| author | jnimeh |
| Wed, 18 Jul 2018 14:32:46 -0700 | |
| changeset 51115 | 6659a00bc2ea |
| parent 50768 | 68fa3d4026ea |
| child 51407 | 910f7b56592f |
| permissions | -rw-r--r-- |
| 2 | 1 |
/* |
| 50768 | 2 |
* Copyright (c) 2002, 2018, Oracle and/or its affiliates. All rights reserved. |
| 2 | 3 |
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
4 |
* |
|
5 |
* This code is free software; you can redistribute it and/or modify it |
|
6 |
* under the terms of the GNU General Public License version 2 only, as |
|
| 5506 | 7 |
* published by the Free Software Foundation. Oracle designates this |
| 2 | 8 |
* particular file as subject to the "Classpath" exception as provided |
| 5506 | 9 |
* by Oracle in the LICENSE file that accompanied this code. |
| 2 | 10 |
* |
11 |
* This code is distributed in the hope that it will be useful, but WITHOUT |
|
12 |
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
|
13 |
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
|
14 |
* version 2 for more details (a copy is included in the LICENSE file that |
|
15 |
* accompanied this code). |
|
16 |
* |
|
17 |
* You should have received a copy of the GNU General Public License version |
|
18 |
* 2 along with this work; if not, write to the Free Software Foundation, |
|
19 |
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
|
20 |
* |
|
| 5506 | 21 |
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
22 |
* or visit www.oracle.com if you need additional information or have any |
|
23 |
* questions. |
|
| 2 | 24 |
*/ |
25 |
||
26 |
package sun.security.ssl; |
|
27 |
||
| 50768 | 28 |
import java.util.ArrayList; |
29 |
import java.util.Arrays; |
|
30 |
import java.util.Collection; |
|
31 |
import java.util.Collections; |
|
32 |
import java.util.LinkedList; |
|
33 |
import java.util.List; |
|
34 |
import static sun.security.ssl.CipherSuite.HashAlg.*; |
|
| 2 | 35 |
import static sun.security.ssl.CipherSuite.KeyExchange.*; |
| 29488 | 36 |
import static sun.security.ssl.CipherSuite.MacAlg.*; |
| 50768 | 37 |
import static sun.security.ssl.SSLCipher.*; |
38 |
import sun.security.ssl.SupportedGroupsExtension.NamedGroupType; |
|
39 |
import static sun.security.ssl.SupportedGroupsExtension.NamedGroupType.*; |
|
| 2 | 40 |
|
41 |
/** |
|
| 50768 | 42 |
* Enum for SSL/(D)TLS cipher suites. |
| 2 | 43 |
* |
| 50768 | 44 |
* Please refer to the "TLS Cipher Suite Registry" section for more details |
45 |
* about each cipher suite: |
|
46 |
* https://www.iana.org/assignments/tls-parameters/tls-parameters.xml |
|
| 2 | 47 |
*/ |
| 50768 | 48 |
enum CipherSuite {
|
49 |
// |
|
50 |
// in preference order |
|
51 |
// |
|
52 |
||
53 |
// Definition of the CipherSuites that are enabled by default. |
|
54 |
// |
|
55 |
// They are listed in preference order, most preferred first, using |
|
56 |
// the following criteria: |
|
57 |
// 1. Prefer Suite B compliant cipher suites, see RFC6460 (To be |
|
58 |
// changed later, see below). |
|
59 |
// 2. Prefer the stronger bulk cipher, in the order of AES_256(GCM), |
|
60 |
// AES_128(GCM), AES_256, AES_128, 3DES-EDE. |
|
61 |
// 3. Prefer the stronger MAC algorithm, in the order of SHA384, |
|
62 |
// SHA256, SHA, MD5. |
|
63 |
// 4. Prefer the better performance of key exchange and digital |
|
64 |
// signature algorithm, in the order of ECDHE-ECDSA, ECDHE-RSA, |
|
65 |
// RSA, ECDH-ECDSA, ECDH-RSA, DHE-RSA, DHE-DSS. |
|
66 |
||
67 |
TLS_AES_128_GCM_SHA256( |
|
68 |
0x1301, true, "TLS_AES_128_GCM_SHA256", |
|
69 |
ProtocolVersion.PROTOCOLS_OF_13, B_AES_128_GCM_IV, H_SHA256), |
|
70 |
TLS_AES_256_GCM_SHA384( |
|
71 |
0x1302, true, "TLS_AES_256_GCM_SHA384", |
|
72 |
ProtocolVersion.PROTOCOLS_OF_13, B_AES_256_GCM_IV, H_SHA384), |
|
73 |
||
74 |
// Suite B compliant cipher suites, see RFC 6460. |
|
75 |
// |
|
76 |
// Note that, at present this provider is not Suite B compliant. The |
|
77 |
// preference order of the GCM cipher suites does not follow the spec |
|
78 |
// of RFC 6460. In this section, only two cipher suites are listed |
|
79 |
// so that applications can make use of Suite-B compliant cipher |
|
80 |
// suite firstly. |
|
81 |
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384( |
|
82 |
0xC02C, true, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "", |
|
83 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
84 |
K_ECDHE_ECDSA, B_AES_256_GCM, M_NULL, H_SHA384), |
|
85 |
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256( |
|
86 |
0xC02B, true, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "", |
|
87 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
88 |
K_ECDHE_ECDSA, B_AES_128_GCM, M_NULL, H_SHA256), |
|
89 |
||
90 |
// AES_256(GCM) |
|
91 |
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384( |
|
92 |
0xC030, true, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "", |
|
93 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
94 |
K_ECDHE_RSA, B_AES_256_GCM, M_NULL, H_SHA384), |
|
95 |
TLS_RSA_WITH_AES_256_GCM_SHA384( |
|
96 |
0x009D, true, "TLS_RSA_WITH_AES_256_GCM_SHA384", "", |
|
97 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
98 |
K_RSA, B_AES_256_GCM, M_NULL, H_SHA384), |
|
99 |
TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384( |
|
100 |
0xC02E, true, "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384", "", |
|
101 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
102 |
K_ECDH_ECDSA, B_AES_256_GCM, M_NULL, H_SHA384), |
|
103 |
TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384( |
|
104 |
0xC032, true, "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384", "", |
|
105 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
106 |
K_ECDH_RSA, B_AES_256_GCM, M_NULL, H_SHA384), |
|
107 |
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384( |
|
108 |
0x009F, true, "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", "", |
|
109 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
110 |
K_DHE_RSA, B_AES_256_GCM, M_NULL, H_SHA384), |
|
111 |
TLS_DHE_DSS_WITH_AES_256_GCM_SHA384( |
|
112 |
0x00A3, true, "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384", "", |
|
113 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
114 |
K_DHE_DSS, B_AES_256_GCM, M_NULL, H_SHA384), |
|
115 |
||
116 |
// AES_128(GCM) |
|
117 |
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256( |
|
118 |
0xC02F, true, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "", |
|
119 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
120 |
K_ECDHE_RSA, B_AES_128_GCM, M_NULL, H_SHA256), |
|
121 |
TLS_RSA_WITH_AES_128_GCM_SHA256( |
|
122 |
0x009C, true, "TLS_RSA_WITH_AES_128_GCM_SHA256", "", |
|
123 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
124 |
K_RSA, B_AES_128_GCM, M_NULL, H_SHA256), |
|
125 |
TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256( |
|
126 |
0xC02D, true, "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256", "", |
|
127 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
128 |
K_ECDH_ECDSA, B_AES_128_GCM, M_NULL, H_SHA256), |
|
129 |
TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256( |
|
130 |
0xC031, true, "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256", "", |
|
131 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
132 |
K_ECDH_RSA, B_AES_128_GCM, M_NULL, H_SHA256), |
|
133 |
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256( |
|
134 |
0x009E, true, "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", "", |
|
135 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
136 |
K_DHE_RSA, B_AES_128_GCM, M_NULL, H_SHA256), |
|
137 |
TLS_DHE_DSS_WITH_AES_128_GCM_SHA256( |
|
138 |
0x00A2, true, "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256", "", |
|
139 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
140 |
K_DHE_DSS, B_AES_128_GCM, M_NULL, H_SHA256), |
|
141 |
||
142 |
// AES_256(CBC) |
|
143 |
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384( |
|
144 |
0xC024, true, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", "", |
|
145 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
146 |
K_ECDHE_ECDSA, B_AES_256, M_SHA384, H_SHA384), |
|
147 |
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384( |
|
148 |
0xC028, true, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", "", |
|
149 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
150 |
K_ECDHE_RSA, B_AES_256, M_SHA384, H_SHA384), |
|
151 |
TLS_RSA_WITH_AES_256_CBC_SHA256( |
|
152 |
0x003D, true, "TLS_RSA_WITH_AES_256_CBC_SHA256", "", |
|
153 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
154 |
K_RSA, B_AES_256, M_SHA256, H_SHA256), |
|
155 |
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384( |
|
156 |
0xC026, true, "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384", "", |
|
157 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
158 |
K_ECDH_ECDSA, B_AES_256, M_SHA384, H_SHA384), |
|
159 |
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384( |
|
160 |
0xC02A, true, "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384", "", |
|
161 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
162 |
K_ECDH_RSA, B_AES_256, M_SHA384, H_SHA384), |
|
163 |
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256( |
|
164 |
0x006B, true, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256", "", |
|
165 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
166 |
K_DHE_RSA, B_AES_256, M_SHA256, H_SHA256), |
|
167 |
TLS_DHE_DSS_WITH_AES_256_CBC_SHA256( |
|
168 |
0x006A, true, "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", "", |
|
169 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
170 |
K_DHE_DSS, B_AES_256, M_SHA256, H_SHA256), |
|
171 |
||
172 |
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA( |
|
173 |
0xC00A, true, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "", |
|
174 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
175 |
K_ECDHE_ECDSA, B_AES_256, M_SHA, H_SHA256), |
|
176 |
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA( |
|
177 |
0xC014, true, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "", |
|
178 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
179 |
K_ECDHE_RSA, B_AES_256, M_SHA, H_SHA256), |
|
180 |
TLS_RSA_WITH_AES_256_CBC_SHA( |
|
181 |
0x0035, true, "TLS_RSA_WITH_AES_256_CBC_SHA", "", |
|
182 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
183 |
K_RSA, B_AES_256, M_SHA, H_SHA256), |
|
184 |
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA( |
|
185 |
0xC005, true, "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA", "", |
|
186 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
187 |
K_ECDH_ECDSA, B_AES_256, M_SHA, H_SHA256), |
|
188 |
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA( |
|
189 |
0xC00F, true, "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA", "", |
|
190 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
191 |
K_ECDH_RSA, B_AES_256, M_SHA, H_SHA256), |
|
192 |
TLS_DHE_RSA_WITH_AES_256_CBC_SHA( |
|
193 |
0x0039, true, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", "", |
|
194 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
195 |
K_DHE_RSA, B_AES_256, M_SHA, H_SHA256), |
|
196 |
TLS_DHE_DSS_WITH_AES_256_CBC_SHA( |
|
197 |
0x0038, true, "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", "", |
|
198 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
199 |
K_DHE_DSS, B_AES_256, M_SHA, H_SHA256), |
|
| 2 | 200 |
|
| 50768 | 201 |
// AES_128(CBC) |
202 |
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256( |
|
203 |
0xC023, true, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", "", |
|
204 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
205 |
K_ECDHE_ECDSA, B_AES_128, M_SHA256, H_SHA256), |
|
206 |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256( |
|
207 |
0xC027, true, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "", |
|
208 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
209 |
K_ECDHE_RSA, B_AES_128, M_SHA256, H_SHA256), |
|
210 |
TLS_RSA_WITH_AES_128_CBC_SHA256( |
|
211 |
0x003C, true, "TLS_RSA_WITH_AES_128_CBC_SHA256", "", |
|
212 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
213 |
K_RSA, B_AES_128, M_SHA256, H_SHA256), |
|
214 |
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256( |
|
215 |
0xC025, true, "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256", "", |
|
216 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
217 |
K_ECDH_ECDSA, B_AES_128, M_SHA256, H_SHA256), |
|
218 |
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256( |
|
219 |
0xC029, true, "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256", "", |
|
220 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
221 |
K_ECDH_RSA, B_AES_128, M_SHA256, H_SHA256), |
|
222 |
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256( |
|
223 |
0x0067, true, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256", "", |
|
224 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
225 |
K_DHE_RSA, B_AES_128, M_SHA256, H_SHA256), |
|
226 |
TLS_DHE_DSS_WITH_AES_128_CBC_SHA256( |
|
227 |
0x0040, true, "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", "", |
|
228 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
229 |
K_DHE_DSS, B_AES_128, M_SHA256, H_SHA256), |
|
230 |
||
231 |
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA( |
|
232 |
0xC009, true, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "", |
|
233 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
234 |
K_ECDHE_ECDSA, B_AES_128, M_SHA, H_SHA256), |
|
235 |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA( |
|
236 |
0xC013, true, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "", |
|
237 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
238 |
K_ECDHE_RSA, B_AES_128, M_SHA, H_SHA256), |
|
239 |
TLS_RSA_WITH_AES_128_CBC_SHA( |
|
240 |
0x002F, true, "TLS_RSA_WITH_AES_128_CBC_SHA", "", |
|
241 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
242 |
K_RSA, B_AES_128, M_SHA, H_SHA256), |
|
243 |
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA( |
|
244 |
0xC004, true, "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA", "", |
|
245 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
246 |
K_ECDH_ECDSA, B_AES_128, M_SHA, H_SHA256), |
|
247 |
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA( |
|
248 |
0xC00E, true, "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA", "", |
|
249 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
250 |
K_ECDH_RSA, B_AES_128, M_SHA, H_SHA256), |
|
251 |
TLS_DHE_RSA_WITH_AES_128_CBC_SHA( |
|
252 |
0x0033, true, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", "", |
|
253 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
254 |
K_DHE_RSA, B_AES_128, M_SHA, H_SHA256), |
|
255 |
TLS_DHE_DSS_WITH_AES_128_CBC_SHA( |
|
256 |
0x0032, true, "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", "", |
|
257 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
258 |
K_DHE_DSS, B_AES_128, M_SHA, H_SHA256), |
|
259 |
||
260 |
// 3DES_EDE |
|
261 |
TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA( |
|
262 |
0xC008, true, "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA", "", |
|
263 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
264 |
K_ECDHE_ECDSA, B_3DES, M_SHA, H_SHA256), |
|
265 |
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA( |
|
266 |
0xC012, true, "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA", "", |
|
267 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
268 |
K_ECDHE_RSA, B_3DES, M_SHA, H_SHA256), |
|
269 |
SSL_RSA_WITH_3DES_EDE_CBC_SHA( |
|
270 |
0x000A, true, "SSL_RSA_WITH_3DES_EDE_CBC_SHA", |
|
271 |
"TLS_RSA_WITH_3DES_EDE_CBC_SHA", |
|
272 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
273 |
K_RSA, B_3DES, M_SHA, H_SHA256), |
|
274 |
TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA( |
|
275 |
0xC003, true, "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA", "", |
|
276 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
277 |
K_ECDH_ECDSA, B_3DES, M_SHA, H_SHA256), |
|
278 |
TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA( |
|
279 |
0xC00D, true, "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA", "", |
|
280 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
281 |
K_ECDH_RSA, B_3DES, M_SHA, H_SHA256), |
|
282 |
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA( |
|
283 |
0x0016, true, "SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA", |
|
284 |
"TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA", |
|
285 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
286 |
K_DHE_RSA, B_3DES, M_SHA, H_SHA256), |
|
287 |
SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA( |
|
288 |
0x0013, true, "SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA", |
|
289 |
"TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", |
|
290 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
291 |
K_DHE_DSS, B_3DES, M_SHA, H_SHA256), |
|
292 |
||
293 |
// Renegotiation protection request Signalling Cipher Suite Value (SCSV). |
|
294 |
TLS_EMPTY_RENEGOTIATION_INFO_SCSV( // RFC 5746, TLS 1.2 and prior |
|
295 |
0x00FF, true, "TLS_EMPTY_RENEGOTIATION_INFO_SCSV", "", |
|
296 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
297 |
K_SCSV, B_NULL, M_NULL, H_NONE), |
|
| 2 | 298 |
|
| 50768 | 299 |
// Definition of the CipherSuites that are supported but not enabled |
300 |
// by default. |
|
301 |
// They are listed in preference order, preferred first, using the |
|
302 |
// following criteria: |
|
303 |
// 1. If a cipher suite has been obsoleted, we put it at the end of |
|
304 |
// the list. |
|
305 |
// 2. Prefer the stronger bulk cipher, in the order of AES_256, |
|
306 |
// AES_128, 3DES-EDE, RC-4, DES, DES40, RC4_40, NULL. |
|
307 |
// 3. Prefer the stronger MAC algorithm, in the order of SHA384, |
|
308 |
// SHA256, SHA, MD5. |
|
309 |
// 4. Prefer the better performance of key exchange and digital |
|
310 |
// signature algorithm, in the order of ECDHE-ECDSA, ECDHE-RSA, |
|
311 |
// RSA, ECDH-ECDSA, ECDH-RSA, DHE-RSA, DHE-DSS, anonymous. |
|
312 |
TLS_DH_anon_WITH_AES_256_GCM_SHA384( |
|
313 |
0x00A7, false, "TLS_DH_anon_WITH_AES_256_GCM_SHA384", "", |
|
314 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
315 |
K_DH_ANON, B_AES_256_GCM, M_NULL, H_SHA384), |
|
316 |
TLS_DH_anon_WITH_AES_128_GCM_SHA256( |
|
317 |
0x00A6, false, "TLS_DH_anon_WITH_AES_128_GCM_SHA256", "", |
|
318 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
319 |
K_DH_ANON, B_AES_128_GCM, M_NULL, H_SHA256), |
|
320 |
TLS_DH_anon_WITH_AES_256_CBC_SHA256( |
|
321 |
0x006D, false, "TLS_DH_anon_WITH_AES_256_CBC_SHA256", "", |
|
322 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
323 |
K_DH_ANON, B_AES_256, M_SHA256, H_SHA256), |
|
324 |
TLS_ECDH_anon_WITH_AES_256_CBC_SHA( |
|
325 |
0xC019, false, "TLS_ECDH_anon_WITH_AES_256_CBC_SHA", "", |
|
326 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
327 |
K_ECDH_ANON, B_AES_256, M_SHA, H_SHA256), |
|
328 |
TLS_DH_anon_WITH_AES_256_CBC_SHA( |
|
329 |
0x003A, false, "TLS_DH_anon_WITH_AES_256_CBC_SHA", "", |
|
330 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
331 |
K_DH_ANON, B_AES_256, M_SHA, H_SHA256), |
|
332 |
TLS_DH_anon_WITH_AES_128_CBC_SHA256( |
|
333 |
0x006C, false, "TLS_DH_anon_WITH_AES_128_CBC_SHA256", "", |
|
334 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
335 |
K_DH_ANON, B_AES_128, M_SHA256, H_SHA256), |
|
336 |
TLS_ECDH_anon_WITH_AES_128_CBC_SHA( |
|
337 |
0xC018, false, "TLS_ECDH_anon_WITH_AES_128_CBC_SHA", "", |
|
338 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
339 |
K_ECDH_ANON, B_AES_128, M_SHA, H_SHA256), |
|
340 |
TLS_DH_anon_WITH_AES_128_CBC_SHA( |
|
341 |
0x0034, false, "TLS_DH_anon_WITH_AES_128_CBC_SHA", "", |
|
342 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
343 |
K_DH_ANON, B_AES_128, M_SHA, H_SHA256), |
|
344 |
TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA( |
|
345 |
0xC017, false, "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA", "", |
|
346 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
347 |
K_ECDH_ANON, B_3DES, M_SHA, H_SHA256), |
|
348 |
SSL_DH_anon_WITH_3DES_EDE_CBC_SHA( |
|
349 |
0x001B, false, "SSL_DH_anon_WITH_3DES_EDE_CBC_SHA", |
|
350 |
"TLS_DH_anon_WITH_3DES_EDE_CBC_SHA", |
|
351 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
352 |
K_DH_ANON, B_3DES, M_SHA, H_SHA256), |
|
353 |
||
354 |
// RC4 |
|
355 |
TLS_ECDHE_ECDSA_WITH_RC4_128_SHA( |
|
356 |
0xC007, false, "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA", "", |
|
357 |
ProtocolVersion.PROTOCOLS_TO_TLS12, |
|
358 |
K_ECDHE_ECDSA, B_RC4_128, M_SHA, H_SHA256), |
|
359 |
TLS_ECDHE_RSA_WITH_RC4_128_SHA( |
|
360 |
0xC011, false, "TLS_ECDHE_RSA_WITH_RC4_128_SHA", "", |
|
361 |
ProtocolVersion.PROTOCOLS_TO_TLS12, |
|
362 |
K_ECDHE_RSA, B_RC4_128, M_SHA, H_SHA256), |
|
363 |
SSL_RSA_WITH_RC4_128_SHA( |
|
364 |
0x0005, false, "SSL_RSA_WITH_RC4_128_SHA", |
|
365 |
"TLS_RSA_WITH_RC4_128_SHA", |
|
366 |
ProtocolVersion.PROTOCOLS_TO_TLS12, |
|
367 |
K_RSA, B_RC4_128, M_SHA, H_SHA256), |
|
368 |
TLS_ECDH_ECDSA_WITH_RC4_128_SHA( |
|
369 |
0xC002, false, "TLS_ECDH_ECDSA_WITH_RC4_128_SHA", "", |
|
370 |
ProtocolVersion.PROTOCOLS_TO_TLS12, |
|
371 |
K_ECDH_ECDSA, B_RC4_128, M_SHA, H_SHA256), |
|
372 |
TLS_ECDH_RSA_WITH_RC4_128_SHA( |
|
373 |
0xC00C, false, "TLS_ECDH_RSA_WITH_RC4_128_SHA", "", |
|
374 |
ProtocolVersion.PROTOCOLS_TO_TLS12, |
|
375 |
K_ECDH_RSA, B_RC4_128, M_SHA, H_SHA256), |
|
376 |
SSL_RSA_WITH_RC4_128_MD5( |
|
377 |
0x0004, false, "SSL_RSA_WITH_RC4_128_MD5", |
|
378 |
"TLS_RSA_WITH_RC4_128_MD5", |
|
379 |
ProtocolVersion.PROTOCOLS_TO_TLS12, |
|
380 |
K_RSA, B_RC4_128, M_MD5, H_SHA256), |
|
381 |
TLS_ECDH_anon_WITH_RC4_128_SHA( |
|
382 |
0xC016, false, "TLS_ECDH_anon_WITH_RC4_128_SHA", "", |
|
383 |
ProtocolVersion.PROTOCOLS_TO_TLS12, |
|
384 |
K_ECDH_ANON, B_RC4_128, M_SHA, H_SHA256), |
|
385 |
SSL_DH_anon_WITH_RC4_128_MD5( |
|
386 |
0x0018, false, "SSL_DH_anon_WITH_RC4_128_MD5", |
|
387 |
"TLS_DH_anon_WITH_RC4_128_MD5", |
|
388 |
ProtocolVersion.PROTOCOLS_TO_TLS12, |
|
389 |
K_DH_ANON, B_RC4_128, M_MD5, H_SHA256), |
|
390 |
||
391 |
// weak cipher suites obsoleted in TLS 1.2 [RFC 5246] |
|
392 |
SSL_RSA_WITH_DES_CBC_SHA( |
|
393 |
0x0009, false, "SSL_RSA_WITH_DES_CBC_SHA", |
|
394 |
"TLS_RSA_WITH_DES_CBC_SHA", |
|
395 |
ProtocolVersion.PROTOCOLS_TO_11, |
|
396 |
K_RSA, B_DES, M_SHA, H_NONE), |
|
397 |
SSL_DHE_RSA_WITH_DES_CBC_SHA( |
|
398 |
0x0015, false, "SSL_DHE_RSA_WITH_DES_CBC_SHA", |
|
399 |
"TLS_DHE_RSA_WITH_DES_CBC_SHA", |
|
400 |
ProtocolVersion.PROTOCOLS_TO_11, |
|
401 |
K_DHE_RSA, B_DES, M_SHA, H_NONE), |
|
402 |
SSL_DHE_DSS_WITH_DES_CBC_SHA( |
|
403 |
0x0012, false, "SSL_DHE_DSS_WITH_DES_CBC_SHA", |
|
404 |
"TLS_DHE_DSS_WITH_DES_CBC_SHA", |
|
405 |
ProtocolVersion.PROTOCOLS_TO_11, |
|
406 |
K_DHE_DSS, B_DES, M_SHA, H_NONE), |
|
407 |
SSL_DH_anon_WITH_DES_CBC_SHA( |
|
408 |
0x001A, false, "SSL_DH_anon_WITH_DES_CBC_SHA", |
|
409 |
"TLS_DH_anon_WITH_DES_CBC_SHA", |
|
410 |
ProtocolVersion.PROTOCOLS_TO_11, |
|
411 |
K_DH_ANON, B_DES, M_SHA, H_NONE), |
|
| 2 | 412 |
|
| 50768 | 413 |
// weak cipher suites obsoleted in TLS 1.1 [RFC 4346] |
414 |
SSL_RSA_EXPORT_WITH_DES40_CBC_SHA( |
|
415 |
0x0008, false, "SSL_RSA_EXPORT_WITH_DES40_CBC_SHA", |
|
416 |
"TLS_RSA_EXPORT_WITH_DES40_CBC_SHA", |
|
417 |
ProtocolVersion.PROTOCOLS_TO_10, |
|
418 |
K_RSA_EXPORT, B_DES_40, M_SHA, H_NONE), |
|
419 |
SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA( |
|
420 |
0x0014, false, "SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA", |
|
421 |
"TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA", |
|
422 |
ProtocolVersion.PROTOCOLS_TO_10, |
|
423 |
K_DHE_RSA_EXPORT, B_DES_40, M_SHA, H_NONE), |
|
424 |
SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA( |
|
425 |
0x0011, false, "SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA", |
|
426 |
"TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA", |
|
427 |
ProtocolVersion.PROTOCOLS_TO_10, |
|
428 |
K_DHE_DSS_EXPORT, B_DES_40, M_SHA, H_NONE), |
|
429 |
SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA( |
|
430 |
0x0019, false, "SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA", |
|
431 |
"TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA", |
|
432 |
ProtocolVersion.PROTOCOLS_TO_10, |
|
433 |
K_DH_ANON_EXPORT, B_DES_40, M_SHA, H_NONE), |
|
434 |
SSL_RSA_EXPORT_WITH_RC4_40_MD5( |
|
435 |
0x0003, false, "SSL_RSA_EXPORT_WITH_RC4_40_MD5", |
|
436 |
"TLS_RSA_EXPORT_WITH_RC4_40_MD5", |
|
437 |
ProtocolVersion.PROTOCOLS_TO_10, |
|
438 |
K_RSA_EXPORT, B_DES_40, M_MD5, H_NONE), |
|
439 |
SSL_DH_anon_EXPORT_WITH_RC4_40_MD5( |
|
440 |
0x0017, false, "SSL_DH_anon_EXPORT_WITH_RC4_40_MD5", |
|
441 |
"TLS_DH_anon_EXPORT_WITH_RC4_40_MD5", |
|
442 |
ProtocolVersion.PROTOCOLS_TO_10, |
|
443 |
K_DH_ANON, B_DES_40, M_MD5, H_NONE), |
|
444 |
||
445 |
// no traffic encryption cipher suites |
|
446 |
TLS_RSA_WITH_NULL_SHA256( |
|
447 |
0x003B, false, "TLS_RSA_WITH_NULL_SHA256", "", |
|
448 |
ProtocolVersion.PROTOCOLS_OF_12, |
|
449 |
K_RSA, B_NULL, M_SHA256, H_SHA256), |
|
450 |
TLS_ECDHE_ECDSA_WITH_NULL_SHA( |
|
451 |
0xC006, false, "TLS_ECDHE_ECDSA_WITH_NULL_SHA", "", |
|
452 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
453 |
K_ECDHE_ECDSA, B_NULL, M_SHA, H_SHA256), |
|
454 |
TLS_ECDHE_RSA_WITH_NULL_SHA( |
|
455 |
0xC010, false, "TLS_ECDHE_RSA_WITH_NULL_SHA", "", |
|
456 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
457 |
K_ECDHE_RSA, B_NULL, M_SHA, H_SHA256), |
|
458 |
SSL_RSA_WITH_NULL_SHA( |
|
459 |
0x0002, false, "SSL_RSA_WITH_NULL_SHA", |
|
460 |
"TLS_RSA_WITH_NULL_SHA", |
|
461 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
462 |
K_RSA, B_NULL, M_SHA, H_SHA256), |
|
463 |
TLS_ECDH_ECDSA_WITH_NULL_SHA( |
|
464 |
0xC001, false, "TLS_ECDH_ECDSA_WITH_NULL_SHA", "", |
|
465 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
466 |
K_ECDH_ECDSA, B_NULL, M_SHA, H_SHA256), |
|
467 |
TLS_ECDH_RSA_WITH_NULL_SHA( |
|
468 |
0xC00B, false, "TLS_ECDH_RSA_WITH_NULL_SHA", "", |
|
469 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
470 |
K_ECDH_RSA, B_NULL, M_SHA, H_SHA256), |
|
471 |
TLS_ECDH_anon_WITH_NULL_SHA( |
|
472 |
0xC015, false, "TLS_ECDH_anon_WITH_NULL_SHA", "", |
|
473 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
474 |
K_ECDH_ANON, B_NULL, M_SHA, H_SHA256), |
|
475 |
SSL_RSA_WITH_NULL_MD5( |
|
476 |
0x0001, false, "SSL_RSA_WITH_NULL_MD5", |
|
477 |
"TLS_RSA_WITH_NULL_MD5", |
|
478 |
ProtocolVersion.PROTOCOLS_TO_12, |
|
479 |
K_RSA, B_NULL, M_MD5, H_SHA256), |
|
480 |
||
481 |
// Definition of the CipherSuites that are not supported but the names |
|
482 |
// are known. |
|
483 |
TLS_CHACHA20_POLY1305_SHA256( // TLS 1.3 |
|
484 |
"TLS_CHACHA20_POLY1305_SHA256", 0x1303), |
|
485 |
TLS_AES_128_CCM_SHA256( // TLS 1.3 |
|
486 |
"TLS_AES_128_CCM_SHA256", 0x1304), |
|
487 |
TLS_AES_128_CCM_8_SHA256( // TLS 1.3 |
|
488 |
"TLS_AES_128_CCM_8_SHA256", 0x1305), |
|
| 2 | 489 |
|
| 50768 | 490 |
// remaining unsupported ciphersuites defined in RFC2246. |
491 |
CS_0006("SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5", 0x0006),
|
|
492 |
CS_0007("SSL_RSA_WITH_IDEA_CBC_SHA", 0x0007),
|
|
493 |
CS_000B("SSL_DH_DSS_EXPORT_WITH_DES40_CBC_SHA", 0x000b),
|
|
494 |
CS_000C("SSL_DH_DSS_WITH_DES_CBC_SHA", 0x000c),
|
|
495 |
CS_000D("SSL_DH_DSS_WITH_3DES_EDE_CBC_SHA", 0x000d),
|
|
496 |
CS_000E("SSL_DH_RSA_EXPORT_WITH_DES40_CBC_SHA", 0x000e),
|
|
497 |
CS_000F("SSL_DH_RSA_WITH_DES_CBC_SHA", 0x000f),
|
|
498 |
CS_0010("SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA", 0x0010),
|
|
499 |
||
500 |
// SSL 3.0 Fortezza ciphersuites |
|
501 |
CS_001C("SSL_FORTEZZA_DMS_WITH_NULL_SHA", 0x001c),
|
|
502 |
CS_001D("SSL_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA", 0x001d),
|
|
503 |
||
504 |
// 1024/56 bit exportable ciphersuites from expired internet draft |
|
505 |
CS_0062("SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA", 0x0062),
|
|
506 |
CS_0063("SSL_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA", 0x0063),
|
|
507 |
CS_0064("SSL_RSA_EXPORT1024_WITH_RC4_56_SHA", 0x0064),
|
|
508 |
CS_0065("SSL_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA", 0x0065),
|
|
509 |
CS_0066("SSL_DHE_DSS_WITH_RC4_128_SHA", 0x0066),
|
|
510 |
||
511 |
// Netscape old and new SSL 3.0 FIPS ciphersuites |
|
512 |
// see http://www.mozilla.org/projects/security/pki/nss/ssl/fips-ssl-ciphersuites.html |
|
513 |
CS_FFE0("NETSCAPE_RSA_FIPS_WITH_3DES_EDE_CBC_SHA", 0xffe0),
|
|
514 |
CS_FFE1("NETSCAPE_RSA_FIPS_WITH_DES_CBC_SHA", 0xffe1),
|
|
515 |
CS_FEFE("SSL_RSA_FIPS_WITH_DES_CBC_SHA", 0xfefe),
|
|
516 |
CS_FEFF("SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA", 0xfeff),
|
|
517 |
||
518 |
// Unsupported Kerberos cipher suites from RFC 2712 |
|
519 |
CS_001E("TLS_KRB5_WITH_DES_CBC_SHA", 0x001E),
|
|
520 |
CS_001F("TLS_KRB5_WITH_3DES_EDE_CBC_SHA", 0x001F),
|
|
521 |
CS_0020("TLS_KRB5_WITH_RC4_128_SHA", 0x0020),
|
|
522 |
CS_0021("TLS_KRB5_WITH_IDEA_CBC_SHA", 0x0021),
|
|
523 |
CS_0022("TLS_KRB5_WITH_DES_CBC_MD5", 0x0022),
|
|
524 |
CS_0023("TLS_KRB5_WITH_3DES_EDE_CBC_MD5", 0x0023),
|
|
525 |
CS_0024("TLS_KRB5_WITH_RC4_128_MD5", 0x0024),
|
|
526 |
CS_0025("TLS_KRB5_WITH_IDEA_CBC_MD5", 0x0025),
|
|
527 |
CS_0026("TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA", 0x0026),
|
|
528 |
CS_0027("TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA", 0x0027),
|
|
529 |
CS_0028("TLS_KRB5_EXPORT_WITH_RC4_40_SHA", 0x0028),
|
|
530 |
CS_0029("TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5", 0x0029),
|
|
531 |
CS_002A("TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5", 0x002a),
|
|
532 |
CS_002B("TLS_KRB5_EXPORT_WITH_RC4_40_MD5", 0x002B),
|
|
533 |
||
534 |
// Unsupported cipher suites from RFC 4162 |
|
535 |
CS_0096("TLS_RSA_WITH_SEED_CBC_SHA", 0x0096),
|
|
536 |
CS_0097("TLS_DH_DSS_WITH_SEED_CBC_SHA", 0x0097),
|
|
537 |
CS_0098("TLS_DH_RSA_WITH_SEED_CBC_SHA", 0x0098),
|
|
538 |
CS_0099("TLS_DHE_DSS_WITH_SEED_CBC_SHA", 0x0099),
|
|
539 |
CS_009A("TLS_DHE_RSA_WITH_SEED_CBC_SHA", 0x009a),
|
|
540 |
CS_009B("TLS_DH_anon_WITH_SEED_CBC_SHA", 0x009b),
|
|
541 |
||
542 |
// Unsupported cipher suites from RFC 4279 |
|
543 |
CS_008A("TLS_PSK_WITH_RC4_128_SHA", 0x008a),
|
|
544 |
CS_008B("TLS_PSK_WITH_3DES_EDE_CBC_SHA", 0x008b),
|
|
545 |
CS_008C("TLS_PSK_WITH_AES_128_CBC_SHA", 0x008c),
|
|
546 |
CS_008D("TLS_PSK_WITH_AES_256_CBC_SHA", 0x008d),
|
|
547 |
CS_008E("TLS_DHE_PSK_WITH_RC4_128_SHA", 0x008e),
|
|
548 |
CS_008F("TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA", 0x008f),
|
|
549 |
CS_0090("TLS_DHE_PSK_WITH_AES_128_CBC_SHA", 0x0090),
|
|
550 |
CS_0091("TLS_DHE_PSK_WITH_AES_256_CBC_SHA", 0x0091),
|
|
551 |
CS_0092("TLS_RSA_PSK_WITH_RC4_128_SHA", 0x0092),
|
|
552 |
CS_0093("TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA", 0x0093),
|
|
553 |
CS_0094("TLS_RSA_PSK_WITH_AES_128_CBC_SHA", 0x0094),
|
|
554 |
CS_0095("TLS_RSA_PSK_WITH_AES_256_CBC_SHA", 0x0095),
|
|
555 |
||
556 |
// Unsupported cipher suites from RFC 4785 |
|
557 |
CS_002C("TLS_PSK_WITH_NULL_SHA", 0x002c),
|
|
558 |
CS_002D("TLS_DHE_PSK_WITH_NULL_SHA", 0x002d),
|
|
559 |
CS_002E("TLS_RSA_PSK_WITH_NULL_SHA", 0x002e),
|
|
560 |
||
561 |
// Unsupported cipher suites from RFC 5246 |
|
562 |
CS_0030("TLS_DH_DSS_WITH_AES_128_CBC_SHA", 0x0030),
|
|
563 |
CS_0031("TLS_DH_RSA_WITH_AES_128_CBC_SHA", 0x0031),
|
|
564 |
CS_0036("TLS_DH_DSS_WITH_AES_256_CBC_SHA", 0x0036),
|
|
565 |
CS_0037("TLS_DH_RSA_WITH_AES_256_CBC_SHA", 0x0037),
|
|
566 |
CS_003E("TLS_DH_DSS_WITH_AES_128_CBC_SHA256", 0x003e),
|
|
567 |
CS_003F("TLS_DH_RSA_WITH_AES_128_CBC_SHA256", 0x003f),
|
|
568 |
CS_0068("TLS_DH_DSS_WITH_AES_256_CBC_SHA256", 0x0068),
|
|
569 |
CS_0069("TLS_DH_RSA_WITH_AES_256_CBC_SHA256", 0x0069),
|
|
570 |
||
571 |
// Unsupported cipher suites from RFC 5288 |
|
572 |
CS_00A0("TLS_DH_RSA_WITH_AES_128_GCM_SHA256", 0x00a0),
|
|
573 |
CS_00A1("TLS_DH_RSA_WITH_AES_256_GCM_SHA384", 0x00a1),
|
|
574 |
CS_00A4("TLS_DH_DSS_WITH_AES_128_GCM_SHA256", 0x00a4),
|
|
575 |
CS_00A5("TLS_DH_DSS_WITH_AES_256_GCM_SHA384", 0x00a5),
|
|
| 2 | 576 |
|
| 50768 | 577 |
// Unsupported cipher suites from RFC 5487 |
578 |
CS_00A8("TLS_PSK_WITH_AES_128_GCM_SHA256", 0x00a8),
|
|
579 |
CS_00A9("TLS_PSK_WITH_AES_256_GCM_SHA384", 0x00a9),
|
|
580 |
CS_00AA("TLS_DHE_PSK_WITH_AES_128_GCM_SHA256", 0x00aa),
|
|
581 |
CS_00AB("TLS_DHE_PSK_WITH_AES_256_GCM_SHA384", 0x00ab),
|
|
582 |
CS_00AC("TLS_RSA_PSK_WITH_AES_128_GCM_SHA256", 0x00ac),
|
|
583 |
CS_00AD("TLS_RSA_PSK_WITH_AES_256_GCM_SHA384", 0x00ad),
|
|
584 |
CS_00AE("TLS_PSK_WITH_AES_128_CBC_SHA256", 0x00ae),
|
|
585 |
CS_00AF("TLS_PSK_WITH_AES_256_CBC_SHA384", 0x00af),
|
|
586 |
CS_00B0("TLS_PSK_WITH_NULL_SHA256", 0x00b0),
|
|
587 |
CS_00B1("TLS_PSK_WITH_NULL_SHA384", 0x00b1),
|
|
588 |
CS_00B2("TLS_DHE_PSK_WITH_AES_128_CBC_SHA256", 0x00b2),
|
|
589 |
CS_00B3("TLS_DHE_PSK_WITH_AES_256_CBC_SHA384", 0x00b3),
|
|
590 |
CS_00B4("TLS_DHE_PSK_WITH_NULL_SHA256", 0x00b4),
|
|
591 |
CS_00B5("TLS_DHE_PSK_WITH_NULL_SHA384", 0x00b5),
|
|
592 |
CS_00B6("TLS_RSA_PSK_WITH_AES_128_CBC_SHA256", 0x00b6),
|
|
593 |
CS_00B7("TLS_RSA_PSK_WITH_AES_256_CBC_SHA384", 0x00b7),
|
|
594 |
CS_00B8("TLS_RSA_PSK_WITH_NULL_SHA256", 0x00b8),
|
|
595 |
CS_00B9("TLS_RSA_PSK_WITH_NULL_SHA384", 0x00b9),
|
|
596 |
||
597 |
// Unsupported cipher suites from RFC 5932 |
|
598 |
CS_0041("TLS_RSA_WITH_CAMELLIA_128_CBC_SHA", 0x0041),
|
|
599 |
CS_0042("TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA", 0x0042),
|
|
600 |
CS_0043("TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA", 0x0043),
|
|
601 |
CS_0044("TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA", 0x0044),
|
|
602 |
CS_0045("TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA", 0x0045),
|
|
603 |
CS_0046("TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA", 0x0046),
|
|
604 |
CS_0084("TLS_RSA_WITH_CAMELLIA_256_CBC_SHA", 0x0084),
|
|
605 |
CS_0085("TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA", 0x0085),
|
|
606 |
CS_0086("TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA", 0x0086),
|
|
607 |
CS_0087("TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA", 0x0087),
|
|
608 |
CS_0088("TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA", 0x0088),
|
|
609 |
CS_0089("TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA", 0x0089),
|
|
610 |
CS_00BA("TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256", 0x00ba),
|
|
611 |
CS_00BB("TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256", 0x00bb),
|
|
612 |
CS_00BC("TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256", 0x00bc),
|
|
613 |
CS_00BD("TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256", 0x00bd),
|
|
614 |
CS_00BE("TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256", 0x00be),
|
|
615 |
CS_00BF("TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256", 0x00bf),
|
|
616 |
CS_00C0("TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256", 0x00c0),
|
|
617 |
CS_00C1("TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256", 0x00c1),
|
|
618 |
CS_00C2("TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256", 0x00c2),
|
|
619 |
CS_00C3("TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256", 0x00c3),
|
|
620 |
CS_00C4("TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256", 0x00c4),
|
|
621 |
CS_00C5("TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256", 0x00c5),
|
|
622 |
||
623 |
// TLS Fallback Signaling Cipher Suite Value (SCSV) RFC 7507 |
|
624 |
CS_5600("TLS_FALLBACK_SCSV", 0x5600),
|
|
625 |
||
626 |
// Unsupported cipher suites from RFC 5054 |
|
627 |
CS_C01A("TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA", 0xc01a),
|
|
628 |
CS_C01B("TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA", 0xc01b),
|
|
629 |
CS_C01C("TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA", 0xc01c),
|
|
630 |
CS_C01D("TLS_SRP_SHA_WITH_AES_128_CBC_SHA", 0xc01d),
|
|
631 |
CS_C01E("TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA", 0xc01e),
|
|
632 |
CS_C01F("TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA", 0xc01f),
|
|
633 |
CS_C020("TLS_SRP_SHA_WITH_AES_256_CBC_SHA", 0xc020),
|
|
634 |
CS_C021("TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA", 0xc021),
|
|
635 |
CS_C022("TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA", 0xc022),
|
|
636 |
||
637 |
// Unsupported cipher suites from RFC 5489 |
|
638 |
CS_C033("TLS_ECDHE_PSK_WITH_RC4_128_SHA", 0xc033),
|
|
639 |
CS_C034("TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA", 0xc034),
|
|
640 |
CS_C035("TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA", 0xc035),
|
|
641 |
CS_C036("TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA", 0xc036),
|
|
642 |
CS_C037("TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256", 0xc037),
|
|
643 |
CS_C038("TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384", 0xc038),
|
|
644 |
CS_C039("TLS_ECDHE_PSK_WITH_NULL_SHA", 0xc039),
|
|
645 |
CS_C03A("TLS_ECDHE_PSK_WITH_NULL_SHA256", 0xc03a),
|
|
646 |
CS_C03B("TLS_ECDHE_PSK_WITH_NULL_SHA384", 0xc03b),
|
|
| 2 | 647 |
|
| 50768 | 648 |
// Unsupported cipher suites from RFC 6209 |
649 |
CS_C03C("TLS_RSA_WITH_ARIA_128_CBC_SHA256", 0xc03c),
|
|
650 |
CS_C03D("TLS_RSA_WITH_ARIA_256_CBC_SHA384", 0xc03d),
|
|
651 |
CS_C03E("TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256", 0xc03e),
|
|
652 |
CS_C03F("TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384", 0xc03f),
|
|
653 |
CS_C040("TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256", 0xc040),
|
|
654 |
CS_C041("TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384", 0xc041),
|
|
655 |
CS_C042("TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256", 0xc042),
|
|
656 |
CS_C043("TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384", 0xc043),
|
|
657 |
CS_C044("TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256", 0xc044),
|
|
658 |
CS_C045("TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384", 0xc045),
|
|
659 |
CS_C046("TLS_DH_anon_WITH_ARIA_128_CBC_SHA256", 0xc046),
|
|
660 |
CS_C047("TLS_DH_anon_WITH_ARIA_256_CBC_SHA384", 0xc047),
|
|
661 |
CS_C048("TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256", 0xc048),
|
|
662 |
CS_C049("TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384", 0xc049),
|
|
663 |
CS_C04A("TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256", 0xc04a),
|
|
664 |
CS_C04B("TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384", 0xc04b),
|
|
665 |
CS_C04C("TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256", 0xc04c),
|
|
666 |
CS_C04D("TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384", 0xc04d),
|
|
667 |
CS_C04E("TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256", 0xc04e),
|
|
668 |
CS_C04F("TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384", 0xc04f),
|
|
669 |
CS_C050("TLS_RSA_WITH_ARIA_128_GCM_SHA256", 0xc050),
|
|
670 |
CS_C051("TLS_RSA_WITH_ARIA_256_GCM_SHA384", 0xc051),
|
|
671 |
CS_C052("TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256", 0xc052),
|
|
672 |
CS_C053("TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384", 0xc053),
|
|
673 |
CS_C054("TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256", 0xc054),
|
|
674 |
CS_C055("TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384", 0xc055),
|
|
675 |
CS_C056("TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256", 0xc056),
|
|
676 |
CS_C057("TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384", 0xc057),
|
|
677 |
CS_C058("TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256", 0xc058),
|
|
678 |
CS_C059("TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384", 0xc059),
|
|
679 |
CS_C05A("TLS_DH_anon_WITH_ARIA_128_GCM_SHA256", 0xc05a),
|
|
680 |
CS_C05B("TLS_DH_anon_WITH_ARIA_256_GCM_SHA384", 0xc05b),
|
|
681 |
CS_C05C("TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256", 0xc05c),
|
|
682 |
CS_C05D("TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384", 0xc05d),
|
|
683 |
CS_C05E("TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256", 0xc05e),
|
|
684 |
CS_C05F("TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384", 0xc05f),
|
|
685 |
CS_C060("TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256", 0xc060),
|
|
686 |
CS_C061("TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384", 0xc061),
|
|
687 |
CS_C062("TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256", 0xc062),
|
|
688 |
CS_C063("TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384", 0xc063),
|
|
689 |
CS_C064("TLS_PSK_WITH_ARIA_128_CBC_SHA256", 0xc064),
|
|
690 |
CS_C065("TLS_PSK_WITH_ARIA_256_CBC_SHA384", 0xc065),
|
|
691 |
CS_C066("TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256", 0xc066),
|
|
692 |
CS_C067("TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384", 0xc067),
|
|
693 |
CS_C068("TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256", 0xc068),
|
|
694 |
CS_C069("TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384", 0xc069),
|
|
695 |
CS_C06A("TLS_PSK_WITH_ARIA_128_GCM_SHA256", 0xc06a),
|
|
696 |
CS_C06B("TLS_PSK_WITH_ARIA_256_GCM_SHA384", 0xc06b),
|
|
697 |
CS_C06C("TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256", 0xc06c),
|
|
698 |
CS_C06D("TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384", 0xc06d),
|
|
699 |
CS_C06E("TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256", 0xc06e),
|
|
700 |
CS_C06F("TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384", 0xc06f),
|
|
701 |
CS_C070("TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256", 0xc070),
|
|
702 |
CS_C071("TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384", 0xc071),
|
|
| 2 | 703 |
|
| 50768 | 704 |
// Unsupported cipher suites from RFC 6367 |
705 |
CS_C072("TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256", 0xc072),
|
|
706 |
CS_C073("TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384", 0xc073),
|
|
707 |
CS_C074("TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256", 0xc074),
|
|
708 |
CS_C075("TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384", 0xc075),
|
|
709 |
CS_C076("TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256", 0xc076),
|
|
710 |
CS_C077("TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384", 0xc077),
|
|
711 |
CS_C078("TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256", 0xc078),
|
|
712 |
CS_C079("TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384", 0xc079),
|
|
713 |
CS_C07A("TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256", 0xc07a),
|
|
714 |
CS_C07B("TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384", 0xc07b),
|
|
715 |
CS_C07C("TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256", 0xc07c),
|
|
716 |
CS_C07D("TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384", 0xc07d),
|
|
717 |
CS_C07E("TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256", 0xc07e),
|
|
718 |
CS_C07F("TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384", 0xc07f),
|
|
719 |
CS_C080("TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256", 0xc080),
|
|
720 |
CS_C081("TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384", 0xc081),
|
|
721 |
CS_C082("TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256", 0xc082),
|
|
722 |
CS_C083("TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384", 0xc083),
|
|
723 |
CS_C084("TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256", 0xc084),
|
|
724 |
CS_C085("TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384", 0xc085),
|
|
725 |
CS_C086("TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256", 0xc086),
|
|
726 |
CS_C087("TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384", 0xc087),
|
|
727 |
CS_C088("TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256", 0xc088),
|
|
728 |
CS_C089("TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384", 0xc089),
|
|
729 |
CS_C08A("TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256", 0xc08a),
|
|
730 |
CS_C08B("TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384", 0xc08b),
|
|
731 |
CS_C08C("TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256", 0xc08c),
|
|
732 |
CS_C08D("TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384", 0xc08d),
|
|
733 |
CS_C08E("TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256", 0xc08e),
|
|
734 |
CS_C08F("TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384", 0xc08f),
|
|
735 |
CS_C090("TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256", 0xc090),
|
|
736 |
CS_C091("TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384", 0xc091),
|
|
737 |
CS_C092("TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256", 0xc092),
|
|
738 |
CS_C093("TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384", 0xc093),
|
|
739 |
CS_C094("TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256", 0xc094),
|
|
740 |
CS_C095("TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384", 0xc095),
|
|
741 |
CS_C096("TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256", 0xc096),
|
|
742 |
CS_C097("TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384", 0xc097),
|
|
743 |
CS_C098("TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256", 0xc098),
|
|
744 |
CS_C099("TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384", 0xc099),
|
|
745 |
CS_C09A("TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256", 0xc09a),
|
|
746 |
CS_C09B("TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384", 0xc09b),
|
|
747 |
||
748 |
// Unsupported cipher suites from RFC 6655 |
|
749 |
CS_C09C("TLS_RSA_WITH_AES_128_CCM", 0xc09c),
|
|
750 |
CS_C09D("TLS_RSA_WITH_AES_256_CCM", 0xc09d),
|
|
751 |
CS_C09E("TLS_DHE_RSA_WITH_AES_128_CCM", 0xc09e),
|
|
752 |
CS_C09F("TLS_DHE_RSA_WITH_AES_256_CCM", 0xc09f),
|
|
753 |
CS_C0A0("TLS_RSA_WITH_AES_128_CCM_8", 0xc0A0),
|
|
754 |
CS_C0A1("TLS_RSA_WITH_AES_256_CCM_8", 0xc0A1),
|
|
755 |
CS_C0A2("TLS_DHE_RSA_WITH_AES_128_CCM_8", 0xc0A2),
|
|
756 |
CS_C0A3("TLS_DHE_RSA_WITH_AES_256_CCM_8", 0xc0A3),
|
|
757 |
CS_C0A4("TLS_PSK_WITH_AES_128_CCM", 0xc0A4),
|
|
758 |
CS_C0A5("TLS_PSK_WITH_AES_256_CCM", 0xc0A5),
|
|
759 |
CS_C0A6("TLS_DHE_PSK_WITH_AES_128_CCM", 0xc0A6),
|
|
760 |
CS_C0A7("TLS_DHE_PSK_WITH_AES_256_CCM", 0xc0A7),
|
|
761 |
CS_C0A8("TLS_PSK_WITH_AES_128_CCM_8", 0xc0A8),
|
|
762 |
CS_C0A9("TLS_PSK_WITH_AES_256_CCM_8", 0xc0A9),
|
|
763 |
CS_C0AA("TLS_PSK_DHE_WITH_AES_128_CCM_8", 0xc0Aa),
|
|
764 |
CS_C0AB("TLS_PSK_DHE_WITH_AES_256_CCM_8", 0xc0Ab),
|
|
765 |
||
766 |
// Unsupported cipher suites from RFC 7251 |
|
767 |
CS_C0AC("TLS_ECDHE_ECDSA_WITH_AES_128_CCM", 0xc0Ac),
|
|
768 |
CS_C0AD("TLS_ECDHE_ECDSA_WITH_AES_256_CCM", 0xc0Ad),
|
|
769 |
CS_C0AE("TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8", 0xc0Ae),
|
|
770 |
CS_C0AF("TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8", 0xc0Af),
|
|
771 |
||
772 |
C_NULL("SSL_NULL_WITH_NULL_NULL", 0x0000);
|
|
773 |
||
| 2 | 774 |
final int id; |
| 50768 | 775 |
final boolean isDefaultEnabled; |
776 |
final String name; |
|
777 |
final List<String> aliases; |
|
778 |
final List<ProtocolVersion> supportedProtocols; |
|
779 |
final KeyExchange keyExchange; |
|
780 |
final SSLCipher bulkCipher; |
|
781 |
final MacAlg macAlg; |
|
782 |
final HashAlg hashAlg; |
|
| 2 | 783 |
|
784 |
final boolean exportable; |
|
785 |
||
| 50768 | 786 |
// known but unsupported cipher suite |
787 |
private CipherSuite(String name, int id) {
|
|
788 |
this(id, false, name, "", |
|
789 |
ProtocolVersion.PROTOCOLS_EMPTY, null, null, null, null); |
|
790 |
} |
|
791 |
||
792 |
// TLS 1.3 cipher suite |
|
793 |
private CipherSuite(int id, boolean isDefaultEnabled, |
|
794 |
String name, ProtocolVersion[] supportedProtocols, |
|
795 |
SSLCipher bulkCipher, HashAlg hashAlg) {
|
|
796 |
this(id, isDefaultEnabled, name, "", |
|
797 |
supportedProtocols, null, bulkCipher, M_NULL, hashAlg); |
|
798 |
} |
|
| 2 | 799 |
|
| 50768 | 800 |
private CipherSuite(int id, boolean isDefaultEnabled, |
801 |
String name, String aliases, |
|
802 |
ProtocolVersion[] supportedProtocols, |
|
803 |
KeyExchange keyExchange, SSLCipher cipher, |
|
804 |
MacAlg macAlg, HashAlg hashAlg) {
|
|
805 |
this.id = id; |
|
806 |
this.isDefaultEnabled = isDefaultEnabled; |
|
807 |
this.name = name; |
|
808 |
if (aliases.isEmpty()) {
|
|
809 |
this.aliases = Arrays.asList(aliases.split(","));
|
|
810 |
} else {
|
|
811 |
this.aliases = Collections.emptyList(); |
|
812 |
} |
|
813 |
this.supportedProtocols = Arrays.asList(supportedProtocols); |
|
814 |
this.keyExchange = keyExchange; |
|
815 |
this.bulkCipher = cipher; |
|
816 |
this.macAlg = macAlg; |
|
817 |
this.hashAlg = hashAlg; |
|
| 7039 | 818 |
|
| 50768 | 819 |
this.exportable = (cipher == null ? false : cipher.exportable); |
820 |
} |
|
821 |
||
822 |
static CipherSuite nameOf(String ciperSuiteName) {
|
|
823 |
for (CipherSuite cs : CipherSuite.values()) {
|
|
824 |
if (cs.name.equals(ciperSuiteName) || |
|
825 |
cs.aliases.contains(ciperSuiteName)) {
|
|
826 |
return cs; |
|
827 |
} |
|
828 |
} |
|
829 |
||
830 |
return null; |
|
831 |
} |
|
| 7043 | 832 |
|
| 50768 | 833 |
static CipherSuite valueOf(int id) {
|
834 |
for (CipherSuite cs : CipherSuite.values()) {
|
|
835 |
if (cs.id == id) {
|
|
836 |
return cs; |
|
837 |
} |
|
838 |
} |
|
839 |
||
840 |
return null; |
|
841 |
} |
|
842 |
||
843 |
static String nameOf(int id) {
|
|
844 |
for (CipherSuite cs : CipherSuite.values()) {
|
|
845 |
if (cs.id == id) {
|
|
846 |
return cs.name; |
|
847 |
} |
|
848 |
} |
|
849 |
||
850 |
return "UNKNOWN-CIPHER-SUITE(" + Utilities.byte16HexString(id) + ")";
|
|
851 |
} |
|
852 |
||
853 |
static Collection<CipherSuite> allowedCipherSuites() {
|
|
854 |
Collection<CipherSuite> cipherSuites = new LinkedList<>(); |
|
855 |
for (CipherSuite cs : CipherSuite.values()) {
|
|
856 |
if (!cs.supportedProtocols.isEmpty()) {
|
|
857 |
cipherSuites.add(cs); |
|
858 |
} else {
|
|
859 |
// values() is ordered, remaining cipher suites are |
|
860 |
// not supported. |
|
861 |
break; |
|
862 |
} |
|
863 |
} |
|
864 |
return cipherSuites; |
|
865 |
} |
|
866 |
||
867 |
static Collection<CipherSuite> defaultCipherSuites() {
|
|
868 |
Collection<CipherSuite> cipherSuites = new LinkedList<>(); |
|
869 |
for (CipherSuite cs : CipherSuite.values()) {
|
|
870 |
if (cs.isDefaultEnabled) {
|
|
871 |
cipherSuites.add(cs); |
|
872 |
} else {
|
|
873 |
// values() is ordered, remaining cipher suites are |
|
874 |
// not enabled. |
|
875 |
break; |
|
876 |
} |
|
877 |
} |
|
878 |
return cipherSuites; |
|
| 2 | 879 |
} |
880 |
||
| 7043 | 881 |
/** |
| 50768 | 882 |
* Validates and converts an array of cipher suite names. |
883 |
* |
|
884 |
* @throws IllegalArgumentException when one or more of the ciphers named |
|
885 |
* by the parameter is not supported, or when the parameter is null. |
|
| 7043 | 886 |
*/ |
| 50768 | 887 |
static List<CipherSuite> validValuesOf(String[] names) {
|
888 |
if (names == null) {
|
|
889 |
throw new IllegalArgumentException("CipherSuites cannot be null");
|
|
890 |
} |
|
891 |
||
892 |
List<CipherSuite> cipherSuites = new ArrayList<>(names.length); |
|
893 |
for (String name : names) {
|
|
|
51115
6659a00bc2ea
8207237: SSLSocket#setEnabledCipherSuites is accepting empty string
jnimeh
parents:
50768
diff
changeset
|
894 |
if (name == null || name.isEmpty()) {
|
| 50768 | 895 |
throw new IllegalArgumentException( |
|
51115
6659a00bc2ea
8207237: SSLSocket#setEnabledCipherSuites is accepting empty string
jnimeh
parents:
50768
diff
changeset
|
896 |
"The specified CipherSuites array contains " + |
|
6659a00bc2ea
8207237: SSLSocket#setEnabledCipherSuites is accepting empty string
jnimeh
parents:
50768
diff
changeset
|
897 |
"invalid null or empty string elements"); |
| 50768 | 898 |
} |
| 2 | 899 |
|
| 50768 | 900 |
boolean found = false; |
901 |
for (CipherSuite cs : CipherSuite.values()) {
|
|
902 |
if (!cs.supportedProtocols.isEmpty()) {
|
|
903 |
if (cs.name.equals(name) || |
|
904 |
cs.aliases.contains(name)) {
|
|
905 |
cipherSuites.add(cs); |
|
906 |
found = true; |
|
907 |
break; |
|
908 |
} |
|
909 |
} else {
|
|
910 |
// values() is ordered, remaining cipher suites are |
|
911 |
// not supported. |
|
912 |
break; |
|
913 |
} |
|
914 |
} |
|
915 |
if (!found) {
|
|
916 |
throw new IllegalArgumentException( |
|
917 |
"Unsupported CipherSuite: " + name); |
|
918 |
} |
|
919 |
} |
|
920 |
||
921 |
return Collections.unmodifiableList(cipherSuites); |
|
| 2 | 922 |
} |
923 |
||
| 50768 | 924 |
static String[] namesOf(List<CipherSuite> cipherSuites) {
|
925 |
String[] names = new String[cipherSuites.size()]; |
|
926 |
int i = 0; |
|
927 |
for (CipherSuite cipherSuite : cipherSuites) {
|
|
928 |
names[i++] = cipherSuite.name; |
|
929 |
} |
|
930 |
||
931 |
return names; |
|
932 |
} |
|
933 |
||
| 2 | 934 |
boolean isAvailable() {
|
| 50768 | 935 |
// Note: keyExchange is null for TLS 1.3 CipherSuites. |
936 |
return !supportedProtocols.isEmpty() && |
|
937 |
(keyExchange == null || keyExchange.isAvailable()) && |
|
938 |
bulkCipher != null && bulkCipher.isAvailable(); |
|
939 |
} |
|
940 |
||
941 |
public boolean supports(ProtocolVersion protocolVersion) {
|
|
942 |
return supportedProtocols.contains(protocolVersion); |
|
| 2 | 943 |
} |
944 |
||
| 6856 | 945 |
boolean isNegotiable() {
|
| 50768 | 946 |
return this != TLS_EMPTY_RENEGOTIATION_INFO_SCSV && isAvailable(); |
| 6856 | 947 |
} |
948 |
||
| 50768 | 949 |
boolean isAnonymous() {
|
950 |
return (keyExchange != null && keyExchange.isAnonymous); |
|
951 |
} |
|
952 |
||
953 |
// See also SSLWriteCipher.calculatePacketSize(). |
|
| 30904 | 954 |
int calculatePacketSize(int fragmentSize, |
955 |
ProtocolVersion protocolVersion, boolean isDTLS) {
|
|
956 |
int packetSize = fragmentSize; |
|
| 50768 | 957 |
if (bulkCipher != null && bulkCipher != B_NULL) {
|
958 |
int blockSize = bulkCipher.ivSize; |
|
959 |
switch (bulkCipher.cipherType) {
|
|
| 30904 | 960 |
case BLOCK_CIPHER: |
961 |
packetSize += macAlg.size; |
|
962 |
packetSize += 1; // 1 byte padding length field |
|
963 |
packetSize += // use the minimal padding |
|
964 |
(blockSize - (packetSize % blockSize)) % blockSize; |
|
965 |
if (protocolVersion.useTLS11PlusSpec()) {
|
|
966 |
packetSize += blockSize; // explicit IV |
|
967 |
} |
|
968 |
||
969 |
break; |
|
| 50768 | 970 |
case AEAD_CIPHER: |
971 |
if (protocolVersion == ProtocolVersion.TLS12 || |
|
972 |
protocolVersion == ProtocolVersion.DTLS12) {
|
|
973 |
packetSize += |
|
974 |
bulkCipher.ivSize - bulkCipher.fixedIvSize; |
|
975 |
} |
|
976 |
packetSize += bulkCipher.tagSize; |
|
| 30904 | 977 |
|
| 50768 | 978 |
break; |
979 |
default: // NULL_CIPHER or STREAM_CIPHER |
|
980 |
packetSize += macAlg.size; |
|
| 30904 | 981 |
} |
982 |
} |
|
983 |
||
984 |
return packetSize + |
|
985 |
(isDTLS ? DTLSRecord.headerSize : SSLRecord.headerSize); |
|
986 |
} |
|
987 |
||
988 |
// See also CipherBox.calculateFragmentSize(). |
|
989 |
int calculateFragSize(int packetLimit, |
|
990 |
ProtocolVersion protocolVersion, boolean isDTLS) {
|
|
991 |
int fragSize = packetLimit - |
|
992 |
(isDTLS ? DTLSRecord.headerSize : SSLRecord.headerSize); |
|
| 50768 | 993 |
if (bulkCipher != null && bulkCipher != B_NULL) {
|
994 |
int blockSize = bulkCipher.ivSize; |
|
995 |
switch (bulkCipher.cipherType) {
|
|
996 |
case BLOCK_CIPHER: |
|
997 |
if (protocolVersion.useTLS11PlusSpec()) {
|
|
998 |
fragSize -= blockSize; // explicit IV |
|
999 |
} |
|
1000 |
fragSize -= (fragSize % blockSize); // cannot hold a block |
|
1001 |
// No padding for a maximum fragment. |
|
1002 |
fragSize -= 1; // 1 byte padding length field: 0x00 |
|
1003 |
fragSize -= macAlg.size; |
|
| 30904 | 1004 |
|
| 50768 | 1005 |
break; |
1006 |
case AEAD_CIPHER: |
|
1007 |
fragSize -= bulkCipher.tagSize; |
|
1008 |
fragSize -= bulkCipher.ivSize - bulkCipher.fixedIvSize; |
|
| 30904 | 1009 |
|
| 50768 | 1010 |
break; |
1011 |
default: // NULL_CIPHER or STREAM_CIPHER |
|
1012 |
fragSize -= macAlg.size; |
|
| 30904 | 1013 |
} |
1014 |
} |
|
1015 |
||
1016 |
return fragSize; |
|
1017 |
} |
|
1018 |
||
| 2 | 1019 |
/** |
1020 |
* An SSL/TLS key exchange algorithm. |
|
1021 |
*/ |
|
1022 |
static enum KeyExchange {
|
|
| 50768 | 1023 |
K_NULL ("NULL", false, true, NAMED_GROUP_NONE),
|
1024 |
K_RSA ("RSA", true, false, NAMED_GROUP_NONE),
|
|
1025 |
K_RSA_EXPORT ("RSA_EXPORT", true, false, NAMED_GROUP_NONE),
|
|
1026 |
K_DH_RSA ("DH_RSA", false, false, NAMED_GROUP_NONE),
|
|
1027 |
K_DH_DSS ("DH_DSS", false, false, NAMED_GROUP_NONE),
|
|
1028 |
K_DHE_DSS ("DHE_DSS", true, false, NAMED_GROUP_FFDHE),
|
|
1029 |
K_DHE_DSS_EXPORT("DHE_DSS_EXPORT", true, false, NAMED_GROUP_NONE),
|
|
1030 |
K_DHE_RSA ("DHE_RSA", true, false, NAMED_GROUP_FFDHE),
|
|
1031 |
K_DHE_RSA_EXPORT("DHE_RSA_EXPORT", true, false, NAMED_GROUP_NONE),
|
|
1032 |
K_DH_ANON ("DH_anon", true, true, NAMED_GROUP_FFDHE),
|
|
1033 |
K_DH_ANON_EXPORT("DH_anon_EXPORT", true, true, NAMED_GROUP_NONE),
|
|
| 2 | 1034 |
|
| 50768 | 1035 |
K_ECDH_ECDSA ("ECDH_ECDSA", true, false, NAMED_GROUP_ECDHE),
|
1036 |
K_ECDH_RSA ("ECDH_RSA", true, false, NAMED_GROUP_ECDHE),
|
|
1037 |
K_ECDHE_ECDSA ("ECDHE_ECDSA", true, false, NAMED_GROUP_ECDHE),
|
|
1038 |
K_ECDHE_RSA ("ECDHE_RSA", true, false, NAMED_GROUP_ECDHE),
|
|
1039 |
K_ECDH_ANON ("ECDH_anon", true, true, NAMED_GROUP_ECDHE),
|
|
| 6856 | 1040 |
|
1041 |
// renegotiation protection request signaling cipher suite |
|
| 50768 | 1042 |
K_SCSV ("SCSV", true, true, NAMED_GROUP_NONE);
|
| 2 | 1043 |
|
1044 |
// name of the key exchange algorithm, e.g. DHE_DSS |
|
1045 |
final String name; |
|
1046 |
final boolean allowed; |
|
|
45064
b1b45177051b
8140436: Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS
xuelei
parents:
39563
diff
changeset
|
1047 |
final NamedGroupType groupType; |
| 2 | 1048 |
private final boolean alwaysAvailable; |
| 50768 | 1049 |
private final boolean isAnonymous; |
| 2 | 1050 |
|
| 50768 | 1051 |
KeyExchange(String name, boolean allowed, |
1052 |
boolean isAnonymous, NamedGroupType groupType) {
|
|
| 2 | 1053 |
this.name = name; |
| 50768 | 1054 |
if (groupType == NAMED_GROUP_ECDHE) {
|
1055 |
this.allowed = JsseJce.ALLOW_ECC; |
|
1056 |
} else {
|
|
1057 |
this.allowed = allowed; |
|
1058 |
} |
|
|
45064
b1b45177051b
8140436: Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS
xuelei
parents:
39563
diff
changeset
|
1059 |
this.groupType = groupType; |
| 50768 | 1060 |
this.alwaysAvailable = allowed && (!name.startsWith("EC"));
|
1061 |
this.isAnonymous = isAnonymous; |
|
| 2 | 1062 |
} |
1063 |
||
1064 |
boolean isAvailable() {
|
|
1065 |
if (alwaysAvailable) {
|
|
1066 |
return true; |
|
1067 |
} |
|
|
3957
c8fdb8fad795
6885204: JSSE should not require Kerberos to be present
vinnie
parents:
715
diff
changeset
|
1068 |
|
|
45064
b1b45177051b
8140436: Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS
xuelei
parents:
39563
diff
changeset
|
1069 |
if (groupType == NAMED_GROUP_ECDHE) {
|
|
3957
c8fdb8fad795
6885204: JSSE should not require Kerberos to be present
vinnie
parents:
715
diff
changeset
|
1070 |
return (allowed && JsseJce.isEcAvailable()); |
|
c8fdb8fad795
6885204: JSSE should not require Kerberos to be present
vinnie
parents:
715
diff
changeset
|
1071 |
} else {
|
|
c8fdb8fad795
6885204: JSSE should not require Kerberos to be present
vinnie
parents:
715
diff
changeset
|
1072 |
return allowed; |
|
c8fdb8fad795
6885204: JSSE should not require Kerberos to be present
vinnie
parents:
715
diff
changeset
|
1073 |
} |
| 2 | 1074 |
} |
1075 |
||
|
14664
e71aa0962e70
8003950: Adds missing Override annotations and removes unnecessary imports in sun.security.ssl
xuelei
parents:
11904
diff
changeset
|
1076 |
@Override |
| 2 | 1077 |
public String toString() {
|
1078 |
return name; |
|
1079 |
} |
|
1080 |
} |
|
1081 |
||
1082 |
/** |
|
1083 |
* An SSL/TLS key MAC algorithm. |
|
1084 |
* |
|
| 7043 | 1085 |
* Also contains a factory method to obtain an initialized MAC |
| 2 | 1086 |
* for this algorithm. |
1087 |
*/ |
|
| 29488 | 1088 |
static enum MacAlg {
|
1089 |
M_NULL ("NULL", 0, 0, 0),
|
|
1090 |
M_MD5 ("MD5", 16, 64, 9),
|
|
1091 |
M_SHA ("SHA", 20, 64, 9),
|
|
1092 |
M_SHA256 ("SHA256", 32, 64, 9),
|
|
1093 |
M_SHA384 ("SHA384", 48, 128, 17);
|
|
| 2 | 1094 |
|
1095 |
// descriptive name, e.g. MD5 |
|
1096 |
final String name; |
|
1097 |
||
1098 |
// size of the MAC value (and MAC key) in bytes |
|
1099 |
final int size; |
|
1100 |
||
| 16113 | 1101 |
// block size of the underlying hash algorithm |
1102 |
final int hashBlockSize; |
|
1103 |
||
1104 |
// minimal padding size of the underlying hash algorithm |
|
1105 |
final int minimalPaddingSize; |
|
1106 |
||
1107 |
MacAlg(String name, int size, |
|
1108 |
int hashBlockSize, int minimalPaddingSize) {
|
|
| 2 | 1109 |
this.name = name; |
1110 |
this.size = size; |
|
| 16113 | 1111 |
this.hashBlockSize = hashBlockSize; |
1112 |
this.minimalPaddingSize = minimalPaddingSize; |
|
| 2 | 1113 |
} |
1114 |
||
|
14664
e71aa0962e70
8003950: Adds missing Override annotations and removes unnecessary imports in sun.security.ssl
xuelei
parents:
11904
diff
changeset
|
1115 |
@Override |
| 2 | 1116 |
public String toString() {
|
1117 |
return name; |
|
1118 |
} |
|
1119 |
} |
|
1120 |
||
| 7807 | 1121 |
/** |
| 50768 | 1122 |
* The hash algorithms used for PRF (PseudoRandom Function) or HKDF. |
| 7807 | 1123 |
* |
| 50768 | 1124 |
* Note that TLS 1.1- uses a single MD5/SHA1-based PRF algorithm for |
1125 |
* generating the necessary material. |
|
| 7807 | 1126 |
*/ |
| 50768 | 1127 |
static enum HashAlg {
|
1128 |
H_NONE ("NONE", 0, 0),
|
|
1129 |
H_SHA256 ("SHA-256", 32, 64),
|
|
1130 |
H_SHA384 ("SHA-384", 48, 128);
|
|
| 7043 | 1131 |
|
| 50768 | 1132 |
final String name; |
1133 |
final int hashLength; |
|
1134 |
final int blockSize; |
|
| 7043 | 1135 |
|
| 50768 | 1136 |
HashAlg(String hashAlg, int hashLength, int blockSize) {
|
1137 |
this.name = hashAlg; |
|
1138 |
this.hashLength = hashLength; |
|
1139 |
this.blockSize = blockSize; |
|
| 7043 | 1140 |
} |
1141 |
||
| 50768 | 1142 |
@Override |
1143 |
public String toString() {
|
|
1144 |
return name; |
|
| 7043 | 1145 |
} |
1146 |
} |
|
| 2 | 1147 |
} |