Sidol Freiburg

Brainpool Curve in ECDSA Certificate

2

Hello! I ran into some difficulties when using a brainpool curve in a certificat during ECDSA. It seems that the X509Certificate class in https://github.com/tls-attacker/TLS-Attacker/blob/a5e9b78b01026b076152ca9aa2773406ed7a854b/TLS-Core/src/main/java/de/rub/nds/tlsattacker/core/util/CertificateUtils.java#L125 does not support the brainpool curves....

SignatureAndHash ambiguity

1

Hello! In the report there is a list of supported SignatureAndHash algorithms. This summarizes the algorithms used for signing during the handshake and for the signature of the certificate used....

Hi! There is an unknown cipher suite with a duplicate Iana value in the CipherSuite class: https://github.com/tls-attacker/TLS-Attacker/blob/5fe4faf6e06e4422c20b01c3f756c7bc7cf1d0b8/TLS-Core/src/main/java/de/rub/nds/tlsattacker/core/constants/CipherSuite.java#L372 We could not find a definition for TLS_PSK_DHE_WITH_AES_256_CCM_80. Best regards Matthias

Question concerning Named Groups according to RFC 8734

1

Hello! RFC 8734 re-introduces the Brainpools Named Groups as _enum { brainpoolP256r1tls13(31), brainpoolP384r1tls13(32), brainpoolP512r1tls13(33) } NamedGroup;_ Now that I have seen those in the wild, I wanted to ask if...