Add support for RFC 8998 and draft-yang-tls-hybrid-sm2-mlkem

Browse Source

The commit adds support for RFC 8998 and draft-yang-tls-hybrid-sm2-mlkem. This includes support for the TLS_SM4_GCM_SM3 and TLS_SM4_CCM_SM3 cipher suites, the key exchange groups curveSM2 and curveSM2MLKEM768, and SM2 public keys and signatures.

While this commit adds support to tls_sockets() to decrypt server responses encrypted under SM4 GCM or CCM, OpenSSL does not support performing key derivation using curveSM2. So, tls_sockets() can not decrypt server responses if the key exchange was performed using curveSM2 or curveSM2MLKEM768.

...

This commit is contained in:

David Cooper

2024-11-22 14:05:33 -08:00

committed by David

parent 3f9eb84778

commit 3be7a854cb

6 changed files with 240 additions and 92 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

86

etc/tls_data.txt

File diff suppressed because one or more lines are too long