mbedtls icon indicating copy to clipboard operation
mbedtls copied to clipboard

Remove DHE-PSK key exchange

Open gilles-peskine-arm opened this issue 4 months ago • 0 comments

Remove the DHE-PSK key exchange.

  • Prerequisites:
    • Test cases: none
  • Config option: MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
  • Key exchange type: MBEDTLS_KEY_EXCHANGE_DHE_PSK
  • Affected cipher suite macros regex: MBEDTLS_TLS_DHE_PSK_\w+
  • Full list of cipher suite names: TLS-DHE-PSK-WITH-CHACHA20-POLY1305-SHA256 TLS-DHE-PSK-WITH-AES-256-GCM-SHA384 TLS-DHE-PSK-WITH-AES-256-CCM TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 TLS-DHE-PSK-WITH-AES-256-CBC-SHA TLS-DHE-PSK-WITH-CAMELLIA-256-GCM-SHA384 TLS-DHE-PSK-WITH-CAMELLIA-256-CBC-SHA384 TLS-DHE-PSK-WITH-AES-256-CCM-8 TLS-DHE-PSK-WITH-ARIA-256-GCM-SHA384 TLS-DHE-PSK-WITH-ARIA-256-CBC-SHA384 TLS-DHE-PSK-WITH-AES-128-GCM-SHA256 TLS-DHE-PSK-WITH-AES-128-CCM TLS-DHE-PSK-WITH-AES-128-CBC-SHA256 TLS-DHE-PSK-WITH-AES-128-CBC-SHA TLS-DHE-PSK-WITH-CAMELLIA-128-GCM-SHA256 TLS-DHE-PSK-WITH-CAMELLIA-128-CBC-SHA256 TLS-DHE-PSK-WITH-AES-128-CCM-8 TLS-DHE-PSK-WITH-ARIA-128-GCM-SHA256 TLS-DHE-PSK-WITH-ARIA-128-CBC-SHA256 TLS-DHE-PSK-WITH-NULL-SHA384 TLS-DHE-PSK-WITH-NULL-SHA256 TLS-DHE-PSK-WITH-NULL-SHA

Follow the steps in https://github.com/Mbed-TLS/mbedtls/issues/9681 unless there is a good reason to deviate.

gilles-peskine-arm avatar Oct 10 '24 21:10 gilles-peskine-arm