]> git.ipfire.org Git - thirdparty/gnutls.git/commitdiff
projects / thirdparty / gnutls.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 77f6e45)
Added ciphersuite test
authorNikos Mavrogiannopoulos <nmav@gnutls.org>
Sat, 26 Oct 2013 16:58:36 +0000 (18:58 +0200)
committerNikos Mavrogiannopoulos <nmav@gnutls.org>
Sat, 26 Oct 2013 16:58:46 +0000 (18:58 +0200)
.gitignore patch | blob | blame | history
tests/suite/Makefile.am patch | blob | blame | history
tests/suite/ciphersuite/README [new file with mode: 0644] patch | blob
tests/suite/ciphersuite/registry-ciphers.js [new file with mode: 0644] patch | blob
tests/suite/ciphersuite/registry-ciphers.xslt [new file with mode: 0644] patch | blob
tests/suite/ciphersuite/scan-gnutls.sh [new file with mode: 0755] patch | blob
tests/suite/ciphersuite/test-ciphers.js [new file with mode: 0644] patch | blob
tests/suite/ciphersuite/test-ciphersuites.sh [new file with mode: 0755] patch | blob
tests/suite/ciphersuite/tls-parameters.xml [new file with mode: 0644] patch | blob

diff --git a/.gitignore b/.gitignore
index 46f233991b0ceeec76b3eb3cc01b1b46e22db2f2..3ce2203b7aae16ae2c44327d5db032abcefe8b51 100644 (file)
--- a/.gitignore
+++ b/.gitignore
@@ -649,3 +649,4 @@ tests/record-sizes-range
 tests/mini-rsa-psk
 tests/mini-record-2
 tests/mini-cert-status
+tests/suite/ciphersuite/gnutls-ciphers.js
diff --git a/tests/suite/Makefile.am b/tests/suite/Makefile.am
index 438cda0ec0b4c44d3599861b33984e4ab8caac31..f9f23c548273770cfd28ff3941bf93612b5ad56c 100644 (file)
--- a/tests/suite/Makefile.am
+++ b/tests/suite/Makefile.am
@@ -84,7 +84,7 @@ nodist_libecore_la_SOURCES = ecore/src/lib/ecore_anim.c                       \
 
 nodist_check_SCRIPTS = eagain testsrn testcompat chain invalid-cert testrandom
 
-TESTS = eagain testsrn testcompat chain invalid-cert
+TESTS = ciphersuite/test-ciphersuites.sh eagain testsrn testcompat chain invalid-cert
 
 TESTS_ENVIRONMENT = EXEEXT=$(EXEEXT) \
        LC_ALL="C"                                              \
diff --git a/tests/suite/ciphersuite/README b/tests/suite/ciphersuite/README
new file mode 100644 (file)
index 0000000..cd2916c
--- /dev/null
+++ b/tests/suite/ciphersuite/README
@@ -0,0 +1,5 @@
+This test checks whether the included in GnuTLS ciphersuites match the IANA
+assigned IDs and whether the combination of Cipher/MAC and key exchange are
+correct.
+
+The test was created by Stefan Buehler.
diff --git a/tests/suite/ciphersuite/registry-ciphers.js b/tests/suite/ciphersuite/registry-ciphers.js
new file mode 100644 (file)
index 0000000..58b5de7
--- /dev/null
+++ b/tests/suite/ciphersuite/registry-ciphers.js
@@ -0,0 +1,316 @@
+var registry_ciphersuites = {
+       0x0000: "TLS_NULL_WITH_NULL_NULL",
+       0x0001: "TLS_RSA_WITH_NULL_MD5",
+       0x0002: "TLS_RSA_WITH_NULL_SHA",
+       0x0003: "TLS_RSA_EXPORT_WITH_RC4_40_MD5",
+       0x0004: "TLS_RSA_WITH_RC4_128_MD5",
+       0x0005: "TLS_RSA_WITH_RC4_128_SHA",
+       0x0006: "TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5",
+       0x0007: "TLS_RSA_WITH_IDEA_CBC_SHA",
+       0x0008: "TLS_RSA_EXPORT_WITH_DES40_CBC_SHA",
+       0x0009: "TLS_RSA_WITH_DES_CBC_SHA",
+       0x000A: "TLS_RSA_WITH_3DES_EDE_CBC_SHA",
+       0x000B: "TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA",
+       0x000C: "TLS_DH_DSS_WITH_DES_CBC_SHA",
+       0x000D: "TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA",
+       0x000E: "TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA",
+       0x000F: "TLS_DH_RSA_WITH_DES_CBC_SHA",
+       0x0010: "TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA",
+       0x0011: "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA",
+       0x0012: "TLS_DHE_DSS_WITH_DES_CBC_SHA",
+       0x0013: "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA",
+       0x0014: "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA",
+       0x0015: "TLS_DHE_RSA_WITH_DES_CBC_SHA",
+       0x0016: "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA",
+       0x0017: "TLS_DH_anon_EXPORT_WITH_RC4_40_MD5",
+       0x0018: "TLS_DH_anon_WITH_RC4_128_MD5",
+       0x0019: "TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA",
+       0x001A: "TLS_DH_anon_WITH_DES_CBC_SHA",
+       0x001B: "TLS_DH_anon_WITH_3DES_EDE_CBC_SHA",
+       0x001E: "TLS_KRB5_WITH_DES_CBC_SHA",
+       0x001F: "TLS_KRB5_WITH_3DES_EDE_CBC_SHA",
+       0x0020: "TLS_KRB5_WITH_RC4_128_SHA",
+       0x0021: "TLS_KRB5_WITH_IDEA_CBC_SHA",
+       0x0022: "TLS_KRB5_WITH_DES_CBC_MD5",
+       0x0023: "TLS_KRB5_WITH_3DES_EDE_CBC_MD5",
+       0x0024: "TLS_KRB5_WITH_RC4_128_MD5",
+       0x0025: "TLS_KRB5_WITH_IDEA_CBC_MD5",
+       0x0026: "TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA",
+       0x0027: "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA",
+       0x0028: "TLS_KRB5_EXPORT_WITH_RC4_40_SHA",
+       0x0029: "TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5",
+       0x002A: "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5",
+       0x002B: "TLS_KRB5_EXPORT_WITH_RC4_40_MD5",
+       0x002C: "TLS_PSK_WITH_NULL_SHA",
+       0x002D: "TLS_DHE_PSK_WITH_NULL_SHA",
+       0x002E: "TLS_RSA_PSK_WITH_NULL_SHA",
+       0x002F: "TLS_RSA_WITH_AES_128_CBC_SHA",
+       0x0030: "TLS_DH_DSS_WITH_AES_128_CBC_SHA",
+       0x0031: "TLS_DH_RSA_WITH_AES_128_CBC_SHA",
+       0x0032: "TLS_DHE_DSS_WITH_AES_128_CBC_SHA",
+       0x0033: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA",
+       0x0034: "TLS_DH_anon_WITH_AES_128_CBC_SHA",
+       0x0035: "TLS_RSA_WITH_AES_256_CBC_SHA",
+       0x0036: "TLS_DH_DSS_WITH_AES_256_CBC_SHA",
+       0x0037: "TLS_DH_RSA_WITH_AES_256_CBC_SHA",
+       0x0038: "TLS_DHE_DSS_WITH_AES_256_CBC_SHA",
+       0x0039: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA",
+       0x003A: "TLS_DH_anon_WITH_AES_256_CBC_SHA",
+       0x003B: "TLS_RSA_WITH_NULL_SHA256",
+       0x003C: "TLS_RSA_WITH_AES_128_CBC_SHA256",
+       0x003D: "TLS_RSA_WITH_AES_256_CBC_SHA256",
+       0x003E: "TLS_DH_DSS_WITH_AES_128_CBC_SHA256",
+       0x003F: "TLS_DH_RSA_WITH_AES_128_CBC_SHA256",
+       0x0040: "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256",
+       0x0041: "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA",
+       0x0042: "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA",
+       0x0043: "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA",
+       0x0044: "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA",
+       0x0045: "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA",
+       0x0046: "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA",
+       0x0067: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256",
+       0x0068: "TLS_DH_DSS_WITH_AES_256_CBC_SHA256",
+       0x0069: "TLS_DH_RSA_WITH_AES_256_CBC_SHA256",
+       0x006A: "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256",
+       0x006B: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256",
+       0x006C: "TLS_DH_anon_WITH_AES_128_CBC_SHA256",
+       0x006D: "TLS_DH_anon_WITH_AES_256_CBC_SHA256",
+       0x0084: "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA",
+       0x0085: "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA",
+       0x0086: "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA",
+       0x0087: "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA",
+       0x0088: "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA",
+       0x0089: "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA",
+       0x008A: "TLS_PSK_WITH_RC4_128_SHA",
+       0x008B: "TLS_PSK_WITH_3DES_EDE_CBC_SHA",
+       0x008C: "TLS_PSK_WITH_AES_128_CBC_SHA",
+       0x008D: "TLS_PSK_WITH_AES_256_CBC_SHA",
+       0x008E: "TLS_DHE_PSK_WITH_RC4_128_SHA",
+       0x008F: "TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA",
+       0x0090: "TLS_DHE_PSK_WITH_AES_128_CBC_SHA",
+       0x0091: "TLS_DHE_PSK_WITH_AES_256_CBC_SHA",
+       0x0092: "TLS_RSA_PSK_WITH_RC4_128_SHA",
+       0x0093: "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA",
+       0x0094: "TLS_RSA_PSK_WITH_AES_128_CBC_SHA",
+       0x0095: "TLS_RSA_PSK_WITH_AES_256_CBC_SHA",
+       0x0096: "TLS_RSA_WITH_SEED_CBC_SHA",
+       0x0097: "TLS_DH_DSS_WITH_SEED_CBC_SHA",
+       0x0098: "TLS_DH_RSA_WITH_SEED_CBC_SHA",
+       0x0099: "TLS_DHE_DSS_WITH_SEED_CBC_SHA",
+       0x009A: "TLS_DHE_RSA_WITH_SEED_CBC_SHA",
+       0x009B: "TLS_DH_anon_WITH_SEED_CBC_SHA",
+       0x009C: "TLS_RSA_WITH_AES_128_GCM_SHA256",
+       0x009D: "TLS_RSA_WITH_AES_256_GCM_SHA384",
+       0x009E: "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256",
+       0x009F: "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384",
+       0x00A0: "TLS_DH_RSA_WITH_AES_128_GCM_SHA256",
+       0x00A1: "TLS_DH_RSA_WITH_AES_256_GCM_SHA384",
+       0x00A2: "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256",
+       0x00A3: "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384",
+       0x00A4: "TLS_DH_DSS_WITH_AES_128_GCM_SHA256",
+       0x00A5: "TLS_DH_DSS_WITH_AES_256_GCM_SHA384",
+       0x00A6: "TLS_DH_anon_WITH_AES_128_GCM_SHA256",
+       0x00A7: "TLS_DH_anon_WITH_AES_256_GCM_SHA384",
+       0x00A8: "TLS_PSK_WITH_AES_128_GCM_SHA256",
+       0x00A9: "TLS_PSK_WITH_AES_256_GCM_SHA384",
+       0x00AA: "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256",
+       0x00AB: "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384",
+       0x00AC: "TLS_RSA_PSK_WITH_AES_128_GCM_SHA256",
+       0x00AD: "TLS_RSA_PSK_WITH_AES_256_GCM_SHA384",
+       0x00AE: "TLS_PSK_WITH_AES_128_CBC_SHA256",
+       0x00AF: "TLS_PSK_WITH_AES_256_CBC_SHA384",
+       0x00B0: "TLS_PSK_WITH_NULL_SHA256",
+       0x00B1: "TLS_PSK_WITH_NULL_SHA384",
+       0x00B2: "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256",
+       0x00B3: "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384",
+       0x00B4: "TLS_DHE_PSK_WITH_NULL_SHA256",
+       0x00B5: "TLS_DHE_PSK_WITH_NULL_SHA384",
+       0x00B6: "TLS_RSA_PSK_WITH_AES_128_CBC_SHA256",
+       0x00B7: "TLS_RSA_PSK_WITH_AES_256_CBC_SHA384",
+       0x00B8: "TLS_RSA_PSK_WITH_NULL_SHA256",
+       0x00B9: "TLS_RSA_PSK_WITH_NULL_SHA384",
+       0x00BA: "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+       0x00BB: "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256",
+       0x00BC: "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+       0x00BD: "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256",
+       0x00BE: "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+       0x00BF: "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256",
+       0x00C0: "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+       0x00C1: "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256",
+       0x00C2: "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+       0x00C3: "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256",
+       0x00C4: "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+       0x00C5: "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256",
+       0x00FF: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
+       0xC001: "TLS_ECDH_ECDSA_WITH_NULL_SHA",
+       0xC002: "TLS_ECDH_ECDSA_WITH_RC4_128_SHA",
+       0xC003: "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA",
+       0xC004: "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA",
+       0xC005: "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA",
+       0xC006: "TLS_ECDHE_ECDSA_WITH_NULL_SHA",
+       0xC007: "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
+       0xC008: "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA",
+       0xC009: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
+       0xC00A: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
+       0xC00B: "TLS_ECDH_RSA_WITH_NULL_SHA",
+       0xC00C: "TLS_ECDH_RSA_WITH_RC4_128_SHA",
+       0xC00D: "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA",
+       0xC00E: "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA",
+       0xC00F: "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA",
+       0xC010: "TLS_ECDHE_RSA_WITH_NULL_SHA",
+       0xC011: "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
+       0xC012: "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
+       0xC013: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
+       0xC014: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
+       0xC015: "TLS_ECDH_anon_WITH_NULL_SHA",
+       0xC016: "TLS_ECDH_anon_WITH_RC4_128_SHA",
+       0xC017: "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA",
+       0xC018: "TLS_ECDH_anon_WITH_AES_128_CBC_SHA",
+       0xC019: "TLS_ECDH_anon_WITH_AES_256_CBC_SHA",
+       0xC01A: "TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA",
+       0xC01B: "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA",
+       0xC01C: "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA",
+       0xC01D: "TLS_SRP_SHA_WITH_AES_128_CBC_SHA",
+       0xC01E: "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA",
+       0xC01F: "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA",
+       0xC020: "TLS_SRP_SHA_WITH_AES_256_CBC_SHA",
+       0xC021: "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA",
+       0xC022: "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA",
+       0xC023: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
+       0xC024: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
+       0xC025: "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256",
+       0xC026: "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384",
+       0xC027: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
+       0xC028: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384",
+       0xC029: "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256",
+       0xC02A: "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384",
+       0xC02B: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
+       0xC02C: "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
+       0xC02D: "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256",
+       0xC02E: "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384",
+       0xC02F: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
+       0xC030: "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
+       0xC031: "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256",
+       0xC032: "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384",
+       0xC033: "TLS_ECDHE_PSK_WITH_RC4_128_SHA",
+       0xC034: "TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA",
+       0xC035: "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA",
+       0xC036: "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA",
+       0xC037: "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256",
+       0xC038: "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384",
+       0xC039: "TLS_ECDHE_PSK_WITH_NULL_SHA",
+       0xC03A: "TLS_ECDHE_PSK_WITH_NULL_SHA256",
+       0xC03B: "TLS_ECDHE_PSK_WITH_NULL_SHA384",
+       0xC03C: "TLS_RSA_WITH_ARIA_128_CBC_SHA256",
+       0xC03D: "TLS_RSA_WITH_ARIA_256_CBC_SHA384",
+       0xC03E: "TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256",
+       0xC03F: "TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384",
+       0xC040: "TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256",
+       0xC041: "TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384",
+       0xC042: "TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256",
+       0xC043: "TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384",
+       0xC044: "TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256",
+       0xC045: "TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384",
+       0xC046: "TLS_DH_anon_WITH_ARIA_128_CBC_SHA256",
+       0xC047: "TLS_DH_anon_WITH_ARIA_256_CBC_SHA384",
+       0xC048: "TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256",
+       0xC049: "TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384",
+       0xC04A: "TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256",
+       0xC04B: "TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384",
+       0xC04C: "TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256",
+       0xC04D: "TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384",
+       0xC04E: "TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256",
+       0xC04F: "TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384",
+       0xC050: "TLS_RSA_WITH_ARIA_128_GCM_SHA256",
+       0xC051: "TLS_RSA_WITH_ARIA_256_GCM_SHA384",
+       0xC052: "TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256",
+       0xC053: "TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384",
+       0xC054: "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256",
+       0xC055: "TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384",
+       0xC056: "TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256",
+       0xC057: "TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384",
+       0xC058: "TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256",
+       0xC059: "TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384",
+       0xC05A: "TLS_DH_anon_WITH_ARIA_128_GCM_SHA256",
+       0xC05B: "TLS_DH_anon_WITH_ARIA_256_GCM_SHA384",
+       0xC05C: "TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256",
+       0xC05D: "TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384",
+       0xC05E: "TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256",
+       0xC05F: "TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384",
+       0xC060: "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256",
+       0xC061: "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384",
+       0xC062: "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256",
+       0xC063: "TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384",
+       0xC064: "TLS_PSK_WITH_ARIA_128_CBC_SHA256",
+       0xC065: "TLS_PSK_WITH_ARIA_256_CBC_SHA384",
+       0xC066: "TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256",
+       0xC067: "TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384",
+       0xC068: "TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256",
+       0xC069: "TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384",
+       0xC06A: "TLS_PSK_WITH_ARIA_128_GCM_SHA256",
+       0xC06B: "TLS_PSK_WITH_ARIA_256_GCM_SHA384",
+       0xC06C: "TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256",
+       0xC06D: "TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384",
+       0xC06E: "TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256",
+       0xC06F: "TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384",
+       0xC070: "TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256",
+       0xC071: "TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384",
+       0xC072: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256",
+       0xC073: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384",
+       0xC074: "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256",
+       0xC075: "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384",
+       0xC076: "TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+       0xC077: "TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384",
+       0xC078: "TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+       0xC079: "TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384",
+       0xC07A: "TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC07B: "TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC07C: "TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC07D: "TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC07E: "TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC07F: "TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC080: "TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC081: "TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC082: "TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC083: "TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC084: "TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC085: "TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC086: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC087: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC088: "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC089: "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC08A: "TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC08B: "TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC08C: "TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC08D: "TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC08E: "TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC08F: "TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC090: "TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC091: "TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC092: "TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+       0xC093: "TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+       0xC094: "TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+       0xC095: "TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+       0xC096: "TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+       0xC097: "TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+       0xC098: "TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+       0xC099: "TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+       0xC09A: "TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+       0xC09B: "TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+       0xC09C: "TLS_RSA_WITH_AES_128_CCM",
+       0xC09D: "TLS_RSA_WITH_AES_256_CCM",
+       0xC09E: "TLS_DHE_RSA_WITH_AES_128_CCM",
+       0xC09F: "TLS_DHE_RSA_WITH_AES_256_CCM",
+       0xC0A0: "TLS_RSA_WITH_AES_128_CCM_8",
+       0xC0A1: "TLS_RSA_WITH_AES_256_CCM_8",
+       0xC0A2: "TLS_DHE_RSA_WITH_AES_128_CCM_8",
+       0xC0A3: "TLS_DHE_RSA_WITH_AES_256_CCM_8",
+       0xC0A4: "TLS_PSK_WITH_AES_128_CCM",
+       0xC0A5: "TLS_PSK_WITH_AES_256_CCM",
+       0xC0A6: "TLS_DHE_PSK_WITH_AES_128_CCM",
+       0xC0A7: "TLS_DHE_PSK_WITH_AES_256_CCM",
+       0xC0A8: "TLS_PSK_WITH_AES_128_CCM_8",
+       0xC0A9: "TLS_PSK_WITH_AES_256_CCM_8",
+       0xC0AA: "TLS_PSK_DHE_WITH_AES_128_CCM_8",
+       0xC0AB: "TLS_PSK_DHE_WITH_AES_256_CCM_8",
+};
diff --git a/tests/suite/ciphersuite/registry-ciphers.xslt b/tests/suite/ciphersuite/registry-ciphers.xslt
new file mode 100644 (file)
index 0000000..724163e
--- /dev/null
+++ b/tests/suite/ciphersuite/registry-ciphers.xslt
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- saxonb-xslt http://www.iana.org/assignments/tls-parameters/tls-parameters.xml registry-ciphers.xslt > registry-ciphers.js -->
+<xsl:stylesheet version="2.0"
+        xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
+        xmlns:iana="http://www.iana.org/assignments"
+>
+
+        <xsl:output method="text" omit-xml-declaration="yes" encoding="UTF-8"/>
+
+        <xsl:variable name='nl'><xsl:text>&#xa;</xsl:text></xsl:variable>
+        <xsl:variable name='sep'><xsl:text>,</xsl:text></xsl:variable>
+
+        <xsl:template match="/">
+                <xsl:text>var registry_ciphersuites = {&#xa;</xsl:text>
+                <xsl:for-each select="iana:registry/iana:registry[@id='tls-parameters-4']/iana:record">
+                        <xsl:variable name="xref"><xsl:for-each select="iana:xref[@type='rfc']"><xsl:value-of select="@data"/></xsl:for-each></xsl:variable>
+
+                        <xsl:if test="matches(iana:value, '^0x[0-9A-Z]{2},0x[0-9A-Z]{2}$')">
+                                <xsl:value-of select="concat('&#x9;',substring(iana:value,1,4),substring(iana:value,8,2),': &quot;',normalize-space(iana:description),'&quot;,',$nl)" />
+                        </xsl:if>
+                </xsl:for-each>
+                <xsl:text>};&#xa;</xsl:text>
+        </xsl:template>
+
+</xsl:stylesheet>
diff --git a/tests/suite/ciphersuite/scan-gnutls.sh b/tests/suite/ciphersuite/scan-gnutls.sh
new file mode 100755 (executable)
index 0000000..7d5ed9e
--- /dev/null
+++ b/tests/suite/ciphersuite/scan-gnutls.sh
@@ -0,0 +1,22 @@
+#/bin/sh
+# ./scan-gnutls.sh > gnutls-ciphers.js
+
+echo 'var gnutls_ciphersuites = {'
+
+cd ../../../lib/algorithms/ && gcc -E ciphersuites.c -I.. -DHAVE_LIBNETTLE -I../../gl -DENABLE_DHE -DENABLE_ECDHE -DENABLE_PSK -DENABLE_ANON -DENABLE_SRP \
+  | awk '/^static const gnutls_cipher_suite_entry cs_algorithms/, /;/ { print; }' \
+  | grep '{' | head -n-1 | tail -n+2 \
+  | sed -r -e 's#\{ *0x(..), *0x(..) *\}#0x\1\2#;s# *\{ *"#"#;s#\}##;s#, +# #g' \
+        -e 's#GNUTLS_VERSION_UNKNOWN#unknown#' \
+        -e 's#GNUTLS_DTLS_VERSION_MIN#GNUTLS_DTLS1_0#;s#GNUTLS_TLS1 #GNUTLS_TLS1_0 #' \
+        -e 's#TLS([0-9])_([0-9])#TLS\1.\2#g;s#GNUTLS_SSL3#SSL3.0#;s#_#-#g;s#GNUTLS-(CIPHER|KX|MAC)-##g;s#GNUTLS-##g' \
+  | gawk --non-decimal-data '{ if ($5 == "AEAD") { mac = $8; } else { mac = $5; }; sub("UMAC-", "UMAC", mac); sub("DIG-", "", mac); if (mac == "SHA1") { mac = "SHA"; } \
+        cipher = $3; sub("ARCFOUR", "RC4", cipher); sub("3DES-CBC", "3DES-EDE-CBC", cipher); \
+        kx = $4; if (sub("ANON-", "", kx)) { kx = kx "-anon"; }; sub("SRP", "SRP-SHA", kx); \
+        name = "TLS_" kx "_WITH_" cipher "_" mac; gsub("-", "_", name); printf ("%d#  \"%s\": { id: %s, name: \"%s\", gnutlsname: %s, cipher: \"%s\", kx: \"%s\", mac: \"%s\", min_version: \"%s\", min_dtls_version: \"%s\", prf: \"%s\" },\n", $2, name, $2, name, $1, $3, $4, $5, $6, $7, $8) }' \
+  | sort -n \
+  | cut -d'#' -f2- \
+  | column -t \
+  | sed -e 's#:  #: #g;s#,  #, #g;s#{  #{ #g;s#^#  #'
+
+echo '};'
diff --git a/tests/suite/ciphersuite/test-ciphers.js b/tests/suite/ciphersuite/test-ciphers.js
new file mode 100644 (file)
index 0000000..4c7776c
--- /dev/null
+++ b/tests/suite/ciphersuite/test-ciphers.js
@@ -0,0 +1,51 @@
+/* run with nodejs */
+
+var fs = require('fs');
+var vm = require('vm');
+
+function include(path) {
+    var code = fs.readFileSync(path, 'utf-8');
+    vm.runInThisContext(code, path);
+}
+
+include('./gnutls-ciphers.js');
+include('./registry-ciphers.js');
+
+
+(function() {
+//  var s = "NORMAL:-VERS-SSL3.0:-CIPHER-ALL:-SHA1:-MD5:+SHA1:+AES-256-GCM:+AES-256-CBC:+CAMELLIA-256-CBC:%SERVER_PRECEDENCE";
+//  console.log("Test: ", require('util').inspect(priority_config(priority(s)), false, 10));
+//  console.log("Test: ", require('util').inspect(priority_ciphersuites(priority(s)), false, 10));
+
+  // check whether gnutls ciphersuite names match the kx/cipher/mac/prf combination
+  for (var i in gnutls_ciphersuites) {
+    if (!gnutls_ciphersuites.hasOwnProperty(i)) continue;
+    var cs = gnutls_ciphersuites[i];
+    var mac = cs.mac;
+    if (mac == "AEAD") mac = cs.prf.replace("DIG-", "");
+    mac = mac.replace("UMAC-", "UMAC");
+    var cipher = cs.cipher.replace("3DES-CBC", "3DES-EDE-CBC");
+    var kx = cs.kx.replace("ANON-DH", "DH-ANON").replace("ANON-ECDH", "ECDH-ANON").replace("SRP", "SRP-SHA");
+    if (kx + "-" + cipher + "-" + mac != cs.gnutlsname) {
+      console.log("Broken: ", kx + "-" + cipher + "-" + mac, " ", cs.gnutlsname);
+    }
+    if (cs.name !== i) {
+      console.log("Name doesn't match index:", cs.name, i);
+    }
+    if (!registry_ciphersuites[cs.id]) {
+      if (cipher.match(/SALSA20/)) {
+        var warned_salsa20;
+        if (!warned_salsa20) {
+          /* warn only once */
+          console.log("Unofficial SALSA20 ciphers");
+          warned_salsa20 = 1;
+        }
+      } else {
+        console.log("Unofficial cipher:", cs.name, cs.id);
+      }
+    } else if (registry_ciphersuites[cs.id] !== cs.name) {
+      console.log("Name doesn't match official name for id:", cs.name, registry_ciphersuites[cs.id], cs.id);
+    }
+  }
+
+})();
diff --git a/tests/suite/ciphersuite/test-ciphersuites.sh b/tests/suite/ciphersuite/test-ciphersuites.sh
new file mode 100755 (executable)
index 0000000..16eb6d0
--- /dev/null
+++ b/tests/suite/ciphersuite/test-ciphersuites.sh
@@ -0,0 +1,9 @@
+#! /bin/sh
+
+nodejs --help >/dev/null || ( echo "You need nodejs to run this test" && exit 77 )
+
+set -e
+
+cd ciphersuite && ( \
+./scan-gnutls.sh > gnutls-ciphers.js && \
+nodejs test-ciphers.js )
diff --git a/tests/suite/ciphersuite/tls-parameters.xml b/tests/suite/ciphersuite/tls-parameters.xml
new file mode 100644 (file)
index 0000000..f82aee2
--- /dev/null
+++ b/tests/suite/ciphersuite/tls-parameters.xml
@@ -0,0 +1,2726 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<?xml-stylesheet type="text/xsl" href="tls-parameters.xsl"?>
+<?oxygen RNGSchema="tls-parameters.rng" type="xml"?>
+<registry xmlns="http://www.iana.org/assignments" id="tls-parameters">
+  <title>Transport Layer Security (TLS) Parameters</title>
+  <category>Transport Layer Security (TLS)</category>
+  <created>2005-08-23</created>
+  <updated>2013-10-03</updated>
+  <registry id="tls-parameters-2">
+    <title>TLS ClientCertificateType Identifiers Registry</title>
+    <xref type="rfc" data="rfc5246"/>
+    <expert>Eric Rescorla</expert>
+    <range>
+      <value>0-63</value>
+      <registration_rule>Standards Action</registration_rule>
+    </range>
+    <range>
+      <value>64-223</value>
+      <registration_rule>Specification Required</registration_rule>
+    </range>
+    <range>
+      <value>224-255</value>
+      <registration_rule>Reserved for Private Use</registration_rule>
+    </range>
+    <record>
+      <value>0</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>1</value>
+      <description>rsa_sign</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>2</value>
+      <description>dss_sign</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>3</value>
+      <description>rsa_fixed_dh</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>4</value>
+      <description>dss_fixed_dh</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>5</value>
+      <description>rsa_ephemeral_dh_RESERVED</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>6</value>
+      <description>dss_ephemeral_dh_RESERVED</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>7-19</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>20</value>
+      <description>fortezza_dms_RESERVED</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>21-63</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>64</value>
+      <description>ecdsa_sign</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>65</value>
+      <description>rsa_fixed_ecdh</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>66</value>
+      <description>ecdsa_fixed_ecdh</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>67-223</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>224-255</value>
+      <description>Reserved for Private Use</description>
+      <xref type="rfc" data="rfc5246"/>
+    </record>
+  </registry>
+  <registry id="tls-parameters-4">
+    <title>TLS Cipher Suite Registry</title>
+    <xref type="rfc" data="rfc5246"/>
+    <expert>Eric Rescorla</expert>
+    <range>
+      <value>0-191</value>
+      <registration_rule>Standards Action</registration_rule>
+      <note>Refers to value of first byte</note>
+    </range>
+    <range>
+      <value>192-254</value>
+      <registration_rule>Specification Required</registration_rule>
+      <note>Refers to value of first byte</note>
+    </range>
+    <range>
+      <value>255</value>
+      <registration_rule>Reserved for Private Use</registration_rule>
+      <note>Refers to value of first byte</note>
+    </range>
+    <record>
+      <value>0x00,0x00</value>
+      <description>TLS_NULL_WITH_NULL_NULL</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x01</value>
+      <description>TLS_RSA_WITH_NULL_MD5</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x02</value>
+      <description>TLS_RSA_WITH_NULL_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x03</value>
+      <description>TLS_RSA_EXPORT_WITH_RC4_40_MD5</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc4346"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x04</value>
+      <description>TLS_RSA_WITH_RC4_128_MD5</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc5246"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x05</value>
+      <description>TLS_RSA_WITH_RC4_128_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc5246"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x06</value>
+      <description>TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4346"/>
+    </record>
+    <record>
+      <value>0x00,0x07</value>
+      <description>TLS_RSA_WITH_IDEA_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5469"/>
+    </record>
+    <record>
+      <value>0x00,0x08</value>
+      <description>TLS_RSA_EXPORT_WITH_DES40_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4346"/>
+    </record>
+    <record>
+      <value>0x00,0x09</value>
+      <description>TLS_RSA_WITH_DES_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5469"/>
+    </record>
+    <record>
+      <value>0x00,0x0A</value>
+      <description>TLS_RSA_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x0B</value>
+      <description>TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4346"/>
+    </record>
+    <record>
+      <value>0x00,0x0C</value>
+      <description>TLS_DH_DSS_WITH_DES_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5469"/>
+    </record>
+    <record>
+      <value>0x00,0x0D</value>
+      <description>TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x0E</value>
+      <description>TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4346"/>
+    </record>
+    <record>
+      <value>0x00,0x0F</value>
+      <description>TLS_DH_RSA_WITH_DES_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5469"/>
+    </record>
+    <record>
+      <value>0x00,0x10</value>
+      <description>TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x11</value>
+      <description>TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4346"/>
+    </record>
+    <record>
+      <value>0x00,0x12</value>
+      <description>TLS_DHE_DSS_WITH_DES_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5469"/>
+    </record>
+    <record>
+      <value>0x00,0x13</value>
+      <description>TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x14</value>
+      <description>TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4346"/>
+    </record>
+    <record>
+      <value>0x00,0x15</value>
+      <description>TLS_DHE_RSA_WITH_DES_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5469"/>
+    </record>
+    <record>
+      <value>0x00,0x16</value>
+      <description>TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x17</value>
+      <description>TLS_DH_anon_EXPORT_WITH_RC4_40_MD5</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc4346"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x18</value>
+      <description>TLS_DH_anon_WITH_RC4_128_MD5</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc5246"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x19</value>
+      <description>TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4346"/>
+    </record>
+    <record>
+      <value>0x00,0x1A</value>
+      <description>TLS_DH_anon_WITH_DES_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5469"/>
+    </record>
+    <record>
+      <value>0x00,0x1B</value>
+      <description>TLS_DH_anon_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x1C-1D</value>
+      <description>Reserved to avoid conflicts with SSLv3</description>
+      <xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x1E</value>
+      <description>TLS_KRB5_WITH_DES_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc2712"/>
+    </record>
+    <record>
+      <value>0x00,0x1F</value>
+      <description>TLS_KRB5_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc2712"/>
+    </record>
+    <record>
+      <value>0x00,0x20</value>
+      <description>TLS_KRB5_WITH_RC4_128_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc2712"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x21</value>
+      <description>TLS_KRB5_WITH_IDEA_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc2712"/>
+    </record>
+    <record>
+      <value>0x00,0x22</value>
+      <description>TLS_KRB5_WITH_DES_CBC_MD5</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc2712"/>
+    </record>
+    <record>
+      <value>0x00,0x23</value>
+      <description>TLS_KRB5_WITH_3DES_EDE_CBC_MD5</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc2712"/>
+    </record>
+    <record>
+      <value>0x00,0x24</value>
+      <description>TLS_KRB5_WITH_RC4_128_MD5</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc2712"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x25</value>
+      <description>TLS_KRB5_WITH_IDEA_CBC_MD5</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc2712"/>
+    </record>
+    <record>
+      <value>0x00,0x26</value>
+      <description>TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc2712"/>
+    </record>
+    <record>
+      <value>0x00,0x27</value>
+      <description>TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc2712"/>
+    </record>
+    <record>
+      <value>0x00,0x28</value>
+      <description>TLS_KRB5_EXPORT_WITH_RC4_40_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc2712"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x29</value>
+      <description>TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc2712"/>
+    </record>
+    <record>
+      <value>0x00,0x2A</value>
+      <description>TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc2712"/>
+    </record>
+    <record>
+      <value>0x00,0x2B</value>
+      <description>TLS_KRB5_EXPORT_WITH_RC4_40_MD5</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc2712"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x2C</value>
+      <description>TLS_PSK_WITH_NULL_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4785"/>
+    </record>
+    <record>
+      <value>0x00,0x2D</value>
+      <description>TLS_DHE_PSK_WITH_NULL_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4785"/>
+    </record>
+    <record>
+      <value>0x00,0x2E</value>
+      <description>TLS_RSA_PSK_WITH_NULL_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4785"/>
+    </record>
+    <record>
+      <value>0x00,0x2F</value>
+      <description>TLS_RSA_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x30</value>
+      <description>TLS_DH_DSS_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x31</value>
+      <description>TLS_DH_RSA_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x32</value>
+      <description>TLS_DHE_DSS_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x33</value>
+      <description>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x34</value>
+      <description>TLS_DH_anon_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x35</value>
+      <description>TLS_RSA_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x36</value>
+      <description>TLS_DH_DSS_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x37</value>
+      <description>TLS_DH_RSA_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x38</value>
+      <description>TLS_DHE_DSS_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x39</value>
+      <description>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x3A</value>
+      <description>TLS_DH_anon_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x3B</value>
+      <description>TLS_RSA_WITH_NULL_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x3C</value>
+      <description>TLS_RSA_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x3D</value>
+      <description>TLS_RSA_WITH_AES_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x3E</value>
+      <description>TLS_DH_DSS_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x3F</value>
+      <description>TLS_DH_RSA_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x40</value>
+      <description>TLS_DHE_DSS_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x41</value>
+      <description>TLS_RSA_WITH_CAMELLIA_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0x42</value>
+      <description>TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0x43</value>
+      <description>TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0x44</value>
+      <description>TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0x45</value>
+      <description>TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0x46</value>
+      <description>TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record date="2008-04-04">
+      <value>0x00,0x47-4F</value>
+      <description>Reserved to avoid conflicts with         
+deployed implementations</description>
+      <xref type="person" data="Pasi_Eronen"/>
+    </record>
+    <record>
+      <value>0x00,0x50-58</value>
+      <description>Reserved to avoid conflicts</description>
+      <xref type="text">Pasi Eronen, &lt;pasi.eronen&amp;nokia.com&gt;, 2008-04-04.  2008-04-04</xref>
+    </record>
+    <record date="2008-04-04">
+      <value>0x00,0x59-5C</value>
+      <description>Reserved to avoid conflicts with         
+deployed implementations</description>
+      <xref type="person" data="Pasi_Eronen"/>
+    </record>
+    <record>
+      <value>0x00,0x5D-5F</value>
+      <description>Unassigned</description>
+    </record>
+    <record date="2008-04-04">
+      <value>0x00,0x60-66</value>
+      <description>Reserved to avoid conflicts with
+widely deployed implementations</description>
+      <xref type="person" data="Pasi_Eronen"/>
+    </record>
+    <record>
+      <value>0x00,0x67</value>
+      <description>TLS_DHE_RSA_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x68</value>
+      <description>TLS_DH_DSS_WITH_AES_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x69</value>
+      <description>TLS_DH_RSA_WITH_AES_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x6A</value>
+      <description>TLS_DHE_DSS_WITH_AES_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x6B</value>
+      <description>TLS_DHE_RSA_WITH_AES_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x6C</value>
+      <description>TLS_DH_anon_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x6D</value>
+      <description>TLS_DH_anon_WITH_AES_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>0x00,0x6E-83</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>0x00,0x84</value>
+      <description>TLS_RSA_WITH_CAMELLIA_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0x85</value>
+      <description>TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0x86</value>
+      <description>TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0x87</value>
+      <description>TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0x88</value>
+      <description>TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0x89</value>
+      <description>TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0x8A</value>
+      <description>TLS_PSK_WITH_RC4_128_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc4279"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x8B</value>
+      <description>TLS_PSK_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4279"/>
+    </record>
+    <record>
+      <value>0x00,0x8C</value>
+      <description>TLS_PSK_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4279"/>
+    </record>
+    <record>
+      <value>0x00,0x8D</value>
+      <description>TLS_PSK_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4279"/>
+    </record>
+    <record>
+      <value>0x00,0x8E</value>
+      <description>TLS_DHE_PSK_WITH_RC4_128_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc4279"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x8F</value>
+      <description>TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4279"/>
+    </record>
+    <record>
+      <value>0x00,0x90</value>
+      <description>TLS_DHE_PSK_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4279"/>
+    </record>
+    <record>
+      <value>0x00,0x91</value>
+      <description>TLS_DHE_PSK_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4279"/>
+    </record>
+    <record>
+      <value>0x00,0x92</value>
+      <description>TLS_RSA_PSK_WITH_RC4_128_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc4279"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0x00,0x93</value>
+      <description>TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4279"/>
+    </record>
+    <record>
+      <value>0x00,0x94</value>
+      <description>TLS_RSA_PSK_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4279"/>
+    </record>
+    <record>
+      <value>0x00,0x95</value>
+      <description>TLS_RSA_PSK_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4279"/>
+    </record>
+    <record>
+      <value>0x00,0x96</value>
+      <description>TLS_RSA_WITH_SEED_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4162"/>
+    </record>
+    <record>
+      <value>0x00,0x97</value>
+      <description>TLS_DH_DSS_WITH_SEED_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4162"/>
+    </record>
+    <record>
+      <value>0x00,0x98</value>
+      <description>TLS_DH_RSA_WITH_SEED_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4162"/>
+    </record>
+    <record>
+      <value>0x00,0x99</value>
+      <description>TLS_DHE_DSS_WITH_SEED_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4162"/>
+    </record>
+    <record>
+      <value>0x00,0x9A</value>
+      <description>TLS_DHE_RSA_WITH_SEED_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4162"/>
+    </record>
+    <record>
+      <value>0x00,0x9B</value>
+      <description>TLS_DH_anon_WITH_SEED_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4162"/>
+    </record>
+    <record>
+      <value>0x00,0x9C</value>
+      <description>TLS_RSA_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0x9D</value>
+      <description>TLS_RSA_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0x9E</value>
+      <description>TLS_DHE_RSA_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0x9F</value>
+      <description>TLS_DHE_RSA_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0xA0</value>
+      <description>TLS_DH_RSA_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0xA1</value>
+      <description>TLS_DH_RSA_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0xA2</value>
+      <description>TLS_DHE_DSS_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0xA3</value>
+      <description>TLS_DHE_DSS_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0xA4</value>
+      <description>TLS_DH_DSS_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0xA5</value>
+      <description>TLS_DH_DSS_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0xA6</value>
+      <description>TLS_DH_anon_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0xA7</value>
+      <description>TLS_DH_anon_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5288"/>
+    </record>
+    <record>
+      <value>0x00,0xA8</value>
+      <description>TLS_PSK_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xA9</value>
+      <description>TLS_PSK_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xAA</value>
+      <description>TLS_DHE_PSK_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xAB</value>
+      <description>TLS_DHE_PSK_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xAC</value>
+      <description>TLS_RSA_PSK_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xAD</value>
+      <description>TLS_RSA_PSK_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xAE</value>
+      <description>TLS_PSK_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xAF</value>
+      <description>TLS_PSK_WITH_AES_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xB0</value>
+      <description>TLS_PSK_WITH_NULL_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xB1</value>
+      <description>TLS_PSK_WITH_NULL_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xB2</value>
+      <description>TLS_DHE_PSK_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xB3</value>
+      <description>TLS_DHE_PSK_WITH_AES_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xB4</value>
+      <description>TLS_DHE_PSK_WITH_NULL_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xB5</value>
+      <description>TLS_DHE_PSK_WITH_NULL_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xB6</value>
+      <description>TLS_RSA_PSK_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xB7</value>
+      <description>TLS_RSA_PSK_WITH_AES_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xB8</value>
+      <description>TLS_RSA_PSK_WITH_NULL_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xB9</value>
+      <description>TLS_RSA_PSK_WITH_NULL_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5487"/>
+    </record>
+    <record>
+      <value>0x00,0xBA</value>
+      <description>TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xBB</value>
+      <description>TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xBC</value>
+      <description>TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xBD</value>
+      <description>TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xBE</value>
+      <description>TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xBF</value>
+      <description>TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xC0</value>
+      <description>TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xC1</value>
+      <description>TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xC2</value>
+      <description>TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xC3</value>
+      <description>TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xC4</value>
+      <description>TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xC5</value>
+      <description>TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5932"/>
+    </record>
+    <record>
+      <value>0x00,0xC6-FE</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>0x00,0xFF</value>
+      <description>TLS_EMPTY_RENEGOTIATION_INFO_SCSV</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5746"/>
+    </record>  
+    <record>
+      <value>0x01-BF,*</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>0xC0,0x01</value>
+      <description>TLS_ECDH_ECDSA_WITH_NULL_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x02</value>
+      <description>TLS_ECDH_ECDSA_WITH_RC4_128_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc4492"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0xC0,0x03</value>
+      <description>TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x04</value>
+      <description>TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x05</value>
+      <description>TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x06</value>
+      <description>TLS_ECDHE_ECDSA_WITH_NULL_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x07</value>
+      <description>TLS_ECDHE_ECDSA_WITH_RC4_128_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc4492"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0xC0,0x08</value>
+      <description>TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x09</value>
+      <description>TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x0A</value>
+      <description>TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x0B</value>
+      <description>TLS_ECDH_RSA_WITH_NULL_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x0C</value>
+      <description>TLS_ECDH_RSA_WITH_RC4_128_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc4492"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0xC0,0x0D</value>
+      <description>TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x0E</value>
+      <description>TLS_ECDH_RSA_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x0F</value>
+      <description>TLS_ECDH_RSA_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x10</value>
+      <description>TLS_ECDHE_RSA_WITH_NULL_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x11</value>
+      <description>TLS_ECDHE_RSA_WITH_RC4_128_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc4492"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0xC0,0x12</value>
+      <description>TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x13</value>
+      <description>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x14</value>
+      <description>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x15</value>
+      <description>TLS_ECDH_anon_WITH_NULL_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x16</value>
+      <description>TLS_ECDH_anon_WITH_RC4_128_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc4492"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0xC0,0x17</value>
+      <description>TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x18</value>
+      <description>TLS_ECDH_anon_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x19</value>
+      <description>TLS_ECDH_anon_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>0xC0,0x1A</value>
+      <description>TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5054"/>
+    </record>
+    <record>
+      <value>0xC0,0x1B</value>
+      <description>TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5054"/>
+    </record>
+    <record>
+      <value>0xC0,0x1C</value>
+      <description>TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5054"/>
+    </record>
+    <record>
+      <value>0xC0,0x1D</value>
+      <description>TLS_SRP_SHA_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5054"/>
+    </record>
+    <record>
+      <value>0xC0,0x1E</value>
+      <description>TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5054"/>
+    </record>
+    <record>
+      <value>0xC0,0x1F</value>
+      <description>TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5054"/>
+    </record>
+    <record>
+      <value>0xC0,0x20</value>
+      <description>TLS_SRP_SHA_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5054"/>
+    </record>
+    <record>
+      <value>0xC0,0x21</value>
+      <description>TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5054"/>
+    </record>
+    <record>
+      <value>0xC0,0x22</value>
+      <description>TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5054"/>
+    </record>
+    <record>
+      <value>0xC0,0x23</value>
+      <description>TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x24</value>
+      <description>TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x25</value>
+      <description>TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x26</value>
+      <description>TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x27</value>
+      <description>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x28</value>
+      <description>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x29</value>
+      <description>TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x2A</value>
+      <description>TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x2B</value>
+      <description>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x2C</value>
+      <description>TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x2D</value>
+      <description>TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x2E</value>
+      <description>TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x2F</value>
+      <description>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x30</value>
+      <description>TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x31</value>
+      <description>TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x32</value>
+      <description>TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5289"/>
+    </record>
+    <record>
+      <value>0xC0,0x33</value>
+      <description>TLS_ECDHE_PSK_WITH_RC4_128_SHA</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc5489"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>0xC0,0x34</value>
+      <description>TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5489"/>
+    </record>
+    <record>
+      <value>0xC0,0x35</value>
+      <description>TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5489"/>
+    </record>
+    <record>
+      <value>0xC0,0x36</value>
+      <description>TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5489"/>
+    </record>
+    <record>
+      <value>0xC0,0x37</value>
+      <description>TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5489"/>
+    </record>
+    <record>
+      <value>0xC0,0x38</value>
+      <description>TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5489"/>
+    </record>
+    <record>
+      <value>0xC0,0x39</value>
+      <description>TLS_ECDHE_PSK_WITH_NULL_SHA</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5489"/>
+    </record>
+    <record>
+      <value>0xC0,0x3A</value>
+      <description>TLS_ECDHE_PSK_WITH_NULL_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5489"/>
+    </record>
+    <record>
+      <value>0xC0,0x3B</value>
+      <description>TLS_ECDHE_PSK_WITH_NULL_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5489"/>
+    </record>
+    <record>
+      <value>0xC0,0x3C</value>
+      <description>TLS_RSA_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x3D</value>
+      <description>TLS_RSA_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x3E</value>
+      <description>TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x3F</value>
+      <description>TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x40</value>
+      <description>TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x41</value>
+      <description>TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x42</value>
+      <description>TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x43</value>
+      <description>TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x44</value>
+      <description>TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x45</value>
+      <description>TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x46</value>
+      <description>TLS_DH_anon_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x47</value>
+      <description>TLS_DH_anon_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x48</value>
+      <description>TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x49</value>
+      <description>TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x4A</value>
+      <description>TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x4B</value>
+      <description>TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x4C</value>
+      <description>TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x4D</value>
+      <description>TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x4E</value>
+      <description>TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x4F</value>
+      <description>TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x50</value>
+      <description>TLS_RSA_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x51</value>
+      <description>TLS_RSA_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x52</value>
+      <description>TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x53</value>
+      <description>TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x54</value>
+      <description>TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x55</value>
+      <description>TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x56</value>
+      <description>TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x57</value>
+      <description>TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x58</value>
+      <description>TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x59</value>
+      <description>TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x5A</value>
+      <description>TLS_DH_anon_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x5B</value>
+      <description>TLS_DH_anon_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x5C</value>
+      <description>TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x5D</value>
+      <description>TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x5E</value>
+      <description>TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x5F</value>
+      <description>TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x60</value>
+      <description>TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x61</value>
+      <description>TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x62</value>
+      <description>TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x63</value>
+      <description>TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x64</value>
+      <description>TLS_PSK_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x65</value>
+      <description>TLS_PSK_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x66</value>
+      <description>TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x67</value>
+      <description>TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x68</value>
+      <description>TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x69</value>
+      <description>TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x6A</value>
+      <description>TLS_PSK_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x6B</value>
+      <description>TLS_PSK_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x6C</value>
+      <description>TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x6D</value>
+      <description>TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x6E</value>
+      <description>TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x6F</value>
+      <description>TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x70</value>
+      <description>TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x71</value>
+      <description>TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6209"/>
+    </record>
+    <record>
+      <value>0xC0,0x72</value>
+      <description>TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x73</value>
+      <description>TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x74</value>
+      <description>TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x75</value>
+      <description>TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x76</value>
+      <description>TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x77</value>
+      <description>TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x78</value>
+      <description>TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x79</value>
+      <description>TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x7A</value>
+      <description>TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x7B</value>
+      <description>TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x7C</value>
+      <description>TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x7D</value>
+      <description>TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x7E</value>
+      <description>TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x7F</value>
+      <description>TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x80</value>
+      <description>TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x81</value>
+      <description>TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x82</value>
+      <description>TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x83</value>
+      <description>TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x84</value>
+      <description>TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x85</value>
+      <description>TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x86</value>
+      <description>TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x87</value>
+      <description>TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x88</value>
+      <description>TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x89</value>
+      <description>TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x8A</value>
+      <description>TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x8B</value>
+      <description>TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x8C</value>
+      <description>TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x8D</value>
+      <description>TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x8E</value>
+      <description>TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x8F</value>
+      <description>TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x90</value>
+      <description>TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x91</value>
+      <description>TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x92</value>
+      <description>TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x93</value>
+      <description>TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x94</value>
+      <description>TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x95</value>
+      <description>TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x96</value>
+      <description>TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x97</value>
+      <description>TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x98</value>
+      <description>TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x99</value>
+      <description>TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x9A</value>
+      <description>TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x9B</value>
+      <description>TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6367"/>
+    </record>
+    <record>
+      <value>0xC0,0x9C</value>
+      <description>TLS_RSA_WITH_AES_128_CCM</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0x9D</value>
+      <description>TLS_RSA_WITH_AES_256_CCM</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0x9E</value>
+      <description>TLS_DHE_RSA_WITH_AES_128_CCM</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0x9F</value>
+      <description>TLS_DHE_RSA_WITH_AES_256_CCM</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    
+    <record>
+      <value>0xC0,0xA0</value>
+      <description>TLS_RSA_WITH_AES_128_CCM_8</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xA1</value>
+      <description>TLS_RSA_WITH_AES_256_CCM_8</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xA2</value>
+      <description>TLS_DHE_RSA_WITH_AES_128_CCM_8</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xA3</value>
+      <description>TLS_DHE_RSA_WITH_AES_256_CCM_8</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xA4</value>
+      <description>TLS_PSK_WITH_AES_128_CCM</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xA5</value>
+      <description>TLS_PSK_WITH_AES_256_CCM</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xA6</value>
+      <description>TLS_DHE_PSK_WITH_AES_128_CCM</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xA7</value>
+      <description>TLS_DHE_PSK_WITH_AES_256_CCM</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xA8</value>
+      <description>TLS_PSK_WITH_AES_128_CCM_8</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xA9</value>
+      <description>TLS_PSK_WITH_AES_256_CCM_8</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xAA</value>
+      <description>TLS_PSK_DHE_WITH_AES_128_CCM_8</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xAB</value>
+      <description>TLS_PSK_DHE_WITH_AES_256_CCM_8</description>
+      <dtls>Y</dtls>
+      <xref type="rfc" data="rfc6655"/>
+    </record>
+    <record>
+      <value>0xC0,0xAC-FF</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>0xC1-FD,*</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>0xFE,0x00-FD</value>
+      <description>Unassigned</description>
+    </record>
+    <record date="2008-04-04">
+      <value>0xFE,0xFE-FF</value>
+      <description>Reserved to avoid conflicts with
+widely deployed implementations</description>
+      <xref type="person" data="Pasi_Eronen"/>
+    </record>
+    <record>
+      <value>0xFF,0x00-FF</value>
+      <description>Reserved for Private Use</description>
+      <xref type="rfc" data="rfc5246"/>
+    </record>
+  </registry>
+  <registry id="tls-parameters-5">
+    <title>TLS ContentType Registry</title>
+    <xref type="rfc" data="rfc5246"/>
+    <registration_rule>Standards Action</registration_rule>
+    <record>
+      <value>0-19</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>20</value>
+      <description>change_cipher_spec</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>21</value>
+      <description>alert</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>22</value>
+      <description>handshake</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>23</value>
+      <description>application_data</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>24</value>
+      <description>heartbeat</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6520"/>
+    </record>
+    <record>
+      <value>25-255</value>
+      <description>Unassigned</description>
+    </record>
+  </registry>
+  <registry id="tls-parameters-6">
+    <title>TLS Alert Registry</title>
+    <xref type="rfc" data="rfc5246"/>
+    <registration_rule>Standards Action</registration_rule>
+    <record>
+      <value>0</value>
+      <description>close_notify</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>1-9</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>10</value>
+      <description>unexpected_message</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>11-19</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>20</value>
+      <description>bad_record_mac</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>21</value>
+      <description>decryption_failed</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>22</value>
+      <description>record_overflow</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>23-29</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>30</value>
+      <description>decompression_failure</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>31-39</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>40</value>
+      <description>handshake_failure</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>41</value>
+      <description>no_certificate_RESERVED</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>42</value>
+      <description>bad_certificate</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>43</value>
+      <description>unsupported_certificate</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>44</value>
+      <description>certificate_revoked</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>45</value>
+      <description>certificate_expired</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>46</value>
+      <description>certificate_unknown</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>47</value>
+      <description>illegal_parameter</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>48</value>
+      <description>unknown_ca</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>49</value>
+      <description>access_denied</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>50</value>
+      <description>decode_error</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>51</value>
+      <description>decrypt_error</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>52-59</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>60</value>
+      <description>export_restriction_RESERVED</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>61-69</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>70</value>
+      <description>protocol_version</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>71</value>
+      <description>insufficient_security</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>72-79</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>80</value>
+      <description>internal_error</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>81-89</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>90</value>
+      <description>user_canceled</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>91-99</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>100</value>
+      <description>no_renegotiation</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>101-109</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>110</value>
+      <description>unsupported_extension</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>111</value>
+      <description>certificate_unobtainable</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6066"/>
+    </record>
+    <record>
+      <value>112</value>
+      <description>unrecognized_name</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6066"/>
+    </record>
+    <record>
+      <value>113</value>
+      <description>bad_certificate_status_response</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6066"/>
+    </record>
+    <record>
+      <value>114</value>
+      <description>bad_certificate_hash_value</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6066"/>
+    </record>
+    <record>
+      <value>115</value>
+      <description>unknown_psk_identity</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4279"/>
+    </record>
+    <record>
+      <value>116-255</value>
+      <description>Unassigned</description>
+    </record>
+  </registry>
+  <registry id="tls-parameters-7">
+    <title>TLS HandshakeType Registry</title>
+    <xref type="rfc" data="rfc5246"/>
+    <registration_rule>Standards Action</registration_rule>
+    <record>
+      <value>0</value>
+      <description>hello_request</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>1</value>
+      <description>client_hello</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>2</value>
+      <description>server_hello</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>3</value>
+      <description>hello_verify_request</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <value>4</value>
+      <description>NewSessionTicket</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4507"/>
+    </record>
+    <record>
+      <value>5-10</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>11</value>
+      <description>certificate</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>12</value>
+      <description>server_key_exchange</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>13</value>
+      <description>certificate_request</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>14</value>
+      <description>server_hello_done</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>15</value>
+      <description>certificate_verify</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>16</value>
+      <description>client_key_exchange</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>17-19</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>20</value>
+      <description>finished</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>21</value>
+      <description>certificate_url</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6066"/>
+    </record>
+    <record>
+      <value>22</value>
+      <description>certificate_status</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6066"/>
+    </record>
+    <record>
+      <value>23</value>
+      <description>supplemental_data</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4680"/>
+    </record>
+    <record>
+      <value>24-255</value>
+      <description>Unassigned</description>
+    </record>
+  </registry>
+  <registry id="tls-parameters-8">
+    <title>EC Named Curve Registry</title>
+    <xref type="rfc" data="rfc4492"/>
+    <registration_rule>IETF Consensus</registration_rule>
+    <record>
+      <value>0</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>1</value>
+      <description>sect163k1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>2</value>
+      <description>sect163r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>3</value>
+      <description>sect163r2</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>4</value>
+      <description>sect193r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>5</value>
+      <description>sect193r2</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>6</value>
+      <description>sect233k1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>7</value>
+      <description>sect233r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>8</value>
+      <description>sect239k1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>9</value>
+      <description>sect283k1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>10</value>
+      <description>sect283r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>11</value>
+      <description>sect409k1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>12</value>
+      <description>sect409r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>13</value>
+      <description>sect571k1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>14</value>
+      <description>sect571r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>15</value>
+      <description>secp160k1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>16</value>
+      <description>secp160r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>17</value>
+      <description>secp160r2</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>18</value>
+      <description>secp192k1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>19</value>
+      <description>secp192r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>20</value>
+      <description>secp224k1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>21</value>
+      <description>secp224r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>22</value>
+      <description>secp256k1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>23</value>
+      <description>secp256r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>24</value>
+      <description>secp384r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>25</value>
+      <description>secp521r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>    
+    <record date="2013-08-19">
+      <value>26</value>
+      <description>brainpoolP256r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc7027"/>
+    </record>
+    <record date="2013-08-19">
+      <value>27</value>
+      <description>brainpoolP384r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc7027"/>
+    </record>
+    <record date="2013-08-19">
+      <value>28</value>
+      <description>brainpoolP512r1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc7027"/>
+    </record>
+    <record>
+      <value>29-65023</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>65024-65279</value>
+      <description>Reserved for Private Use</description>
+      <xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>65280</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>65281</value>
+      <description>arbitrary_explicit_prime_curves</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>65282</value>
+      <description>arbitrary_explicit_char2_curves</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>65283-65535</value>
+      <description>Unassigned</description>
+    </record>
+  </registry>
+  <registry id="tls-parameters-9">
+    <title>EC Point Format Registry</title>
+    <xref type="rfc" data="rfc4492"/>
+    <registration_rule>IETF Consensus</registration_rule>
+    <record>
+      <value>0</value>
+      <description>uncompressed</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>1</value>
+      <description>ansiX962_compressed_prime</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>2</value>
+      <description>ansiX962_compressed_char2</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>3-247</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>248-255</value>
+      <description>Reserved for Private Use</description>
+      <xref type="rfc" data="rfc4492"/>
+    </record>
+  </registry>
+  <registry id="tls-parameters-10">
+    <title>EC Curve Type Registry</title>
+    <xref type="rfc" data="rfc4492"/>
+    <registration_rule>IETF Consensus</registration_rule>
+    <record>
+      <value>0</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>1</value>
+      <description>explicit_prime</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>2</value>
+      <description>explicit_char2</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>3</value>
+      <description>named_curve</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4492"/>
+    </record>
+    <record>
+      <value>4-247</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>248-255</value>
+      <description>Reserved for Private Use</description>
+      <xref type="rfc" data="rfc4492"/>
+    </record>
+  </registry>
+  <registry id="tls-parameters-12">
+    <title>TLS Supplemental Data Formats (SupplementalDataType)</title>
+    <xref type="rfc" data="rfc4680"/>
+    <range>
+      <value>0-16385</value>
+      <registration_rule>Standards Action</registration_rule>
+    </range>
+    <range>
+      <value>16386-65279</value>
+      <registration_rule>IETF Consensus</registration_rule>
+    </range>
+    <range>
+      <value>65280-65535</value>
+      <registration_rule>Reserved for Private Use</registration_rule>
+    </range>
+    <record>
+      <value>0</value>
+      <description>user_mapping_data</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4681"/>
+    </record>
+    <record>
+      <value>1-16385</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>16386</value>
+      <description>authz_data</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5878"/>
+    </record>
+    <record>
+      <value>16387-65279</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>65280-65535</value>
+      <description>Reserved for Private Use</description>
+      <xref type="rfc" data="rfc4680"/>
+    </record>
+  </registry>
+  <registry id="tls-parameters-14">
+    <title>TLS UserMappingType Values</title>
+    <xref type="rfc" data="rfc4681"/>
+    <expert>Eric Rescorla</expert>
+    <range>
+      <value>0-63</value>
+      <registration_rule>Standards Action</registration_rule>
+    </range>
+    <range>
+      <value>64-223</value>
+      <registration_rule>Specification Required</registration_rule>
+    </range>
+    <range>
+      <value>224-255</value>
+      <registration_rule>Reserved for Private Use</registration_rule>
+    </range>
+    <record>
+      <value>0-63</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>64</value>
+      <description>upn_domain_hint</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc4681"/>
+    </record>
+    <record>
+      <value>65-223</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>224-255</value>
+      <description>Reserved for Private Use</description>
+      <xref type="rfc" data="rfc4681"/>
+    </record>
+  </registry>
+  <registry id="tls-parameters-16">
+    <title>TLS SignatureAlgorithm Registry</title>
+    <xref type="rfc" data="rfc5246"/>
+    <expert>Eric Rescorla</expert>
+    <range>
+      <value>0-63</value>
+      <registration_rule>Standards Action</registration_rule>
+    </range>
+    <range>
+      <value>64-223</value>
+      <registration_rule>Specification Required</registration_rule>
+    </range>
+    <range>
+      <value>224-255</value>
+      <registration_rule>Reserved for Private Use</registration_rule>
+    </range>
+    <record>
+      <value>0</value>
+      <description>anonymous</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>1</value>
+      <description>rsa</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>2</value>
+      <description>dsa</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>3</value>
+      <description>ecdsa</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>4-223</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>224-255</value>
+      <description>Reserved for Private Use</description>
+      <xref type="rfc" data="rfc5246"/>
+    </record>
+  </registry>
+  
+  <registry id="tls-parameters-18">
+    <title>TLS HashAlgorithm Registry</title>
+    <xref type="rfc" data="rfc5246"/>
+    <expert>Eric Rescorla</expert>
+    <range>
+      <value>0-63</value>
+      <registration_rule>Standards Action</registration_rule>
+    </range>
+    <range>
+      <value>64-223</value>
+      <registration_rule>Specification Required</registration_rule>
+    </range>
+    <range>
+      <value>224-255</value>
+      <registration_rule>Reserved for Private Use</registration_rule>
+    </range>
+    <record>
+      <value>0</value>
+      <description>none</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>1</value>
+      <description>md5</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>2</value>
+      <description>sha1</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>3</value>
+      <description>sha224</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>4</value>
+      <description>sha256</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>5</value>
+      <description>sha384</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>6</value>
+      <description>sha512</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+    </record>
+    <record>
+      <value>7-223</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>224-255</value>
+      <description>Reserved for Private Use</description>
+      <xref type="rfc" data="rfc5246"/>
+    </record>
+  </registry>
+  
+  <registry id="exporter-labels">
+    <title>TLS Exporter Label Registry</title>
+    <xref type="rfc" data="rfc5705"/>
+    <registration_rule>Specification Required</registration_rule>
+    <expert>Eric Rescorla</expert>
+    <note>(1) These entries are reserved and MUST NOT be used for the purpose described in <xref type="rfc" data="rfc5705"/>, 
+in order to avoid confusion with similar, but distinct use in <xref type="rfc" data="rfc5246"/>.
+    </note>
+    <record>
+      <description>client finished</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+      <note>(1)</note>
+    </record>
+    <record>
+      <description>server finished</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+      <note>(1)</note>
+    </record>
+    <record>
+      <description>master secret</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+      <note>(1)</note>
+    </record>
+    <record>
+      <description>key expansion</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5246"/>
+      <note>(1)</note>
+    </record>
+    <record>
+      <description>client EAP encryption</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc5216"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <description>ttls keying material</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc5281"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <description>ttls challenge</description>
+      <dtls>N</dtls><xref type="rfc" data="rfc5281"/><xref type="rfc" data="rfc6347"/>
+    </record>
+    <record>
+      <description>EXTRACTOR-dtls_srtp</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5764"/>
+    </record>
+    <record>
+      <description>EXPORTER_DTLS_OVER_SCTP</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6083"/>
+    </record>
+    <record>
+      <description>EXPORTER-ETSI-TC-M2M-Bootstrap</description>
+      <dtls>Y</dtls><xref type="text">TS 102 921 v2.0.3</xref><xref type="person" data="Miguel_Angel_Reina_Ortega"/>
+    </record>
+    <record>
+      <description>EXPORTER-ETSI-TC-M2M-Connection</description>
+      <dtls>Y</dtls><xref type="text">TS 102 921 v2.0.3</xref><xref type="person" data="Miguel_Angel_Reina_Ortega"/>
+    </record>    
+    <record date="2013-01-30">
+      <description>TLS_MK_Extr</description>
+      <dtls>Y</dtls>
+      <xref type="uri" data="http://www.3gpp.org/ftp/Specs/html-info/33222.htm ">TR 33.222</xref>
+      <xref type="person" data="Silke_Holtmanns"/>
+    </record>    
+    <record>
+      <description>EXPORTER_GBA_Digest</description>
+      <dtls>Y</dtls>
+      <xref type="uri" data="http://www.3gpp.org/ftp/Specs/html-info/33220.htm">TS 33.220 Annex M.6</xref>
+      <xref type="person" data="Silke_Holtmanns"/>
+    </record>  
+    </registry>
+  
+  <registry id="authorization-data">
+    <title>TLS Authorization Data Formats</title>
+    <xref type="rfc" data="rfc5878"/>
+    <range>
+      <value>0-63</value>
+      <registration_rule>IETF Review</registration_rule>
+    </range>
+    <range>
+      <value>64-223</value>
+      <registration_rule>Specification Required</registration_rule>
+    </range>
+    <record>
+      <value>0</value>
+      <description>x509_attr_cert</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5878"/>
+    </record>
+    <record>
+      <value>1</value>
+      <description>saml_assertion</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5878"/>
+    </record>
+    <record>
+      <value>2</value>
+      <description>x509_attr_cert_url</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5878"/>
+    </record>
+    <record>
+      <value>3</value>
+      <description>saml_assertion_url</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc5878"/>
+    </record>
+    <record>
+      <value>4-63</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>64</value>
+      <description>keynote_assertion_list</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6042"/>
+    </record>
+    <record>
+      <value>65</value>
+      <description>keynote_assertion_list_url</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6042"/>
+    </record>
+    <record>
+      <value>66-223</value>
+      <description>Unassigned</description>
+    </record> 
+    <record>
+      <value>224-255</value>
+      <description>Reserved for Private Use</description>
+      <xref type="rfc" data="rfc5878"/>
+    </record>
+  </registry>
+  
+  <registry id="heartbeat-message-types">
+    <title>Heartbeat Message Types</title>
+    <xref type="rfc" data="rfc6520"/>
+    <registration_rule>Expert Review</registration_rule>
+    <expert>Eric Rescorla</expert>
+    <record>
+      <value>0</value>
+      <description>Reserved</description>
+      <xref type="rfc" data="rfc6520"/>
+    </record>
+    <record>
+      <value>1</value>
+      <description>heartbeat_request</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6520"/>
+    </record>
+    <record>
+      <value>2</value>
+      <description>heartbeat_response</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6520"/>
+    </record>
+    <record>
+      <value>3-254</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>255</value>
+      <description>Reserved</description>
+      <xref type="rfc" data="rfc6520"/>
+    </record>
+  </registry>
+  
+  <registry id="heartbeat-modes">
+    <title>Heartbeat Modes</title>
+    <xref type="rfc" data="rfc6520"/>
+    <registration_rule>Expert Review</registration_rule>
+    <expert>Eric Rescorla</expert>
+    <record>
+      <value>0</value>
+      <description>Reserved</description>
+      <xref type="rfc" data="rfc6520"/>
+    </record>
+    <record>
+      <value>1</value>
+      <description>peer_allowed_to_send</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6520"/>
+    </record>
+    <record>
+      <value>2</value>
+      <description>peer_not_allowed_to_send</description>
+      <dtls>Y</dtls><xref type="rfc" data="rfc6520"/>
+    </record>
+    <record>
+      <value>3-254</value>
+      <description>Unassigned</description>
+    </record>
+    <record>
+      <value>255</value>
+      <description>Reserved</description>
+      <xref type="rfc" data="rfc6520"/>
+    </record>
+  </registry>
+  
+  <people>
+    <person id="Miguel_Angel_Reina_Ortega">
+      <name>Miguel Angel Reina Ortega</name>
+      <uri>mailto:MiguelAngel.ReinaOrtega&amp;etsi.org</uri>
+      <updated>2012-12-06</updated>
+    </person>
+    <person id="Pasi_Eronen">
+      <name>Pasi Eronen</name>
+      <uri>mailto:pasi.eronen&amp;nokia.com</uri>
+      <updated>2008-04-04</updated>
+    </person>    
+    <person id="Silke_Holtmanns">
+      <name>Silke Holtmanns</name>
+      <uri>mailto:Silke.Holtmanns&amp;nokia.com</uri>
+      <updated>2013-01-30</updated>
+    </person>
+  </people>
+</registry>
Mirror of https://gitlab.com/gnutls/gnutls.git