Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1 | /** |
| 2 | * \file dhm.h |
Paul Bakker | e0ccd0a | 2009-01-04 16:27:10 +0000 | [diff] [blame] | 3 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 4 | * \brief Diffie-Hellman-Merkle key exchange. |
| 5 | * |
| 6 | * <em>RFC-3526: More Modular Exponential (MODP) Diffie-Hellman groups for |
| 7 | * Internet Key Exchange (IKE)</em> defines a number of standardized |
| 8 | * Diffie-Hellman groups for IKE. |
| 9 | * |
| 10 | * <em>RFC-5114: Additional Diffie-Hellman Groups for Use with IETF |
| 11 | * Standards</em> defines a number of standardized Diffie-Hellman |
| 12 | * groups that can be used. |
Paul Bakker | 37ca75d | 2011-01-06 12:28:03 +0000 | [diff] [blame] | 13 | * |
Jaeden Amero | 784de59 | 2018-01-26 17:52:01 +0000 | [diff] [blame] | 14 | * \warning The security of the DHM key exchange relies on the proper choice |
| 15 | * of prime modulus - optimally, it should be a safe prime. The usage |
| 16 | * of non-safe primes both decreases the difficulty of the underlying |
| 17 | * discrete logarithm problem and can lead to small subgroup attacks |
| 18 | * leaking private exponent bits when invalid public keys are used |
| 19 | * and not detected. This is especially relevant if the same DHM |
| 20 | * parameters are reused for multiple key exchanges as in static DHM, |
| 21 | * while the criticality of small-subgroup attacks is lower for |
| 22 | * ephemeral DHM. |
| 23 | * |
| 24 | * \warning For performance reasons, the code does neither perform primality |
| 25 | * nor safe primality tests, nor the expensive checks for invalid |
| 26 | * subgroups. Moreover, even if these were performed, non-standardized |
| 27 | * primes cannot be trusted because of the possibility of backdoors |
| 28 | * that can't be effectively checked for. |
| 29 | * |
| 30 | * \warning Diffie-Hellman-Merkle is therefore a security risk when not using |
| 31 | * standardized primes generated using a trustworthy ("nothing up |
| 32 | * my sleeve") method, such as the RFC 3526 / 7919 primes. In the TLS |
| 33 | * protocol, DH parameters need to be negotiated, so using the default |
| 34 | * primes systematically is not always an option. If possible, use |
| 35 | * Elliptic Curve Diffie-Hellman (ECDH), which has better performance, |
| 36 | * and for which the TLS protocol mandates the use of standard |
| 37 | * parameters. |
| 38 | * |
Darryl Green | a40a101 | 2018-01-05 15:33:17 +0000 | [diff] [blame] | 39 | */ |
| 40 | /* |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 41 | * Copyright (C) 2006-2018, Arm Limited (or its affiliates), All Rights Reserved |
Manuel Pégourié-Gonnard | 37ff140 | 2015-09-04 14:21:07 +0200 | [diff] [blame] | 42 | * SPDX-License-Identifier: Apache-2.0 |
| 43 | * |
| 44 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 45 | * not use this file except in compliance with the License. |
| 46 | * You may obtain a copy of the License at |
| 47 | * |
| 48 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 49 | * |
| 50 | * Unless required by applicable law or agreed to in writing, software |
| 51 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 52 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 53 | * See the License for the specific language governing permissions and |
| 54 | * limitations under the License. |
Paul Bakker | b96f154 | 2010-07-18 20:36:00 +0000 | [diff] [blame] | 55 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 56 | * This file is part of Mbed TLS (https://tls.mbed.org) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 57 | */ |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 58 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 59 | #ifndef MBEDTLS_DHM_H |
| 60 | #define MBEDTLS_DHM_H |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 61 | |
Reuven Levin | 1f35ca9 | 2017-12-07 10:09:32 +0000 | [diff] [blame] | 62 | #if !defined(MBEDTLS_CONFIG_FILE) |
| 63 | #include "config.h" |
| 64 | #else |
| 65 | #include MBEDTLS_CONFIG_FILE |
| 66 | #endif |
Paul Bakker | 314052f | 2011-08-15 09:07:52 +0000 | [diff] [blame] | 67 | #include "bignum.h" |
Reuven Levin | 1f35ca9 | 2017-12-07 10:09:32 +0000 | [diff] [blame] | 68 | #if !defined(MBEDTLS_DHM_ALT) |
| 69 | |
Paul Bakker | f3b86c1 | 2011-01-27 15:24:17 +0000 | [diff] [blame] | 70 | /* |
| 71 | * DHM Error codes |
| 72 | */ |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 73 | #define MBEDTLS_ERR_DHM_BAD_INPUT_DATA -0x3080 /**< Bad input parameters. */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 74 | #define MBEDTLS_ERR_DHM_READ_PARAMS_FAILED -0x3100 /**< Reading of the DHM parameters failed. */ |
| 75 | #define MBEDTLS_ERR_DHM_MAKE_PARAMS_FAILED -0x3180 /**< Making of the DHM parameters failed. */ |
| 76 | #define MBEDTLS_ERR_DHM_READ_PUBLIC_FAILED -0x3200 /**< Reading of the public values failed. */ |
| 77 | #define MBEDTLS_ERR_DHM_MAKE_PUBLIC_FAILED -0x3280 /**< Making of the public value failed. */ |
| 78 | #define MBEDTLS_ERR_DHM_CALC_SECRET_FAILED -0x3300 /**< Calculation of the DHM secret failed. */ |
| 79 | #define MBEDTLS_ERR_DHM_INVALID_FORMAT -0x3380 /**< The ASN.1 data is not formatted correctly. */ |
Manuel Pégourié-Gonnard | 6a8ca33 | 2015-05-28 09:33:39 +0200 | [diff] [blame] | 80 | #define MBEDTLS_ERR_DHM_ALLOC_FAILED -0x3400 /**< Allocation of memory failed. */ |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 81 | #define MBEDTLS_ERR_DHM_FILE_IO_ERROR -0x3480 /**< Read or write of file failed. */ |
Gilles Peskine | 7ecab3d | 2018-01-26 17:56:38 +0100 | [diff] [blame] | 82 | #define MBEDTLS_ERR_DHM_HW_ACCEL_FAILED -0x3500 /**< DHM hardware accelerator failed. */ |
Jaeden Amero | 2acbf17 | 2018-01-26 20:57:38 +0000 | [diff] [blame] | 83 | #define MBEDTLS_ERR_DHM_SET_GROUP_FAILED -0x3580 /**< Setting the modulus and generator failed. */ |
Paul Bakker | 29b6476 | 2012-09-25 09:36:44 +0000 | [diff] [blame] | 84 | |
Paul Bakker | 407a0da | 2013-06-27 14:29:21 +0200 | [diff] [blame] | 85 | #ifdef __cplusplus |
| 86 | extern "C" { |
| 87 | #endif |
| 88 | |
Paul Bakker | 29b6476 | 2012-09-25 09:36:44 +0000 | [diff] [blame] | 89 | /** |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 90 | * \brief The DHM context structure. |
Paul Bakker | f3b86c1 | 2011-01-27 15:24:17 +0000 | [diff] [blame] | 91 | */ |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 92 | typedef struct |
| 93 | { |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 94 | size_t len; /*!< The size of \p P in Bytes. */ |
| 95 | mbedtls_mpi P; /*!< The prime modulus. */ |
| 96 | mbedtls_mpi G; /*!< The generator. */ |
| 97 | mbedtls_mpi X; /*!< Our secret value. */ |
| 98 | mbedtls_mpi GX; /*!< Our public key = \c G^X mod \c P. */ |
| 99 | mbedtls_mpi GY; /*!< The public key of the peer = \c G^Y mod \c P. */ |
| 100 | mbedtls_mpi K; /*!< The shared secret = \c G^(XY) mod \c P. */ |
| 101 | mbedtls_mpi RP; /*!< The cached value = \c R^2 mod \c P. */ |
| 102 | mbedtls_mpi Vi; /*!< The blinding value. */ |
| 103 | mbedtls_mpi Vf; /*!< The unblinding value. */ |
| 104 | mbedtls_mpi pX; /*!< The previous \c X. */ |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 105 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 106 | mbedtls_dhm_context; |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 107 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 108 | /** |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 109 | * \brief This function initializes the DHM context. |
Paul Bakker | 8f870b0 | 2014-06-20 13:32:38 +0200 | [diff] [blame] | 110 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 111 | * \param ctx The DHM context to initialize. |
Paul Bakker | 8f870b0 | 2014-06-20 13:32:38 +0200 | [diff] [blame] | 112 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 113 | void mbedtls_dhm_init( mbedtls_dhm_context *ctx ); |
Paul Bakker | 8f870b0 | 2014-06-20 13:32:38 +0200 | [diff] [blame] | 114 | |
| 115 | /** |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 116 | * \brief This function parses the ServerKeyExchange parameters. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 117 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 118 | * \param ctx The DHM context. |
Hanno Becker | f240ea0 | 2017-10-02 15:09:14 +0100 | [diff] [blame] | 119 | * \param p On input, *p must be the start of the input buffer. |
| 120 | * On output, *p is updated to point to the end of the data |
| 121 | * that has been read. On success, this is the first byte |
| 122 | * past the end of the ServerKeyExchange parameters. |
| 123 | * On error, this is the point at which an error has been |
| 124 | * detected, which is usually not useful except to debug |
| 125 | * failures. |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 126 | * \param end The end of the input buffer. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 127 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 128 | * \return \c 0 on success, or an \c MBEDTLS_ERR_DHM_XXX error code |
| 129 | * on failure. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 130 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 131 | int mbedtls_dhm_read_params( mbedtls_dhm_context *ctx, |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 132 | unsigned char **p, |
Paul Bakker | ff60ee6 | 2010-03-16 21:09:09 +0000 | [diff] [blame] | 133 | const unsigned char *end ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 134 | |
| 135 | /** |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 136 | * \brief This function sets up and writes the ServerKeyExchange |
| 137 | * parameters. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 138 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 139 | * \param ctx The DHM context. |
| 140 | * \param x_size The private value size in Bytes. |
| 141 | * \param olen The number of characters written. |
| 142 | * \param output The destination buffer. |
| 143 | * \param f_rng The RNG function. |
| 144 | * \param p_rng The RNG parameter. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 145 | * |
Hanno Becker | e764324 | 2017-09-28 10:33:11 +0100 | [diff] [blame] | 146 | * \note The destination buffer must be large enough to hold |
Hanno Becker | 70da2c5 | 2017-10-02 15:02:59 +0100 | [diff] [blame] | 147 | * the reduced binary presentation of the modulus, the generator |
| 148 | * and the public key, each wrapped with a 2-byte length field. |
| 149 | * It is the responsibility of the caller to ensure that enough |
| 150 | * space is available. Refer to \c mbedtls_mpi_size to computing |
| 151 | * the byte-size of an MPI. |
Hanno Becker | e764324 | 2017-09-28 10:33:11 +0100 | [diff] [blame] | 152 | * |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 153 | * \note This function assumes that \c ctx->P and \c ctx->G |
Hanno Becker | 8880e75 | 2017-10-04 13:15:08 +0100 | [diff] [blame] | 154 | * have already been properly set. For that, use |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 155 | * mbedtls_dhm_set_group() below in conjunction with |
| 156 | * mbedtls_mpi_read_binary() and mbedtls_mpi_read_string(). |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 157 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 158 | * \return \c 0 on success, or an \c MBEDTLS_ERR_DHM_XXX error code |
| 159 | * on failure. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 160 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 161 | int mbedtls_dhm_make_params( mbedtls_dhm_context *ctx, int x_size, |
Paul Bakker | 23986e5 | 2011-04-24 08:57:21 +0000 | [diff] [blame] | 162 | unsigned char *output, size_t *olen, |
Paul Bakker | a3d195c | 2011-11-27 21:07:34 +0000 | [diff] [blame] | 163 | int (*f_rng)(void *, unsigned char *, size_t), |
| 164 | void *p_rng ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 165 | |
| 166 | /** |
Hanno Becker | 8880e75 | 2017-10-04 13:15:08 +0100 | [diff] [blame] | 167 | * \brief Set prime modulus and generator |
| 168 | * |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 169 | * \param ctx The DHM context. |
| 170 | * \param P The MPI holding DHM prime modulus. |
| 171 | * \param G The MPI holding DHM generator. |
Hanno Becker | 8880e75 | 2017-10-04 13:15:08 +0100 | [diff] [blame] | 172 | * |
| 173 | * \note This function can be used to set P, G |
| 174 | * in preparation for \c mbedtls_dhm_make_params. |
| 175 | * |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 176 | * \return \c 0 if successful, or an \c MBEDTLS_ERR_DHM_XXX error code |
| 177 | * on failure. |
Hanno Becker | 8880e75 | 2017-10-04 13:15:08 +0100 | [diff] [blame] | 178 | */ |
| 179 | int mbedtls_dhm_set_group( mbedtls_dhm_context *ctx, |
| 180 | const mbedtls_mpi *P, |
| 181 | const mbedtls_mpi *G ); |
| 182 | |
| 183 | /** |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 184 | * \brief This function imports the public value G^Y of the peer. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 185 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 186 | * \param ctx The DHM context. |
| 187 | * \param input The input buffer. |
| 188 | * \param ilen The size of the input buffer. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 189 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 190 | * \return \c 0 on success, or an \c MBEDTLS_ERR_DHM_XXX error code |
| 191 | * on failure. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 192 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 193 | int mbedtls_dhm_read_public( mbedtls_dhm_context *ctx, |
Paul Bakker | 23986e5 | 2011-04-24 08:57:21 +0000 | [diff] [blame] | 194 | const unsigned char *input, size_t ilen ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 195 | |
| 196 | /** |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 197 | * \brief This function creates its own private value \c X and |
| 198 | * exports \c G^X. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 199 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 200 | * \param ctx The DHM context. |
| 201 | * \param x_size The private value size in Bytes. |
| 202 | * \param output The destination buffer. |
| 203 | * \param olen The length of the destination buffer. Must be at least |
| 204 | equal to ctx->len (the size of \c P). |
| 205 | * \param f_rng The RNG function. |
| 206 | * \param p_rng The RNG parameter. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 207 | * |
Hanno Becker | e764324 | 2017-09-28 10:33:11 +0100 | [diff] [blame] | 208 | * \note The destination buffer will always be fully written |
| 209 | * so as to contain a big-endian presentation of G^X mod P. |
| 210 | * If it is larger than ctx->len, it will accordingly be |
| 211 | * padded with zero-bytes in the beginning. |
| 212 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 213 | * \return \c 0 on success, or an \c MBEDTLS_ERR_DHM_XXX error code |
| 214 | * on failure. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 215 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 216 | int mbedtls_dhm_make_public( mbedtls_dhm_context *ctx, int x_size, |
Paul Bakker | 23986e5 | 2011-04-24 08:57:21 +0000 | [diff] [blame] | 217 | unsigned char *output, size_t olen, |
Paul Bakker | a3d195c | 2011-11-27 21:07:34 +0000 | [diff] [blame] | 218 | int (*f_rng)(void *, unsigned char *, size_t), |
| 219 | void *p_rng ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 220 | |
| 221 | /** |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 222 | * \brief This function derives and exports the shared secret |
| 223 | * \c (G^Y)^X mod \c P. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 224 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 225 | * \param ctx The DHM context. |
| 226 | * \param output The destination buffer. |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 227 | * \param output_size The size of the destination buffer. Must be at least |
| 228 | * the size of ctx->len. |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 229 | * \param olen On exit, holds the actual number of Bytes written. |
| 230 | * \param f_rng The RNG function, for blinding purposes. |
| 231 | * \param p_rng The RNG parameter. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 232 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 233 | * \return \c 0 on success, or an \c MBEDTLS_ERR_DHM_XXX error code |
| 234 | * on failure. |
Manuel Pégourié-Gonnard | 143b502 | 2013-09-04 16:29:59 +0200 | [diff] [blame] | 235 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 236 | * \note If non-NULL, \p f_rng is used to blind the input as |
| 237 | * a countermeasure against timing attacks. Blinding is used |
| 238 | * only if our secret value \p X is re-used and omitted |
| 239 | * otherwise. Therefore, we recommend always passing a |
| 240 | * non-NULL \p f_rng argument. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 241 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 242 | int mbedtls_dhm_calc_secret( mbedtls_dhm_context *ctx, |
Manuel Pégourié-Gonnard | 3335205 | 2015-06-02 16:17:08 +0100 | [diff] [blame] | 243 | unsigned char *output, size_t output_size, size_t *olen, |
Manuel Pégourié-Gonnard | 2d62764 | 2013-09-04 14:22:07 +0200 | [diff] [blame] | 244 | int (*f_rng)(void *, unsigned char *, size_t), |
| 245 | void *p_rng ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 246 | |
Paul Bakker | 9a73632 | 2012-11-14 12:39:52 +0000 | [diff] [blame] | 247 | /** |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 248 | * \brief This function frees and clears the components of a DHM key. |
Paul Bakker | 8f870b0 | 2014-06-20 13:32:38 +0200 | [diff] [blame] | 249 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 250 | * \param ctx The DHM context to free and clear. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 251 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 252 | void mbedtls_dhm_free( mbedtls_dhm_context *ctx ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 253 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 254 | #if defined(MBEDTLS_ASN1_PARSE_C) |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 255 | /** \ingroup x509_module */ |
| 256 | /** |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 257 | * \brief This function parses DHM parameters in PEM or DER format. |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 258 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 259 | * \param dhm The DHM context to initialize. |
| 260 | * \param dhmin The input buffer. |
| 261 | * \param dhminlen The size of the buffer, including the terminating null |
| 262 | * Byte for PEM data. |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 263 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 264 | * \return \c 0 on success, or a specific DHM or PEM error code |
| 265 | * on failure. |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 266 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 267 | int mbedtls_dhm_parse_dhm( mbedtls_dhm_context *dhm, const unsigned char *dhmin, |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 268 | size_t dhminlen ); |
| 269 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 270 | #if defined(MBEDTLS_FS_IO) |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 271 | /** \ingroup x509_module */ |
| 272 | /** |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 273 | * \brief This function loads and parses DHM parameters from a file. |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 274 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 275 | * \param dhm The DHM context to load the parameters to. |
| 276 | * \param path The filename to read the DHM parameters from. |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 277 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 278 | * \return \c 0 on success, or a specific DHM or PEM error code |
| 279 | * on failure. |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 280 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 281 | int mbedtls_dhm_parse_dhmfile( mbedtls_dhm_context *dhm, const char *path ); |
| 282 | #endif /* MBEDTLS_FS_IO */ |
| 283 | #endif /* MBEDTLS_ASN1_PARSE_C */ |
nirekh01 | d569ecf | 2018-01-09 16:43:21 +0000 | [diff] [blame] | 284 | |
| 285 | #ifdef __cplusplus |
| 286 | } |
| 287 | #endif |
| 288 | |
| 289 | #else /* MBEDTLS_DHM_ALT */ |
Reuven Levin | 1f35ca9 | 2017-12-07 10:09:32 +0000 | [diff] [blame] | 290 | #include "dhm_alt.h" |
| 291 | #endif /* MBEDTLS_DHM_ALT */ |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 292 | |
nirekh01 | d569ecf | 2018-01-09 16:43:21 +0000 | [diff] [blame] | 293 | #ifdef __cplusplus |
| 294 | extern "C" { |
| 295 | #endif |
| 296 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 297 | /** |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 298 | * \brief The DMH checkup routine. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 299 | * |
Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 300 | * \return \c 0 on success, or \c 1 on failure. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 301 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 302 | int mbedtls_dhm_self_test( int verbose ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 303 | |
| 304 | #ifdef __cplusplus |
| 305 | } |
| 306 | #endif |
| 307 | |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 308 | /** |
| 309 | * RFC 3526, RFC 5114 and RFC 7919 standardize a number of |
| 310 | * Diffie-Hellman groups, some of which are included here |
| 311 | * for use within the SSL/TLS module and the user's convenience |
| 312 | * when configuring the Diffie-Hellman parameters by hand |
| 313 | * through \c mbedtls_ssl_conf_dh_param. |
| 314 | * |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 315 | * The following lists the source of the above groups in the standards: |
| 316 | * - RFC 5114 section 2.2: 2048-bit MODP Group with 224-bit Prime Order Subgroup |
| 317 | * - RFC 3526 section 3: 2048-bit MODP Group |
| 318 | * - RFC 3526 section 4: 3072-bit MODP Group |
| 319 | * - RFC 3526 section 5: 4096-bit MODP Group |
| 320 | * - RFC 7919 section A.1: ffdhe2048 |
| 321 | * - RFC 7919 section A.2: ffdhe3072 |
| 322 | * - RFC 7919 section A.3: ffdhe4096 |
| 323 | * - RFC 7919 section A.4: ffdhe6144 |
| 324 | * - RFC 7919 section A.5: ffdhe8192 |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 325 | * |
| 326 | * The constants with suffix "_p" denote the chosen prime moduli, while |
| 327 | * the constants with suffix "_g" denote the chosen generator |
| 328 | * of the associated prime field. |
| 329 | * |
| 330 | * The constants further suffixed with "_bin" are provided in binary format, |
| 331 | * while all other constants represent null-terminated strings holding the |
| 332 | * hexadecimal presentation of the respective numbers. |
| 333 | * |
| 334 | * The primes from RFC 3526 and RFC 7919 have been generating by the following |
| 335 | * trust-worthy procedure: |
| 336 | * - Fix N in { 2048, 3072, 4096, 6144, 8192 } and consider the N-bit number |
| 337 | * the first and last 64 bits are all 1, and the remaining N - 128 bits of |
| 338 | * which are 0x7ff...ff. |
| 339 | * - Add the smallest multiple of the first N - 129 bits of the binary expansion |
| 340 | * of pi (for RFC 5236) or e (for RFC 7919) to this intermediate bit-string |
| 341 | * such that the resulting integer is a safe-prime. |
| 342 | * - The result is the respective RFC 3526 / 7919 prime, and the corresponding |
| 343 | * generator is always chosen to be 2 (which is a square for these prime, |
| 344 | * hence the corresponding subgroup has order (p-1)/2 and avoids leaking a |
| 345 | * bit in the private exponent). |
| 346 | * |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 347 | */ |
| 348 | |
| 349 | #if !defined(MBEDTLS_DEPRECATED_REMOVED) |
| 350 | |
| 351 | #if defined(MBEDTLS_DEPRECATED_WARNING) |
| 352 | #define MBEDTLS_DEPRECATED __attribute__((deprecated)) |
Jaeden Amero | 784de59 | 2018-01-26 17:52:01 +0000 | [diff] [blame] | 353 | MBEDTLS_DEPRECATED typedef char const * mbedtls_deprecated_constant_t; |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 354 | #define MBEDTLS_DEPRECATED_STRING_CONSTANT( VAL ) \ |
Jaeden Amero | 784de59 | 2018-01-26 17:52:01 +0000 | [diff] [blame] | 355 | ( (mbedtls_deprecated_constant_t) ( VAL ) ) |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 356 | #else |
| 357 | #define MBEDTLS_DEPRECATED_STRING_CONSTANT( VAL ) VAL |
| 358 | #endif /* ! MBEDTLS_DEPRECATED_WARNING */ |
| 359 | |
| 360 | /** |
| 361 | * \warning The origin of the primes in RFC 5114 is not documented and |
| 362 | * their use therefore constitutes a security risk! |
| 363 | * |
| 364 | * \deprecated The hex-encoded primes from RFC 5114 are deprecated and are |
| 365 | * likely to be removed in a future version of the library without |
| 366 | * replacement. |
| 367 | */ |
| 368 | |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 369 | /** |
| 370 | * The hexadecimal presentation of the prime underlying the |
| 371 | * 2048-bit MODP Group with 224-bit Prime Order Subgroup, as defined |
| 372 | * in <em>RFC-5114: Additional Diffie-Hellman Groups for Use with |
| 373 | * IETF Standards</em>. |
| 374 | */ |
Jaeden Amero | 129f508 | 2018-02-08 14:25:36 +0000 | [diff] [blame^] | 375 | #define MBEDTLS_DHM_RFC5114_MODP_2048_P \ |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 376 | MBEDTLS_DEPRECATED_STRING_CONSTANT( \ |
| 377 | "AD107E1E9123A9D0D660FAA79559C51FA20D64E5683B9FD1" \ |
| 378 | "B54B1597B61D0A75E6FA141DF95A56DBAF9A3C407BA1DF15" \ |
| 379 | "EB3D688A309C180E1DE6B85A1274A0A66D3F8152AD6AC212" \ |
| 380 | "9037C9EDEFDA4DF8D91E8FEF55B7394B7AD5B7D0B6C12207" \ |
| 381 | "C9F98D11ED34DBF6C6BA0B2C8BBC27BE6A00E0A0B9C49708" \ |
| 382 | "B3BF8A317091883681286130BC8985DB1602E714415D9330" \ |
| 383 | "278273C7DE31EFDC7310F7121FD5A07415987D9ADC0A486D" \ |
| 384 | "CDF93ACC44328387315D75E198C641A480CD86A1B9E587E8" \ |
| 385 | "BE60E69CC928B2B9C52172E413042E9B23F10B0E16E79763" \ |
| 386 | "C9B53DCF4BA80A29E3FB73C16B8E75B97EF363E2FFA31F71" \ |
| 387 | "CF9DE5384E71B81C0AC4DFFE0C10E64F" ) |
| 388 | |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 389 | /** |
| 390 | * The hexadecimal presentation of the chosen generator of the 2048-bit MODP |
| 391 | * Group with 224-bit Prime Order Subgroup, as defined in <em>RFC-5114: |
| 392 | * Additional Diffie-Hellman Groups for Use with IETF Standards</em>. |
| 393 | */ |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 394 | #define MBEDTLS_DHM_RFC5114_MODP_2048_G \ |
| 395 | MBEDTLS_DEPRECATED_STRING_CONSTANT( \ |
| 396 | "AC4032EF4F2D9AE39DF30B5C8FFDAC506CDEBE7B89998CAF" \ |
| 397 | "74866A08CFE4FFE3A6824A4E10B9A6F0DD921F01A70C4AFA" \ |
| 398 | "AB739D7700C29F52C57DB17C620A8652BE5E9001A8D66AD7" \ |
| 399 | "C17669101999024AF4D027275AC1348BB8A762D0521BC98A" \ |
| 400 | "E247150422EA1ED409939D54DA7460CDB5F6C6B250717CBE" \ |
| 401 | "F180EB34118E98D119529A45D6F834566E3025E316A330EF" \ |
| 402 | "BB77A86F0C1AB15B051AE3D428C8F8ACB70A8137150B8EEB" \ |
| 403 | "10E183EDD19963DDD9E263E4770589EF6AA21E7F5F2FF381" \ |
| 404 | "B539CCE3409D13CD566AFBB48D6C019181E1BCFE94B30269" \ |
| 405 | "EDFE72FE9B6AA4BD7B5A0F1C71CFFF4C19C418E1F6EC0179" \ |
| 406 | "81BC087F2A7065B384B890D3191F2BFA" ) |
| 407 | |
| 408 | /** |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 409 | * The hexadecimal presentation of the prime underlying the 2048-bit MODP |
| 410 | * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) |
| 411 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. |
| 412 | * |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 413 | * \deprecated The hex-encoded primes from RFC 3625 are deprecated and |
| 414 | * superseded by the corresponding macros providing them as |
| 415 | * binary constants. Their hex-encoded constants are likely |
| 416 | * to be removed in a future version of the library. |
| 417 | * |
| 418 | */ |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 419 | #define MBEDTLS_DHM_RFC3526_MODP_2048_P \ |
| 420 | MBEDTLS_DEPRECATED_STRING_CONSTANT( \ |
| 421 | "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \ |
| 422 | "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \ |
| 423 | "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \ |
| 424 | "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \ |
| 425 | "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \ |
| 426 | "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \ |
| 427 | "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \ |
| 428 | "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \ |
| 429 | "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \ |
| 430 | "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \ |
| 431 | "15728E5A8AACAA68FFFFFFFFFFFFFFFF" ) |
| 432 | |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 433 | /** |
| 434 | * The hexadecimal presentation of the chosen generator of the 2048-bit MODP |
| 435 | * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) |
| 436 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. |
| 437 | */ |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 438 | #define MBEDTLS_DHM_RFC3526_MODP_2048_G \ |
Hanno Becker | 5e6b8d7 | 2017-10-04 13:41:36 +0100 | [diff] [blame] | 439 | MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" ) |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 440 | |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 441 | /** |
| 442 | * The hexadecimal presentation of the prime underlying the 3072-bit MODP |
| 443 | * Group, as defined in <em>RFC-3072: More Modular Exponential (MODP) |
| 444 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. |
| 445 | */ |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 446 | #define MBEDTLS_DHM_RFC3526_MODP_3072_P \ |
| 447 | MBEDTLS_DEPRECATED_STRING_CONSTANT( \ |
| 448 | "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \ |
| 449 | "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \ |
| 450 | "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \ |
| 451 | "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \ |
| 452 | "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \ |
| 453 | "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \ |
| 454 | "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \ |
| 455 | "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \ |
| 456 | "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \ |
| 457 | "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \ |
| 458 | "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" \ |
| 459 | "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" \ |
| 460 | "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" \ |
| 461 | "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" \ |
| 462 | "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" \ |
| 463 | "43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF" ) |
| 464 | |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 465 | /** |
| 466 | * The hexadecimal presentation of the chosen generator of the 3072-bit MODP |
| 467 | * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) |
| 468 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. |
| 469 | */ |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 470 | #define MBEDTLS_DHM_RFC3526_MODP_3072_G \ |
Hanno Becker | 5e6b8d7 | 2017-10-04 13:41:36 +0100 | [diff] [blame] | 471 | MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" ) |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 472 | |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 473 | /** |
| 474 | * The hexadecimal presentation of the prime underlying the 4096-bit MODP |
| 475 | * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) |
| 476 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. |
| 477 | */ |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 478 | #define MBEDTLS_DHM_RFC3526_MODP_4096_P \ |
| 479 | MBEDTLS_DEPRECATED_STRING_CONSTANT( \ |
| 480 | "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \ |
| 481 | "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \ |
| 482 | "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \ |
| 483 | "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \ |
| 484 | "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \ |
| 485 | "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \ |
| 486 | "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \ |
| 487 | "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \ |
| 488 | "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \ |
| 489 | "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \ |
| 490 | "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" \ |
| 491 | "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" \ |
| 492 | "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" \ |
| 493 | "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" \ |
| 494 | "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" \ |
| 495 | "43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7" \ |
| 496 | "88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA" \ |
| 497 | "2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6" \ |
| 498 | "287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED" \ |
| 499 | "1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9" \ |
| 500 | "93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934063199" \ |
| 501 | "FFFFFFFFFFFFFFFF" ) |
| 502 | |
Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 503 | /** |
| 504 | * The hexadecimal presentation of the chosen generator of the 4096-bit MODP |
| 505 | * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) |
| 506 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. |
| 507 | */ |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 508 | #define MBEDTLS_DHM_RFC3526_MODP_4096_G \ |
Hanno Becker | 5e6b8d7 | 2017-10-04 13:41:36 +0100 | [diff] [blame] | 509 | MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" ) |
Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 510 | |
| 511 | #endif /* MBEDTLS_DEPRECATED_REMOVED */ |
| 512 | |
| 513 | /* |
| 514 | * Trustworthy DHM parameters in binary form |
| 515 | */ |
| 516 | |
| 517 | #define MBEDTLS_DHM_RFC3526_MODP_2048_P_BIN { \ |
| 518 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ |
| 519 | 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \ |
| 520 | 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \ |
| 521 | 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \ |
| 522 | 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \ |
| 523 | 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \ |
| 524 | 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \ |
| 525 | 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \ |
| 526 | 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \ |
| 527 | 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \ |
| 528 | 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \ |
| 529 | 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \ |
| 530 | 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \ |
| 531 | 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \ |
| 532 | 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \ |
| 533 | 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \ |
| 534 | 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \ |
| 535 | 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \ |
| 536 | 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \ |
| 537 | 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \ |
| 538 | 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \ |
| 539 | 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \ |
| 540 | 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \ |
| 541 | 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \ |
| 542 | 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \ |
| 543 | 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \ |
| 544 | 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \ |
| 545 | 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \ |
| 546 | 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \ |
| 547 | 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \ |
| 548 | 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAC, 0xAA, 0x68, \ |
| 549 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } |
| 550 | |
| 551 | #define MBEDTLS_DHM_RFC3526_MODP_2048_G_BIN { 0x02 } |
| 552 | |
| 553 | #define MBEDTLS_DHM_RFC3526_MODP_3072_P_BIN { \ |
| 554 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ |
| 555 | 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \ |
| 556 | 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \ |
| 557 | 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \ |
| 558 | 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \ |
| 559 | 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \ |
| 560 | 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \ |
| 561 | 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \ |
| 562 | 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \ |
| 563 | 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \ |
| 564 | 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \ |
| 565 | 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \ |
| 566 | 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \ |
| 567 | 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \ |
| 568 | 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \ |
| 569 | 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \ |
| 570 | 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \ |
| 571 | 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \ |
| 572 | 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \ |
| 573 | 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \ |
| 574 | 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \ |
| 575 | 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \ |
| 576 | 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \ |
| 577 | 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \ |
| 578 | 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \ |
| 579 | 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \ |
| 580 | 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \ |
| 581 | 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \ |
| 582 | 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \ |
| 583 | 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \ |
| 584 | 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D, \ |
| 585 | 0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33, \ |
| 586 | 0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64, \ |
| 587 | 0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, \ |
| 588 | 0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, \ |
| 589 | 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7, \ |
| 590 | 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7, \ |
| 591 | 0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D, \ |
| 592 | 0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B, \ |
| 593 | 0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64, \ |
| 594 | 0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, \ |
| 595 | 0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, \ |
| 596 | 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C, \ |
| 597 | 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2, \ |
| 598 | 0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31, \ |
| 599 | 0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E, \ |
| 600 | 0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x3A, 0xD2, 0xCA, \ |
| 601 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } |
| 602 | |
| 603 | #define MBEDTLS_DHM_RFC3526_MODP_3072_G_BIN { 0x02 } |
| 604 | |
| 605 | #define MBEDTLS_DHM_RFC3526_MODP_4096_P_BIN { \ |
| 606 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ |
| 607 | 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \ |
| 608 | 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \ |
| 609 | 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \ |
| 610 | 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \ |
| 611 | 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \ |
| 612 | 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \ |
| 613 | 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \ |
| 614 | 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \ |
| 615 | 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \ |
| 616 | 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \ |
| 617 | 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \ |
| 618 | 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \ |
| 619 | 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \ |
| 620 | 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \ |
| 621 | 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \ |
| 622 | 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \ |
| 623 | 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \ |
| 624 | 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \ |
| 625 | 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \ |
| 626 | 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \ |
| 627 | 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \ |
| 628 | 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \ |
| 629 | 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \ |
| 630 | 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \ |
| 631 | 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \ |
| 632 | 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \ |
| 633 | 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \ |
| 634 | 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \ |
| 635 | 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \ |
| 636 | 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D, \ |
| 637 | 0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33, \ |
| 638 | 0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64, \ |
| 639 | 0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, \ |
| 640 | 0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, \ |
| 641 | 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7, \ |
| 642 | 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7, \ |
| 643 | 0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D, \ |
| 644 | 0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B, \ |
| 645 | 0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64, \ |
| 646 | 0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, \ |
| 647 | 0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, \ |
| 648 | 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C, \ |
| 649 | 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2, \ |
| 650 | 0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31, \ |
| 651 | 0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E, \ |
| 652 | 0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x21, 0x08, 0x01, \ |
| 653 | 0x1A, 0x72, 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7, \ |
| 654 | 0x88, 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26, \ |
| 655 | 0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, 0x3C, \ |
| 656 | 0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, 0x0B, 0xDA, \ |
| 657 | 0x25, 0x83, 0xE9, 0xCA, 0x2A, 0xD4, 0x4C, 0xE8, \ |
| 658 | 0xDB, 0xBB, 0xC2, 0xDB, 0x04, 0xDE, 0x8E, 0xF9, \ |
| 659 | 0x2E, 0x8E, 0xFC, 0x14, 0x1F, 0xBE, 0xCA, 0xA6, \ |
| 660 | 0x28, 0x7C, 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D, \ |
| 661 | 0x99, 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2, \ |
| 662 | 0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, 0xED, \ |
| 663 | 0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, 0xD7, 0xAF, \ |
| 664 | 0xB8, 0x1B, 0xDD, 0x76, 0x21, 0x70, 0x48, 0x1C, \ |
| 665 | 0xD0, 0x06, 0x91, 0x27, 0xD5, 0xB0, 0x5A, 0xA9, \ |
| 666 | 0x93, 0xB4, 0xEA, 0x98, 0x8D, 0x8F, 0xDD, 0xC1, \ |
| 667 | 0x86, 0xFF, 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F, \ |
| 668 | 0x4D, 0xF4, 0x35, 0xC9, 0x34, 0x06, 0x31, 0x99, \ |
| 669 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } |
| 670 | |
| 671 | #define MBEDTLS_DHM_RFC3526_MODP_4096_G_BIN { 0x02 } |
| 672 | |
| 673 | #define MBEDTLS_DHM_RFC7919_FFDHE2048_P_BIN { \ |
| 674 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ |
| 675 | 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ |
| 676 | 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ |
| 677 | 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ |
| 678 | 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ |
| 679 | 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ |
| 680 | 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ |
| 681 | 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ |
| 682 | 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ |
| 683 | 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ |
| 684 | 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ |
| 685 | 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ |
| 686 | 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ |
| 687 | 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ |
| 688 | 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ |
| 689 | 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ |
| 690 | 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ |
| 691 | 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ |
| 692 | 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ |
| 693 | 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ |
| 694 | 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ |
| 695 | 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ |
| 696 | 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ |
| 697 | 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ |
| 698 | 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ |
| 699 | 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ |
| 700 | 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ |
| 701 | 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ |
| 702 | 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ |
| 703 | 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ |
| 704 | 0x88, 0x6B, 0x42, 0x38, 0x61, 0x28, 0x5C, 0x97, \ |
| 705 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, } |
| 706 | |
| 707 | #define MBEDTLS_DHM_RFC7919_FFDHE2048_G_BIN { 0x02 } |
| 708 | |
| 709 | #define MBEDTLS_DHM_RFC7919_FFDHE3072_P_BIN { \ |
| 710 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ |
| 711 | 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ |
| 712 | 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ |
| 713 | 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ |
| 714 | 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ |
| 715 | 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ |
| 716 | 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ |
| 717 | 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ |
| 718 | 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ |
| 719 | 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ |
| 720 | 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ |
| 721 | 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ |
| 722 | 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ |
| 723 | 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ |
| 724 | 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ |
| 725 | 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ |
| 726 | 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ |
| 727 | 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ |
| 728 | 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ |
| 729 | 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ |
| 730 | 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ |
| 731 | 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ |
| 732 | 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ |
| 733 | 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ |
| 734 | 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ |
| 735 | 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ |
| 736 | 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ |
| 737 | 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ |
| 738 | 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ |
| 739 | 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ |
| 740 | 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ |
| 741 | 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ |
| 742 | 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ |
| 743 | 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ |
| 744 | 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ |
| 745 | 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ |
| 746 | 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ |
| 747 | 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ |
| 748 | 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ |
| 749 | 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ |
| 750 | 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ |
| 751 | 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ |
| 752 | 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ |
| 753 | 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ |
| 754 | 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ |
| 755 | 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ |
| 756 | 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0xC6, 0x2E, 0x37, \ |
| 757 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } |
| 758 | |
| 759 | #define MBEDTLS_DHM_RFC7919_FFDHE3072_G_BIN { 0x02 } |
| 760 | |
| 761 | #define MBEDTLS_DHM_RFC7919_FFDHE4096_P_BIN { \ |
| 762 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ |
| 763 | 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ |
| 764 | 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ |
| 765 | 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ |
| 766 | 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ |
| 767 | 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ |
| 768 | 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ |
| 769 | 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ |
| 770 | 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ |
| 771 | 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ |
| 772 | 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ |
| 773 | 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ |
| 774 | 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ |
| 775 | 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ |
| 776 | 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ |
| 777 | 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ |
| 778 | 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ |
| 779 | 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ |
| 780 | 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ |
| 781 | 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ |
| 782 | 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ |
| 783 | 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ |
| 784 | 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ |
| 785 | 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ |
| 786 | 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ |
| 787 | 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ |
| 788 | 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ |
| 789 | 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ |
| 790 | 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ |
| 791 | 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ |
| 792 | 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ |
| 793 | 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ |
| 794 | 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ |
| 795 | 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ |
| 796 | 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ |
| 797 | 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ |
| 798 | 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ |
| 799 | 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ |
| 800 | 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ |
| 801 | 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ |
| 802 | 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ |
| 803 | 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ |
| 804 | 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ |
| 805 | 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ |
| 806 | 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ |
| 807 | 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ |
| 808 | 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \ |
| 809 | 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \ |
| 810 | 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \ |
| 811 | 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \ |
| 812 | 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \ |
| 813 | 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \ |
| 814 | 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \ |
| 815 | 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \ |
| 816 | 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \ |
| 817 | 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \ |
| 818 | 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \ |
| 819 | 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \ |
| 820 | 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \ |
| 821 | 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \ |
| 822 | 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \ |
| 823 | 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \ |
| 824 | 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x65, 0x5F, 0x6A, \ |
| 825 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } |
| 826 | |
| 827 | #define MBEDTLS_DHM_RFC7919_FFDHE4096_G_BIN { 0x02 } |
| 828 | |
| 829 | #define MBEDTLS_DHM_RFC7919_FFDHE6144_P_BIN { \ |
| 830 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ |
| 831 | 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ |
| 832 | 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ |
| 833 | 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ |
| 834 | 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ |
| 835 | 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ |
| 836 | 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ |
| 837 | 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ |
| 838 | 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ |
| 839 | 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ |
| 840 | 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ |
| 841 | 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ |
| 842 | 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ |
| 843 | 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ |
| 844 | 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ |
| 845 | 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ |
| 846 | 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ |
| 847 | 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ |
| 848 | 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ |
| 849 | 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ |
| 850 | 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ |
| 851 | 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ |
| 852 | 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ |
| 853 | 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ |
| 854 | 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ |
| 855 | 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ |
| 856 | 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ |
| 857 | 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ |
| 858 | 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ |
| 859 | 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ |
| 860 | 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ |
| 861 | 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ |
| 862 | 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ |
| 863 | 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ |
| 864 | 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ |
| 865 | 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ |
| 866 | 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ |
| 867 | 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ |
| 868 | 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ |
| 869 | 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ |
| 870 | 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ |
| 871 | 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ |
| 872 | 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ |
| 873 | 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ |
| 874 | 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ |
| 875 | 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ |
| 876 | 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \ |
| 877 | 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \ |
| 878 | 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \ |
| 879 | 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \ |
| 880 | 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \ |
| 881 | 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \ |
| 882 | 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \ |
| 883 | 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \ |
| 884 | 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \ |
| 885 | 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \ |
| 886 | 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \ |
| 887 | 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \ |
| 888 | 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \ |
| 889 | 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \ |
| 890 | 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \ |
| 891 | 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \ |
| 892 | 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \ |
| 893 | 0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \ |
| 894 | 0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \ |
| 895 | 0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \ |
| 896 | 0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \ |
| 897 | 0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \ |
| 898 | 0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \ |
| 899 | 0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \ |
| 900 | 0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \ |
| 901 | 0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \ |
| 902 | 0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \ |
| 903 | 0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \ |
| 904 | 0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \ |
| 905 | 0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \ |
| 906 | 0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \ |
| 907 | 0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \ |
| 908 | 0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \ |
| 909 | 0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \ |
| 910 | 0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \ |
| 911 | 0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \ |
| 912 | 0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \ |
| 913 | 0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \ |
| 914 | 0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \ |
| 915 | 0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \ |
| 916 | 0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \ |
| 917 | 0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \ |
| 918 | 0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \ |
| 919 | 0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \ |
| 920 | 0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \ |
| 921 | 0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \ |
| 922 | 0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \ |
| 923 | 0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \ |
| 924 | 0xA4, 0x0E, 0x32, 0x9C, 0xD0, 0xE4, 0x0E, 0x65, \ |
| 925 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } |
| 926 | |
| 927 | #define MBEDTLS_DHM_RFC7919_FFDHE6144_G_BIN { 0x02 } |
| 928 | |
| 929 | #define MBEDTLS_DHM_RFC7919_FFDHE8192_P_BIN { \ |
| 930 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ |
| 931 | 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ |
| 932 | 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ |
| 933 | 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ |
| 934 | 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ |
| 935 | 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ |
| 936 | 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ |
| 937 | 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ |
| 938 | 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ |
| 939 | 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ |
| 940 | 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ |
| 941 | 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ |
| 942 | 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ |
| 943 | 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ |
| 944 | 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ |
| 945 | 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ |
| 946 | 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ |
| 947 | 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ |
| 948 | 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ |
| 949 | 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ |
| 950 | 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ |
| 951 | 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ |
| 952 | 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ |
| 953 | 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ |
| 954 | 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ |
| 955 | 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ |
| 956 | 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ |
| 957 | 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ |
| 958 | 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ |
| 959 | 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ |
| 960 | 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ |
| 961 | 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ |
| 962 | 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ |
| 963 | 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ |
| 964 | 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ |
| 965 | 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ |
| 966 | 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ |
| 967 | 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ |
| 968 | 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ |
| 969 | 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ |
| 970 | 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ |
| 971 | 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ |
| 972 | 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ |
| 973 | 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ |
| 974 | 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ |
| 975 | 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ |
| 976 | 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \ |
| 977 | 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \ |
| 978 | 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \ |
| 979 | 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \ |
| 980 | 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \ |
| 981 | 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \ |
| 982 | 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \ |
| 983 | 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \ |
| 984 | 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \ |
| 985 | 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \ |
| 986 | 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \ |
| 987 | 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \ |
| 988 | 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \ |
| 989 | 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \ |
| 990 | 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \ |
| 991 | 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \ |
| 992 | 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \ |
| 993 | 0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \ |
| 994 | 0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \ |
| 995 | 0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \ |
| 996 | 0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \ |
| 997 | 0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \ |
| 998 | 0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \ |
| 999 | 0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \ |
| 1000 | 0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \ |
| 1001 | 0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \ |
| 1002 | 0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \ |
| 1003 | 0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \ |
| 1004 | 0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \ |
| 1005 | 0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \ |
| 1006 | 0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \ |
| 1007 | 0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \ |
| 1008 | 0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \ |
| 1009 | 0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \ |
| 1010 | 0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \ |
| 1011 | 0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \ |
| 1012 | 0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \ |
| 1013 | 0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \ |
| 1014 | 0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \ |
| 1015 | 0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \ |
| 1016 | 0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \ |
| 1017 | 0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \ |
| 1018 | 0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \ |
| 1019 | 0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \ |
| 1020 | 0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \ |
| 1021 | 0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \ |
| 1022 | 0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \ |
| 1023 | 0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \ |
| 1024 | 0xA4, 0x0E, 0x32, 0x9C, 0xCF, 0xF4, 0x6A, 0xAA, \ |
| 1025 | 0x36, 0xAD, 0x00, 0x4C, 0xF6, 0x00, 0xC8, 0x38, \ |
| 1026 | 0x1E, 0x42, 0x5A, 0x31, 0xD9, 0x51, 0xAE, 0x64, \ |
| 1027 | 0xFD, 0xB2, 0x3F, 0xCE, 0xC9, 0x50, 0x9D, 0x43, \ |
| 1028 | 0x68, 0x7F, 0xEB, 0x69, 0xED, 0xD1, 0xCC, 0x5E, \ |
| 1029 | 0x0B, 0x8C, 0xC3, 0xBD, 0xF6, 0x4B, 0x10, 0xEF, \ |
| 1030 | 0x86, 0xB6, 0x31, 0x42, 0xA3, 0xAB, 0x88, 0x29, \ |
| 1031 | 0x55, 0x5B, 0x2F, 0x74, 0x7C, 0x93, 0x26, 0x65, \ |
| 1032 | 0xCB, 0x2C, 0x0F, 0x1C, 0xC0, 0x1B, 0xD7, 0x02, \ |
| 1033 | 0x29, 0x38, 0x88, 0x39, 0xD2, 0xAF, 0x05, 0xE4, \ |
| 1034 | 0x54, 0x50, 0x4A, 0xC7, 0x8B, 0x75, 0x82, 0x82, \ |
| 1035 | 0x28, 0x46, 0xC0, 0xBA, 0x35, 0xC3, 0x5F, 0x5C, \ |
| 1036 | 0x59, 0x16, 0x0C, 0xC0, 0x46, 0xFD, 0x82, 0x51, \ |
| 1037 | 0x54, 0x1F, 0xC6, 0x8C, 0x9C, 0x86, 0xB0, 0x22, \ |
| 1038 | 0xBB, 0x70, 0x99, 0x87, 0x6A, 0x46, 0x0E, 0x74, \ |
| 1039 | 0x51, 0xA8, 0xA9, 0x31, 0x09, 0x70, 0x3F, 0xEE, \ |
| 1040 | 0x1C, 0x21, 0x7E, 0x6C, 0x38, 0x26, 0xE5, 0x2C, \ |
| 1041 | 0x51, 0xAA, 0x69, 0x1E, 0x0E, 0x42, 0x3C, 0xFC, \ |
| 1042 | 0x99, 0xE9, 0xE3, 0x16, 0x50, 0xC1, 0x21, 0x7B, \ |
| 1043 | 0x62, 0x48, 0x16, 0xCD, 0xAD, 0x9A, 0x95, 0xF9, \ |
| 1044 | 0xD5, 0xB8, 0x01, 0x94, 0x88, 0xD9, 0xC0, 0xA0, \ |
| 1045 | 0xA1, 0xFE, 0x30, 0x75, 0xA5, 0x77, 0xE2, 0x31, \ |
| 1046 | 0x83, 0xF8, 0x1D, 0x4A, 0x3F, 0x2F, 0xA4, 0x57, \ |
| 1047 | 0x1E, 0xFC, 0x8C, 0xE0, 0xBA, 0x8A, 0x4F, 0xE8, \ |
| 1048 | 0xB6, 0x85, 0x5D, 0xFE, 0x72, 0xB0, 0xA6, 0x6E, \ |
| 1049 | 0xDE, 0xD2, 0xFB, 0xAB, 0xFB, 0xE5, 0x8A, 0x30, \ |
| 1050 | 0xFA, 0xFA, 0xBE, 0x1C, 0x5D, 0x71, 0xA8, 0x7E, \ |
| 1051 | 0x2F, 0x74, 0x1E, 0xF8, 0xC1, 0xFE, 0x86, 0xFE, \ |
| 1052 | 0xA6, 0xBB, 0xFD, 0xE5, 0x30, 0x67, 0x7F, 0x0D, \ |
| 1053 | 0x97, 0xD1, 0x1D, 0x49, 0xF7, 0xA8, 0x44, 0x3D, \ |
| 1054 | 0x08, 0x22, 0xE5, 0x06, 0xA9, 0xF4, 0x61, 0x4E, \ |
| 1055 | 0x01, 0x1E, 0x2A, 0x94, 0x83, 0x8F, 0xF8, 0x8C, \ |
| 1056 | 0xD6, 0x8C, 0x8B, 0xB7, 0xC5, 0xC6, 0x42, 0x4C, \ |
| 1057 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } |
| 1058 | |
| 1059 | #define MBEDTLS_DHM_RFC7919_FFDHE8192_G_BIN { 0x02 } |
| 1060 | |
Paul Bakker | 9af723c | 2014-05-01 13:03:14 +0200 | [diff] [blame] | 1061 | #endif /* dhm.h */ |