blob: 92210f6ef1270366dd5a6226abacaad20506d088 [file] [log] [blame]
Adam Langley95c29f32014-06-20 12:00:00 -07001/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
2 * All rights reserved.
3 *
4 * This package is an SSL implementation written
5 * by Eric Young (eay@cryptsoft.com).
6 * The implementation was written so as to conform with Netscapes SSL.
Adam Langleyb4a494c2015-01-23 15:10:10 -08007 *
Adam Langley95c29f32014-06-20 12:00:00 -07008 * This library is free for commercial and non-commercial use as long as
9 * the following conditions are aheared to. The following conditions
10 * apply to all code found in this distribution, be it the RC4, RSA,
11 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
12 * included with this distribution is covered by the same copyright terms
13 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
Adam Langleyb4a494c2015-01-23 15:10:10 -080014 *
Adam Langley95c29f32014-06-20 12:00:00 -070015 * Copyright remains Eric Young's, and as such any Copyright notices in
16 * the code are not to be removed.
17 * If this package is used in a product, Eric Young should be given attribution
18 * as the author of the parts of the library used.
19 * This can be in the form of a textual message at program startup or
20 * in documentation (online or textual) provided with the package.
Adam Langleyb4a494c2015-01-23 15:10:10 -080021 *
Adam Langley95c29f32014-06-20 12:00:00 -070022 * Redistribution and use in source and binary forms, with or without
23 * modification, are permitted provided that the following conditions
24 * are met:
25 * 1. Redistributions of source code must retain the copyright
26 * notice, this list of conditions and the following disclaimer.
27 * 2. Redistributions in binary form must reproduce the above copyright
28 * notice, this list of conditions and the following disclaimer in the
29 * documentation and/or other materials provided with the distribution.
30 * 3. All advertising materials mentioning features or use of this software
31 * must display the following acknowledgement:
32 * "This product includes cryptographic software written by
33 * Eric Young (eay@cryptsoft.com)"
34 * The word 'cryptographic' can be left out if the rouines from the library
35 * being used are not cryptographic related :-).
Adam Langleyb4a494c2015-01-23 15:10:10 -080036 * 4. If you include any Windows specific code (or a derivative thereof) from
Adam Langley95c29f32014-06-20 12:00:00 -070037 * the apps directory (application code) you must include an acknowledgement:
38 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
Adam Langleyb4a494c2015-01-23 15:10:10 -080039 *
Adam Langley95c29f32014-06-20 12:00:00 -070040 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
41 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
42 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
43 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
44 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
45 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
46 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
48 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
49 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
50 * SUCH DAMAGE.
Adam Langleyb4a494c2015-01-23 15:10:10 -080051 *
Adam Langley95c29f32014-06-20 12:00:00 -070052 * The licence and distribution terms for any publically available version or
53 * derivative of this code cannot be changed. i.e. this code cannot simply be
54 * copied and put under another distribution licence
55 * [including the GNU Public Licence.]
56 */
57/* ====================================================================
58 * Copyright (c) 1998-2006 The OpenSSL Project. All rights reserved.
59 *
60 * Redistribution and use in source and binary forms, with or without
61 * modification, are permitted provided that the following conditions
62 * are met:
63 *
64 * 1. Redistributions of source code must retain the above copyright
Adam Langleyb4a494c2015-01-23 15:10:10 -080065 * notice, this list of conditions and the following disclaimer.
Adam Langley95c29f32014-06-20 12:00:00 -070066 *
67 * 2. Redistributions in binary form must reproduce the above copyright
68 * notice, this list of conditions and the following disclaimer in
69 * the documentation and/or other materials provided with the
70 * distribution.
71 *
72 * 3. All advertising materials mentioning features or use of this
73 * software must display the following acknowledgment:
74 * "This product includes software developed by the OpenSSL Project
75 * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
76 *
77 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
78 * endorse or promote products derived from this software without
79 * prior written permission. For written permission, please contact
80 * openssl-core@openssl.org.
81 *
82 * 5. Products derived from this software may not be called "OpenSSL"
83 * nor may "OpenSSL" appear in their names without prior written
84 * permission of the OpenSSL Project.
85 *
86 * 6. Redistributions of any form whatsoever must retain the following
87 * acknowledgment:
88 * "This product includes software developed by the OpenSSL Project
89 * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
90 *
91 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
92 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
93 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
94 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
95 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
96 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
97 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
98 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
99 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
100 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
101 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
102 * OF THE POSSIBILITY OF SUCH DAMAGE.
103 * ====================================================================
104 *
105 * This product includes cryptographic software written by Eric Young
106 * (eay@cryptsoft.com). This product includes software written by Tim
107 * Hudson (tjh@cryptsoft.com).
108 *
109 */
110/* ====================================================================
111 * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
112 *
Adam Langleyb4a494c2015-01-23 15:10:10 -0800113 * Portions of the attached software ("Contribution") are developed by
Adam Langley95c29f32014-06-20 12:00:00 -0700114 * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
115 *
116 * The Contribution is licensed pursuant to the OpenSSL open source
117 * license provided above.
118 *
119 * ECC cipher suite support in OpenSSL originally written by
120 * Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories.
121 *
122 */
123/* ====================================================================
124 * Copyright 2005 Nokia. All rights reserved.
125 *
126 * The portions of the attached software ("Contribution") is developed by
127 * Nokia Corporation and is licensed pursuant to the OpenSSL open source
128 * license.
129 *
130 * The Contribution, originally written by Mika Kousa and Pasi Eronen of
131 * Nokia Corporation, consists of the "PSK" (Pre-Shared Key) ciphersuites
132 * support (see RFC 4279) to OpenSSL.
133 *
134 * No patent licenses or other rights except those expressly stated in
135 * the OpenSSL open source license shall be deemed granted or received
136 * expressly, by implication, estoppel, or otherwise.
137 *
138 * No assurances are provided by Nokia that the Contribution does not
139 * infringe the patent or other intellectual property rights of any third
140 * party or that the license provides you with all the necessary rights
141 * to make use of the Contribution.
142 *
143 * THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN
144 * ADDITION TO THE DISCLAIMERS INCLUDED IN THE LICENSE, NOKIA
145 * SPECIFICALLY DISCLAIMS ANY LIABILITY FOR CLAIMS BROUGHT BY YOU OR ANY
146 * OTHER ENTITY BASED ON INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OR
147 * OTHERWISE.
148 */
149
David Benjamin07e13842015-10-17 13:48:04 -0400150#ifndef OPENSSL_HEADER_TLS1_H
151#define OPENSSL_HEADER_TLS1_H
Adam Langley95c29f32014-06-20 12:00:00 -0700152
David Benjamin07e13842015-10-17 13:48:04 -0400153#include <openssl/base.h>
Adam Langley95c29f32014-06-20 12:00:00 -0700154
155#ifdef __cplusplus
156extern "C" {
157#endif
158
Adam Langley95c29f32014-06-20 12:00:00 -0700159
Adam Langleyb4a494c2015-01-23 15:10:10 -0800160#define TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES 0
Adam Langley95c29f32014-06-20 12:00:00 -0700161
Adam Langleyb4a494c2015-01-23 15:10:10 -0800162#define TLS1_AD_DECRYPTION_FAILED 21
163#define TLS1_AD_RECORD_OVERFLOW 22
164#define TLS1_AD_UNKNOWN_CA 48 /* fatal */
165#define TLS1_AD_ACCESS_DENIED 49 /* fatal */
166#define TLS1_AD_DECODE_ERROR 50 /* fatal */
167#define TLS1_AD_DECRYPT_ERROR 51
168#define TLS1_AD_EXPORT_RESTRICTION 60 /* fatal */
169#define TLS1_AD_PROTOCOL_VERSION 70 /* fatal */
170#define TLS1_AD_INSUFFICIENT_SECURITY 71 /* fatal */
171#define TLS1_AD_INTERNAL_ERROR 80 /* fatal */
172#define TLS1_AD_USER_CANCELLED 90
173#define TLS1_AD_NO_RENEGOTIATION 100
Adam Langley95c29f32014-06-20 12:00:00 -0700174/* codes 110-114 are from RFC3546 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800175#define TLS1_AD_UNSUPPORTED_EXTENSION 110
Adam Langley95c29f32014-06-20 12:00:00 -0700176#define TLS1_AD_CERTIFICATE_UNOBTAINABLE 111
Adam Langleyb4a494c2015-01-23 15:10:10 -0800177#define TLS1_AD_UNRECOGNIZED_NAME 112
Adam Langley95c29f32014-06-20 12:00:00 -0700178#define TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE 113
179#define TLS1_AD_BAD_CERTIFICATE_HASH_VALUE 114
Adam Langleyb4a494c2015-01-23 15:10:10 -0800180#define TLS1_AD_UNKNOWN_PSK_IDENTITY 115 /* fatal */
Adam Langley95c29f32014-06-20 12:00:00 -0700181
182/* ExtensionType values from RFC3546 / RFC4366 / RFC6066 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800183#define TLSEXT_TYPE_server_name 0
184#define TLSEXT_TYPE_max_fragment_length 1
185#define TLSEXT_TYPE_client_certificate_url 2
186#define TLSEXT_TYPE_trusted_ca_keys 3
187#define TLSEXT_TYPE_truncated_hmac 4
188#define TLSEXT_TYPE_status_request 5
Adam Langley95c29f32014-06-20 12:00:00 -0700189/* ExtensionType values from RFC4681 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800190#define TLSEXT_TYPE_user_mapping 6
Adam Langley95c29f32014-06-20 12:00:00 -0700191
192/* ExtensionType values from RFC5878 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800193#define TLSEXT_TYPE_client_authz 7
194#define TLSEXT_TYPE_server_authz 8
Adam Langley95c29f32014-06-20 12:00:00 -0700195
196/* ExtensionType values from RFC6091 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800197#define TLSEXT_TYPE_cert_type 9
Adam Langley95c29f32014-06-20 12:00:00 -0700198
199/* ExtensionType values from RFC4492 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800200#define TLSEXT_TYPE_elliptic_curves 10
201#define TLSEXT_TYPE_ec_point_formats 11
Adam Langley95c29f32014-06-20 12:00:00 -0700202
203/* ExtensionType value from RFC5054 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800204#define TLSEXT_TYPE_srp 12
Adam Langley95c29f32014-06-20 12:00:00 -0700205
206/* ExtensionType values from RFC5246 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800207#define TLSEXT_TYPE_signature_algorithms 13
Adam Langley95c29f32014-06-20 12:00:00 -0700208
209/* ExtensionType value from RFC5764 */
Adam Langley391250d2015-07-15 19:06:07 -0700210#define TLSEXT_TYPE_srtp 14
Adam Langley95c29f32014-06-20 12:00:00 -0700211
212/* ExtensionType value from RFC5620 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800213#define TLSEXT_TYPE_heartbeat 15
Adam Langley95c29f32014-06-20 12:00:00 -0700214
David Benjamine518f652014-10-13 16:12:45 -0400215/* ExtensionType value from RFC7301 */
Adam Langley95c29f32014-06-20 12:00:00 -0700216#define TLSEXT_TYPE_application_layer_protocol_negotiation 16
217
Adam Langley10a1a9d2015-10-21 14:49:23 -0700218/* ExtensionType value from RFC7685 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800219#define TLSEXT_TYPE_padding 21
Adam Langleydacb5022014-06-20 12:00:00 -0700220
Adam Langley75712922014-10-10 16:23:43 -0700221/* https://tools.ietf.org/html/draft-ietf-tls-session-hash-01 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800222#define TLSEXT_TYPE_extended_master_secret 23
Adam Langley75712922014-10-10 16:23:43 -0700223
Adam Langley95c29f32014-06-20 12:00:00 -0700224/* ExtensionType value from RFC4507 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800225#define TLSEXT_TYPE_session_ticket 35
Adam Langley95c29f32014-06-20 12:00:00 -0700226
David Benjamin0442ac52014-07-01 00:50:39 -0400227/* ExtensionType value from RFC5746 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800228#define TLSEXT_TYPE_renegotiate 0xff01
Adam Langley95c29f32014-06-20 12:00:00 -0700229
HÃ¥vard Molland9169c962014-08-14 14:42:37 +0200230/* ExtensionType value from RFC6962 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800231#define TLSEXT_TYPE_certificate_timestamp 18
HÃ¥vard Molland9169c962014-08-14 14:42:37 +0200232
Adam Langley95c29f32014-06-20 12:00:00 -0700233/* This is not an IANA defined extension number */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800234#define TLSEXT_TYPE_next_proto_neg 13172
Adam Langley95c29f32014-06-20 12:00:00 -0700235
Adam Langley1258b6a2014-06-20 12:00:00 -0700236/* This is not an IANA defined extension number */
Adam Langley49c7af12015-07-10 14:33:46 -0700237#define TLSEXT_TYPE_channel_id 30032
Adam Langley1258b6a2014-06-20 12:00:00 -0700238
Adam Langley95c29f32014-06-20 12:00:00 -0700239/* status request value from RFC 3546 */
240#define TLSEXT_STATUSTYPE_ocsp 1
241
David Benjamine518f652014-10-13 16:12:45 -0400242/* ECPointFormat values from RFC 4492 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800243#define TLSEXT_ECPOINTFORMAT_uncompressed 0
244#define TLSEXT_ECPOINTFORMAT_ansiX962_compressed_prime 1
245#define TLSEXT_ECPOINTFORMAT_ansiX962_compressed_char2 2
Adam Langley95c29f32014-06-20 12:00:00 -0700246
247/* Signature and hash algorithms from RFC 5246 */
248
Adam Langleyb4a494c2015-01-23 15:10:10 -0800249#define TLSEXT_signature_anonymous 0
250#define TLSEXT_signature_rsa 1
251#define TLSEXT_signature_dsa 2
252#define TLSEXT_signature_ecdsa 3
Adam Langley95c29f32014-06-20 12:00:00 -0700253
Adam Langleyb4a494c2015-01-23 15:10:10 -0800254#define TLSEXT_hash_none 0
255#define TLSEXT_hash_md5 1
256#define TLSEXT_hash_sha1 2
257#define TLSEXT_hash_sha224 3
258#define TLSEXT_hash_sha256 4
259#define TLSEXT_hash_sha384 5
260#define TLSEXT_hash_sha512 6
Adam Langley95c29f32014-06-20 12:00:00 -0700261
Adam Langley95c29f32014-06-20 12:00:00 -0700262/* Flag set for unrecognised algorithms */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800263#define TLSEXT_nid_unknown 0x1000000
Adam Langley95c29f32014-06-20 12:00:00 -0700264
265/* ECC curves */
266
Adam Langleyb4a494c2015-01-23 15:10:10 -0800267#define TLSEXT_curve_P_256 23
268#define TLSEXT_curve_P_384 24
Adam Langley95c29f32014-06-20 12:00:00 -0700269
Adam Langley95c29f32014-06-20 12:00:00 -0700270
271#define TLSEXT_MAXLEN_host_name 255
272
Adam Langley95c29f32014-06-20 12:00:00 -0700273/* PSK ciphersuites from 4279 */
274#define TLS1_CK_PSK_WITH_RC4_128_SHA 0x0300008A
275#define TLS1_CK_PSK_WITH_3DES_EDE_CBC_SHA 0x0300008B
276#define TLS1_CK_PSK_WITH_AES_128_CBC_SHA 0x0300008C
277#define TLS1_CK_PSK_WITH_AES_256_CBC_SHA 0x0300008D
278
Adam Langley85bc5602015-06-09 09:54:04 -0700279/* PSK ciphersuites from RFC 5489 */
280#define TLS1_CK_ECDHE_PSK_WITH_AES_128_CBC_SHA 0x0300C035
281#define TLS1_CK_ECDHE_PSK_WITH_AES_256_CBC_SHA 0x0300C036
282
Adam Langley95c29f32014-06-20 12:00:00 -0700283/* Additional TLS ciphersuites from expired Internet Draft
284 * draft-ietf-tls-56-bit-ciphersuites-01.txt
285 * (available if TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES is defined, see
286 * s3_lib.c). We actually treat them like SSL 3.0 ciphers, which we probably
287 * shouldn't. Note that the first two are actually not in the IDs. */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800288#define TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_MD5 0x03000060 /* not in ID */
289#define TLS1_CK_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5 0x03000061 /* not in ID */
290#define TLS1_CK_RSA_EXPORT1024_WITH_DES_CBC_SHA 0x03000062
291#define TLS1_CK_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA 0x03000063
292#define TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_SHA 0x03000064
293#define TLS1_CK_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA 0x03000065
294#define TLS1_CK_DHE_DSS_WITH_RC4_128_SHA 0x03000066
Adam Langley95c29f32014-06-20 12:00:00 -0700295
296/* AES ciphersuites from RFC3268 */
297
Adam Langleyb4a494c2015-01-23 15:10:10 -0800298#define TLS1_CK_RSA_WITH_AES_128_SHA 0x0300002F
299#define TLS1_CK_DH_DSS_WITH_AES_128_SHA 0x03000030
300#define TLS1_CK_DH_RSA_WITH_AES_128_SHA 0x03000031
301#define TLS1_CK_DHE_DSS_WITH_AES_128_SHA 0x03000032
302#define TLS1_CK_DHE_RSA_WITH_AES_128_SHA 0x03000033
303#define TLS1_CK_ADH_WITH_AES_128_SHA 0x03000034
Adam Langley95c29f32014-06-20 12:00:00 -0700304
Adam Langleyb4a494c2015-01-23 15:10:10 -0800305#define TLS1_CK_RSA_WITH_AES_256_SHA 0x03000035
306#define TLS1_CK_DH_DSS_WITH_AES_256_SHA 0x03000036
307#define TLS1_CK_DH_RSA_WITH_AES_256_SHA 0x03000037
308#define TLS1_CK_DHE_DSS_WITH_AES_256_SHA 0x03000038
309#define TLS1_CK_DHE_RSA_WITH_AES_256_SHA 0x03000039
310#define TLS1_CK_ADH_WITH_AES_256_SHA 0x0300003A
Adam Langley95c29f32014-06-20 12:00:00 -0700311
312/* TLS v1.2 ciphersuites */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800313#define TLS1_CK_RSA_WITH_NULL_SHA256 0x0300003B
314#define TLS1_CK_RSA_WITH_AES_128_SHA256 0x0300003C
315#define TLS1_CK_RSA_WITH_AES_256_SHA256 0x0300003D
316#define TLS1_CK_DH_DSS_WITH_AES_128_SHA256 0x0300003E
317#define TLS1_CK_DH_RSA_WITH_AES_128_SHA256 0x0300003F
318#define TLS1_CK_DHE_DSS_WITH_AES_128_SHA256 0x03000040
Adam Langley95c29f32014-06-20 12:00:00 -0700319
320/* Camellia ciphersuites from RFC4132 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800321#define TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA 0x03000041
322#define TLS1_CK_DH_DSS_WITH_CAMELLIA_128_CBC_SHA 0x03000042
323#define TLS1_CK_DH_RSA_WITH_CAMELLIA_128_CBC_SHA 0x03000043
324#define TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA 0x03000044
325#define TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA 0x03000045
326#define TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA 0x03000046
Adam Langley95c29f32014-06-20 12:00:00 -0700327
328/* TLS v1.2 ciphersuites */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800329#define TLS1_CK_DHE_RSA_WITH_AES_128_SHA256 0x03000067
330#define TLS1_CK_DH_DSS_WITH_AES_256_SHA256 0x03000068
331#define TLS1_CK_DH_RSA_WITH_AES_256_SHA256 0x03000069
332#define TLS1_CK_DHE_DSS_WITH_AES_256_SHA256 0x0300006A
333#define TLS1_CK_DHE_RSA_WITH_AES_256_SHA256 0x0300006B
334#define TLS1_CK_ADH_WITH_AES_128_SHA256 0x0300006C
335#define TLS1_CK_ADH_WITH_AES_256_SHA256 0x0300006D
Adam Langley95c29f32014-06-20 12:00:00 -0700336
337/* Camellia ciphersuites from RFC4132 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800338#define TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA 0x03000084
339#define TLS1_CK_DH_DSS_WITH_CAMELLIA_256_CBC_SHA 0x03000085
340#define TLS1_CK_DH_RSA_WITH_CAMELLIA_256_CBC_SHA 0x03000086
341#define TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA 0x03000087
342#define TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA 0x03000088
343#define TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA 0x03000089
Adam Langley95c29f32014-06-20 12:00:00 -0700344
345/* SEED ciphersuites from RFC4162 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800346#define TLS1_CK_RSA_WITH_SEED_SHA 0x03000096
347#define TLS1_CK_DH_DSS_WITH_SEED_SHA 0x03000097
348#define TLS1_CK_DH_RSA_WITH_SEED_SHA 0x03000098
349#define TLS1_CK_DHE_DSS_WITH_SEED_SHA 0x03000099
350#define TLS1_CK_DHE_RSA_WITH_SEED_SHA 0x0300009A
351#define TLS1_CK_ADH_WITH_SEED_SHA 0x0300009B
Adam Langley95c29f32014-06-20 12:00:00 -0700352
353/* TLS v1.2 GCM ciphersuites from RFC5288 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800354#define TLS1_CK_RSA_WITH_AES_128_GCM_SHA256 0x0300009C
355#define TLS1_CK_RSA_WITH_AES_256_GCM_SHA384 0x0300009D
356#define TLS1_CK_DHE_RSA_WITH_AES_128_GCM_SHA256 0x0300009E
357#define TLS1_CK_DHE_RSA_WITH_AES_256_GCM_SHA384 0x0300009F
358#define TLS1_CK_DH_RSA_WITH_AES_128_GCM_SHA256 0x030000A0
359#define TLS1_CK_DH_RSA_WITH_AES_256_GCM_SHA384 0x030000A1
360#define TLS1_CK_DHE_DSS_WITH_AES_128_GCM_SHA256 0x030000A2
361#define TLS1_CK_DHE_DSS_WITH_AES_256_GCM_SHA384 0x030000A3
362#define TLS1_CK_DH_DSS_WITH_AES_128_GCM_SHA256 0x030000A4
363#define TLS1_CK_DH_DSS_WITH_AES_256_GCM_SHA384 0x030000A5
364#define TLS1_CK_ADH_WITH_AES_128_GCM_SHA256 0x030000A6
365#define TLS1_CK_ADH_WITH_AES_256_GCM_SHA384 0x030000A7
Adam Langley95c29f32014-06-20 12:00:00 -0700366
David Benjamine518f652014-10-13 16:12:45 -0400367/* ECC ciphersuites from RFC4492 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800368#define TLS1_CK_ECDH_ECDSA_WITH_NULL_SHA 0x0300C001
369#define TLS1_CK_ECDH_ECDSA_WITH_RC4_128_SHA 0x0300C002
370#define TLS1_CK_ECDH_ECDSA_WITH_DES_192_CBC3_SHA 0x0300C003
371#define TLS1_CK_ECDH_ECDSA_WITH_AES_128_CBC_SHA 0x0300C004
372#define TLS1_CK_ECDH_ECDSA_WITH_AES_256_CBC_SHA 0x0300C005
Adam Langley95c29f32014-06-20 12:00:00 -0700373
Adam Langleyb4a494c2015-01-23 15:10:10 -0800374#define TLS1_CK_ECDHE_ECDSA_WITH_NULL_SHA 0x0300C006
375#define TLS1_CK_ECDHE_ECDSA_WITH_RC4_128_SHA 0x0300C007
376#define TLS1_CK_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA 0x0300C008
377#define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 0x0300C009
378#define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 0x0300C00A
Adam Langley95c29f32014-06-20 12:00:00 -0700379
Adam Langleyb4a494c2015-01-23 15:10:10 -0800380#define TLS1_CK_ECDH_RSA_WITH_NULL_SHA 0x0300C00B
381#define TLS1_CK_ECDH_RSA_WITH_RC4_128_SHA 0x0300C00C
382#define TLS1_CK_ECDH_RSA_WITH_DES_192_CBC3_SHA 0x0300C00D
383#define TLS1_CK_ECDH_RSA_WITH_AES_128_CBC_SHA 0x0300C00E
384#define TLS1_CK_ECDH_RSA_WITH_AES_256_CBC_SHA 0x0300C00F
Adam Langley95c29f32014-06-20 12:00:00 -0700385
Adam Langleyb4a494c2015-01-23 15:10:10 -0800386#define TLS1_CK_ECDHE_RSA_WITH_NULL_SHA 0x0300C010
387#define TLS1_CK_ECDHE_RSA_WITH_RC4_128_SHA 0x0300C011
388#define TLS1_CK_ECDHE_RSA_WITH_DES_192_CBC3_SHA 0x0300C012
389#define TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA 0x0300C013
390#define TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA 0x0300C014
Adam Langley95c29f32014-06-20 12:00:00 -0700391
Adam Langleyb4a494c2015-01-23 15:10:10 -0800392#define TLS1_CK_ECDH_anon_WITH_NULL_SHA 0x0300C015
393#define TLS1_CK_ECDH_anon_WITH_RC4_128_SHA 0x0300C016
394#define TLS1_CK_ECDH_anon_WITH_DES_192_CBC3_SHA 0x0300C017
395#define TLS1_CK_ECDH_anon_WITH_AES_128_CBC_SHA 0x0300C018
396#define TLS1_CK_ECDH_anon_WITH_AES_256_CBC_SHA 0x0300C019
Adam Langley95c29f32014-06-20 12:00:00 -0700397
398/* SRP ciphersuites from RFC 5054 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800399#define TLS1_CK_SRP_SHA_WITH_3DES_EDE_CBC_SHA 0x0300C01A
400#define TLS1_CK_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA 0x0300C01B
401#define TLS1_CK_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA 0x0300C01C
402#define TLS1_CK_SRP_SHA_WITH_AES_128_CBC_SHA 0x0300C01D
403#define TLS1_CK_SRP_SHA_RSA_WITH_AES_128_CBC_SHA 0x0300C01E
404#define TLS1_CK_SRP_SHA_DSS_WITH_AES_128_CBC_SHA 0x0300C01F
405#define TLS1_CK_SRP_SHA_WITH_AES_256_CBC_SHA 0x0300C020
406#define TLS1_CK_SRP_SHA_RSA_WITH_AES_256_CBC_SHA 0x0300C021
407#define TLS1_CK_SRP_SHA_DSS_WITH_AES_256_CBC_SHA 0x0300C022
Adam Langley95c29f32014-06-20 12:00:00 -0700408
409/* ECDH HMAC based ciphersuites from RFC5289 */
410
Adam Langleyb4a494c2015-01-23 15:10:10 -0800411#define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_SHA256 0x0300C023
412#define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_SHA384 0x0300C024
413#define TLS1_CK_ECDH_ECDSA_WITH_AES_128_SHA256 0x0300C025
414#define TLS1_CK_ECDH_ECDSA_WITH_AES_256_SHA384 0x0300C026
415#define TLS1_CK_ECDHE_RSA_WITH_AES_128_SHA256 0x0300C027
416#define TLS1_CK_ECDHE_RSA_WITH_AES_256_SHA384 0x0300C028
417#define TLS1_CK_ECDH_RSA_WITH_AES_128_SHA256 0x0300C029
418#define TLS1_CK_ECDH_RSA_WITH_AES_256_SHA384 0x0300C02A
Adam Langley95c29f32014-06-20 12:00:00 -0700419
420/* ECDH GCM based ciphersuites from RFC5289 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800421#define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 0x0300C02B
422#define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 0x0300C02C
423#define TLS1_CK_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 0x0300C02D
424#define TLS1_CK_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 0x0300C02E
425#define TLS1_CK_ECDHE_RSA_WITH_AES_128_GCM_SHA256 0x0300C02F
426#define TLS1_CK_ECDHE_RSA_WITH_AES_256_GCM_SHA384 0x0300C030
427#define TLS1_CK_ECDH_RSA_WITH_AES_128_GCM_SHA256 0x0300C031
428#define TLS1_CK_ECDH_RSA_WITH_AES_256_GCM_SHA384 0x0300C032
Adam Langley95c29f32014-06-20 12:00:00 -0700429
Brian Smith271777f2015-10-03 13:53:33 -1000430#define TLS1_CK_ECDHE_RSA_CHACHA20_POLY1305_OLD 0x0300CC13
431#define TLS1_CK_ECDHE_ECDSA_CHACHA20_POLY1305_OLD 0x0300CC14
Adam Langleyde0b2022014-06-20 12:00:00 -0700432
David Benjamin87cfcdb2015-10-28 14:32:42 -0400433/* TODO(davidben): Remove these once WebRTC is no longer using them, so they
434 * may point to the future RFC 7539 variant. */
435#define TLS1_CK_ECDHE_RSA_CHACHA20_POLY1305 \
436 TLS1_CK_ECDHE_RSA_CHACHA20_POLY1305_OLD
437#define TLS1_CK_ECDHE_ECDSA_CHACHA20_POLY1305 \
438 TLS1_CK_ECDHE_ECDSA_CHACHA20_POLY1305_OLD
439
Adam Langley95c29f32014-06-20 12:00:00 -0700440/* XXX
441 * Inconsistency alert:
442 * The OpenSSL names of ciphers with ephemeral DH here include the string
443 * "DHE", while elsewhere it has always been "EDH".
444 * (The alias for the list of all such ciphers also is "EDH".)
445 * The specifications speak of "EDH"; maybe we should allow both forms
446 * for everything. */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800447#define TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_MD5 "EXP1024-RC4-MD5"
448#define TLS1_TXT_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5 "EXP1024-RC2-CBC-MD5"
449#define TLS1_TXT_RSA_EXPORT1024_WITH_DES_CBC_SHA "EXP1024-DES-CBC-SHA"
450#define TLS1_TXT_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA \
451 "EXP1024-DHE-DSS-DES-CBC-SHA"
452#define TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_SHA "EXP1024-RC4-SHA"
453#define TLS1_TXT_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA "EXP1024-DHE-DSS-RC4-SHA"
454#define TLS1_TXT_DHE_DSS_WITH_RC4_128_SHA "DHE-DSS-RC4-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700455
456/* AES ciphersuites from RFC3268 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800457#define TLS1_TXT_RSA_WITH_AES_128_SHA "AES128-SHA"
458#define TLS1_TXT_DH_DSS_WITH_AES_128_SHA "DH-DSS-AES128-SHA"
459#define TLS1_TXT_DH_RSA_WITH_AES_128_SHA "DH-RSA-AES128-SHA"
460#define TLS1_TXT_DHE_DSS_WITH_AES_128_SHA "DHE-DSS-AES128-SHA"
461#define TLS1_TXT_DHE_RSA_WITH_AES_128_SHA "DHE-RSA-AES128-SHA"
462#define TLS1_TXT_ADH_WITH_AES_128_SHA "ADH-AES128-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700463
Adam Langleyb4a494c2015-01-23 15:10:10 -0800464#define TLS1_TXT_RSA_WITH_AES_256_SHA "AES256-SHA"
465#define TLS1_TXT_DH_DSS_WITH_AES_256_SHA "DH-DSS-AES256-SHA"
466#define TLS1_TXT_DH_RSA_WITH_AES_256_SHA "DH-RSA-AES256-SHA"
467#define TLS1_TXT_DHE_DSS_WITH_AES_256_SHA "DHE-DSS-AES256-SHA"
468#define TLS1_TXT_DHE_RSA_WITH_AES_256_SHA "DHE-RSA-AES256-SHA"
469#define TLS1_TXT_ADH_WITH_AES_256_SHA "ADH-AES256-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700470
David Benjamine518f652014-10-13 16:12:45 -0400471/* ECC ciphersuites from RFC4492 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800472#define TLS1_TXT_ECDH_ECDSA_WITH_NULL_SHA "ECDH-ECDSA-NULL-SHA"
473#define TLS1_TXT_ECDH_ECDSA_WITH_RC4_128_SHA "ECDH-ECDSA-RC4-SHA"
474#define TLS1_TXT_ECDH_ECDSA_WITH_DES_192_CBC3_SHA "ECDH-ECDSA-DES-CBC3-SHA"
475#define TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA "ECDH-ECDSA-AES128-SHA"
476#define TLS1_TXT_ECDH_ECDSA_WITH_AES_256_CBC_SHA "ECDH-ECDSA-AES256-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700477
Adam Langleyb4a494c2015-01-23 15:10:10 -0800478#define TLS1_TXT_ECDHE_ECDSA_WITH_NULL_SHA "ECDHE-ECDSA-NULL-SHA"
479#define TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA "ECDHE-ECDSA-RC4-SHA"
480#define TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA "ECDHE-ECDSA-DES-CBC3-SHA"
481#define TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA "ECDHE-ECDSA-AES128-SHA"
482#define TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA "ECDHE-ECDSA-AES256-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700483
Adam Langleyb4a494c2015-01-23 15:10:10 -0800484#define TLS1_TXT_ECDH_RSA_WITH_NULL_SHA "ECDH-RSA-NULL-SHA"
485#define TLS1_TXT_ECDH_RSA_WITH_RC4_128_SHA "ECDH-RSA-RC4-SHA"
486#define TLS1_TXT_ECDH_RSA_WITH_DES_192_CBC3_SHA "ECDH-RSA-DES-CBC3-SHA"
487#define TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA "ECDH-RSA-AES128-SHA"
488#define TLS1_TXT_ECDH_RSA_WITH_AES_256_CBC_SHA "ECDH-RSA-AES256-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700489
Adam Langleyb4a494c2015-01-23 15:10:10 -0800490#define TLS1_TXT_ECDHE_RSA_WITH_NULL_SHA "ECDHE-RSA-NULL-SHA"
491#define TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA "ECDHE-RSA-RC4-SHA"
492#define TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA "ECDHE-RSA-DES-CBC3-SHA"
493#define TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA "ECDHE-RSA-AES128-SHA"
494#define TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA "ECDHE-RSA-AES256-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700495
Adam Langleyb4a494c2015-01-23 15:10:10 -0800496#define TLS1_TXT_ECDH_anon_WITH_NULL_SHA "AECDH-NULL-SHA"
497#define TLS1_TXT_ECDH_anon_WITH_RC4_128_SHA "AECDH-RC4-SHA"
498#define TLS1_TXT_ECDH_anon_WITH_DES_192_CBC3_SHA "AECDH-DES-CBC3-SHA"
499#define TLS1_TXT_ECDH_anon_WITH_AES_128_CBC_SHA "AECDH-AES128-SHA"
500#define TLS1_TXT_ECDH_anon_WITH_AES_256_CBC_SHA "AECDH-AES256-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700501
502/* PSK ciphersuites from RFC 4279 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800503#define TLS1_TXT_PSK_WITH_RC4_128_SHA "PSK-RC4-SHA"
504#define TLS1_TXT_PSK_WITH_3DES_EDE_CBC_SHA "PSK-3DES-EDE-CBC-SHA"
505#define TLS1_TXT_PSK_WITH_AES_128_CBC_SHA "PSK-AES128-CBC-SHA"
506#define TLS1_TXT_PSK_WITH_AES_256_CBC_SHA "PSK-AES256-CBC-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700507
Adam Langley85bc5602015-06-09 09:54:04 -0700508/* PSK ciphersuites from RFC 5489 */
509#define TLS1_TXT_ECDHE_PSK_WITH_AES_128_CBC_SHA "ECDHE-PSK-AES128-CBC-SHA"
510#define TLS1_TXT_ECDHE_PSK_WITH_AES_256_CBC_SHA "ECDHE-PSK-AES256-CBC-SHA"
511
Adam Langley95c29f32014-06-20 12:00:00 -0700512/* SRP ciphersuite from RFC 5054 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800513#define TLS1_TXT_SRP_SHA_WITH_3DES_EDE_CBC_SHA "SRP-3DES-EDE-CBC-SHA"
514#define TLS1_TXT_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA "SRP-RSA-3DES-EDE-CBC-SHA"
515#define TLS1_TXT_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA "SRP-DSS-3DES-EDE-CBC-SHA"
516#define TLS1_TXT_SRP_SHA_WITH_AES_128_CBC_SHA "SRP-AES-128-CBC-SHA"
517#define TLS1_TXT_SRP_SHA_RSA_WITH_AES_128_CBC_SHA "SRP-RSA-AES-128-CBC-SHA"
518#define TLS1_TXT_SRP_SHA_DSS_WITH_AES_128_CBC_SHA "SRP-DSS-AES-128-CBC-SHA"
519#define TLS1_TXT_SRP_SHA_WITH_AES_256_CBC_SHA "SRP-AES-256-CBC-SHA"
520#define TLS1_TXT_SRP_SHA_RSA_WITH_AES_256_CBC_SHA "SRP-RSA-AES-256-CBC-SHA"
521#define TLS1_TXT_SRP_SHA_DSS_WITH_AES_256_CBC_SHA "SRP-DSS-AES-256-CBC-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700522
523/* Camellia ciphersuites from RFC4132 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800524#define TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA "CAMELLIA128-SHA"
525#define TLS1_TXT_DH_DSS_WITH_CAMELLIA_128_CBC_SHA "DH-DSS-CAMELLIA128-SHA"
526#define TLS1_TXT_DH_RSA_WITH_CAMELLIA_128_CBC_SHA "DH-RSA-CAMELLIA128-SHA"
527#define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA "DHE-DSS-CAMELLIA128-SHA"
528#define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA "DHE-RSA-CAMELLIA128-SHA"
529#define TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA "ADH-CAMELLIA128-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700530
Adam Langleyb4a494c2015-01-23 15:10:10 -0800531#define TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA "CAMELLIA256-SHA"
532#define TLS1_TXT_DH_DSS_WITH_CAMELLIA_256_CBC_SHA "DH-DSS-CAMELLIA256-SHA"
533#define TLS1_TXT_DH_RSA_WITH_CAMELLIA_256_CBC_SHA "DH-RSA-CAMELLIA256-SHA"
534#define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA "DHE-DSS-CAMELLIA256-SHA"
535#define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA "DHE-RSA-CAMELLIA256-SHA"
536#define TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA "ADH-CAMELLIA256-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700537
538/* SEED ciphersuites from RFC4162 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800539#define TLS1_TXT_RSA_WITH_SEED_SHA "SEED-SHA"
540#define TLS1_TXT_DH_DSS_WITH_SEED_SHA "DH-DSS-SEED-SHA"
541#define TLS1_TXT_DH_RSA_WITH_SEED_SHA "DH-RSA-SEED-SHA"
542#define TLS1_TXT_DHE_DSS_WITH_SEED_SHA "DHE-DSS-SEED-SHA"
543#define TLS1_TXT_DHE_RSA_WITH_SEED_SHA "DHE-RSA-SEED-SHA"
544#define TLS1_TXT_ADH_WITH_SEED_SHA "ADH-SEED-SHA"
Adam Langley95c29f32014-06-20 12:00:00 -0700545
546/* TLS v1.2 ciphersuites */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800547#define TLS1_TXT_RSA_WITH_NULL_SHA256 "NULL-SHA256"
548#define TLS1_TXT_RSA_WITH_AES_128_SHA256 "AES128-SHA256"
549#define TLS1_TXT_RSA_WITH_AES_256_SHA256 "AES256-SHA256"
550#define TLS1_TXT_DH_DSS_WITH_AES_128_SHA256 "DH-DSS-AES128-SHA256"
551#define TLS1_TXT_DH_RSA_WITH_AES_128_SHA256 "DH-RSA-AES128-SHA256"
552#define TLS1_TXT_DHE_DSS_WITH_AES_128_SHA256 "DHE-DSS-AES128-SHA256"
553#define TLS1_TXT_DHE_RSA_WITH_AES_128_SHA256 "DHE-RSA-AES128-SHA256"
554#define TLS1_TXT_DH_DSS_WITH_AES_256_SHA256 "DH-DSS-AES256-SHA256"
555#define TLS1_TXT_DH_RSA_WITH_AES_256_SHA256 "DH-RSA-AES256-SHA256"
556#define TLS1_TXT_DHE_DSS_WITH_AES_256_SHA256 "DHE-DSS-AES256-SHA256"
557#define TLS1_TXT_DHE_RSA_WITH_AES_256_SHA256 "DHE-RSA-AES256-SHA256"
558#define TLS1_TXT_ADH_WITH_AES_128_SHA256 "ADH-AES128-SHA256"
559#define TLS1_TXT_ADH_WITH_AES_256_SHA256 "ADH-AES256-SHA256"
Adam Langley95c29f32014-06-20 12:00:00 -0700560
561/* TLS v1.2 GCM ciphersuites from RFC5288 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800562#define TLS1_TXT_RSA_WITH_AES_128_GCM_SHA256 "AES128-GCM-SHA256"
563#define TLS1_TXT_RSA_WITH_AES_256_GCM_SHA384 "AES256-GCM-SHA384"
564#define TLS1_TXT_DHE_RSA_WITH_AES_128_GCM_SHA256 "DHE-RSA-AES128-GCM-SHA256"
565#define TLS1_TXT_DHE_RSA_WITH_AES_256_GCM_SHA384 "DHE-RSA-AES256-GCM-SHA384"
566#define TLS1_TXT_DH_RSA_WITH_AES_128_GCM_SHA256 "DH-RSA-AES128-GCM-SHA256"
567#define TLS1_TXT_DH_RSA_WITH_AES_256_GCM_SHA384 "DH-RSA-AES256-GCM-SHA384"
568#define TLS1_TXT_DHE_DSS_WITH_AES_128_GCM_SHA256 "DHE-DSS-AES128-GCM-SHA256"
569#define TLS1_TXT_DHE_DSS_WITH_AES_256_GCM_SHA384 "DHE-DSS-AES256-GCM-SHA384"
570#define TLS1_TXT_DH_DSS_WITH_AES_128_GCM_SHA256 "DH-DSS-AES128-GCM-SHA256"
571#define TLS1_TXT_DH_DSS_WITH_AES_256_GCM_SHA384 "DH-DSS-AES256-GCM-SHA384"
572#define TLS1_TXT_ADH_WITH_AES_128_GCM_SHA256 "ADH-AES128-GCM-SHA256"
573#define TLS1_TXT_ADH_WITH_AES_256_GCM_SHA384 "ADH-AES256-GCM-SHA384"
Adam Langley95c29f32014-06-20 12:00:00 -0700574
575/* ECDH HMAC based ciphersuites from RFC5289 */
576
Adam Langleyb4a494c2015-01-23 15:10:10 -0800577#define TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_SHA256 "ECDHE-ECDSA-AES128-SHA256"
578#define TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_SHA384 "ECDHE-ECDSA-AES256-SHA384"
579#define TLS1_TXT_ECDH_ECDSA_WITH_AES_128_SHA256 "ECDH-ECDSA-AES128-SHA256"
580#define TLS1_TXT_ECDH_ECDSA_WITH_AES_256_SHA384 "ECDH-ECDSA-AES256-SHA384"
581#define TLS1_TXT_ECDHE_RSA_WITH_AES_128_SHA256 "ECDHE-RSA-AES128-SHA256"
582#define TLS1_TXT_ECDHE_RSA_WITH_AES_256_SHA384 "ECDHE-RSA-AES256-SHA384"
583#define TLS1_TXT_ECDH_RSA_WITH_AES_128_SHA256 "ECDH-RSA-AES128-SHA256"
584#define TLS1_TXT_ECDH_RSA_WITH_AES_256_SHA384 "ECDH-RSA-AES256-SHA384"
Adam Langley95c29f32014-06-20 12:00:00 -0700585
586/* ECDH GCM based ciphersuites from RFC5289 */
Adam Langleyb4a494c2015-01-23 15:10:10 -0800587#define TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \
588 "ECDHE-ECDSA-AES128-GCM-SHA256"
589#define TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \
590 "ECDHE-ECDSA-AES256-GCM-SHA384"
591#define TLS1_TXT_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 \
592 "ECDH-ECDSA-AES128-GCM-SHA256"
593#define TLS1_TXT_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 \
594 "ECDH-ECDSA-AES256-GCM-SHA384"
595#define TLS1_TXT_ECDHE_RSA_WITH_AES_128_GCM_SHA256 "ECDHE-RSA-AES128-GCM-SHA256"
596#define TLS1_TXT_ECDHE_RSA_WITH_AES_256_GCM_SHA384 "ECDHE-RSA-AES256-GCM-SHA384"
597#define TLS1_TXT_ECDH_RSA_WITH_AES_128_GCM_SHA256 "ECDH-RSA-AES128-GCM-SHA256"
598#define TLS1_TXT_ECDH_RSA_WITH_AES_256_GCM_SHA384 "ECDH-RSA-AES256-GCM-SHA384"
Adam Langley95c29f32014-06-20 12:00:00 -0700599
Brian Smith271777f2015-10-03 13:53:33 -1000600#define TLS1_TXT_ECDHE_RSA_WITH_CHACHA20_POLY1305_OLD \
601 "ECDHE-RSA-CHACHA20-POLY1305"
602#define TLS1_TXT_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_OLD \
Adam Langleyb4a494c2015-01-23 15:10:10 -0800603 "ECDHE-ECDSA-CHACHA20-POLY1305"
David Benjamin8e4db8b2015-10-28 15:56:56 -0400604
605/* TODO(davidben): Remove this once QUIC has switched to the '_OLD' name. */
606#define TLS1_TXT_ECDHE_RSA_WITH_CHACHA20_POLY1305 \
607 TLS1_TXT_ECDHE_RSA_WITH_CHACHA20_POLY1305_OLD
Adam Langleyde0b2022014-06-20 12:00:00 -0700608
Adam Langleyb4a494c2015-01-23 15:10:10 -0800609#define TLS_CT_RSA_SIGN 1
610#define TLS_CT_DSS_SIGN 2
611#define TLS_CT_RSA_FIXED_DH 3
612#define TLS_CT_DSS_FIXED_DH 4
613#define TLS_CT_ECDSA_SIGN 64
614#define TLS_CT_RSA_FIXED_ECDH 65
615#define TLS_CT_ECDSA_FIXED_ECDH 66
Adam Langley95c29f32014-06-20 12:00:00 -0700616
Adam Langleyb4a494c2015-01-23 15:10:10 -0800617#define TLS_MD_MAX_CONST_SIZE 20
618#define TLS_MD_CLIENT_FINISH_CONST "client finished"
619#define TLS_MD_CLIENT_FINISH_CONST_SIZE 15
620#define TLS_MD_SERVER_FINISH_CONST "server finished"
621#define TLS_MD_SERVER_FINISH_CONST_SIZE 15
622#define TLS_MD_KEY_EXPANSION_CONST "key expansion"
623#define TLS_MD_KEY_EXPANSION_CONST_SIZE 13
624#define TLS_MD_CLIENT_WRITE_KEY_CONST "client write key"
625#define TLS_MD_CLIENT_WRITE_KEY_CONST_SIZE 16
626#define TLS_MD_SERVER_WRITE_KEY_CONST "server write key"
627#define TLS_MD_SERVER_WRITE_KEY_CONST_SIZE 16
628#define TLS_MD_IV_BLOCK_CONST "IV block"
629#define TLS_MD_IV_BLOCK_CONST_SIZE 8
630#define TLS_MD_MASTER_SECRET_CONST "master secret"
631#define TLS_MD_MASTER_SECRET_CONST_SIZE 13
632#define TLS_MD_EXTENDED_MASTER_SECRET_CONST "extended master secret"
633#define TLS_MD_EXTENDED_MASTER_SECRET_CONST_SIZE 22
634
Adam Langley95c29f32014-06-20 12:00:00 -0700635
Adam Langley95c29f32014-06-20 12:00:00 -0700636#ifdef __cplusplus
David Benjamin07e13842015-10-17 13:48:04 -0400637} /* extern C */
Adam Langley95c29f32014-06-20 12:00:00 -0700638#endif
David Benjamin07e13842015-10-17 13:48:04 -0400639
640#endif /* OPENSSL_HEADER_TLS1_H */