mirror of
https://github.com/openssl/openssl.git
synced 2026-06-06 20:18:09 +00:00
Joachim Vandersmissen
e23b33a995
Update tls1_shared_group to allow filtering for FFDHE and/or ECDHE groups. This will be used for implementing RFC 7919 groups support in the TLS 1.2 server. As defined in RFC 7919: Codepoints in the "Supported Groups Registry" with a high byte of 0x01 (that is, between 256 and 511, inclusive) are set aside for FFDHE groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> MergeDate: Thu Feb 5 09:09:38 2026 (Merged from https://github.com/openssl/openssl/pull/24551)
86 lines
3.2 KiB
C
86 lines
3.2 KiB
C
/*
|
|
* Copyright 2017-2025 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
#ifndef OSSL_INTERNAL_TLSGROUPS_H
|
|
#define OSSL_INTERNAL_TLSGROUPS_H
|
|
#pragma once
|
|
|
|
#define OSSL_TLS_GROUP_ID_sect163k1 0x0001
|
|
#define OSSL_TLS_GROUP_ID_sect163r1 0x0002
|
|
#define OSSL_TLS_GROUP_ID_sect163r2 0x0003
|
|
#define OSSL_TLS_GROUP_ID_sect193r1 0x0004
|
|
#define OSSL_TLS_GROUP_ID_sect193r2 0x0005
|
|
#define OSSL_TLS_GROUP_ID_sect233k1 0x0006
|
|
#define OSSL_TLS_GROUP_ID_sect233r1 0x0007
|
|
#define OSSL_TLS_GROUP_ID_sect239k1 0x0008
|
|
#define OSSL_TLS_GROUP_ID_sect283k1 0x0009
|
|
#define OSSL_TLS_GROUP_ID_sect283r1 0x000A
|
|
#define OSSL_TLS_GROUP_ID_sect409k1 0x000B
|
|
#define OSSL_TLS_GROUP_ID_sect409r1 0x000C
|
|
#define OSSL_TLS_GROUP_ID_sect571k1 0x000D
|
|
#define OSSL_TLS_GROUP_ID_sect571r1 0x000E
|
|
#define OSSL_TLS_GROUP_ID_secp160k1 0x000F
|
|
#define OSSL_TLS_GROUP_ID_secp160r1 0x0010
|
|
#define OSSL_TLS_GROUP_ID_secp160r2 0x0011
|
|
#define OSSL_TLS_GROUP_ID_secp192k1 0x0012
|
|
#define OSSL_TLS_GROUP_ID_secp192r1 0x0013
|
|
#define OSSL_TLS_GROUP_ID_secp224k1 0x0014
|
|
#define OSSL_TLS_GROUP_ID_secp224r1 0x0015
|
|
#define OSSL_TLS_GROUP_ID_secp256k1 0x0016
|
|
#define OSSL_TLS_GROUP_ID_secp256r1 0x0017
|
|
#define OSSL_TLS_GROUP_ID_secp384r1 0x0018
|
|
#define OSSL_TLS_GROUP_ID_secp521r1 0x0019
|
|
#define OSSL_TLS_GROUP_ID_brainpoolP256r1 0x001A
|
|
#define OSSL_TLS_GROUP_ID_brainpoolP384r1 0x001B
|
|
#define OSSL_TLS_GROUP_ID_brainpoolP512r1 0x001C
|
|
#define OSSL_TLS_GROUP_ID_x25519 0x001D
|
|
#define OSSL_TLS_GROUP_ID_x448 0x001E
|
|
#define OSSL_TLS_GROUP_ID_brainpoolP256r1_tls13 0x001F
|
|
#define OSSL_TLS_GROUP_ID_brainpoolP384r1_tls13 0x0020
|
|
#define OSSL_TLS_GROUP_ID_brainpoolP512r1_tls13 0x0021
|
|
#define OSSL_TLS_GROUP_ID_gc256A 0x0022
|
|
#define OSSL_TLS_GROUP_ID_gc256B 0x0023
|
|
#define OSSL_TLS_GROUP_ID_gc256C 0x0024
|
|
#define OSSL_TLS_GROUP_ID_gc256D 0x0025
|
|
#define OSSL_TLS_GROUP_ID_gc512A 0x0026
|
|
#define OSSL_TLS_GROUP_ID_gc512B 0x0027
|
|
#define OSSL_TLS_GROUP_ID_gc512C 0x0028
|
|
#define OSSL_TLS_GROUP_ID_ffdhe2048 0x0100
|
|
#define OSSL_TLS_GROUP_ID_ffdhe3072 0x0101
|
|
#define OSSL_TLS_GROUP_ID_ffdhe4096 0x0102
|
|
#define OSSL_TLS_GROUP_ID_ffdhe6144 0x0103
|
|
#define OSSL_TLS_GROUP_ID_ffdhe8192 0x0104
|
|
#define OSSL_TLS_GROUP_ID_mlkem512 0x0200
|
|
#define OSSL_TLS_GROUP_ID_mlkem768 0x0201
|
|
#define OSSL_TLS_GROUP_ID_mlkem1024 0x0202
|
|
#define OSSL_TLS_GROUP_ID_SecP256r1MLKEM768 0x11EB
|
|
#define OSSL_TLS_GROUP_ID_X25519MLKEM768 0x11EC
|
|
#define OSSL_TLS_GROUP_ID_SecP384r1MLKEM1024 0x11ED
|
|
|
|
/*
|
|
* RFC 7919: "Codepoints ... between 256 and 511, inclusive ... are set aside
|
|
* for FFDHE groups"
|
|
*/
|
|
#define OSSL_TLS_GROUP_ID_FFDHE_START 0x0100 /* inclusive */
|
|
#define OSSL_TLS_GROUP_ID_FFDHE_END 0x01FF /* inclusive */
|
|
|
|
static ossl_inline int is_ecdhe_group(const uint16_t group_id)
|
|
{
|
|
/* This includes the usual EC groups, and also ECX, GOST ... */
|
|
return group_id < OSSL_TLS_GROUP_ID_FFDHE_START;
|
|
}
|
|
|
|
static ossl_inline int is_ffdhe_group(const uint16_t group_id)
|
|
{
|
|
return group_id >= OSSL_TLS_GROUP_ID_FFDHE_START
|
|
&& group_id <= OSSL_TLS_GROUP_ID_FFDHE_END;
|
|
}
|
|
|
|
#endif
|