLSEXT_DEBUG_ARG:
aff8c126 3546 s->ext.debug_arg = parg;
0f113f3e
MC		 3547 ret = 1;
3548 break;
3549
4300aaf3 3550 case SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE:
aff8c126 3551 ret = s->ext.status_type;
4300aaf3
AG		 3552 break;
3553
0f113f3e 3554 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE:
aff8c126 3555 s->ext.status_type = larg;
0f113f3e
MC		 3556 ret = 1;
3557 break;
3558
3559 case SSL_CTRL_GET_TLSEXT_STATUS_REQ_EXTS:
aff8c126 3560 *(STACK_OF(X509_EXTENSION) **)parg = s->ext.ocsp.exts;
0f113f3e
MC		 3561 ret = 1;
3562 break;
3563
3564 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_EXTS:
aff8c126 3565 s->ext.ocsp.exts = parg;
0f113f3e
MC		 3566 ret = 1;
3567 break;
3568
3569 case SSL_CTRL_GET_TLSEXT_STATUS_REQ_IDS:
aff8c126 3570 *(STACK_OF(OCSP_RESPID) **)parg = s->ext.ocsp.ids;
0f113f3e
MC		 3571 ret = 1;
3572 break;
3573
3574 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_IDS:
aff8c126 3575 s->ext.ocsp.ids = parg;
0f113f3e
MC		 3576 ret = 1;
3577 break;
3578
3579 case SSL_CTRL_GET_TLSEXT_STATUS_REQ_OCSP_RESP:
aff8c126
RS		 3580 *(unsigned char **)parg = s->ext.ocsp.resp;
3581 if (s->ext.ocsp.resp_len == 0
3582 || s->ext.ocsp.resp_len > LONG_MAX)
8b0e934a 3583 return -1;
aff8c126 3584 return (long)s->ext.ocsp.resp_len;
0f113f3e
MC		 3585
3586 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_OCSP_RESP:
aff8c126
RS		 3587 OPENSSL_free(s->ext.ocsp.resp);
3588 s->ext.ocsp.resp = parg;
3589 s->ext.ocsp.resp_len = larg;
0f113f3e
MC		 3590 ret = 1;
3591 break;
3592
0f113f3e
MC		 3593 case SSL_CTRL_CHAIN:
3594 if (larg)
3595 return ssl_cert_set1_chain(s, NULL, (STACK_OF(X509) *)parg);
3596 else
3597 return ssl_cert_set0_chain(s, NULL, (STACK_OF(X509) *)parg);
3598
3599 case SSL_CTRL_CHAIN_CERT:
3600 if (larg)
3601 return ssl_cert_add1_chain_cert(s, NULL, (X509 *)parg);
3602 else
3603 return ssl_cert_add0_chain_cert(s, NULL, (X509 *)parg);
3604
3605 case SSL_CTRL_GET_CHAIN_CERTS:
3606 *(STACK_OF(X509) **)parg = s->cert->key->chain;
7bc82358 3607 ret = 1;
0f113f3e
MC		 3608 break;
3609
3610 case SSL_CTRL_SELECT_CURRENT_CERT:
3611 return ssl_cert_select_current(s->cert, (X509 *)parg);
3612
3613 case SSL_CTRL_SET_CURRENT_CERT:
3614 if (larg == SSL_CERT_SET_SERVER) {
0f113f3e
MC		 3615 const SSL_CIPHER *cipher;
3616 if (!s->server)
3617 return 0;
555cbb32 3618 cipher = s->s3.tmp.new_cipher;
f365a3e2 3619 if (cipher == NULL)
0f113f3e
MC		 3620 return 0;
3621 /*
3622 * No certificate for unauthenticated ciphersuites or using SRP
3623 * authentication
3624 */
3625 if (cipher->algorithm_auth & (SSL_aNULL | SSL_aSRP))
3626 return 2;
555cbb32 3627 if (s->s3.tmp.cert == NULL)
0f113f3e 3628 return 0;
555cbb32 3629 s->cert->key = s->s3.tmp.cert;
0f113f3e
MC		 3630 return 1;
3631 }
3632 return ssl_cert_set_current(s->cert, larg);
0f78819c 3633
65dc5c3c 3634#if !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH)
de4d764e 3635 case SSL_CTRL_GET_GROUPS:
0f113f3e 3636 {
9e84a42d 3637 uint16_t *clist;
0f113f3e 3638 size_t clistlen;
aff8c126 3639
0f113f3e
MC		 3640 if (!s->session)
3641 return 0;
45436e61
MC		 3642 clist = s->ext.peer_supportedgroups;
3643 clistlen = s->ext.peer_supportedgroups_len;
0f113f3e
MC		 3644 if (parg) {
3645 size_t i;
3646 int *cptr = parg;
43b95d73 3647
0f113f3e 3648 for (i = 0; i < clistlen; i++) {
9d2d857f
MC		 3649 const TLS_GROUP_INFO *cinf
3650 = tls1_group_id_lookup(s->ctx, clist[i]);
3651
260009d8
MC		 3652 if (cinf != NULL)
3653 cptr[i] = tls1_group_id2nid(cinf->group_id, 1);
3654 else
9e84a42d 3655 cptr[i] = TLSEXT_nid_unknown | clist[i];
0f113f3e
MC		 3656 }
3657 }
3658 return (int)clistlen;
3659 }
3660
de4d764e 3661 case SSL_CTRL_SET_GROUPS:
aff8c126
RS		 3662 return tls1_set_groups(&s->ext.supportedgroups,
3663 &s->ext.supportedgroups_len, parg, larg);
0f113f3e 3664
de4d764e 3665 case SSL_CTRL_SET_GROUPS_LIST:
260009d8 3666 return tls1_set_groups_list(s->ctx, &s->ext.supportedgroups,
aff8c126 3667 &s->ext.supportedgroups_len, parg);
0f113f3e 3668
de4d764e 3669 case SSL_CTRL_GET_SHARED_GROUP:
43b95d73
DSH		 3670 {
3671 uint16_t id = tls1_shared_group(s, larg);
0f113f3e 3672
84d4b9e3 3673 if (larg != -1)
260009d8 3674 return tls1_group_id2nid(id, 1);
43b95d73
DSH		 3675 return id;
3676 }
84d4b9e3 3677 case SSL_CTRL_GET_NEGOTIATED_GROUP:
260009d8 3678 ret = tls1_group_id2nid(s->s3.group_id, 1);
84d4b9e3 3679 break;
65dc5c3c 3680#endif /* !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH) */
dbc6268f 3681
0f113f3e
MC		 3682 case SSL_CTRL_SET_SIGALGS:
3683 return tls1_set_sigalgs(s->cert, parg, larg, 0);
3684
3685 case SSL_CTRL_SET_SIGALGS_LIST:
3686 return tls1_set_sigalgs_list(s->cert, parg, 0);
3687
3688 case SSL_CTRL_SET_CLIENT_SIGALGS:
3689 return tls1_set_sigalgs(s->cert, parg, larg, 1);
3690
3691 case SSL_CTRL_SET_CLIENT_SIGALGS_LIST:
3692 return tls1_set_sigalgs_list(s->cert, parg, 1);
3693
3694 case SSL_CTRL_GET_CLIENT_CERT_TYPES:
3695 {
3696 const unsigned char **pctype = parg;
555cbb32 3697 if (s->server || !s->s3.tmp.cert_req)
0f113f3e 3698 return 0;
0f113f3e 3699 if (pctype)
555cbb32
TS		 3700 *pctype = s->s3.tmp.ctype;
3701 return s->s3.tmp.ctype_len;
0f113f3e
MC		 3702 }
3703
3704 case SSL_CTRL_SET_CLIENT_CERT_TYPES:
3705 if (!s->server)
3706 return 0;
3707 return ssl3_set_req_cert_type(s->cert, parg, larg);
3708
3709 case SSL_CTRL_BUILD_CERT_CHAIN:
3710 return ssl_build_cert_chain(s, NULL, larg);
3711
3712 case SSL_CTRL_SET_VERIFY_CERT_STORE:
3713 return ssl_cert_set_cert_store(s->cert, parg, 0, larg);
3714
3715 case SSL_CTRL_SET_CHAIN_CERT_STORE:
3716 return ssl_cert_set_cert_store(s->cert, parg, 1, larg);
3717
3718 case SSL_CTRL_GET_PEER_SIGNATURE_NID:
555cbb32 3719 if (s->s3.tmp.peer_sigalg == NULL)
0f113f3e 3720 return 0;
555cbb32 3721 *(int *)parg = s->s3.tmp.peer_sigalg->hash;
f742cda8 3722 return 1;
0f113f3e 3723
a51c9f63 3724 case SSL_CTRL_GET_SIGNATURE_NID:
555cbb32 3725 if (s->s3.tmp.sigalg == NULL)
a51c9f63 3726 return 0;
555cbb32 3727 *(int *)parg = s->s3.tmp.sigalg->hash;
a51c9f63
VD		 3728 return 1;
3729
3730 case SSL_CTRL_GET_PEER_TMP_KEY:
fb79abe3 3731#if !defined(OPENSSL_NO_DH) || !defined(OPENSSL_NO_EC)
555cbb32 3732 if (s->session == NULL || s->s3.peer_tmp == NULL) {
0f113f3e 3733 return 0;
fb79abe3 3734 } else {
555cbb32
TS		 3735 EVP_PKEY_up_ref(s->s3.peer_tmp);
3736 *(EVP_PKEY **)parg = s->s3.peer_tmp;
fb79abe3 3737 return 1;
0f113f3e 3738 }
fb79abe3
DSH		 3739#else
3740 return 0;
3741#endif
a51c9f63
VD		 3742
3743 case SSL_CTRL_GET_TMP_KEY:
3744#if !defined(OPENSSL_NO_DH) || !defined(OPENSSL_NO_EC)
555cbb32 3745 if (s->session == NULL || s->s3.tmp.pkey == NULL) {
a51c9f63
VD		 3746 return 0;
3747 } else {
555cbb32
TS		 3748 EVP_PKEY_up_ref(s->s3.tmp.pkey);
3749 *(EVP_PKEY **)parg = s->s3.tmp.pkey;
a51c9f63
VD		 3750 return 1;
3751 }
3752#else
3753 return 0;
3754#endif
3755
14536c8c 3756#ifndef OPENSSL_NO_EC
0f113f3e
MC		 3757 case SSL_CTRL_GET_EC_POINT_FORMATS:
3758 {
0f113f3e 3759 const unsigned char **pformat = parg;
aff8c126 3760
cd0fb43c 3761 if (s->ext.peer_ecpointformats == NULL)
0f113f3e 3762 return 0;
cd0fb43c
MC		 3763 *pformat = s->ext.peer_ecpointformats;
3764 return (int)s->ext.peer_ecpointformats_len;
0f113f3e 3765 }
14536c8c 3766#endif
cf6da053 3767
0f113f3e
MC		 3768 default:
3769 break;
3770 }
26a7d938 3771 return ret;
0f113f3e
MC		 3772}
3773
3774long ssl3_callback_ctrl(SSL *s, int cmd, void (*fp) (void))
3775{
3776 int ret = 0;
d3442bc7 3777
0f113f3e 3778 switch (cmd) {
bc36ee62 3779#ifndef OPENSSL_NO_DH
0f113f3e
MC		 3780 case SSL_CTRL_SET_TMP_DH_CB:
3781 {
3782 s->cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
3783 }
3784 break;
6434abbf 3785#endif
0f113f3e 3786 case SSL_CTRL_SET_TLSEXT_DEBUG_CB:
aff8c126 3787 s->ext.debug_cb = (void (*)(SSL *, int, int,
1ed327f7 3788 const unsigned char *, int, void *))fp;
0f113f3e 3789 break;
e481f9b9 3790
0f113f3e
MC		 3791 case SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB:
3792 {
3793 s->not_resumable_session_cb = (int (*)(SSL *, int))fp;
3794 }
3795 break;
3796 default:
3797 break;
3798 }
26a7d938 3799 return ret;
0f113f3e 3800}
d02b48c6 3801
a661b653 3802long ssl3_ctx_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg)
0f113f3e 3803{
0f113f3e 3804 switch (cmd) {
bc36ee62 3805#ifndef OPENSSL_NO_DH
0f113f3e
MC		 3806 case SSL_CTRL_SET_TMP_DH:
3807 {
e2b420fd
DSH		 3808 DH *dh = (DH *)parg;
3809 EVP_PKEY *pkdh = NULL;
3810 if (dh == NULL) {
3811 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_PASSED_NULL_PARAMETER);
0f113f3e
MC		 3812 return 0;
3813 }
e2b420fd
DSH		 3814 pkdh = ssl_dh_to_pkey(dh);
3815 if (pkdh == NULL) {
3816 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_MALLOC_FAILURE);
0f113f3e
MC		 3817 return 0;
3818 }
e2b420fd
DSH		 3819 if (!ssl_ctx_security(ctx, SSL_SECOP_TMP_DH,
3820 EVP_PKEY_security_bits(pkdh), 0, pkdh)) {
3821 SSLerr(SSL_F_SSL3_CTX_CTRL, SSL_R_DH_KEY_TOO_SMALL);
3822 EVP_PKEY_free(pkdh);
d9720a59 3823 return 0;
0f113f3e 3824 }
e2b420fd
DSH		 3825 EVP_PKEY_free(ctx->cert->dh_tmp);
3826 ctx->cert->dh_tmp = pkdh;
0f113f3e
MC		 3827 return 1;
3828 }
0f113f3e
MC		 3829 case SSL_CTRL_SET_TMP_DH_CB:
3830 {
3831 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
26a7d938 3832 return 0;
0f113f3e 3833 }
0f113f3e
MC		 3834 case SSL_CTRL_SET_DH_AUTO:
3835 ctx->cert->dh_tmp_auto = larg;
3836 return 1;
d02b48c6 3837#endif
10bf4fc2 3838#ifndef OPENSSL_NO_EC
0f113f3e
MC		 3839 case SSL_CTRL_SET_TMP_ECDH:
3840 {
6977e8ee
KR		 3841 const EC_GROUP *group = NULL;
3842 int nid;
0f113f3e
MC		 3843
3844 if (parg == NULL) {
6977e8ee 3845 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_PASSED_NULL_PARAMETER);
0f113f3e
MC		 3846 return 0;
3847 }
6977e8ee
KR		 3848 group = EC_KEY_get0_group((const EC_KEY *)parg);
3849 if (group == NULL) {
3850 SSLerr(SSL_F_SSL3_CTX_CTRL, EC_R_MISSING_PARAMETERS);
0f113f3e
MC		 3851 return 0;
3852 }
6977e8ee
KR		 3853 nid = EC_GROUP_get_curve_name(group);
3854 if (nid == NID_undef)
3855 return 0;
aff8c126
RS		 3856 return tls1_set_groups(&ctx->ext.supportedgroups,
3857 &ctx->ext.supportedgroups_len,
6977e8ee 3858 &nid, 1);
0f113f3e 3859 }
10bf4fc2 3860#endif /* !OPENSSL_NO_EC */
0f113f3e 3861 case SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG:
aff8c126 3862 ctx->ext.servername_arg = parg;
0f113f3e
MC		 3863 break;
3864 case SSL_CTRL_SET_TLSEXT_TICKET_KEYS:
3865 case SSL_CTRL_GET_TLSEXT_TICKET_KEYS:
3866 {
3867 unsigned char *keys = parg;
aff8c126 3868 long tick_keylen = (sizeof(ctx->ext.tick_key_name) +
4bfb96f2
TS		 3869 sizeof(ctx->ext.secure->tick_hmac_key) +
3870 sizeof(ctx->ext.secure->tick_aes_key));
d139723b 3871 if (keys == NULL)
aff8c126
RS		 3872 return tick_keylen;
3873 if (larg != tick_keylen) {
0f113f3e
MC		 3874 SSLerr(SSL_F_SSL3_CTX_CTRL, SSL_R_INVALID_TICKET_KEYS_LENGTH);
3875 return 0;
3876 }
3877 if (cmd == SSL_CTRL_SET_TLSEXT_TICKET_KEYS) {
aff8c126
RS		 3878 memcpy(ctx->ext.tick_key_name, keys,
3879 sizeof(ctx->ext.tick_key_name));
4bfb96f2 3880 memcpy(ctx->ext.secure->tick_hmac_key,
aff8c126 3881 keys + sizeof(ctx->ext.tick_key_name),
4bfb96f2
TS		 3882 sizeof(ctx->ext.secure->tick_hmac_key));
3883 memcpy(ctx->ext.secure->tick_aes_key,
aff8c126 3884 keys + sizeof(ctx->ext.tick_key_name) +
4bfb96f2
TS		 3885 sizeof(ctx->ext.secure->tick_hmac_key),
3886 sizeof(ctx->ext.secure->tick_aes_key));
0f113f3e 3887 } else {
aff8c126
RS		 3888 memcpy(keys, ctx->ext.tick_key_name,
3889 sizeof(ctx->ext.tick_key_name));
3890 memcpy(keys + sizeof(ctx->ext.tick_key_name),
4bfb96f2
TS		 3891 ctx->ext.secure->tick_hmac_key,
3892 sizeof(ctx->ext.secure->tick_hmac_key));
aff8c126 3893 memcpy(keys + sizeof(ctx->ext.tick_key_name) +
4bfb96f2
TS		 3894 sizeof(ctx->ext.secure->tick_hmac_key),
3895 ctx->ext.secure->tick_aes_key,
3896 sizeof(ctx->ext.secure->tick_aes_key));
0f113f3e
MC		 3897 }
3898 return 1;
3899 }
3900
30b96765 3901 case SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE:
aff8c126 3902 return ctx->ext.status_type;
30b96765 3903
ba261f71 3904 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE:
aff8c126 3905 ctx->ext.status_type = larg;
ba261f71 3906 break;
3907
0f113f3e 3908 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG:
aff8c126 3909 ctx->ext.status_arg = parg;
0f113f3e 3910 return 1;
0f113f3e 3911
fddfc0af 3912 case SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB_ARG:
aff8c126 3913 *(void**)parg = ctx->ext.status_arg;
fddfc0af
RG		 3914 break;
3915
3916 case SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB:
aff8c126 3917 *(int (**)(SSL*, void*))parg = ctx->ext.status_cb;
fddfc0af
RG		 3918 break;
3919
e481f9b9 3920#ifndef OPENSSL_NO_SRP
0f113f3e
MC		 3921 case SSL_CTRL_SET_TLS_EXT_SRP_USERNAME:
3922 ctx->srp_ctx.srp_Mask |= SSL_kSRP;
b548a1f1 3923 OPENSSL_free(ctx->srp_ctx.login);
0f113f3e
MC		 3924 ctx->srp_ctx.login = NULL;
3925 if (parg == NULL)
3926 break;
a230b26e 3927 if (strlen((const char *)parg) > 255 || strlen((const char *)parg) < 1) {
0f113f3e
MC		 3928 SSLerr(SSL_F_SSL3_CTX_CTRL, SSL_R_INVALID_SRP_USERNAME);
3929 return 0;
3930 }
7644a9ae 3931 if ((ctx->srp_ctx.login = OPENSSL_strdup((char *)parg)) == NULL) {
0f113f3e
MC		 3932 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_INTERNAL_ERROR);
3933 return 0;
3934 }
3935 break;
3936 case SSL_CTRL_SET_TLS_EXT_SRP_PASSWORD:
3937 ctx->srp_ctx.SRP_give_srp_client_pwd_callback =
3938 srp_password_from_info_cb;
e655f549
DSC		 3939 if (ctx->srp_ctx.info != NULL)
3940 OPENSSL_free(ctx->srp_ctx.info);
3d484574 3941 if ((ctx->srp_ctx.info = OPENSSL_strdup((char *)parg)) == NULL) {
e655f549
DSC		 3942 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_INTERNAL_ERROR);
3943 return 0;
3944 }
0f113f3e
MC		 3945 break;
3946 case SSL_CTRL_SET_SRP_ARG:
3947 ctx->srp_ctx.srp_Mask |= SSL_kSRP;
3948 ctx->srp_ctx.SRP_cb_arg = parg;
3949 break;
3950
3951 case SSL_CTRL_SET_TLS_EXT_SRP_STRENGTH:
3952 ctx->srp_ctx.strength = larg;
3953 break;
e481f9b9 3954#endif
0f113f3e 3955
65dc5c3c 3956#if !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH)
de4d764e 3957 case SSL_CTRL_SET_GROUPS:
aff8c126
RS		 3958 return tls1_set_groups(&ctx->ext.supportedgroups,
3959 &ctx->ext.supportedgroups_len,
0f113f3e
MC		 3960 parg, larg);
3961
de4d764e 3962 case SSL_CTRL_SET_GROUPS_LIST:
260009d8 3963 return tls1_set_groups_list(ctx, &ctx->ext.supportedgroups,
aff8c126 3964 &ctx->ext.supportedgroups_len,
0f113f3e 3965 parg);
65dc5c3c 3966#endif /* !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH) */
dbc6268f 3967
0f113f3e
MC		 3968 case SSL_CTRL_SET_SIGALGS:
3969 return tls1_set_sigalgs(ctx->cert, parg, larg, 0);
3970
3971 case SSL_CTRL_SET_SIGALGS_LIST:
3972 return tls1_set_sigalgs_list(ctx->cert, parg, 0);
3973
3974 case SSL_CTRL_SET_CLIENT_SIGALGS:
3975 return tls1_set_sigalgs(ctx->cert, parg, larg, 1);
3976
3977 case SSL_CTRL_SET_CLIENT_SIGALGS_LIST:
3978 return tls1_set_sigalgs_list(ctx->cert, parg, 1);
3979
3980 case SSL_CTRL_SET_CLIENT_CERT_TYPES:
3981 return ssl3_set_req_cert_type(ctx->cert, parg, larg);
3982
3983 case SSL_CTRL_BUILD_CERT_CHAIN:
3984 return ssl_build_cert_chain(NULL, ctx, larg);
3985
3986 case SSL_CTRL_SET_VERIFY_CERT_STORE:
3987 return ssl_cert_set_cert_store(ctx->cert, parg, 0, larg);
3988
3989 case SSL_CTRL_SET_CHAIN_CERT_STORE:
3990 return ssl_cert_set_cert_store(ctx->cert, parg, 1, larg);
3991
0f113f3e
MC		 3992 /* A Thawte special :-) */
3993 case SSL_CTRL_EXTRA_CHAIN_CERT:
3994 if (ctx->extra_certs == NULL) {
3c82e437
F		 3995 if ((ctx->extra_certs = sk_X509_new_null()) == NULL) {
3996 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_MALLOC_FAILURE);
3997 return 0;
3998 }
3999 }
4000 if (!sk_X509_push(ctx->extra_certs, (X509 *)parg)) {
4001 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_MALLOC_FAILURE);
4002 return 0;
0f113f3e 4003 }
0f113f3e
MC		 4004 break;
4005
4006 case SSL_CTRL_GET_EXTRA_CHAIN_CERTS:
4007 if (ctx->extra_certs == NULL && larg == 0)
4008 *(STACK_OF(X509) **)parg = ctx->cert->key->chain;
4009 else
4010 *(STACK_OF(X509) **)parg = ctx->extra_certs;
4011 break;
4012
4013 case SSL_CTRL_CLEAR_EXTRA_CHAIN_CERTS:
222561fe
RS		 4014 sk_X509_pop_free(ctx->extra_certs, X509_free);
4015 ctx->extra_certs = NULL;
0f113f3e
MC		 4016 break;
4017
4018 case SSL_CTRL_CHAIN:
4019 if (larg)
4020 return ssl_cert_set1_chain(NULL, ctx, (STACK_OF(X509) *)parg);
4021 else
4022 return ssl_cert_set0_chain(NULL, ctx, (STACK_OF(X509) *)parg);
4023
4024 case SSL_CTRL_CHAIN_CERT:
4025 if (larg)
4026 return ssl_cert_add1_chain_cert(NULL, ctx, (X509 *)parg);
4027 else
4028 return ssl_cert_add0_chain_cert(NULL, ctx, (X509 *)parg);
4029
4030 case SSL_CTRL_GET_CHAIN_CERTS:
4031 *(STACK_OF(X509) **)parg = ctx->cert->key->chain;
4032 break;
4033
4034 case SSL_CTRL_SELECT_CURRENT_CERT:
4035 return ssl_cert_select_current(ctx->cert, (X509 *)parg);
4036
4037 case SSL_CTRL_SET_CURRENT_CERT:
4038 return ssl_cert_set_current(ctx->cert, larg);
4039
4040 default:
26a7d938 4041 return 0;
0f113f3e 4042 }
208fb891 4043 return 1;
0f113f3e
MC		 4044}
4045
4046long ssl3_ctx_callback_ctrl(SSL_CTX *ctx, int cmd, void (*fp) (void))
4047{
0f113f3e 4048 switch (cmd) {
bc36ee62 4049#ifndef OPENSSL_NO_DH
0f113f3e
MC		 4050 case SSL_CTRL_SET_TMP_DH_CB:
4051 {
8ca8fc48 4052 ctx->cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
0f113f3e
MC		 4053 }
4054 break;
ed3883d2 4055#endif
0f113f3e 4056 case SSL_CTRL_SET_TLSEXT_SERVERNAME_CB:
aff8c126 4057 ctx->ext.servername_cb = (int (*)(SSL *, int *, void *))fp;
0f113f3e
MC		 4058 break;
4059
0f113f3e 4060 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB:
aff8c126 4061 ctx->ext.status_cb = (int (*)(SSL *, void *))fp;
0f113f3e
MC		 4062 break;
4063
a76ce286 4064# ifndef OPENSSL_NO_DEPRECATED_3_0
0f113f3e 4065 case SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB:
aff8c126 4066 ctx->ext.ticket_key_cb = (int (*)(SSL *, unsigned char *,
0f113f3e
MC		 4067 unsigned char *,
4068 EVP_CIPHER_CTX *,
4069 HMAC_CTX *, int))fp;
4070 break;
a76ce286 4071#endif
0f113f3e 4072
e481f9b9 4073#ifndef OPENSSL_NO_SRP
0f113f3e
MC		 4074 case SSL_CTRL_SET_SRP_VERIFY_PARAM_CB:
4075 ctx->srp_ctx.srp_Mask |= SSL_kSRP;
4076 ctx->srp_ctx.SRP_verify_param_callback = (int (*)(SSL *, void *))fp;
4077 break;
4078 case SSL_CTRL_SET_TLS_EXT_SRP_USERNAME_CB:
4079 ctx->srp_ctx.srp_Mask |= SSL_kSRP;
4080 ctx->srp_ctx.TLS_ext_srp_username_callback =
4081 (int (*)(SSL *, int *, void *))fp;
4082 break;
4083 case SSL_CTRL_SET_SRP_GIVE_CLIENT_PWD_CB:
4084 ctx->srp_ctx.srp_Mask |= SSL_kSRP;
4085 ctx->srp_ctx.SRP_give_srp_client_pwd_callback =
4086 (char *(*)(SSL *, void *))fp;
4087 break;
761772d7 4088#endif
0f113f3e
MC		 4089 case SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB:
4090 {
4091 ctx->not_resumable_session_cb = (int (*)(SSL *, int))fp;
4092 }
4093 break;
4094 default:
26a7d938 4095 return 0;
0f113f3e 4096 }
208fb891 4097 return 1;
0f113f3e 4098}
761772d7 4099
a76ce286
P		 4100int SSL_CTX_set_tlsext_ticket_key_evp_cb
4101 (SSL_CTX *ctx, int (*fp)(SSL *, unsigned char *, unsigned char *,
4102 EVP_CIPHER_CTX *, EVP_MAC_CTX *, int))
4103{
4104 ctx->ext.ticket_key_evp_cb = fp;
4105 return 1;
4106}
4107
ec15acb6
MC		 4108const SSL_CIPHER *ssl3_get_cipher_by_id(uint32_t id)
4109{
4110 SSL_CIPHER c;
650c6e41 4111 const SSL_CIPHER *cp;
ec15acb6
MC		 4112
4113 c.id = id;
f865b081
MC		 4114 cp = OBJ_bsearch_ssl_cipher_id(&c, tls13_ciphers, TLS13_NUM_CIPHERS);
4115 if (cp != NULL)
4116 return cp;
650c6e41
BK		 4117 cp = OBJ_bsearch_ssl_cipher_id(&c, ssl3_ciphers, SSL3_NUM_CIPHERS);
4118 if (cp != NULL)
4119 return cp;
4120 return OBJ_bsearch_ssl_cipher_id(&c, ssl3_scsvs, SSL3_NUM_SCSVS);
ec15acb6
MC		 4121}
4122
bbb4ceb8
PY		 4123const SSL_CIPHER *ssl3_get_cipher_by_std_name(const char *stdname)
4124{
f865b081
MC		 4125 SSL_CIPHER *c = NULL, *tbl;
4126 SSL_CIPHER *alltabs[] = {tls13_ciphers, ssl3_ciphers};
4127 size_t i, j, tblsize[] = {TLS13_NUM_CIPHERS, SSL3_NUM_CIPHERS};
bbb4ceb8 4128
3519bae5 4129 /* this is not efficient, necessary to optimize this? */
f865b081
MC		 4130 for (j = 0; j < OSSL_NELEM(alltabs); j++) {
4131 for (i = 0, tbl = alltabs[j]; i < tblsize[j]; i++, tbl++) {
4132 if (tbl->stdname == NULL)
4133 continue;
4134 if (strcmp(stdname, tbl->stdname) == 0) {
d93bded6 4135 return tbl;
f865b081 4136 }
bbb4ceb8
PY		 4137 }
4138 }
4139 if (c == NULL) {
4140 tbl = ssl3_scsvs;
4141 for (i = 0; i < SSL3_NUM_SCSVS; i++, tbl++) {
4142 if (strcmp(stdname, tbl->stdname) == 0) {
4143 c = tbl;
4144 break;
4145 }
4146 }
4147 }
4148 return c;
4149}
4150
0f113f3e
MC		 4151/*
4152 * This function needs to check if the ciphers required are actually
4153 * available
4154 */
babb3798 4155const SSL_CIPHER *ssl3_get_cipher_by_char(const unsigned char *p)
0f113f3e 4156{
1f5b44e9 4157 return ssl3_get_cipher_by_id(SSL3_CK_CIPHERSUITE_FLAG
ec15acb6
MC		 4158 | ((uint32_t)p[0] << 8L)
4159 | (uint32_t)p[1]);
0f113f3e 4160}
d02b48c6 4161
ae2f7b37 4162int ssl3_put_cipher_by_char(const SSL_CIPHER *c, WPACKET *pkt, size_t *len)
2c7b4dbc 4163{
34f7245b 4164 if ((c->id & 0xff000000) != SSL3_CK_CIPHERSUITE_FLAG) {
2c7b4dbc
MC		 4165 *len = 0;
4166 return 1;
4167 }
4168
08029dfa 4169 if (!WPACKET_put_bytes_u16(pkt, c->id & 0xffff))
2c7b4dbc
MC		 4170 return 0;
4171
4172 *len = 2;
4173 return 1;
4174}
4175
3eb2aff4
KR		 4176/*
4177 * ssl3_choose_cipher - choose a cipher from those offered by the client
4178 * @s: SSL connection
4179 * @clnt: ciphers offered by the client
4180 * @srvr: ciphers enabled on the server?
4181 *
4182 * Returns the selected cipher or NULL when no common ciphers.
4183 */
4a640fb6 4184const SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *clnt,
a230b26e 4185 STACK_OF(SSL_CIPHER) *srvr)
0f113f3e 4186{
4a640fb6 4187 const SSL_CIPHER *c, *ret = NULL;
0f113f3e 4188 STACK_OF(SSL_CIPHER) *prio, *allow;
48a03162 4189 int i, ii, ok, prefer_sha256 = 0;
0de6d66d 4190 unsigned long alg_k = 0, alg_a = 0, mask_k = 0, mask_a = 0;
e1c7871d
TS		 4191#ifndef OPENSSL_NO_CHACHA
4192 STACK_OF(SSL_CIPHER) *prio_chacha = NULL;
4193#endif
d02b48c6 4194
0f113f3e 4195 /* Let's see which ciphers we can support */
d02b48c6 4196
0f113f3e
MC		 4197 /*
4198 * Do not set the compare functions, because this may lead to a
4199 * reordering by "id". We want to keep the original ordering. We may pay
4200 * a price in performance during sk_SSL_CIPHER_find(), but would have to
4201 * pay with the price of sk_SSL_CIPHER_dup().
4202 */
d02b48c6 4203
77359d22
RL		 4204 OSSL_TRACE_BEGIN(TLS_CIPHER) {
4205 BIO_printf(trc_out, "Server has %d from %p:\n",
4206 sk_SSL_CIPHER_num(srvr), (void *)srvr);
4207 for (i = 0; i < sk_SSL_CIPHER_num(srvr); ++i) {
4208 c = sk_SSL_CIPHER_value(srvr, i);
4209 BIO_printf(trc_out, "%p:%s\n", (void *)c, c->name);
4210 }
4211 BIO_printf(trc_out, "Client sent %d from %p:\n",
4212 sk_SSL_CIPHER_num(clnt), (void *)clnt);
4213 for (i = 0; i < sk_SSL_CIPHER_num(clnt); ++i) {
4214 c = sk_SSL_CIPHER_value(clnt, i);
4215 BIO_printf(trc_out, "%p:%s\n", (void *)c, c->name);
4216 }
4217 } OSSL_TRACE_END(TLS_CIPHER);
f415fa32 4218
e1c7871d
TS		 4219 /* SUITE-B takes precedence over server preference and ChaCha priortiy */
4220 if (tls1_suiteb(s)) {
4221 prio = srvr;
4222 allow = clnt;
4223 } else if (s->options & SSL_OP_CIPHER_SERVER_PREFERENCE) {
0f113f3e
MC		 4224 prio = srvr;
4225 allow = clnt;
e1c7871d
TS		 4226#ifndef OPENSSL_NO_CHACHA
4227 /* If ChaCha20 is at the top of the client preference list,
4228 and there are ChaCha20 ciphers in the server list, then
4229 temporarily prioritize all ChaCha20 ciphers in the servers list. */
4230 if (s->options & SSL_OP_PRIORITIZE_CHACHA && sk_SSL_CIPHER_num(clnt) > 0) {
4231 c = sk_SSL_CIPHER_value(clnt, 0);
4232 if (c->algorithm_enc == SSL_CHACHA20POLY1305) {
4233 /* ChaCha20 is client preferred, check server... */
4234 int num = sk_SSL_CIPHER_num(srvr);
4235 int found = 0;
4236 for (i = 0; i < num; i++) {
4237 c = sk_SSL_CIPHER_value(srvr, i);
4238 if (c->algorithm_enc == SSL_CHACHA20POLY1305) {
4239 found = 1;
4240 break;
4241 }
4242 }
4243 if (found) {
e670e903 4244 prio_chacha = sk_SSL_CIPHER_new_reserve(NULL, num);
e1c7871d
TS		 4245 /* if reserve fails, then there's likely a memory issue */
4246 if (prio_chacha != NULL) {
4247 /* Put all ChaCha20 at the top, starting with the one we just found */
4248 sk_SSL_CIPHER_push(prio_chacha, c);
4249 for (i++; i < num; i++) {
4250 c = sk_SSL_CIPHER_value(srvr, i);
4251 if (c->algorithm_enc == SSL_CHACHA20POLY1305)
4252 sk_SSL_CIPHER_push(prio_chacha, c);
4253 }
4254 /* Pull in the rest */
4255 for (i = 0; i < num; i++) {
4256 c = sk_SSL_CIPHER_value(srvr, i);
4257 if (c->algorithm_enc != SSL_CHACHA20POLY1305)
4258 sk_SSL_CIPHER_push(prio_chacha, c);
4259 }
4260 prio = prio_chacha;
4261 }
4262 }
4263 }
4264 }
4265# endif
0f113f3e
MC		 4266 } else {
4267 prio = clnt;
4268 allow = srvr;
4269 }
4270
48a03162 4271 if (SSL_IS_TLS13(s)) {
199dc0d3 4272#ifndef OPENSSL_NO_PSK
48a03162
MC		 4273 int j;
4274
4275 /*
4276 * If we allow "old" style PSK callbacks, and we have no certificate (so
4277 * we're not going to succeed without a PSK anyway), and we're in
4278 * TLSv1.3 then the default hash for a PSK is SHA-256 (as per the
4279 * TLSv1.3 spec). Therefore we should prioritise ciphersuites using
4280 * that.
4281 */
4282 if (s->psk_server_callback != NULL) {
4283 for (j = 0; j < SSL_PKEY_NUM && !ssl_has_cert(s, j); j++);
4284 if (j == SSL_PKEY_NUM) {
4285 /* There are no certificates */
4286 prefer_sha256 = 1;
4287 }
4288 }
199dc0d3 4289#endif
48a03162 4290 } else {
0de6d66d
MC		 4291 tls1_set_cert_validity(s);
4292 ssl_set_masks(s);
4293 }
0f113f3e
MC		 4294
4295 for (i = 0; i < sk_SSL_CIPHER_num(prio); i++) {
4296 c = sk_SSL_CIPHER_value(prio, i);
4297
3eb2aff4
KR		 4298 /* Skip ciphers not supported by the protocol version */
4299 if (!SSL_IS_DTLS(s) &&
a230b26e 4300 ((s->version < c->min_tls) || (s->version > c->max_tls)))
0f113f3e 4301 continue;
3eb2aff4 4302 if (SSL_IS_DTLS(s) &&
a230b26e
EK		 4303 (DTLS_VERSION_LT(s->version, c->min_dtls) ||
4304 DTLS_VERSION_GT(s->version, c->max_dtls)))
2b573382 4305 continue;
a055a881 4306
0de6d66d
MC		 4307 /*
4308 * Since TLS 1.3 ciphersuites can be used with any auth or
4309 * key exchange scheme skip tests.
4310 */
4311 if (!SSL_IS_TLS13(s)) {
555cbb32
TS		 4312 mask_k = s->s3.tmp.mask_k;
4313 mask_a = s->s3.tmp.mask_a;
edc032b5 4314#ifndef OPENSSL_NO_SRP
612ca806
DSH		 4315 if (s->srp_ctx.srp_Mask & SSL_kSRP) {
4316 mask_k |= SSL_kSRP;
4317 mask_a |= SSL_aSRP;
4318 }
edc032b5 4319#endif
0f113f3e 4320
612ca806
DSH		 4321 alg_k = c->algorithm_mkey;
4322 alg_a = c->algorithm_auth;
52b8dad8 4323
ddac1974 4324#ifndef OPENSSL_NO_PSK
612ca806
DSH		 4325 /* with PSK there must be server callback set */
4326 if ((alg_k & SSL_PSK) && s->psk_server_callback == NULL)
4327 continue;
0f113f3e
MC		 4328#endif /* OPENSSL_NO_PSK */
4329
612ca806 4330 ok = (alg_k & mask_k) && (alg_a & mask_a);
77359d22
RL		 4331 OSSL_TRACE7(TLS_CIPHER,
4332 "%d:[%08lX:%08lX:%08lX:%08lX]%p:%s\n",
4333 ok, alg_k, alg_a, mask_k, mask_a, (void *)c, c->name);
d02b48c6 4334
a230b26e 4335#ifndef OPENSSL_NO_EC
612ca806
DSH		 4336 /*
4337 * if we are considering an ECC cipher suite that uses an ephemeral
4338 * EC key check it
4339 */
4340 if (alg_k & SSL_kECDHE)
4341 ok = ok && tls1_check_ec_tmp_key(s, c->id);
a230b26e 4342#endif /* OPENSSL_NO_EC */
0f113f3e 4343
612ca806
DSH		 4344 if (!ok)
4345 continue;
4346 }
0f113f3e
MC		 4347 ii = sk_SSL_CIPHER_find(allow, c);
4348 if (ii >= 0) {
4349 /* Check security callback permits this cipher */
4350 if (!ssl_security(s, SSL_SECOP_CIPHER_SHARED,
4a640fb6 4351 c->strength_bits, 0, (void *)c))
0f113f3e 4352 continue;
e481f9b9 4353#if !defined(OPENSSL_NO_EC)
0f113f3e 4354 if ((alg_k & SSL_kECDHE) && (alg_a & SSL_aECDSA)
555cbb32 4355 && s->s3.is_probably_safari) {
0f113f3e
MC		 4356 if (!ret)
4357 ret = sk_SSL_CIPHER_value(allow, ii);
4358 continue;
4359 }
d89cd382 4360#endif
48a03162
MC		 4361 if (prefer_sha256) {
4362 const SSL_CIPHER *tmp = sk_SSL_CIPHER_value(allow, ii);
4363
c8f6c28a
MC		 4364 /*
4365 * TODO: When there are no more legacy digests we can just use
4366 * OSSL_DIGEST_NAME_SHA2_256 instead of calling OBJ_nid2sn
4367 */
4368 if (EVP_MD_is_a(ssl_md(s->ctx, tmp->algorithm2),
4369 OBJ_nid2sn(NID_sha256))) {
48a03162
MC		 4370 ret = tmp;
4371 break;
4372 }
4373 if (ret == NULL)
4374 ret = tmp;
4375 continue;
4376 }
0f113f3e
MC		 4377 ret = sk_SSL_CIPHER_value(allow, ii);
4378 break;
4379 }
4380 }
e1c7871d
TS		 4381#ifndef OPENSSL_NO_CHACHA
4382 sk_SSL_CIPHER_free(prio_chacha);
4383#endif
26a7d938 4384 return ret;
0f113f3e 4385}
d02b48c6 4386
28ff8ef3 4387int ssl3_get_req_cert_type(SSL *s, WPACKET *pkt)
0f113f3e 4388{
90d9e49a 4389 uint32_t alg_k, alg_a = 0;
0f113f3e
MC		 4390
4391 /* If we have custom certificate types set, use them */
75c13e78
DSH		 4392 if (s->cert->ctype)
4393 return WPACKET_memcpy(pkt, s->cert->ctype, s->cert->ctype_len);
0f113f3e
MC		 4394 /* Get mask of algorithms disabled by signature list */
4395 ssl_set_sig_mask(&alg_a, s, SSL_SECOP_SIGALG_MASK);
0f113f3e 4396
555cbb32 4397 alg_k = s->s3.tmp.new_cipher->algorithm_mkey;
d02b48c6 4398
caa97ef1 4399#ifndef OPENSSL_NO_GOST
28ff8ef3 4400 if (s->version >= TLS1_VERSION && (alg_k & SSL_kGOST))
5a5530a2
DB		 4401 if (!WPACKET_put_bytes_u8(pkt, TLS_CT_GOST01_SIGN)
4402 || !WPACKET_put_bytes_u8(pkt, TLS_CT_GOST12_IANA_SIGN)
4403 || !WPACKET_put_bytes_u8(pkt, TLS_CT_GOST12_IANA_512_SIGN)
4404 || !WPACKET_put_bytes_u8(pkt, TLS_CT_GOST12_LEGACY_SIGN)
4405 || !WPACKET_put_bytes_u8(pkt, TLS_CT_GOST12_LEGACY_512_SIGN))
4406 return 0;
4407
4408 if (s->version >= TLS1_2_VERSION && (alg_k & SSL_kGOST18))
4409 if (!WPACKET_put_bytes_u8(pkt, TLS_CT_GOST12_IANA_SIGN)
4410 || !WPACKET_put_bytes_u8(pkt, TLS_CT_GOST12_IANA_512_SIGN))
4411 return 0;
caa97ef1
DSH		 4412#endif
4413
bc71f910 4414 if ((s->version == SSL3_VERSION) && (alg_k & SSL_kDHE)) {
bc36ee62 4415#ifndef OPENSSL_NO_DH
0f113f3e 4416# ifndef OPENSSL_NO_RSA
28ff8ef3
MC		 4417 if (!WPACKET_put_bytes_u8(pkt, SSL3_CT_RSA_EPHEMERAL_DH))
4418 return 0;
0f113f3e
MC		 4419# endif
4420# ifndef OPENSSL_NO_DSA
28ff8ef3
MC		 4421 if (!WPACKET_put_bytes_u8(pkt, SSL3_CT_DSS_EPHEMERAL_DH))
4422 return 0;
0f113f3e 4423# endif
0f113f3e 4424#endif /* !OPENSSL_NO_DH */
1e0784ff 4425 }
bc36ee62 4426#ifndef OPENSSL_NO_RSA
28ff8ef3
MC		 4427 if (!(alg_a & SSL_aRSA) && !WPACKET_put_bytes_u8(pkt, SSL3_CT_RSA_SIGN))
4428 return 0;
d02b48c6 4429#endif
bc36ee62 4430#ifndef OPENSSL_NO_DSA
28ff8ef3
MC		 4431 if (!(alg_a & SSL_aDSS) && !WPACKET_put_bytes_u8(pkt, SSL3_CT_DSS_SIGN))
4432 return 0;
dfeab068 4433#endif
10bf4fc2 4434#ifndef OPENSSL_NO_EC
0f113f3e 4435 /*
c66ce5eb 4436 * ECDSA certs can be used with RSA cipher suites too so we don't
0f113f3e
MC		 4437 * need to check for SSL_kECDH or SSL_kECDHE
4438 */
28ff8ef3
MC		 4439 if (s->version >= TLS1_VERSION
4440 && !(alg_a & SSL_aECDSA)
4441 && !WPACKET_put_bytes_u8(pkt, TLS_CT_ECDSA_SIGN))
4442 return 0;
0f113f3e 4443#endif
28ff8ef3 4444 return 1;
0f113f3e 4445}
d02b48c6 4446
9f27b1ee 4447static int ssl3_set_req_cert_type(CERT *c, const unsigned char *p, size_t len)
0f113f3e 4448{
75c13e78
DSH		 4449 OPENSSL_free(c->ctype);
4450 c->ctype = NULL;
4451 c->ctype_len = 0;
4452 if (p == NULL || len == 0)
0f113f3e
MC		 4453 return 1;
4454 if (len > 0xff)
4455 return 0;
75c13e78
DSH		 4456 c->ctype = OPENSSL_memdup(p, len);
4457 if (c->ctype == NULL)
0f113f3e 4458 return 0;
75c13e78 4459 c->ctype_len = len;
0f113f3e
MC		 4460 return 1;
4461}
9f27b1ee 4462
6b691a5c 4463int ssl3_shutdown(SSL *s)
0f113f3e
MC		 4464{
4465 int ret;
4466
4467 /*
4468 * Don't do anything much if we have not done the handshake or we don't
4469 * want to send messages :-)
4470 */
c874def6 4471 if (s->quiet_shutdown || SSL_in_before(s)) {
0f113f3e 4472 s->shutdown = (SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN);
208fb891 4473 return 1;
0f113f3e
MC		 4474 }
4475
4476 if (!(s->shutdown & SSL_SENT_SHUTDOWN)) {
4477 s->shutdown |= SSL_SENT_SHUTDOWN;
0f113f3e 4478 ssl3_send_alert(s, SSL3_AL_WARNING, SSL_AD_CLOSE_NOTIFY);
0f113f3e
MC		 4479 /*
4480 * our shutdown alert has been sent now, and if it still needs to be
555cbb32 4481 * written, s->s3.alert_dispatch will be true
0f113f3e 4482 */
555cbb32 4483 if (s->s3.alert_dispatch)
26a7d938 4484 return -1; /* return WANT_WRITE */
555cbb32 4485 } else if (s->s3.alert_dispatch) {
0f113f3e 4486 /* resend it if not sent */
0f113f3e
MC		 4487 ret = s->method->ssl_dispatch_alert(s);
4488 if (ret == -1) {
4489 /*
4490 * we only get to return -1 here the 2nd/Nth invocation, we must
8483a003 4491 * have already signalled return 0 upon a previous invocation,
0f113f3e
MC		 4492 * return WANT_WRITE
4493 */
26a7d938 4494 return ret;
0f113f3e 4495 }
0f113f3e 4496 } else if (!(s->shutdown & SSL_RECEIVED_SHUTDOWN)) {
54105ddd 4497 size_t readbytes;
0f113f3e
MC		 4498 /*
4499 * If we are waiting for a close from our peer, we are closed
4500 */
54105ddd 4501 s->method->ssl_read_bytes(s, 0, NULL, NULL, 0, 0, &readbytes);
0f113f3e 4502 if (!(s->shutdown & SSL_RECEIVED_SHUTDOWN)) {
eda75751 4503 return -1; /* return WANT_READ */
0f113f3e
MC		 4504 }
4505 }
4506
4507 if ((s->shutdown == (SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN)) &&
555cbb32 4508 !s->s3.alert_dispatch)
208fb891 4509 return 1;
0f113f3e 4510 else
26a7d938 4511 return 0;
0f113f3e 4512}
d02b48c6 4513
7ee8627f 4514int ssl3_write(SSL *s, const void *buf, size_t len, size_t *written)
0f113f3e 4515{
0f113f3e 4516 clear_sys_error();
555cbb32 4517 if (s->s3.renegotiate)
c7f47786 4518 ssl3_renegotiate_check(s, 0);
0f113f3e 4519
7ee8627f
MC		 4520 return s->method->ssl_write_bytes(s, SSL3_RT_APPLICATION_DATA, buf, len,
4521 written);
0f113f3e 4522}
d02b48c6 4523
eda75751 4524static int ssl3_read_internal(SSL *s, void *buf, size_t len, int peek,
54105ddd 4525 size_t *readbytes)
0f113f3e
MC		 4526{
4527 int ret;
4528
4529 clear_sys_error();
555cbb32 4530 if (s->s3.renegotiate)
c7f47786 4531 ssl3_renegotiate_check(s, 0);
555cbb32 4532 s->s3.in_read_app_data = 1;
0f113f3e 4533 ret =
657da85e 4534 s->method->ssl_read_bytes(s, SSL3_RT_APPLICATION_DATA, NULL, buf, len,
54105ddd 4535 peek, readbytes);
555cbb32 4536 if ((ret == -1) && (s->s3.in_read_app_data == 2)) {
0f113f3e
MC		 4537 /*
4538 * ssl3_read_bytes decided to call s->handshake_func, which called
4539 * ssl3_read_bytes to read handshake data. However, ssl3_read_bytes
4540 * actually found application data and thinks that application data
4541 * makes sense here; so disable handshake processing and try to read
4542 * application data again.
4543 */
024f543c 4544 ossl_statem_set_in_handshake(s, 1);
0f113f3e 4545 ret =
657da85e 4546 s->method->ssl_read_bytes(s, SSL3_RT_APPLICATION_DATA, NULL, buf,
54105ddd 4547 len, peek, readbytes);
024f543c 4548 ossl_statem_set_in_handshake(s, 0);
0f113f3e 4549 } else
555cbb32 4550 s->s3.in_read_app_data = 0;
0f113f3e 4551
eda75751 4552 return ret;
0f113f3e 4553}
d02b48c6 4554
54105ddd 4555int ssl3_read(SSL *s, void *buf, size_t len, size_t *readbytes)
0f113f3e 4556{
54105ddd 4557 return ssl3_read_internal(s, buf, len, 0, readbytes);
0f113f3e 4558}
d02b48c6 4559
54105ddd 4560int ssl3_peek(SSL *s, void *buf, size_t len, size_t *readbytes)
0f113f3e 4561{
54105ddd 4562 return ssl3_read_internal(s, buf, len, 1, readbytes);
0f113f3e 4563}
d02b48c6 4564
6b691a5c 4565int ssl3_renegotiate(SSL *s)
0f113f3e
MC		 4566{
4567 if (s->handshake_func == NULL)
208fb891 4568 return 1;
d02b48c6 4569
555cbb32 4570 s->s3.renegotiate = 1;
208fb891 4571 return 1;
0f113f3e 4572}
d02b48c6 4573
c7f47786
MC		 4574/*
4575 * Check if we are waiting to do a renegotiation and if so whether now is a
4576 * good time to do it. If |initok| is true then we are being called from inside
4577 * the state machine so ignore the result of SSL_in_init(s). Otherwise we
4578 * should not do a renegotiation if SSL_in_init(s) is true. Returns 1 if we
4579 * should do a renegotiation now and sets up the state machine for it. Otherwise
4580 * returns 0.
4581 */
4582int ssl3_renegotiate_check(SSL *s, int initok)
0f113f3e
MC		 4583{
4584 int ret = 0;
4585
555cbb32 4586 if (s->s3.renegotiate) {
f161995e
MC		 4587 if (!RECORD_LAYER_read_pending(&s->rlayer)
4588 && !RECORD_LAYER_write_pending(&s->rlayer)
c7f47786 4589 && (initok || !SSL_in_init(s))) {
0f113f3e
MC		 4590 /*
4591 * if we are the server, and we have sent a 'RENEGOTIATE'
49ae7423
MC		 4592 * message, we need to set the state machine into the renegotiate
4593 * state.
0f113f3e 4594 */
fe3a3291 4595 ossl_statem_set_renegotiate(s);
555cbb32
TS		 4596 s->s3.renegotiate = 0;
4597 s->s3.num_renegotiations++;
4598 s->s3.total_renegotiations++;
0f113f3e
MC		 4599 ret = 1;
4600 }
4601 }
c7f47786 4602 return ret;
0f113f3e
MC		 4603}
4604
58964a49 4605/*
0f113f3e
MC		 4606 * If we are using default SHA1+MD5 algorithms switch to new SHA256 PRF and
4607 * handshake macs if required.
12053a81
DSH		 4608 *
4609 * If PSK and using SHA384 for TLS < 1.2 switch to default.
7409d7ad
DSH		 4610 */
4611long ssl_get_algorithm2(SSL *s)
0f113f3e 4612{
52eede5a 4613 long alg2;
555cbb32 4614 if (s->s3.tmp.new_cipher == NULL)
52eede5a 4615 return -1;
555cbb32 4616 alg2 = s->s3.tmp.new_cipher->algorithm2;
12053a81
DSH		 4617 if (s->method->ssl3_enc->enc_flags & SSL_ENC_FLAG_SHA256_PRF) {
4618 if (alg2 == (SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF))
4619 return SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256;
555cbb32 4620 } else if (s->s3.tmp.new_cipher->algorithm_mkey & SSL_PSK) {
12053a81
DSH		 4621 if (alg2 == (SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384))
4622 return SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF;
4623 }
0f113f3e
MC		 4624 return alg2;
4625}
a3680c8f
MC		 4626
4627/*
4628 * Fill a ClientRandom or ServerRandom field of length len. Returns <= 0 on
4629 * failure, 1 on success.
4630 */
f7f2a01d
MC		 4631int ssl_fill_hello_random(SSL *s, int server, unsigned char *result, size_t len,
4632 DOWNGRADE dgrd)
a3680c8f 4633{
f7f2a01d 4634 int send_time = 0, ret;
a3680c8f
MC		 4635
4636 if (len < 4)
4637 return 0;
4638 if (server)
4639 send_time = (s->mode & SSL_MODE_SEND_SERVERHELLO_TIME) != 0;
4640 else
4641 send_time = (s->mode & SSL_MODE_SEND_CLIENTHELLO_TIME) != 0;
4642 if (send_time) {
4643 unsigned long Time = (unsigned long)time(NULL);
4644 unsigned char *p = result;
ae3947de 4645
a3680c8f 4646 l2n(Time, p);
8f21260b 4647 ret = RAND_bytes_ex(s->ctx->libctx, p, len - 4);
f7f2a01d 4648 } else {
8f21260b 4649 ret = RAND_bytes_ex(s->ctx->libctx, result, len);
f7f2a01d 4650 }
9f22c527 4651
16cfc2c9 4652 if (ret > 0) {
b77f3ed1
MC		 4653 if (!ossl_assert(sizeof(tls11downgrade) < len)
4654 || !ossl_assert(sizeof(tls12downgrade) < len))
4655 return 0;
f7f2a01d
MC		 4656 if (dgrd == DOWNGRADE_TO_1_2)
4657 memcpy(result + len - sizeof(tls12downgrade), tls12downgrade,
4658 sizeof(tls12downgrade));
4659 else if (dgrd == DOWNGRADE_TO_1_1)
4660 memcpy(result + len - sizeof(tls11downgrade), tls11downgrade,
4661 sizeof(tls11downgrade));
4662 }
9f22c527 4663
f7f2a01d 4664 return ret;
a3680c8f 4665}
57b272b0
DSH		 4666
4667int ssl_generate_master_secret(SSL *s, unsigned char *pms, size_t pmslen,
4668 int free_pms)
4669{
555cbb32 4670 unsigned long alg_k = s->s3.tmp.new_cipher->algorithm_mkey;
8c1a5343
MC		 4671 int ret = 0;
4672
8a0a12e5 4673 if (alg_k & SSL_PSK) {
0907d710 4674#ifndef OPENSSL_NO_PSK
8a0a12e5 4675 unsigned char *pskpms, *t;
555cbb32 4676 size_t psklen = s->s3.tmp.psklen;
8a0a12e5
DSH		 4677 size_t pskpmslen;
4678
4679 /* create PSK premaster_secret */
4680
4681 /* For plain PSK "other_secret" is psklen zeroes */
4682 if (alg_k & SSL_kPSK)
4683 pmslen = psklen;
4684
4685 pskpmslen = 4 + pmslen + psklen;
4686 pskpms = OPENSSL_malloc(pskpmslen);
8c1a5343 4687 if (pskpms == NULL)
a784665e 4688 goto err;
8a0a12e5
DSH		 4689 t = pskpms;
4690 s2n(pmslen, t);
4691 if (alg_k & SSL_kPSK)
4692 memset(t, 0, pmslen);
4693 else
4694 memcpy(t, pms, pmslen);
4695 t += pmslen;
4696 s2n(psklen, t);
555cbb32 4697 memcpy(t, s->s3.tmp.psk, psklen);
8a0a12e5 4698
555cbb32
TS		 4699 OPENSSL_clear_free(s->s3.tmp.psk, psklen);
4700 s->s3.tmp.psk = NULL;
8c1a5343 4701 if (!s->method->ssl3_enc->generate_master_secret(s,
1866a0d3 4702 s->session->master_key, pskpms, pskpmslen,
f63a17d6 4703 &s->session->master_key_length)) {
c2cb1a18 4704 OPENSSL_clear_free(pskpms, pskpmslen);
f63a17d6 4705 /* SSLfatal() already called */
8c1a5343 4706 goto err;
f63a17d6 4707 }
8a0a12e5 4708 OPENSSL_clear_free(pskpms, pskpmslen);
0907d710
MC		 4709#else
4710 /* Should never happen */
0907d710 4711 goto err;
8a0a12e5 4712#endif
0907d710 4713 } else {
8c1a5343
MC		 4714 if (!s->method->ssl3_enc->generate_master_secret(s,
4715 s->session->master_key, pms, pmslen,
f63a17d6
MC		 4716 &s->session->master_key_length)) {
4717 /* SSLfatal() already called */
8c1a5343 4718 goto err;
f63a17d6 4719 }
0907d710
MC		 4720 }
4721
8c1a5343 4722 ret = 1;
0907d710 4723 err:
8a0a12e5
DSH		 4724 if (pms) {
4725 if (free_pms)
4726 OPENSSL_clear_free(pms, pmslen);
4727 else
4728 OPENSSL_cleanse(pms, pmslen);
4729 }
57b272b0 4730 if (s->server == 0)
555cbb32 4731 s->s3.tmp.pms = NULL;
8c1a5343 4732 return ret;
57b272b0 4733}
3f3504bd 4734
0a699a07 4735/* Generate a private key from parameters */
0f00ed77 4736EVP_PKEY *ssl_generate_pkey(SSL *s, EVP_PKEY *pm)
3f3504bd
DSH		 4737{
4738 EVP_PKEY_CTX *pctx = NULL;
4739 EVP_PKEY *pkey = NULL;
0a699a07
DSH		 4740
4741 if (pm == NULL)
4742 return NULL;
0f00ed77 4743 pctx = EVP_PKEY_CTX_new_from_pkey(s->ctx->libctx, pm, s->ctx->propq);
0a699a07
DSH		 4744 if (pctx == NULL)
4745 goto err;
4746 if (EVP_PKEY_keygen_init(pctx) <= 0)
4747 goto err;
4748 if (EVP_PKEY_keygen(pctx, &pkey) <= 0) {
4749 EVP_PKEY_free(pkey);
4750 pkey = NULL;
4751 }
4752
4753 err:
4754 EVP_PKEY_CTX_free(pctx);
4755 return pkey;
4756}
9aaecbfc 4757
43b95d73 4758/* Generate a private key from a group ID */
f63a17d6 4759EVP_PKEY *ssl_generate_pkey_group(SSL *s, uint16_t id)
0a699a07 4760{
9d2d857f 4761 const TLS_GROUP_INFO *ginf = tls1_group_id_lookup(s->ctx, id);
0a699a07
DSH		 4762 EVP_PKEY_CTX *pctx = NULL;
4763 EVP_PKEY *pkey = NULL;
0a699a07 4764
f63a17d6
MC		 4765 if (ginf == NULL) {
4766 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_PKEY_GROUP,
4767 ERR_R_INTERNAL_ERROR);
0a699a07 4768 goto err;
f63a17d6 4769 }
d882e4ce 4770
9d2d857f 4771 pctx = EVP_PKEY_CTX_new_from_name(s->ctx->libctx, ginf->algorithm,
c0bfc473
MC		 4772 s->ctx->propq);
4773
f63a17d6
MC		 4774 if (pctx == NULL) {
4775 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_PKEY_GROUP,
4776 ERR_R_MALLOC_FAILURE);
3f3504bd 4777 goto err;
f63a17d6
MC		 4778 }
4779 if (EVP_PKEY_keygen_init(pctx) <= 0) {
4780 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_PKEY_GROUP,
4781 ERR_R_EVP_LIB);
3f3504bd 4782 goto err;
f63a17d6 4783 }
9d2d857f
MC		 4784 if (!EVP_PKEY_CTX_set_group_name(pctx, ginf->realname)) {
4785 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_PKEY_GROUP,
4786 ERR_R_EVP_LIB);
4787 goto err;
f63a17d6 4788 }
3f3504bd 4789 if (EVP_PKEY_keygen(pctx, &pkey) <= 0) {
f63a17d6
MC		 4790 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_PKEY_GROUP,
4791 ERR_R_EVP_LIB);
3f3504bd
DSH		 4792 EVP_PKEY_free(pkey);
4793 pkey = NULL;
4794 }
4795
a230b26e 4796 err:
3f3504bd
DSH		 4797 EVP_PKEY_CTX_free(pctx);
4798 return pkey;
4799}
612f9d22
DSH		 4800
4801/*
4802 * Generate parameters from a group ID
4803 */
ada66e78 4804EVP_PKEY *ssl_generate_param_group(SSL *s, uint16_t id)
612f9d22
DSH		 4805{
4806 EVP_PKEY_CTX *pctx = NULL;
4807 EVP_PKEY *pkey = NULL;
9d2d857f 4808 const TLS_GROUP_INFO *ginf = tls1_group_id_lookup(s->ctx, id);
612f9d22
DSH		 4809
4810 if (ginf == NULL)
4811 goto err;
4812
9d2d857f 4813 pctx = EVP_PKEY_CTX_new_from_name(s->ctx->libctx, ginf->algorithm,
d882e4ce 4814 s->ctx->propq);
d882e4ce 4815
612f9d22
DSH		 4816 if (pctx == NULL)
4817 goto err;
4818 if (EVP_PKEY_paramgen_init(pctx) <= 0)
4819 goto err;
9d2d857f
MC		 4820 if (!EVP_PKEY_CTX_set_group_name(pctx, ginf->realname)) {
4821 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_PKEY_GROUP,
4822 ERR_R_EVP_LIB);
4823 goto err;
9aaecbfc 4824 }
612f9d22
DSH		 4825 if (EVP_PKEY_paramgen(pctx, &pkey) <= 0) {
4826 EVP_PKEY_free(pkey);
4827 pkey = NULL;
4828 }
4829
4830 err:
4831 EVP_PKEY_CTX_free(pctx);
4832 return pkey;
4833}
a230b26e 4834
a011b586 4835/* Generate secrets from pms */
a011b586
NT		 4836int ssl_gensecret(SSL *s, unsigned char *pms, size_t pmslen)
4837{
4838 int rv = 0;
4839
4840 /* SSLfatal() called as appropriate in the below functions */
4841 if (SSL_IS_TLS13(s)) {
4842 /*
4843 * If we are resuming then we already generated the early secret
4844 * when we created the ClientHello, so don't recreate it.
4845 */
4846 if (!s->hit)
4847 rv = tls13_generate_secret(s, ssl_handshake_md(s), NULL, NULL,
4848 0,
4849 (unsigned char *)&s->early_secret);
4850 else
4851 rv = 1;
4852
4853 rv = rv && tls13_generate_handshake_secret(s, pms, pmslen);
4854 } else {
4855 rv = ssl_generate_master_secret(s, pms, pmslen, 0);
4856 }
4857
4858 return rv;
4859}
4860
92760c21
MC		 4861/* Derive secrets for ECDH/DH */
4862int ssl_derive(SSL *s, EVP_PKEY *privkey, EVP_PKEY *pubkey, int gensecret)
3f3504bd
DSH		 4863{
4864 int rv = 0;
4865 unsigned char *pms = NULL;
4866 size_t pmslen = 0;
4867 EVP_PKEY_CTX *pctx;
4868
f63a17d6
MC		 4869 if (privkey == NULL || pubkey == NULL) {
4870 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DERIVE,
4871 ERR_R_INTERNAL_ERROR);
3f3504bd 4872 return 0;
f63a17d6 4873 }
3f3504bd 4874
0f00ed77 4875 pctx = EVP_PKEY_CTX_new_from_pkey(s->ctx->libctx, privkey, s->ctx->propq);
3f3504bd
DSH		 4876
4877 if (EVP_PKEY_derive_init(pctx) <= 0
4878 || EVP_PKEY_derive_set_peer(pctx, pubkey) <= 0
4879 || EVP_PKEY_derive(pctx, NULL, &pmslen) <= 0) {
f63a17d6
MC		 4880 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DERIVE,
4881 ERR_R_INTERNAL_ERROR);
3f3504bd
DSH		 4882 goto err;
4883 }
4884
6597d62b 4885#ifndef OPENSSL_NO_DH
9aaecbfc 4886 if (SSL_IS_TLS13(s) && EVP_PKEY_id(privkey) == EVP_PKEY_DH)
4887 EVP_PKEY_CTX_set_dh_pad(pctx, 1);
6597d62b 4888#endif
9aaecbfc 4889
3f3504bd 4890 pms = OPENSSL_malloc(pmslen);
f63a17d6
MC		 4891 if (pms == NULL) {
4892 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DERIVE,
4893 ERR_R_MALLOC_FAILURE);
3f3504bd 4894 goto err;
f63a17d6 4895 }
3f3504bd 4896
f63a17d6
MC		 4897 if (EVP_PKEY_derive(pctx, pms, &pmslen) <= 0) {
4898 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DERIVE,
4899 ERR_R_INTERNAL_ERROR);
3f3504bd 4900 goto err;
f63a17d6 4901 }
3f3504bd 4902
92760c21 4903 if (gensecret) {
f63a17d6 4904 /* SSLfatal() called as appropriate in the below functions */
a011b586
NT		 4905 rv = ssl_gensecret(s, pms, pmslen);
4906 } else {
4907 /* Save premaster secret */
4908 s->s3.tmp.pms = pms;
4909 s->s3.tmp.pmslen = pmslen;
4910 pms = NULL;
4911 rv = 1;
4912 }
4913
4914 err:
4915 OPENSSL_clear_free(pms, pmslen);
4916 EVP_PKEY_CTX_free(pctx);
4917 return rv;
4918}
4919
4920/* Decapsulate secrets for KEM */
4921int ssl_decapsulate(SSL *s, EVP_PKEY *privkey,
4922 const unsigned char *ct, size_t ctlen,
4923 int gensecret)
4924{
4925 int rv = 0;
4926 unsigned char *pms = NULL;
4927 size_t pmslen = 0;
4928 EVP_PKEY_CTX *pctx;
4929
4930 if (privkey == NULL) {
4931 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DECAPSULATE,
4932 ERR_R_INTERNAL_ERROR);
4933 return 0;
4934 }
4935
4936 pctx = EVP_PKEY_CTX_new_from_pkey(s->ctx->libctx, privkey, s->ctx->propq);
4937
4938 if (EVP_PKEY_decapsulate_init(pctx) <= 0
4939 || EVP_PKEY_decapsulate(pctx, NULL, &pmslen, ct, ctlen) <= 0) {
4940 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DECAPSULATE,
4941 ERR_R_INTERNAL_ERROR);
4942 goto err;
4943 }
4944
4945 pms = OPENSSL_malloc(pmslen);
4946 if (pms == NULL) {
4947 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DECAPSULATE,
4948 ERR_R_MALLOC_FAILURE);
4949 goto err;
4950 }
4951
4952 if (EVP_PKEY_decapsulate(pctx, pms, &pmslen, ct, ctlen) <= 0) {
4953 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DECAPSULATE,
4954 ERR_R_INTERNAL_ERROR);
4955 goto err;
4956 }
4957
4958 if (gensecret) {
4959 /* SSLfatal() called as appropriate in the below functions */
4960 rv = ssl_gensecret(s, pms, pmslen);
3f3504bd 4961 } else {
0f1e51ea 4962 /* Save premaster secret */
555cbb32
TS		 4963 s->s3.tmp.pms = pms;
4964 s->s3.tmp.pmslen = pmslen;
3f3504bd
DSH		 4965 pms = NULL;
4966 rv = 1;
4967 }
4968
a230b26e 4969 err:
3f3504bd
DSH		 4970 OPENSSL_clear_free(pms, pmslen);
4971 EVP_PKEY_CTX_free(pctx);
4972 return rv;
4973}
6c4e6670 4974
8b17fbaf
NT		 4975int ssl_encapsulate(SSL *s, EVP_PKEY *pubkey,
4976 unsigned char **ctp, size_t *ctlenp,
4977 int gensecret)
4978{
4979 int rv = 0;
4980 unsigned char *pms = NULL, *ct = NULL;
4981 size_t pmslen = 0, ctlen = 0;
4982 EVP_PKEY_CTX *pctx;
4983
4984 if (pubkey == NULL) {
4985 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_ENCAPSULATE,
4986 ERR_R_INTERNAL_ERROR);
4987 return 0;
4988 }
4989
4990 pctx = EVP_PKEY_CTX_new_from_pkey(s->ctx->libctx, pubkey, s->ctx->propq);
4991
4992 if (EVP_PKEY_encapsulate_init(pctx) <= 0
4993 || EVP_PKEY_encapsulate(pctx, NULL, &ctlen, NULL, &pmslen) <= 0
4994 || pmslen == 0 || ctlen == 0) {
4995 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_ENCAPSULATE,
4996 ERR_R_INTERNAL_ERROR);
4997 goto err;
4998 }
4999
5000 pms = OPENSSL_malloc(pmslen);
5001 ct = OPENSSL_malloc(ctlen);
5002 if (pms == NULL || ct == NULL) {
5003 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_ENCAPSULATE,
5004 ERR_R_MALLOC_FAILURE);
5005 goto err;
5006 }
5007
5008 if (EVP_PKEY_encapsulate(pctx, ct, &ctlen, pms, &pmslen) <= 0) {
5009 SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_ENCAPSULATE,
5010 ERR_R_INTERNAL_ERROR);
5011 goto err;
5012 }
5013
5014 if (gensecret) {
5015 /* SSLfatal() called as appropriate in the below functions */
5016 rv = ssl_gensecret(s, pms, pmslen);
5017 } else {
5018 /* Save premaster secret */
5019 s->s3.tmp.pms = pms;
5020 s->s3.tmp.pmslen = pmslen;
5021 pms = NULL;
5022 rv = 1;
5023 }
5024
5025 if (rv > 0) {
5026 /* Pass ownership of ct to caller */
5027 *ctp = ct;
5028 *ctlenp = ctlen;
5029 ct = NULL;
5030 }
5031
5032 err:
5033 OPENSSL_clear_free(pms, pmslen);
5034 OPENSSL_free(ct);
5035 EVP_PKEY_CTX_free(pctx);
5036 return rv;
5037}
5038
1e0784ff 5039#ifndef OPENSSL_NO_DH
6c4e6670
DSH		 5040EVP_PKEY *ssl_dh_to_pkey(DH *dh)
5041{
5042 EVP_PKEY *ret;
5043 if (dh == NULL)
5044 return NULL;
5045 ret = EVP_PKEY_new();
5046 if (EVP_PKEY_set1_DH(ret, dh) <= 0) {
5047 EVP_PKEY_free(ret);
5048 return NULL;
5049 }
5050 return ret;
5051}
1e0784ff 5052#endif
A mirror of the official openssl repository