j3d1/bearssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added ChaCha20+Poly1305 support (stand-alone, cipher suites).

Browse source
This commit is contained in:
Thomas Pornin 2016-12-13 20:01:19 +01:00
parent 9e71c0673a
commit b42bd5972f
26 changed files with 1952 additions and 523 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/ssl/ssl_hs_server.t0
View file

@ -585,7 +585,7 @@ cc: save-session ( -- ) {
check-resume { resume }
\ Cipher suites. We read all cipher suites from client, each time
\ matching against our own list. We accumulare suites in the
\ matching against our own list. We accumulate suites in the
\ client_suites[] context buffer: we keep suites that are
\ supported by both the client and the server (so the list size
\ cannot exceed that of the server list), and we keep them in
@ -772,7 +772,7 @@ cc: save-session ( -- ) {
\ In 'can-ecdhe', bit 12 is set if ECDHE_RSA is possible, bit 13 is
\ set if ECDHE_ECDSA is possible.
dup 0xFF and 0<> neg
swap 8 >> 0<> 2 and or { can-ecdhe }
swap 8 >> 0<> 2 and or 12 << { can-ecdhe }
\ Filter supported curves. If there is no common curve between
\ client and us, then ECDHE suites cannot be used. Note that we