From a1bb0db7362dbe6d2bd51a8abb6c73d61fc7a7bd Mon Sep 17 00:00:00 2001 From: Igor Tomiatti Date: Thu, 12 Jun 2025 15:24:43 -0300 Subject: Added the cipher suites: TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA and TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA --- crypto_libraries/src/nx_crypto_generic_ciphersuites.c | 2 ++ nx_secure/inc/nx_secure_tls.h | 2 ++ 2 files changed, 4 insertions(+) diff --git a/crypto_libraries/src/nx_crypto_generic_ciphersuites.c b/crypto_libraries/src/nx_crypto_generic_ciphersuites.c index 78921329..d68ea0cc 100644 --- a/crypto_libraries/src/nx_crypto_generic_ciphersuites.c +++ b/crypto_libraries/src/nx_crypto_generic_ciphersuites.c @@ -260,6 +260,8 @@ NX_SECURE_TLS_CIPHERSUITE_INFO _nx_crypto_ciphersuite_lookup_table_ecc[] = #ifdef NX_SECURE_ENABLE_PSK_CIPHERSUITES {TLS_PSK_WITH_AES_128_CBC_SHA256, &crypto_method_null, &crypto_method_auth_psk, &crypto_method_aes_cbc_128, 16, 16, &crypto_method_hmac_sha256, 32, &crypto_method_tls_prf_sha256}, + {TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA, &crypto_method_ecdhe, &crypto_method_auth_psk, &crypto_method_aes_cbc_128, 16, 16, &crypto_method_hmac_sha1, 20, &crypto_method_tls_prf_sha256}, + {TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA, &crypto_method_ecdhe, &crypto_method_auth_psk, &crypto_method_aes_cbc_256, 16, 32, &crypto_method_hmac_sha1, 20, &crypto_method_tls_prf_sha256}, #ifdef NX_SECURE_ENABLE_AEAD_CIPHER {TLS_PSK_WITH_AES_128_CCM_8, &crypto_method_null, &crypto_method_auth_psk, &crypto_method_aes_ccm_8, 16, 16, &crypto_method_null, 0, &crypto_method_tls_prf_sha256}, #endif diff --git a/nx_secure/inc/nx_secure_tls.h b/nx_secure/inc/nx_secure_tls.h index c361f8b6..73deddb1 100644 --- a/nx_secure/inc/nx_secure_tls.h +++ b/nx_secure/inc/nx_secure_tls.h @@ -528,6 +528,8 @@ typedef struct NX_SECURE_VERSIONS_LIST_STRUCT #define TLS_RSA_WITH_AES_256_GCM_SHA384 0x009D #define TLS_PSK_WITH_AES_128_CBC_SHA256 0x00AE #define TLS_PSK_WITH_AES_128_CCM_8 0xC0A8 +#define TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA 0xC035 +#define TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA 0xC036 /* EC Ciphersuites. */ #define TLS_ECDH_ECDSA_WITH_NULL_SHA 0xC001 -- cgit v1.3.1