tree 68db4051fdad0d1f61d6ad8b12b67604e2efa21d
parent b65c2be5f174468a178b6d9456b20ca969d4a3d6
author Hanno Becker <hanno.becker@arm.com> 1493395707 +0100
committer Hanno Becker <hanno.becker@arm.com> 1494845217 +0100

Introduce macros and functions to characterize certain ciphersuites.

The routine `mbedtls_ssl_write_server_key_exchange` heavily depends on
what kind of cipher suite is active: some don't need a
ServerKeyExchange at all, some need (EC)DH parameters but no server
signature, some require both. Each time we want to restrict a certain
piece of code to some class of ciphersuites, it is guarded by a
lengthy concatentation of configuration checks determining whether at
least one of the relevant cipher suites is enabled in the config; on
the code level, it is guarded by the check whether one of these
cipher suites is the active one.

To ease readability of the code, this commit introduces several helper
macros and helper functions that can be used to determine whether a
certain class of ciphersuites (a) is active in the config, and
(b) contains the currently present ciphersuite.