tls1.h 36 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766
  1. /* $OpenBSD: tls1.h,v 1.59 2024/03/02 11:46:55 tb Exp $ */
  2. /* Copyright (C) 1995-1998 Eric Young ([email protected])
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young ([email protected]).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson ([email protected]).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young ([email protected])"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson ([email protected])"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. /* ====================================================================
  59. * Copyright (c) 1998-2006 The OpenSSL Project. All rights reserved.
  60. *
  61. * Redistribution and use in source and binary forms, with or without
  62. * modification, are permitted provided that the following conditions
  63. * are met:
  64. *
  65. * 1. Redistributions of source code must retain the above copyright
  66. * notice, this list of conditions and the following disclaimer.
  67. *
  68. * 2. Redistributions in binary form must reproduce the above copyright
  69. * notice, this list of conditions and the following disclaimer in
  70. * the documentation and/or other materials provided with the
  71. * distribution.
  72. *
  73. * 3. All advertising materials mentioning features or use of this
  74. * software must display the following acknowledgment:
  75. * "This product includes software developed by the OpenSSL Project
  76. * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  77. *
  78. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  79. * endorse or promote products derived from this software without
  80. * prior written permission. For written permission, please contact
  81. * [email protected].
  82. *
  83. * 5. Products derived from this software may not be called "OpenSSL"
  84. * nor may "OpenSSL" appear in their names without prior written
  85. * permission of the OpenSSL Project.
  86. *
  87. * 6. Redistributions of any form whatsoever must retain the following
  88. * acknowledgment:
  89. * "This product includes software developed by the OpenSSL Project
  90. * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  91. *
  92. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  93. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  94. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  95. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  96. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  97. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  98. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  99. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  100. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  101. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  102. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  103. * OF THE POSSIBILITY OF SUCH DAMAGE.
  104. * ====================================================================
  105. *
  106. * This product includes cryptographic software written by Eric Young
  107. * ([email protected]). This product includes software written by Tim
  108. * Hudson ([email protected]).
  109. *
  110. */
  111. /* ====================================================================
  112. * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
  113. *
  114. * Portions of the attached software ("Contribution") are developed by
  115. * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
  116. *
  117. * The Contribution is licensed pursuant to the OpenSSL open source
  118. * license provided above.
  119. *
  120. * ECC cipher suite support in OpenSSL originally written by
  121. * Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories.
  122. *
  123. */
  124. /* ====================================================================
  125. * Copyright 2005 Nokia. All rights reserved.
  126. *
  127. * The portions of the attached software ("Contribution") is developed by
  128. * Nokia Corporation and is licensed pursuant to the OpenSSL open source
  129. * license.
  130. *
  131. * The Contribution, originally written by Mika Kousa and Pasi Eronen of
  132. * Nokia Corporation, consists of the "PSK" (Pre-Shared Key) ciphersuites
  133. * support (see RFC 4279) to OpenSSL.
  134. *
  135. * No patent licenses or other rights except those expressly stated in
  136. * the OpenSSL open source license shall be deemed granted or received
  137. * expressly, by implication, estoppel, or otherwise.
  138. *
  139. * No assurances are provided by Nokia that the Contribution does not
  140. * infringe the patent or other intellectual property rights of any third
  141. * party or that the license provides you with all the necessary rights
  142. * to make use of the Contribution.
  143. *
  144. * THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN
  145. * ADDITION TO THE DISCLAIMERS INCLUDED IN THE LICENSE, NOKIA
  146. * SPECIFICALLY DISCLAIMS ANY LIABILITY FOR CLAIMS BROUGHT BY YOU OR ANY
  147. * OTHER ENTITY BASED ON INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OR
  148. * OTHERWISE.
  149. */
  150. #ifndef HEADER_TLS1_H
  151. #define HEADER_TLS1_H
  152. #include <openssl/opensslconf.h>
  153. #include <openssl/buffer.h>
  154. #ifdef __cplusplus
  155. extern "C" {
  156. #endif
  157. #define OPENSSL_TLS_SECURITY_LEVEL 1
  158. #define TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES 0
  159. #if defined(LIBRESSL_HAS_TLS1_3) || defined(LIBRESSL_INTERNAL)
  160. #define TLS1_3_VERSION 0x0304
  161. #endif
  162. #define TLS1_2_VERSION 0x0303
  163. #define TLS1_2_VERSION_MAJOR 0x03
  164. #define TLS1_2_VERSION_MINOR 0x03
  165. #define TLS1_1_VERSION 0x0302
  166. #define TLS1_1_VERSION_MAJOR 0x03
  167. #define TLS1_1_VERSION_MINOR 0x02
  168. #define TLS1_VERSION 0x0301
  169. #define TLS1_VERSION_MAJOR 0x03
  170. #define TLS1_VERSION_MINOR 0x01
  171. #ifndef LIBRESSL_INTERNAL
  172. #define TLS1_AD_DECRYPTION_FAILED 21
  173. #define TLS1_AD_RECORD_OVERFLOW 22
  174. #define TLS1_AD_UNKNOWN_CA 48 /* fatal */
  175. #define TLS1_AD_ACCESS_DENIED 49 /* fatal */
  176. #define TLS1_AD_DECODE_ERROR 50 /* fatal */
  177. #define TLS1_AD_DECRYPT_ERROR 51
  178. #define TLS1_AD_EXPORT_RESTRICTION 60 /* fatal */
  179. #define TLS1_AD_PROTOCOL_VERSION 70 /* fatal */
  180. #define TLS1_AD_INSUFFICIENT_SECURITY 71 /* fatal */
  181. #define TLS1_AD_INTERNAL_ERROR 80 /* fatal */
  182. /* Code 86 from RFC 7507. */
  183. #define TLS1_AD_INAPPROPRIATE_FALLBACK 86 /* fatal */
  184. #define TLS1_AD_USER_CANCELLED 90
  185. #define TLS1_AD_NO_RENEGOTIATION 100
  186. /* Codes 110-114 from RFC 3546. */
  187. #define TLS1_AD_UNSUPPORTED_EXTENSION 110
  188. #define TLS1_AD_CERTIFICATE_UNOBTAINABLE 111
  189. #define TLS1_AD_UNRECOGNIZED_NAME 112
  190. #define TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE 113
  191. #define TLS1_AD_BAD_CERTIFICATE_HASH_VALUE 114
  192. /* Code 115 from RFC 4279. */
  193. #define TLS1_AD_UNKNOWN_PSK_IDENTITY 115 /* fatal */
  194. #endif
  195. /*
  196. * TLS ExtensionType values.
  197. *
  198. * https://www.iana.org/assignments/tls-extensiontype-values/
  199. */
  200. /* ExtensionType values from RFC 3546, RFC 4366 and RFC 6066. */
  201. #define TLSEXT_TYPE_server_name 0
  202. #define TLSEXT_TYPE_max_fragment_length 1
  203. #define TLSEXT_TYPE_client_certificate_url 2
  204. #define TLSEXT_TYPE_trusted_ca_keys 3
  205. #define TLSEXT_TYPE_truncated_hmac 4
  206. #define TLSEXT_TYPE_status_request 5
  207. /* ExtensionType values from RFC 4681. */
  208. #define TLSEXT_TYPE_user_mapping 6
  209. /* ExtensionType values from RFC 5878. */
  210. #define TLSEXT_TYPE_client_authz 7
  211. #define TLSEXT_TYPE_server_authz 8
  212. /* ExtensionType values from RFC 6091. */
  213. #define TLSEXT_TYPE_cert_type 9
  214. /* ExtensionType values from RFC 7919. */
  215. #define TLSEXT_TYPE_supported_groups 10
  216. /* ExtensionType values from RFC 4492. */
  217. #ifndef LIBRESSL_INTERNAL
  218. #define TLSEXT_TYPE_elliptic_curves TLSEXT_TYPE_supported_groups
  219. #endif
  220. #define TLSEXT_TYPE_ec_point_formats 11
  221. /* ExtensionType value from RFC 5054. */
  222. #define TLSEXT_TYPE_srp 12
  223. /* ExtensionType value from RFC 5246/RFC 8446. */
  224. #define TLSEXT_TYPE_signature_algorithms 13
  225. /* ExtensionType value from RFC 5764. */
  226. #define TLSEXT_TYPE_use_srtp 14
  227. /* ExtensionType value from RFC 5620. */
  228. #define TLSEXT_TYPE_heartbeat 15
  229. /* ExtensionType value from RFC 7301. */
  230. #define TLSEXT_TYPE_application_layer_protocol_negotiation 16
  231. /* ExtensionType value from RFC 7685. */
  232. #define TLSEXT_TYPE_padding 21
  233. /* ExtensionType value from RFC 4507. */
  234. #define TLSEXT_TYPE_session_ticket 35
  235. /* ExtensionType values from RFC 8446 section 4.2 */
  236. #if defined(LIBRESSL_HAS_TLS1_3) || defined(LIBRESSL_INTERNAL)
  237. #define TLSEXT_TYPE_pre_shared_key 41
  238. #define TLSEXT_TYPE_early_data 42
  239. #define TLSEXT_TYPE_supported_versions 43
  240. #define TLSEXT_TYPE_cookie 44
  241. #define TLSEXT_TYPE_psk_key_exchange_modes 45
  242. #define TLSEXT_TYPE_certificate_authorities 47
  243. #define TLSEXT_TYPE_oid_filters 48
  244. #define TLSEXT_TYPE_post_handshake_auth 49
  245. #define TLSEXT_TYPE_signature_algorithms_cert 50
  246. #define TLSEXT_TYPE_key_share 51
  247. #endif
  248. /* ExtensionType value from RFC 9001 section 8.2 */
  249. #if defined(LIBRESSL_HAS_QUIC) || defined(LIBRESSL_INTERNAL)
  250. #define TLSEXT_TYPE_quic_transport_parameters 57
  251. #endif
  252. /*
  253. * TLS 1.3 extension names from OpenSSL, where they decided to use a different
  254. * name from that given in RFC 8446.
  255. */
  256. #if defined(LIBRESSL_HAS_TLS1_3)
  257. #define TLSEXT_TYPE_psk TLSEXT_TYPE_pre_shared_key
  258. #define TLSEXT_TYPE_psk_kex_modes TLSEXT_TYPE_psk_key_exchange_modes
  259. #endif
  260. /* Temporary extension type */
  261. #define TLSEXT_TYPE_renegotiate 0xff01
  262. /* NameType value from RFC 3546. */
  263. #define TLSEXT_NAMETYPE_host_name 0
  264. /* status request value from RFC 3546 */
  265. #define TLSEXT_STATUSTYPE_ocsp 1
  266. /* ECPointFormat values from RFC 4492. */
  267. #define TLSEXT_ECPOINTFORMAT_first 0
  268. #define TLSEXT_ECPOINTFORMAT_uncompressed 0
  269. #define TLSEXT_ECPOINTFORMAT_ansiX962_compressed_prime 1
  270. #define TLSEXT_ECPOINTFORMAT_ansiX962_compressed_char2 2
  271. #define TLSEXT_ECPOINTFORMAT_last 2
  272. #define TLSEXT_MAXLEN_host_name 255
  273. const char *SSL_get_servername(const SSL *s, const int type);
  274. int SSL_get_servername_type(const SSL *s);
  275. /* SSL_export_keying_material exports a value derived from the master secret,
  276. * as specified in RFC 5705. It writes |olen| bytes to |out| given a label and
  277. * optional context. (Since a zero length context is allowed, the |use_context|
  278. * flag controls whether a context is included.)
  279. *
  280. * It returns 1 on success and zero otherwise.
  281. */
  282. int SSL_export_keying_material(SSL *s, unsigned char *out, size_t olen,
  283. const char *label, size_t llen, const unsigned char *p, size_t plen,
  284. int use_context);
  285. int SSL_get_signature_type_nid(const SSL *ssl, int *nid);
  286. int SSL_get_peer_signature_type_nid(const SSL *ssl, int *nid);
  287. #define SSL_set_tlsext_host_name(s,name) \
  288. SSL_ctrl(s,SSL_CTRL_SET_TLSEXT_HOSTNAME,TLSEXT_NAMETYPE_host_name,(char *)name)
  289. #define SSL_set_tlsext_debug_callback(ssl, cb) \
  290. SSL_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_DEBUG_CB,(void (*)(void))cb)
  291. #define SSL_set_tlsext_debug_arg(ssl, arg) \
  292. SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_DEBUG_ARG,0, (void *)arg)
  293. #define SSL_get_tlsext_status_type(ssl) \
  294. SSL_ctrl(ssl, SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE, 0, NULL)
  295. #define SSL_set_tlsext_status_type(ssl, type) \
  296. SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE,type, NULL)
  297. #define SSL_get_tlsext_status_exts(ssl, arg) \
  298. SSL_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_EXTS,0, (void *)arg)
  299. #define SSL_set_tlsext_status_exts(ssl, arg) \
  300. SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_EXTS,0, (void *)arg)
  301. #define SSL_get_tlsext_status_ids(ssl, arg) \
  302. SSL_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_IDS,0, (void *)arg)
  303. #define SSL_set_tlsext_status_ids(ssl, arg) \
  304. SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_IDS,0, (void *)arg)
  305. #define SSL_get_tlsext_status_ocsp_resp(ssl, arg) \
  306. SSL_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_OCSP_RESP,0, (void *)arg)
  307. #define SSL_set_tlsext_status_ocsp_resp(ssl, arg, arglen) \
  308. SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_OCSP_RESP,arglen, (void *)arg)
  309. #define SSL_CTX_set_tlsext_servername_callback(ctx, cb) \
  310. SSL_CTX_callback_ctrl(ctx,SSL_CTRL_SET_TLSEXT_SERVERNAME_CB,(void (*)(void))cb)
  311. #define SSL_TLSEXT_ERR_OK 0
  312. #define SSL_TLSEXT_ERR_ALERT_WARNING 1
  313. #define SSL_TLSEXT_ERR_ALERT_FATAL 2
  314. #define SSL_TLSEXT_ERR_NOACK 3
  315. #define SSL_CTX_set_tlsext_servername_arg(ctx, arg) \
  316. SSL_CTX_ctrl(ctx,SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG,0, (void *)arg)
  317. #define SSL_CTX_get_tlsext_ticket_keys(ctx, keys, keylen) \
  318. SSL_CTX_ctrl((ctx),SSL_CTRL_GET_TLSEXT_TICKET_KEYS,(keylen),(keys))
  319. #define SSL_CTX_set_tlsext_ticket_keys(ctx, keys, keylen) \
  320. SSL_CTX_ctrl((ctx),SSL_CTRL_SET_TLSEXT_TICKET_KEYS,(keylen),(keys))
  321. #define SSL_CTX_get_tlsext_status_cb(ssl, cb) \
  322. SSL_CTX_callback_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB,(void (*)(void))cb)
  323. #define SSL_CTX_set_tlsext_status_cb(ssl, cb) \
  324. SSL_CTX_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB,(void (*)(void))cb)
  325. #define SSL_CTX_get_tlsext_status_arg(ssl, arg) \
  326. SSL_CTX_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB_ARG,0,(void *)arg)
  327. #define SSL_CTX_set_tlsext_status_arg(ssl, arg) \
  328. SSL_CTX_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG,0,(void *)arg)
  329. #define SSL_CTX_set_tlsext_ticket_key_cb(ssl, cb) \
  330. SSL_CTX_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB,(void (*)(void))cb)
  331. /* PSK ciphersuites from RFC 4279. */
  332. #define TLS1_CK_PSK_WITH_RC4_128_SHA 0x0300008A
  333. #define TLS1_CK_PSK_WITH_3DES_EDE_CBC_SHA 0x0300008B
  334. #define TLS1_CK_PSK_WITH_AES_128_CBC_SHA 0x0300008C
  335. #define TLS1_CK_PSK_WITH_AES_256_CBC_SHA 0x0300008D
  336. /* Additional TLS ciphersuites from expired Internet Draft
  337. * draft-ietf-tls-56-bit-ciphersuites-01.txt
  338. * (available if TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES is defined, see
  339. * s3_lib.c). We actually treat them like SSL 3.0 ciphers, which we probably
  340. * shouldn't. Note that the first two are actually not in the IDs. */
  341. #define TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_MD5 0x03000060 /* not in ID */
  342. #define TLS1_CK_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5 0x03000061 /* not in ID */
  343. #define TLS1_CK_RSA_EXPORT1024_WITH_DES_CBC_SHA 0x03000062
  344. #define TLS1_CK_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA 0x03000063
  345. #define TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_SHA 0x03000064
  346. #define TLS1_CK_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA 0x03000065
  347. #define TLS1_CK_DHE_DSS_WITH_RC4_128_SHA 0x03000066
  348. /* AES ciphersuites from RFC 3268. */
  349. #define TLS1_CK_RSA_WITH_AES_128_SHA 0x0300002F
  350. #define TLS1_CK_DH_DSS_WITH_AES_128_SHA 0x03000030
  351. #define TLS1_CK_DH_RSA_WITH_AES_128_SHA 0x03000031
  352. #define TLS1_CK_DHE_DSS_WITH_AES_128_SHA 0x03000032
  353. #define TLS1_CK_DHE_RSA_WITH_AES_128_SHA 0x03000033
  354. #define TLS1_CK_ADH_WITH_AES_128_SHA 0x03000034
  355. #define TLS1_CK_RSA_WITH_AES_256_SHA 0x03000035
  356. #define TLS1_CK_DH_DSS_WITH_AES_256_SHA 0x03000036
  357. #define TLS1_CK_DH_RSA_WITH_AES_256_SHA 0x03000037
  358. #define TLS1_CK_DHE_DSS_WITH_AES_256_SHA 0x03000038
  359. #define TLS1_CK_DHE_RSA_WITH_AES_256_SHA 0x03000039
  360. #define TLS1_CK_ADH_WITH_AES_256_SHA 0x0300003A
  361. /* TLS v1.2 ciphersuites */
  362. #define TLS1_CK_RSA_WITH_NULL_SHA256 0x0300003B
  363. #define TLS1_CK_RSA_WITH_AES_128_SHA256 0x0300003C
  364. #define TLS1_CK_RSA_WITH_AES_256_SHA256 0x0300003D
  365. #define TLS1_CK_DH_DSS_WITH_AES_128_SHA256 0x0300003E
  366. #define TLS1_CK_DH_RSA_WITH_AES_128_SHA256 0x0300003F
  367. #define TLS1_CK_DHE_DSS_WITH_AES_128_SHA256 0x03000040
  368. /* Camellia ciphersuites from RFC 4132. */
  369. #define TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA 0x03000041
  370. #define TLS1_CK_DH_DSS_WITH_CAMELLIA_128_CBC_SHA 0x03000042
  371. #define TLS1_CK_DH_RSA_WITH_CAMELLIA_128_CBC_SHA 0x03000043
  372. #define TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA 0x03000044
  373. #define TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA 0x03000045
  374. #define TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA 0x03000046
  375. /* TLS v1.2 ciphersuites */
  376. #define TLS1_CK_DHE_RSA_WITH_AES_128_SHA256 0x03000067
  377. #define TLS1_CK_DH_DSS_WITH_AES_256_SHA256 0x03000068
  378. #define TLS1_CK_DH_RSA_WITH_AES_256_SHA256 0x03000069
  379. #define TLS1_CK_DHE_DSS_WITH_AES_256_SHA256 0x0300006A
  380. #define TLS1_CK_DHE_RSA_WITH_AES_256_SHA256 0x0300006B
  381. #define TLS1_CK_ADH_WITH_AES_128_SHA256 0x0300006C
  382. #define TLS1_CK_ADH_WITH_AES_256_SHA256 0x0300006D
  383. /* Camellia ciphersuites from RFC 4132. */
  384. #define TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA 0x03000084
  385. #define TLS1_CK_DH_DSS_WITH_CAMELLIA_256_CBC_SHA 0x03000085
  386. #define TLS1_CK_DH_RSA_WITH_CAMELLIA_256_CBC_SHA 0x03000086
  387. #define TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA 0x03000087
  388. #define TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA 0x03000088
  389. #define TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA 0x03000089
  390. /* SEED ciphersuites from RFC 4162. */
  391. #define TLS1_CK_RSA_WITH_SEED_SHA 0x03000096
  392. #define TLS1_CK_DH_DSS_WITH_SEED_SHA 0x03000097
  393. #define TLS1_CK_DH_RSA_WITH_SEED_SHA 0x03000098
  394. #define TLS1_CK_DHE_DSS_WITH_SEED_SHA 0x03000099
  395. #define TLS1_CK_DHE_RSA_WITH_SEED_SHA 0x0300009A
  396. #define TLS1_CK_ADH_WITH_SEED_SHA 0x0300009B
  397. /* TLS v1.2 GCM ciphersuites from RFC 5288. */
  398. #define TLS1_CK_RSA_WITH_AES_128_GCM_SHA256 0x0300009C
  399. #define TLS1_CK_RSA_WITH_AES_256_GCM_SHA384 0x0300009D
  400. #define TLS1_CK_DHE_RSA_WITH_AES_128_GCM_SHA256 0x0300009E
  401. #define TLS1_CK_DHE_RSA_WITH_AES_256_GCM_SHA384 0x0300009F
  402. #define TLS1_CK_DH_RSA_WITH_AES_128_GCM_SHA256 0x030000A0
  403. #define TLS1_CK_DH_RSA_WITH_AES_256_GCM_SHA384 0x030000A1
  404. #define TLS1_CK_DHE_DSS_WITH_AES_128_GCM_SHA256 0x030000A2
  405. #define TLS1_CK_DHE_DSS_WITH_AES_256_GCM_SHA384 0x030000A3
  406. #define TLS1_CK_DH_DSS_WITH_AES_128_GCM_SHA256 0x030000A4
  407. #define TLS1_CK_DH_DSS_WITH_AES_256_GCM_SHA384 0x030000A5
  408. #define TLS1_CK_ADH_WITH_AES_128_GCM_SHA256 0x030000A6
  409. #define TLS1_CK_ADH_WITH_AES_256_GCM_SHA384 0x030000A7
  410. /* TLS 1.2 Camellia SHA-256 ciphersuites from RFC5932 */
  411. #define TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA256 0x030000BA
  412. #define TLS1_CK_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256 0x030000BB
  413. #define TLS1_CK_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256 0x030000BC
  414. #define TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256 0x030000BD
  415. #define TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 0x030000BE
  416. #define TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA256 0x030000BF
  417. #define TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA256 0x030000C0
  418. #define TLS1_CK_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256 0x030000C1
  419. #define TLS1_CK_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256 0x030000C2
  420. #define TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256 0x030000C3
  421. #define TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 0x030000C4
  422. #define TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA256 0x030000C5
  423. /* TLS 1.3 cipher suites from RFC 8446 appendix B.4. */
  424. #if defined(LIBRESSL_HAS_TLS1_3) || defined(LIBRESSL_INTERNAL)
  425. #define TLS1_3_CK_AES_128_GCM_SHA256 0x03001301
  426. #define TLS1_3_CK_AES_256_GCM_SHA384 0x03001302
  427. #define TLS1_3_CK_CHACHA20_POLY1305_SHA256 0x03001303
  428. #define TLS1_3_CK_AES_128_CCM_SHA256 0x03001304
  429. #define TLS1_3_CK_AES_128_CCM_8_SHA256 0x03001305
  430. #endif
  431. /* ECC ciphersuites from RFC 4492. */
  432. #define TLS1_CK_ECDH_ECDSA_WITH_NULL_SHA 0x0300C001
  433. #define TLS1_CK_ECDH_ECDSA_WITH_RC4_128_SHA 0x0300C002
  434. #define TLS1_CK_ECDH_ECDSA_WITH_DES_192_CBC3_SHA 0x0300C003
  435. #define TLS1_CK_ECDH_ECDSA_WITH_AES_128_CBC_SHA 0x0300C004
  436. #define TLS1_CK_ECDH_ECDSA_WITH_AES_256_CBC_SHA 0x0300C005
  437. #define TLS1_CK_ECDHE_ECDSA_WITH_NULL_SHA 0x0300C006
  438. #define TLS1_CK_ECDHE_ECDSA_WITH_RC4_128_SHA 0x0300C007
  439. #define TLS1_CK_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA 0x0300C008
  440. #define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 0x0300C009
  441. #define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 0x0300C00A
  442. #define TLS1_CK_ECDH_RSA_WITH_NULL_SHA 0x0300C00B
  443. #define TLS1_CK_ECDH_RSA_WITH_RC4_128_SHA 0x0300C00C
  444. #define TLS1_CK_ECDH_RSA_WITH_DES_192_CBC3_SHA 0x0300C00D
  445. #define TLS1_CK_ECDH_RSA_WITH_AES_128_CBC_SHA 0x0300C00E
  446. #define TLS1_CK_ECDH_RSA_WITH_AES_256_CBC_SHA 0x0300C00F
  447. #define TLS1_CK_ECDHE_RSA_WITH_NULL_SHA 0x0300C010
  448. #define TLS1_CK_ECDHE_RSA_WITH_RC4_128_SHA 0x0300C011
  449. #define TLS1_CK_ECDHE_RSA_WITH_DES_192_CBC3_SHA 0x0300C012
  450. #define TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA 0x0300C013
  451. #define TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA 0x0300C014
  452. #define TLS1_CK_ECDH_anon_WITH_NULL_SHA 0x0300C015
  453. #define TLS1_CK_ECDH_anon_WITH_RC4_128_SHA 0x0300C016
  454. #define TLS1_CK_ECDH_anon_WITH_DES_192_CBC3_SHA 0x0300C017
  455. #define TLS1_CK_ECDH_anon_WITH_AES_128_CBC_SHA 0x0300C018
  456. #define TLS1_CK_ECDH_anon_WITH_AES_256_CBC_SHA 0x0300C019
  457. /* SRP ciphersuites from RFC 5054. */
  458. #define TLS1_CK_SRP_SHA_WITH_3DES_EDE_CBC_SHA 0x0300C01A
  459. #define TLS1_CK_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA 0x0300C01B
  460. #define TLS1_CK_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA 0x0300C01C
  461. #define TLS1_CK_SRP_SHA_WITH_AES_128_CBC_SHA 0x0300C01D
  462. #define TLS1_CK_SRP_SHA_RSA_WITH_AES_128_CBC_SHA 0x0300C01E
  463. #define TLS1_CK_SRP_SHA_DSS_WITH_AES_128_CBC_SHA 0x0300C01F
  464. #define TLS1_CK_SRP_SHA_WITH_AES_256_CBC_SHA 0x0300C020
  465. #define TLS1_CK_SRP_SHA_RSA_WITH_AES_256_CBC_SHA 0x0300C021
  466. #define TLS1_CK_SRP_SHA_DSS_WITH_AES_256_CBC_SHA 0x0300C022
  467. /* ECDH HMAC based ciphersuites from RFC 5289. */
  468. #define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_SHA256 0x0300C023
  469. #define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_SHA384 0x0300C024
  470. #define TLS1_CK_ECDH_ECDSA_WITH_AES_128_SHA256 0x0300C025
  471. #define TLS1_CK_ECDH_ECDSA_WITH_AES_256_SHA384 0x0300C026
  472. #define TLS1_CK_ECDHE_RSA_WITH_AES_128_SHA256 0x0300C027
  473. #define TLS1_CK_ECDHE_RSA_WITH_AES_256_SHA384 0x0300C028
  474. #define TLS1_CK_ECDH_RSA_WITH_AES_128_SHA256 0x0300C029
  475. #define TLS1_CK_ECDH_RSA_WITH_AES_256_SHA384 0x0300C02A
  476. /* ECDH GCM based ciphersuites from RFC 5289. */
  477. #define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 0x0300C02B
  478. #define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 0x0300C02C
  479. #define TLS1_CK_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 0x0300C02D
  480. #define TLS1_CK_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 0x0300C02E
  481. #define TLS1_CK_ECDHE_RSA_WITH_AES_128_GCM_SHA256 0x0300C02F
  482. #define TLS1_CK_ECDHE_RSA_WITH_AES_256_GCM_SHA384 0x0300C030
  483. #define TLS1_CK_ECDH_RSA_WITH_AES_128_GCM_SHA256 0x0300C031
  484. #define TLS1_CK_ECDH_RSA_WITH_AES_256_GCM_SHA384 0x0300C032
  485. /* ChaCha20-Poly1305 based ciphersuites. */
  486. #define TLS1_CK_ECDHE_RSA_CHACHA20_POLY1305 0x0300CCA8
  487. #define TLS1_CK_ECDHE_ECDSA_CHACHA20_POLY1305 0x0300CCA9
  488. #define TLS1_CK_DHE_RSA_CHACHA20_POLY1305 0x0300CCAA
  489. #define TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_MD5 "EXP1024-RC4-MD5"
  490. #define TLS1_TXT_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5 "EXP1024-RC2-CBC-MD5"
  491. #define TLS1_TXT_RSA_EXPORT1024_WITH_DES_CBC_SHA "EXP1024-DES-CBC-SHA"
  492. #define TLS1_TXT_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA "EXP1024-DHE-DSS-DES-CBC-SHA"
  493. #define TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_SHA "EXP1024-RC4-SHA"
  494. #define TLS1_TXT_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA "EXP1024-DHE-DSS-RC4-SHA"
  495. #define TLS1_TXT_DHE_DSS_WITH_RC4_128_SHA "DHE-DSS-RC4-SHA"
  496. /* AES ciphersuites from RFC 3268. */
  497. #define TLS1_TXT_RSA_WITH_AES_128_SHA "AES128-SHA"
  498. #define TLS1_TXT_DH_DSS_WITH_AES_128_SHA "DH-DSS-AES128-SHA"
  499. #define TLS1_TXT_DH_RSA_WITH_AES_128_SHA "DH-RSA-AES128-SHA"
  500. #define TLS1_TXT_DHE_DSS_WITH_AES_128_SHA "DHE-DSS-AES128-SHA"
  501. #define TLS1_TXT_DHE_RSA_WITH_AES_128_SHA "DHE-RSA-AES128-SHA"
  502. #define TLS1_TXT_ADH_WITH_AES_128_SHA "ADH-AES128-SHA"
  503. #define TLS1_TXT_RSA_WITH_AES_256_SHA "AES256-SHA"
  504. #define TLS1_TXT_DH_DSS_WITH_AES_256_SHA "DH-DSS-AES256-SHA"
  505. #define TLS1_TXT_DH_RSA_WITH_AES_256_SHA "DH-RSA-AES256-SHA"
  506. #define TLS1_TXT_DHE_DSS_WITH_AES_256_SHA "DHE-DSS-AES256-SHA"
  507. #define TLS1_TXT_DHE_RSA_WITH_AES_256_SHA "DHE-RSA-AES256-SHA"
  508. #define TLS1_TXT_ADH_WITH_AES_256_SHA "ADH-AES256-SHA"
  509. /* ECC ciphersuites from draft-ietf-tls-ecc-01.txt (Mar 15, 2001) */
  510. #define TLS1_TXT_ECDH_ECDSA_WITH_NULL_SHA "ECDH-ECDSA-NULL-SHA"
  511. #define TLS1_TXT_ECDH_ECDSA_WITH_RC4_128_SHA "ECDH-ECDSA-RC4-SHA"
  512. #define TLS1_TXT_ECDH_ECDSA_WITH_DES_192_CBC3_SHA "ECDH-ECDSA-DES-CBC3-SHA"
  513. #define TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA "ECDH-ECDSA-AES128-SHA"
  514. #define TLS1_TXT_ECDH_ECDSA_WITH_AES_256_CBC_SHA "ECDH-ECDSA-AES256-SHA"
  515. #define TLS1_TXT_ECDHE_ECDSA_WITH_NULL_SHA "ECDHE-ECDSA-NULL-SHA"
  516. #define TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA "ECDHE-ECDSA-RC4-SHA"
  517. #define TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA "ECDHE-ECDSA-DES-CBC3-SHA"
  518. #define TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA "ECDHE-ECDSA-AES128-SHA"
  519. #define TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA "ECDHE-ECDSA-AES256-SHA"
  520. #define TLS1_TXT_ECDH_RSA_WITH_NULL_SHA "ECDH-RSA-NULL-SHA"
  521. #define TLS1_TXT_ECDH_RSA_WITH_RC4_128_SHA "ECDH-RSA-RC4-SHA"
  522. #define TLS1_TXT_ECDH_RSA_WITH_DES_192_CBC3_SHA "ECDH-RSA-DES-CBC3-SHA"
  523. #define TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA "ECDH-RSA-AES128-SHA"
  524. #define TLS1_TXT_ECDH_RSA_WITH_AES_256_CBC_SHA "ECDH-RSA-AES256-SHA"
  525. #define TLS1_TXT_ECDHE_RSA_WITH_NULL_SHA "ECDHE-RSA-NULL-SHA"
  526. #define TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA "ECDHE-RSA-RC4-SHA"
  527. #define TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA "ECDHE-RSA-DES-CBC3-SHA"
  528. #define TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA "ECDHE-RSA-AES128-SHA"
  529. #define TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA "ECDHE-RSA-AES256-SHA"
  530. #define TLS1_TXT_ECDH_anon_WITH_NULL_SHA "AECDH-NULL-SHA"
  531. #define TLS1_TXT_ECDH_anon_WITH_RC4_128_SHA "AECDH-RC4-SHA"
  532. #define TLS1_TXT_ECDH_anon_WITH_DES_192_CBC3_SHA "AECDH-DES-CBC3-SHA"
  533. #define TLS1_TXT_ECDH_anon_WITH_AES_128_CBC_SHA "AECDH-AES128-SHA"
  534. #define TLS1_TXT_ECDH_anon_WITH_AES_256_CBC_SHA "AECDH-AES256-SHA"
  535. /* PSK ciphersuites from RFC 4279. */
  536. #define TLS1_TXT_PSK_WITH_RC4_128_SHA "PSK-RC4-SHA"
  537. #define TLS1_TXT_PSK_WITH_3DES_EDE_CBC_SHA "PSK-3DES-EDE-CBC-SHA"
  538. #define TLS1_TXT_PSK_WITH_AES_128_CBC_SHA "PSK-AES128-CBC-SHA"
  539. #define TLS1_TXT_PSK_WITH_AES_256_CBC_SHA "PSK-AES256-CBC-SHA"
  540. /* SRP ciphersuite from RFC 5054. */
  541. #define TLS1_TXT_SRP_SHA_WITH_3DES_EDE_CBC_SHA "SRP-3DES-EDE-CBC-SHA"
  542. #define TLS1_TXT_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA "SRP-RSA-3DES-EDE-CBC-SHA"
  543. #define TLS1_TXT_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA "SRP-DSS-3DES-EDE-CBC-SHA"
  544. #define TLS1_TXT_SRP_SHA_WITH_AES_128_CBC_SHA "SRP-AES-128-CBC-SHA"
  545. #define TLS1_TXT_SRP_SHA_RSA_WITH_AES_128_CBC_SHA "SRP-RSA-AES-128-CBC-SHA"
  546. #define TLS1_TXT_SRP_SHA_DSS_WITH_AES_128_CBC_SHA "SRP-DSS-AES-128-CBC-SHA"
  547. #define TLS1_TXT_SRP_SHA_WITH_AES_256_CBC_SHA "SRP-AES-256-CBC-SHA"
  548. #define TLS1_TXT_SRP_SHA_RSA_WITH_AES_256_CBC_SHA "SRP-RSA-AES-256-CBC-SHA"
  549. #define TLS1_TXT_SRP_SHA_DSS_WITH_AES_256_CBC_SHA "SRP-DSS-AES-256-CBC-SHA"
  550. /* Camellia ciphersuites from RFC 4132. */
  551. #define TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA "CAMELLIA128-SHA"
  552. #define TLS1_TXT_DH_DSS_WITH_CAMELLIA_128_CBC_SHA "DH-DSS-CAMELLIA128-SHA"
  553. #define TLS1_TXT_DH_RSA_WITH_CAMELLIA_128_CBC_SHA "DH-RSA-CAMELLIA128-SHA"
  554. #define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA "DHE-DSS-CAMELLIA128-SHA"
  555. #define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA "DHE-RSA-CAMELLIA128-SHA"
  556. #define TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA "ADH-CAMELLIA128-SHA"
  557. #define TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA "CAMELLIA256-SHA"
  558. #define TLS1_TXT_DH_DSS_WITH_CAMELLIA_256_CBC_SHA "DH-DSS-CAMELLIA256-SHA"
  559. #define TLS1_TXT_DH_RSA_WITH_CAMELLIA_256_CBC_SHA "DH-RSA-CAMELLIA256-SHA"
  560. #define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA "DHE-DSS-CAMELLIA256-SHA"
  561. #define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA "DHE-RSA-CAMELLIA256-SHA"
  562. #define TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA "ADH-CAMELLIA256-SHA"
  563. /* TLS 1.2 Camellia SHA-256 ciphersuites from RFC5932 */
  564. #define TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA256 "CAMELLIA128-SHA256"
  565. #define TLS1_TXT_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256 "DH-DSS-CAMELLIA128-SHA256"
  566. #define TLS1_TXT_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256 "DH-RSA-CAMELLIA128-SHA256"
  567. #define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256 "DHE-DSS-CAMELLIA128-SHA256"
  568. #define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 "DHE-RSA-CAMELLIA128-SHA256"
  569. #define TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA256 "ADH-CAMELLIA128-SHA256"
  570. #define TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA256 "CAMELLIA256-SHA256"
  571. #define TLS1_TXT_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256 "DH-DSS-CAMELLIA256-SHA256"
  572. #define TLS1_TXT_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256 "DH-RSA-CAMELLIA256-SHA256"
  573. #define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256 "DHE-DSS-CAMELLIA256-SHA256"
  574. #define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 "DHE-RSA-CAMELLIA256-SHA256"
  575. #define TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA256 "ADH-CAMELLIA256-SHA256"
  576. /* SEED ciphersuites from RFC 4162. */
  577. #define TLS1_TXT_RSA_WITH_SEED_SHA "SEED-SHA"
  578. #define TLS1_TXT_DH_DSS_WITH_SEED_SHA "DH-DSS-SEED-SHA"
  579. #define TLS1_TXT_DH_RSA_WITH_SEED_SHA "DH-RSA-SEED-SHA"
  580. #define TLS1_TXT_DHE_DSS_WITH_SEED_SHA "DHE-DSS-SEED-SHA"
  581. #define TLS1_TXT_DHE_RSA_WITH_SEED_SHA "DHE-RSA-SEED-SHA"
  582. #define TLS1_TXT_ADH_WITH_SEED_SHA "ADH-SEED-SHA"
  583. /* TLS v1.2 ciphersuites. */
  584. #define TLS1_TXT_RSA_WITH_NULL_SHA256 "NULL-SHA256"
  585. #define TLS1_TXT_RSA_WITH_AES_128_SHA256 "AES128-SHA256"
  586. #define TLS1_TXT_RSA_WITH_AES_256_SHA256 "AES256-SHA256"
  587. #define TLS1_TXT_DH_DSS_WITH_AES_128_SHA256 "DH-DSS-AES128-SHA256"
  588. #define TLS1_TXT_DH_RSA_WITH_AES_128_SHA256 "DH-RSA-AES128-SHA256"
  589. #define TLS1_TXT_DHE_DSS_WITH_AES_128_SHA256 "DHE-DSS-AES128-SHA256"
  590. #define TLS1_TXT_DHE_RSA_WITH_AES_128_SHA256 "DHE-RSA-AES128-SHA256"
  591. #define TLS1_TXT_DH_DSS_WITH_AES_256_SHA256 "DH-DSS-AES256-SHA256"
  592. #define TLS1_TXT_DH_RSA_WITH_AES_256_SHA256 "DH-RSA-AES256-SHA256"
  593. #define TLS1_TXT_DHE_DSS_WITH_AES_256_SHA256 "DHE-DSS-AES256-SHA256"
  594. #define TLS1_TXT_DHE_RSA_WITH_AES_256_SHA256 "DHE-RSA-AES256-SHA256"
  595. #define TLS1_TXT_ADH_WITH_AES_128_SHA256 "ADH-AES128-SHA256"
  596. #define TLS1_TXT_ADH_WITH_AES_256_SHA256 "ADH-AES256-SHA256"
  597. /* TLS v1.2 GCM ciphersuites from RFC 5288. */
  598. #define TLS1_TXT_RSA_WITH_AES_128_GCM_SHA256 "AES128-GCM-SHA256"
  599. #define TLS1_TXT_RSA_WITH_AES_256_GCM_SHA384 "AES256-GCM-SHA384"
  600. #define TLS1_TXT_DHE_RSA_WITH_AES_128_GCM_SHA256 "DHE-RSA-AES128-GCM-SHA256"
  601. #define TLS1_TXT_DHE_RSA_WITH_AES_256_GCM_SHA384 "DHE-RSA-AES256-GCM-SHA384"
  602. #define TLS1_TXT_DH_RSA_WITH_AES_128_GCM_SHA256 "DH-RSA-AES128-GCM-SHA256"
  603. #define TLS1_TXT_DH_RSA_WITH_AES_256_GCM_SHA384 "DH-RSA-AES256-GCM-SHA384"
  604. #define TLS1_TXT_DHE_DSS_WITH_AES_128_GCM_SHA256 "DHE-DSS-AES128-GCM-SHA256"
  605. #define TLS1_TXT_DHE_DSS_WITH_AES_256_GCM_SHA384 "DHE-DSS-AES256-GCM-SHA384"
  606. #define TLS1_TXT_DH_DSS_WITH_AES_128_GCM_SHA256 "DH-DSS-AES128-GCM-SHA256"
  607. #define TLS1_TXT_DH_DSS_WITH_AES_256_GCM_SHA384 "DH-DSS-AES256-GCM-SHA384"
  608. #define TLS1_TXT_ADH_WITH_AES_128_GCM_SHA256 "ADH-AES128-GCM-SHA256"
  609. #define TLS1_TXT_ADH_WITH_AES_256_GCM_SHA384 "ADH-AES256-GCM-SHA384"
  610. /* ECDH HMAC based ciphersuites from RFC 5289. */
  611. #define TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_SHA256 "ECDHE-ECDSA-AES128-SHA256"
  612. #define TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_SHA384 "ECDHE-ECDSA-AES256-SHA384"
  613. #define TLS1_TXT_ECDH_ECDSA_WITH_AES_128_SHA256 "ECDH-ECDSA-AES128-SHA256"
  614. #define TLS1_TXT_ECDH_ECDSA_WITH_AES_256_SHA384 "ECDH-ECDSA-AES256-SHA384"
  615. #define TLS1_TXT_ECDHE_RSA_WITH_AES_128_SHA256 "ECDHE-RSA-AES128-SHA256"
  616. #define TLS1_TXT_ECDHE_RSA_WITH_AES_256_SHA384 "ECDHE-RSA-AES256-SHA384"
  617. #define TLS1_TXT_ECDH_RSA_WITH_AES_128_SHA256 "ECDH-RSA-AES128-SHA256"
  618. #define TLS1_TXT_ECDH_RSA_WITH_AES_256_SHA384 "ECDH-RSA-AES256-SHA384"
  619. /* ECDH GCM based ciphersuites from RFC 5289. */
  620. #define TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 "ECDHE-ECDSA-AES128-GCM-SHA256"
  621. #define TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 "ECDHE-ECDSA-AES256-GCM-SHA384"
  622. #define TLS1_TXT_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 "ECDH-ECDSA-AES128-GCM-SHA256"
  623. #define TLS1_TXT_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 "ECDH-ECDSA-AES256-GCM-SHA384"
  624. #define TLS1_TXT_ECDHE_RSA_WITH_AES_128_GCM_SHA256 "ECDHE-RSA-AES128-GCM-SHA256"
  625. #define TLS1_TXT_ECDHE_RSA_WITH_AES_256_GCM_SHA384 "ECDHE-RSA-AES256-GCM-SHA384"
  626. #define TLS1_TXT_ECDH_RSA_WITH_AES_128_GCM_SHA256 "ECDH-RSA-AES128-GCM-SHA256"
  627. #define TLS1_TXT_ECDH_RSA_WITH_AES_256_GCM_SHA384 "ECDH-RSA-AES256-GCM-SHA384"
  628. /* ChaCha20-Poly1305 based ciphersuites. */
  629. #define TLS1_TXT_ECDHE_RSA_WITH_CHACHA20_POLY1305 "ECDHE-RSA-CHACHA20-POLY1305"
  630. #define TLS1_TXT_ECDHE_ECDSA_WITH_CHACHA20_POLY1305 "ECDHE-ECDSA-CHACHA20-POLY1305"
  631. #define TLS1_TXT_DHE_RSA_WITH_CHACHA20_POLY1305 "DHE-RSA-CHACHA20-POLY1305"
  632. /* TLS 1.3 cipher suites from RFC 8446 appendix B.4. */
  633. #if defined(LIBRESSL_HAS_TLS1_3) || defined(LIBRESSL_INTERNAL)
  634. #define TLS1_3_TXT_AES_128_GCM_SHA256 "AEAD-AES128-GCM-SHA256"
  635. #define TLS1_3_TXT_AES_256_GCM_SHA384 "AEAD-AES256-GCM-SHA384"
  636. #define TLS1_3_TXT_CHACHA20_POLY1305_SHA256 "AEAD-CHACHA20-POLY1305-SHA256"
  637. #define TLS1_3_TXT_AES_128_CCM_SHA256 "AEAD-AES128-CCM-SHA256"
  638. #define TLS1_3_TXT_AES_128_CCM_8_SHA256 "AEAD-AES128-CCM-8-SHA256"
  639. #define TLS1_3_RFC_AES_128_GCM_SHA256 "TLS_AES_128_GCM_SHA256"
  640. #define TLS1_3_RFC_AES_256_GCM_SHA384 "TLS_AES_256_GCM_SHA384"
  641. #define TLS1_3_RFC_CHACHA20_POLY1305_SHA256 "TLS_CHACHA20_POLY1305_SHA256"
  642. #define TLS1_3_RFC_AES_128_CCM_SHA256 "TLS_AES_128_CCM_SHA256"
  643. #define TLS1_3_RFC_AES_128_CCM_8_SHA256 "TLS_AES_128_CCM_8_SHA256"
  644. #endif
  645. #define TLS1_FINISH_MAC_LENGTH 12
  646. #define TLS_MD_MAX_CONST_SIZE 20
  647. #define TLS_MD_CLIENT_FINISH_CONST "client finished"
  648. #define TLS_MD_CLIENT_FINISH_CONST_SIZE 15
  649. #define TLS_MD_SERVER_FINISH_CONST "server finished"
  650. #define TLS_MD_SERVER_FINISH_CONST_SIZE 15
  651. #define TLS_MD_SERVER_WRITE_KEY_CONST "server write key"
  652. #define TLS_MD_SERVER_WRITE_KEY_CONST_SIZE 16
  653. #define TLS_MD_KEY_EXPANSION_CONST "key expansion"
  654. #define TLS_MD_KEY_EXPANSION_CONST_SIZE 13
  655. #define TLS_MD_CLIENT_WRITE_KEY_CONST "client write key"
  656. #define TLS_MD_CLIENT_WRITE_KEY_CONST_SIZE 16
  657. #define TLS_MD_SERVER_WRITE_KEY_CONST "server write key"
  658. #define TLS_MD_SERVER_WRITE_KEY_CONST_SIZE 16
  659. #define TLS_MD_IV_BLOCK_CONST "IV block"
  660. #define TLS_MD_IV_BLOCK_CONST_SIZE 8
  661. #define TLS_MD_MASTER_SECRET_CONST "master secret"
  662. #define TLS_MD_MASTER_SECRET_CONST_SIZE 13
  663. #ifdef __cplusplus
  664. }
  665. #endif
  666. #endif