| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1 | /** | 
|  | 2 | * \file dhm.h | 
| Paul Bakker | e0ccd0a | 2009-01-04 16:27:10 +0000 | [diff] [blame] | 3 | * | 
| Darryl Green | 11999bb | 2018-03-13 15:22:58 +0000 | [diff] [blame] | 4 | * \brief   This file contains Diffie-Hellman-Merkle (DHM) key exchange | 
| Rose Zadik | ee96359 | 2018-04-18 09:46:12 +0100 | [diff] [blame] | 5 | *          definitions and functions. | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 6 | * | 
|  | 7 | * Diffie-Hellman-Merkle (DHM) key exchange is defined in | 
| Darryl Green | 11999bb | 2018-03-13 15:22:58 +0000 | [diff] [blame] | 8 | * <em>RFC-2631: Diffie-Hellman Key Agreement Method</em> and | 
|  | 9 | * <em>Public-Key Cryptography Standards (PKCS) #3: Diffie | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 10 | * Hellman Key Agreement Standard</em>. | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 11 | * | 
|  | 12 | * <em>RFC-3526: More Modular Exponential (MODP) Diffie-Hellman groups for | 
|  | 13 | * Internet Key Exchange (IKE)</em> defines a number of standardized | 
|  | 14 | * Diffie-Hellman groups for IKE. | 
|  | 15 | * | 
|  | 16 | * <em>RFC-5114: Additional Diffie-Hellman Groups for Use with IETF | 
|  | 17 | * Standards</em> defines a number of standardized Diffie-Hellman | 
|  | 18 | * groups that can be used. | 
| Paul Bakker | 37ca75d | 2011-01-06 12:28:03 +0000 | [diff] [blame] | 19 | * | 
| Jaeden Amero | 784de59 | 2018-01-26 17:52:01 +0000 | [diff] [blame] | 20 | * \warning  The security of the DHM key exchange relies on the proper choice | 
|  | 21 | *           of prime modulus - optimally, it should be a safe prime. The usage | 
|  | 22 | *           of non-safe primes both decreases the difficulty of the underlying | 
|  | 23 | *           discrete logarithm problem and can lead to small subgroup attacks | 
|  | 24 | *           leaking private exponent bits when invalid public keys are used | 
|  | 25 | *           and not detected. This is especially relevant if the same DHM | 
|  | 26 | *           parameters are reused for multiple key exchanges as in static DHM, | 
|  | 27 | *           while the criticality of small-subgroup attacks is lower for | 
|  | 28 | *           ephemeral DHM. | 
|  | 29 | * | 
|  | 30 | * \warning  For performance reasons, the code does neither perform primality | 
|  | 31 | *           nor safe primality tests, nor the expensive checks for invalid | 
|  | 32 | *           subgroups. Moreover, even if these were performed, non-standardized | 
|  | 33 | *           primes cannot be trusted because of the possibility of backdoors | 
|  | 34 | *           that can't be effectively checked for. | 
|  | 35 | * | 
|  | 36 | * \warning  Diffie-Hellman-Merkle is therefore a security risk when not using | 
|  | 37 | *           standardized primes generated using a trustworthy ("nothing up | 
|  | 38 | *           my sleeve") method, such as the RFC 3526 / 7919 primes. In the TLS | 
|  | 39 | *           protocol, DH parameters need to be negotiated, so using the default | 
|  | 40 | *           primes systematically is not always an option. If possible, use | 
|  | 41 | *           Elliptic Curve Diffie-Hellman (ECDH), which has better performance, | 
|  | 42 | *           and for which the TLS protocol mandates the use of standard | 
|  | 43 | *           parameters. | 
|  | 44 | * | 
| Darryl Green | a40a101 | 2018-01-05 15:33:17 +0000 | [diff] [blame] | 45 | */ | 
|  | 46 | /* | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 47 | *  Copyright (C) 2006-2018, Arm Limited (or its affiliates), All Rights Reserved | 
| Manuel Pégourié-Gonnard | 37ff140 | 2015-09-04 14:21:07 +0200 | [diff] [blame] | 48 | *  SPDX-License-Identifier: Apache-2.0 | 
|  | 49 | * | 
|  | 50 | *  Licensed under the Apache License, Version 2.0 (the "License"); you may | 
|  | 51 | *  not use this file except in compliance with the License. | 
|  | 52 | *  You may obtain a copy of the License at | 
|  | 53 | * | 
|  | 54 | *  http://www.apache.org/licenses/LICENSE-2.0 | 
|  | 55 | * | 
|  | 56 | *  Unless required by applicable law or agreed to in writing, software | 
|  | 57 | *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT | 
|  | 58 | *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | 
|  | 59 | *  See the License for the specific language governing permissions and | 
|  | 60 | *  limitations under the License. | 
| Paul Bakker | b96f154 | 2010-07-18 20:36:00 +0000 | [diff] [blame] | 61 | * | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 62 | *  This file is part of Mbed TLS (https://tls.mbed.org) | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 63 | */ | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 64 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 65 | #ifndef MBEDTLS_DHM_H | 
|  | 66 | #define MBEDTLS_DHM_H | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 67 |  | 
| Reuven Levin | 1f35ca9 | 2017-12-07 10:09:32 +0000 | [diff] [blame] | 68 | #if !defined(MBEDTLS_CONFIG_FILE) | 
|  | 69 | #include "config.h" | 
|  | 70 | #else | 
|  | 71 | #include MBEDTLS_CONFIG_FILE | 
|  | 72 | #endif | 
| Paul Bakker | 314052f | 2011-08-15 09:07:52 +0000 | [diff] [blame] | 73 | #include "bignum.h" | 
| Reuven Levin | 1f35ca9 | 2017-12-07 10:09:32 +0000 | [diff] [blame] | 74 |  | 
| Paul Bakker | f3b86c1 | 2011-01-27 15:24:17 +0000 | [diff] [blame] | 75 | /* | 
|  | 76 | * DHM Error codes | 
|  | 77 | */ | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 78 | #define MBEDTLS_ERR_DHM_BAD_INPUT_DATA                    -0x3080  /**< Bad input parameters. */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 79 | #define MBEDTLS_ERR_DHM_READ_PARAMS_FAILED                -0x3100  /**< Reading of the DHM parameters failed. */ | 
|  | 80 | #define MBEDTLS_ERR_DHM_MAKE_PARAMS_FAILED                -0x3180  /**< Making of the DHM parameters failed. */ | 
|  | 81 | #define MBEDTLS_ERR_DHM_READ_PUBLIC_FAILED                -0x3200  /**< Reading of the public values failed. */ | 
|  | 82 | #define MBEDTLS_ERR_DHM_MAKE_PUBLIC_FAILED                -0x3280  /**< Making of the public value failed. */ | 
|  | 83 | #define MBEDTLS_ERR_DHM_CALC_SECRET_FAILED                -0x3300  /**< Calculation of the DHM secret failed. */ | 
|  | 84 | #define MBEDTLS_ERR_DHM_INVALID_FORMAT                    -0x3380  /**< The ASN.1 data is not formatted correctly. */ | 
| Manuel Pégourié-Gonnard | 6a8ca33 | 2015-05-28 09:33:39 +0200 | [diff] [blame] | 85 | #define MBEDTLS_ERR_DHM_ALLOC_FAILED                      -0x3400  /**< Allocation of memory failed. */ | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 86 | #define MBEDTLS_ERR_DHM_FILE_IO_ERROR                     -0x3480  /**< Read or write of file failed. */ | 
| Ron Eldor | 9924bdc | 2018-10-04 10:59:13 +0300 | [diff] [blame] | 87 |  | 
|  | 88 | /* MBEDTLS_ERR_DHM_HW_ACCEL_FAILED is deprecated and should not be used. */ | 
| Gilles Peskine | 7ecab3d | 2018-01-26 17:56:38 +0100 | [diff] [blame] | 89 | #define MBEDTLS_ERR_DHM_HW_ACCEL_FAILED                   -0x3500  /**< DHM hardware accelerator failed. */ | 
| Ron Eldor | 9924bdc | 2018-10-04 10:59:13 +0300 | [diff] [blame] | 90 |  | 
| Jaeden Amero | 2acbf17 | 2018-01-26 20:57:38 +0000 | [diff] [blame] | 91 | #define MBEDTLS_ERR_DHM_SET_GROUP_FAILED                  -0x3580  /**< Setting the modulus and generator failed. */ | 
| Paul Bakker | 29b6476 | 2012-09-25 09:36:44 +0000 | [diff] [blame] | 92 |  | 
| Paul Bakker | 407a0da | 2013-06-27 14:29:21 +0200 | [diff] [blame] | 93 | #ifdef __cplusplus | 
|  | 94 | extern "C" { | 
|  | 95 | #endif | 
|  | 96 |  | 
| Ron Eldor | 4e6d55d | 2018-02-07 16:36:15 +0200 | [diff] [blame] | 97 | #if !defined(MBEDTLS_DHM_ALT) | 
|  | 98 |  | 
| Paul Bakker | 29b6476 | 2012-09-25 09:36:44 +0000 | [diff] [blame] | 99 | /** | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 100 | * \brief          The DHM context structure. | 
| Paul Bakker | f3b86c1 | 2011-01-27 15:24:17 +0000 | [diff] [blame] | 101 | */ | 
| Dawid Drozd | 428cc52 | 2018-07-24 10:02:47 +0200 | [diff] [blame] | 102 | typedef struct mbedtls_dhm_context | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 103 | { | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 104 | size_t len;         /*!<  The size of \p P in Bytes. */ | 
|  | 105 | mbedtls_mpi P;      /*!<  The prime modulus. */ | 
|  | 106 | mbedtls_mpi G;      /*!<  The generator. */ | 
|  | 107 | mbedtls_mpi X;      /*!<  Our secret value. */ | 
|  | 108 | mbedtls_mpi GX;     /*!<  Our public key = \c G^X mod \c P. */ | 
|  | 109 | mbedtls_mpi GY;     /*!<  The public key of the peer = \c G^Y mod \c P. */ | 
|  | 110 | mbedtls_mpi K;      /*!<  The shared secret = \c G^(XY) mod \c P. */ | 
|  | 111 | mbedtls_mpi RP;     /*!<  The cached value = \c R^2 mod \c P. */ | 
|  | 112 | mbedtls_mpi Vi;     /*!<  The blinding value. */ | 
|  | 113 | mbedtls_mpi Vf;     /*!<  The unblinding value. */ | 
|  | 114 | mbedtls_mpi pX;     /*!<  The previous \c X. */ | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 115 | } | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 116 | mbedtls_dhm_context; | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 117 |  | 
| Ron Eldor | 4e6d55d | 2018-02-07 16:36:15 +0200 | [diff] [blame] | 118 | #else /* MBEDTLS_DHM_ALT */ | 
|  | 119 | #include "dhm_alt.h" | 
|  | 120 | #endif /* MBEDTLS_DHM_ALT */ | 
|  | 121 |  | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 122 | /** | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 123 | * \brief          This function initializes the DHM context. | 
| Paul Bakker | 8f870b0 | 2014-06-20 13:32:38 +0200 | [diff] [blame] | 124 | * | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 125 | * \param ctx      The DHM context to initialize. | 
| Paul Bakker | 8f870b0 | 2014-06-20 13:32:38 +0200 | [diff] [blame] | 126 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 127 | void mbedtls_dhm_init( mbedtls_dhm_context *ctx ); | 
| Paul Bakker | 8f870b0 | 2014-06-20 13:32:38 +0200 | [diff] [blame] | 128 |  | 
|  | 129 | /** | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 130 | * \brief          This function parses the ServerKeyExchange parameters. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 131 | * | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 132 | * \param ctx      The DHM context. | 
| Hanno Becker | f240ea0 | 2017-10-02 15:09:14 +0100 | [diff] [blame] | 133 | * \param p        On input, *p must be the start of the input buffer. | 
|  | 134 | *                 On output, *p is updated to point to the end of the data | 
|  | 135 | *                 that has been read. On success, this is the first byte | 
|  | 136 | *                 past the end of the ServerKeyExchange parameters. | 
|  | 137 | *                 On error, this is the point at which an error has been | 
|  | 138 | *                 detected, which is usually not useful except to debug | 
|  | 139 | *                 failures. | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 140 | * \param end      The end of the input buffer. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 141 | * | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 142 | * \return         \c 0 on success. | 
|  | 143 | * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 144 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 145 | int mbedtls_dhm_read_params( mbedtls_dhm_context *ctx, | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 146 | unsigned char **p, | 
| Paul Bakker | ff60ee6 | 2010-03-16 21:09:09 +0000 | [diff] [blame] | 147 | const unsigned char *end ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 148 |  | 
|  | 149 | /** | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 150 | * \brief          This function sets up and writes the ServerKeyExchange | 
|  | 151 | *                 parameters. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 152 | * | 
| Hanno Becker | e764324 | 2017-09-28 10:33:11 +0100 | [diff] [blame] | 153 | * \note           The destination buffer must be large enough to hold | 
| Hanno Becker | 70da2c5 | 2017-10-02 15:02:59 +0100 | [diff] [blame] | 154 | *                 the reduced binary presentation of the modulus, the generator | 
|  | 155 | *                 and the public key, each wrapped with a 2-byte length field. | 
|  | 156 | *                 It is the responsibility of the caller to ensure that enough | 
|  | 157 | *                 space is available. Refer to \c mbedtls_mpi_size to computing | 
|  | 158 | *                 the byte-size of an MPI. | 
| Hanno Becker | e764324 | 2017-09-28 10:33:11 +0100 | [diff] [blame] | 159 | * | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 160 | * \note           This function assumes that \c ctx->P and \c ctx->G | 
| Hanno Becker | 8880e75 | 2017-10-04 13:15:08 +0100 | [diff] [blame] | 161 | *                 have already been properly set. For that, use | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 162 | *                 mbedtls_dhm_set_group() below in conjunction with | 
|  | 163 | *                 mbedtls_mpi_read_binary() and mbedtls_mpi_read_string(). | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 164 | * | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 165 | * \param ctx      The DHM context. | 
|  | 166 | * \param x_size   The private key size in Bytes. | 
|  | 167 | * \param olen     The number of characters written. | 
|  | 168 | * \param output   The destination buffer. | 
|  | 169 | * \param f_rng    The RNG function. | 
|  | 170 | * \param p_rng    The RNG context. | 
|  | 171 | * | 
|  | 172 | * \return         \c 0 on success. | 
|  | 173 | * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 174 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 175 | int mbedtls_dhm_make_params( mbedtls_dhm_context *ctx, int x_size, | 
| Paul Bakker | 23986e5 | 2011-04-24 08:57:21 +0000 | [diff] [blame] | 176 | unsigned char *output, size_t *olen, | 
| Paul Bakker | a3d195c | 2011-11-27 21:07:34 +0000 | [diff] [blame] | 177 | int (*f_rng)(void *, unsigned char *, size_t), | 
|  | 178 | void *p_rng ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 179 |  | 
|  | 180 | /** | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 181 | * \brief          This function sets the prime modulus and generator. | 
|  | 182 | * | 
|  | 183 | * \note           This function can be used to set \p P, \p G | 
|  | 184 | *                 in preparation for mbedtls_dhm_make_params(). | 
| Hanno Becker | 8880e75 | 2017-10-04 13:15:08 +0100 | [diff] [blame] | 185 | * | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 186 | * \param ctx      The DHM context. | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 187 | * \param P        The MPI holding the DHM prime modulus. | 
|  | 188 | * \param G        The MPI holding the DHM generator. | 
| Hanno Becker | 8880e75 | 2017-10-04 13:15:08 +0100 | [diff] [blame] | 189 | * | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 190 | * \return         \c 0 if successful. | 
|  | 191 | * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure. | 
| Hanno Becker | 8880e75 | 2017-10-04 13:15:08 +0100 | [diff] [blame] | 192 | */ | 
|  | 193 | int mbedtls_dhm_set_group( mbedtls_dhm_context *ctx, | 
|  | 194 | const mbedtls_mpi *P, | 
|  | 195 | const mbedtls_mpi *G ); | 
|  | 196 |  | 
|  | 197 | /** | 
| Rose Zadik | ee96359 | 2018-04-18 09:46:12 +0100 | [diff] [blame] | 198 | * \brief          This function imports the public value of the peer, G^Y. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 199 | * | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 200 | * \param ctx      The DHM context. | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 201 | * \param input    The input buffer containing the G^Y value of the peer. | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 202 | * \param ilen     The size of the input buffer. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 203 | * | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 204 | * \return         \c 0 on success. | 
|  | 205 | * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 206 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 207 | int mbedtls_dhm_read_public( mbedtls_dhm_context *ctx, | 
| Paul Bakker | 23986e5 | 2011-04-24 08:57:21 +0000 | [diff] [blame] | 208 | const unsigned char *input, size_t ilen ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 209 |  | 
|  | 210 | /** | 
| Rose Zadik | ee96359 | 2018-04-18 09:46:12 +0100 | [diff] [blame] | 211 | * \brief          This function creates its own private key, \c X, and | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 212 | *                 exports \c G^X. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 213 | * | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 214 | * \note           The destination buffer is always fully written | 
|  | 215 | *                 so as to contain a big-endian representation of G^X mod P. | 
|  | 216 | *                 If it is larger than ctx->len, it is padded accordingly | 
|  | 217 | *                 with zero-bytes at the beginning. | 
|  | 218 | * | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 219 | * \param ctx      The DHM context. | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 220 | * \param x_size   The private key size in Bytes. | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 221 | * \param output   The destination buffer. | 
|  | 222 | * \param olen     The length of the destination buffer. Must be at least | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 223 | *                  equal to ctx->len (the size of \c P). | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 224 | * \param f_rng    The RNG function. | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 225 | * \param p_rng    The RNG context. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 226 | * | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 227 | * \return         \c 0 on success. | 
|  | 228 | * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 229 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 230 | int mbedtls_dhm_make_public( mbedtls_dhm_context *ctx, int x_size, | 
| Paul Bakker | 23986e5 | 2011-04-24 08:57:21 +0000 | [diff] [blame] | 231 | unsigned char *output, size_t olen, | 
| Paul Bakker | a3d195c | 2011-11-27 21:07:34 +0000 | [diff] [blame] | 232 | int (*f_rng)(void *, unsigned char *, size_t), | 
|  | 233 | void *p_rng ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 234 |  | 
|  | 235 | /** | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 236 | * \brief               This function derives and exports the shared secret | 
|  | 237 | *                      \c (G^Y)^X mod \c P. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 238 | * | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 239 | * \note                If \p f_rng is not NULL, it is used to blind the input as | 
|  | 240 | *                      a countermeasure against timing attacks. Blinding is used | 
|  | 241 | *                      only if our private key \c X is re-used, and not used | 
|  | 242 | *                      otherwise. We recommend always passing a non-NULL | 
|  | 243 | *                      \p f_rng argument. | 
|  | 244 | * | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 245 | * \param ctx           The DHM context. | 
|  | 246 | * \param output        The destination buffer. | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 247 | * \param output_size   The size of the destination buffer. Must be at least | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 248 | *                      the size of ctx->len (the size of \c P). | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 249 | * \param olen          On exit, holds the actual number of Bytes written. | 
|  | 250 | * \param f_rng         The RNG function, for blinding purposes. | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 251 | * \param p_rng         The RNG context. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 252 | * | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 253 | * \return              \c 0 on success. | 
|  | 254 | * \return              An \c MBEDTLS_ERR_DHM_XXX error code on failure. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 255 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 256 | int mbedtls_dhm_calc_secret( mbedtls_dhm_context *ctx, | 
| Manuel Pégourié-Gonnard | 3335205 | 2015-06-02 16:17:08 +0100 | [diff] [blame] | 257 | unsigned char *output, size_t output_size, size_t *olen, | 
| Manuel Pégourié-Gonnard | 2d62764 | 2013-09-04 14:22:07 +0200 | [diff] [blame] | 258 | int (*f_rng)(void *, unsigned char *, size_t), | 
|  | 259 | void *p_rng ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 260 |  | 
| Paul Bakker | 9a73632 | 2012-11-14 12:39:52 +0000 | [diff] [blame] | 261 | /** | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 262 | * \brief          This function frees and clears the components of a DHM context. | 
| Paul Bakker | 8f870b0 | 2014-06-20 13:32:38 +0200 | [diff] [blame] | 263 | * | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 264 | * \param ctx      The DHM context to free and clear. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 265 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 266 | void mbedtls_dhm_free( mbedtls_dhm_context *ctx ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 267 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 268 | #if defined(MBEDTLS_ASN1_PARSE_C) | 
| Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 269 | /** \ingroup x509_module */ | 
|  | 270 | /** | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 271 | * \brief             This function parses DHM parameters in PEM or DER format. | 
| Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 272 | * | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 273 | * \param dhm         The DHM context to initialize. | 
|  | 274 | * \param dhmin       The input buffer. | 
|  | 275 | * \param dhminlen    The size of the buffer, including the terminating null | 
|  | 276 | *                    Byte for PEM data. | 
| Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 277 | * | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 278 | * \return            \c 0 on success. | 
| Rose Zadik | fa1fe36 | 2018-04-18 10:09:31 +0100 | [diff] [blame] | 279 | * \return            An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX error code | 
| Rose Zadik | ee96359 | 2018-04-18 09:46:12 +0100 | [diff] [blame] | 280 | *                    error code on failure. | 
| Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 281 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 282 | int mbedtls_dhm_parse_dhm( mbedtls_dhm_context *dhm, const unsigned char *dhmin, | 
| Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 283 | size_t dhminlen ); | 
|  | 284 |  | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 285 | #if defined(MBEDTLS_FS_IO) | 
| Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 286 | /** \ingroup x509_module */ | 
|  | 287 | /** | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 288 | * \brief          This function loads and parses DHM parameters from a file. | 
| Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 289 | * | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 290 | * \param dhm      The DHM context to load the parameters to. | 
|  | 291 | * \param path     The filename to read the DHM parameters from. | 
| Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 292 | * | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 293 | * \return         \c 0 on success. | 
| Rose Zadik | fa1fe36 | 2018-04-18 10:09:31 +0100 | [diff] [blame] | 294 | * \return            An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX error code | 
| Rose Zadik | ee96359 | 2018-04-18 09:46:12 +0100 | [diff] [blame] | 295 | *                    error code on failure. | 
| Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 296 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 297 | int mbedtls_dhm_parse_dhmfile( mbedtls_dhm_context *dhm, const char *path ); | 
|  | 298 | #endif /* MBEDTLS_FS_IO */ | 
|  | 299 | #endif /* MBEDTLS_ASN1_PARSE_C */ | 
| nirekh01 | d569ecf | 2018-01-09 16:43:21 +0000 | [diff] [blame] | 300 |  | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 301 | /** | 
| Rose Zadik | 41ad082 | 2018-01-26 10:54:57 +0000 | [diff] [blame] | 302 | * \brief          The DMH checkup routine. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 303 | * | 
| Rose Zadik | f763f2b | 2018-04-17 11:00:40 +0100 | [diff] [blame] | 304 | * \return         \c 0 on success. | 
|  | 305 | * \return         \c 1 on failure. | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 306 | */ | 
| Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 307 | int mbedtls_dhm_self_test( int verbose ); | 
| Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 308 |  | 
|  | 309 | #ifdef __cplusplus | 
|  | 310 | } | 
|  | 311 | #endif | 
|  | 312 |  | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 313 | /** | 
|  | 314 | * RFC 3526, RFC 5114 and RFC 7919 standardize a number of | 
|  | 315 | * Diffie-Hellman groups, some of which are included here | 
|  | 316 | * for use within the SSL/TLS module and the user's convenience | 
|  | 317 | * when configuring the Diffie-Hellman parameters by hand | 
|  | 318 | * through \c mbedtls_ssl_conf_dh_param. | 
|  | 319 | * | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 320 | * The following lists the source of the above groups in the standards: | 
|  | 321 | * - RFC 5114 section 2.2:  2048-bit MODP Group with 224-bit Prime Order Subgroup | 
|  | 322 | * - RFC 3526 section 3:    2048-bit MODP Group | 
|  | 323 | * - RFC 3526 section 4:    3072-bit MODP Group | 
|  | 324 | * - RFC 3526 section 5:    4096-bit MODP Group | 
|  | 325 | * - RFC 7919 section A.1:  ffdhe2048 | 
|  | 326 | * - RFC 7919 section A.2:  ffdhe3072 | 
|  | 327 | * - RFC 7919 section A.3:  ffdhe4096 | 
|  | 328 | * - RFC 7919 section A.4:  ffdhe6144 | 
|  | 329 | * - RFC 7919 section A.5:  ffdhe8192 | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 330 | * | 
|  | 331 | * The constants with suffix "_p" denote the chosen prime moduli, while | 
|  | 332 | * the constants with suffix "_g" denote the chosen generator | 
|  | 333 | * of the associated prime field. | 
|  | 334 | * | 
|  | 335 | * The constants further suffixed with "_bin" are provided in binary format, | 
|  | 336 | * while all other constants represent null-terminated strings holding the | 
|  | 337 | * hexadecimal presentation of the respective numbers. | 
|  | 338 | * | 
|  | 339 | * The primes from RFC 3526 and RFC 7919 have been generating by the following | 
|  | 340 | * trust-worthy procedure: | 
|  | 341 | * - Fix N in { 2048, 3072, 4096, 6144, 8192 } and consider the N-bit number | 
|  | 342 | *   the first and last 64 bits are all 1, and the remaining N - 128 bits of | 
|  | 343 | *   which are 0x7ff...ff. | 
|  | 344 | * - Add the smallest multiple of the first N - 129 bits of the binary expansion | 
|  | 345 | *   of pi (for RFC 5236) or e (for RFC 7919) to this intermediate bit-string | 
|  | 346 | *   such that the resulting integer is a safe-prime. | 
|  | 347 | * - The result is the respective RFC 3526 / 7919 prime, and the corresponding | 
|  | 348 | *   generator is always chosen to be 2 (which is a square for these prime, | 
|  | 349 | *   hence the corresponding subgroup has order (p-1)/2 and avoids leaking a | 
|  | 350 | *   bit in the private exponent). | 
|  | 351 | * | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 352 | */ | 
|  | 353 |  | 
|  | 354 | #if !defined(MBEDTLS_DEPRECATED_REMOVED) | 
|  | 355 |  | 
|  | 356 | #if defined(MBEDTLS_DEPRECATED_WARNING) | 
|  | 357 | #define MBEDTLS_DEPRECATED __attribute__((deprecated)) | 
| Jaeden Amero | 784de59 | 2018-01-26 17:52:01 +0000 | [diff] [blame] | 358 | MBEDTLS_DEPRECATED typedef char const * mbedtls_deprecated_constant_t; | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 359 | #define MBEDTLS_DEPRECATED_STRING_CONSTANT( VAL )       \ | 
| Jaeden Amero | 784de59 | 2018-01-26 17:52:01 +0000 | [diff] [blame] | 360 | ( (mbedtls_deprecated_constant_t) ( VAL ) ) | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 361 | #else | 
|  | 362 | #define MBEDTLS_DEPRECATED_STRING_CONSTANT( VAL ) VAL | 
|  | 363 | #endif /* ! MBEDTLS_DEPRECATED_WARNING */ | 
|  | 364 |  | 
|  | 365 | /** | 
|  | 366 | * \warning The origin of the primes in RFC 5114 is not documented and | 
|  | 367 | *          their use therefore constitutes a security risk! | 
|  | 368 | * | 
|  | 369 | * \deprecated The hex-encoded primes from RFC 5114 are deprecated and are | 
|  | 370 | *             likely to be removed in a future version of the library without | 
|  | 371 | *             replacement. | 
|  | 372 | */ | 
|  | 373 |  | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 374 | /** | 
|  | 375 | * The hexadecimal presentation of the prime underlying the | 
|  | 376 | * 2048-bit MODP Group with 224-bit Prime Order Subgroup, as defined | 
|  | 377 | * in <em>RFC-5114: Additional Diffie-Hellman Groups for Use with | 
|  | 378 | * IETF Standards</em>. | 
|  | 379 | */ | 
| Jaeden Amero | 129f508 | 2018-02-08 14:25:36 +0000 | [diff] [blame] | 380 | #define MBEDTLS_DHM_RFC5114_MODP_2048_P                         \ | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 381 | MBEDTLS_DEPRECATED_STRING_CONSTANT(                         \ | 
|  | 382 | "AD107E1E9123A9D0D660FAA79559C51FA20D64E5683B9FD1"      \ | 
|  | 383 | "B54B1597B61D0A75E6FA141DF95A56DBAF9A3C407BA1DF15"      \ | 
|  | 384 | "EB3D688A309C180E1DE6B85A1274A0A66D3F8152AD6AC212"      \ | 
|  | 385 | "9037C9EDEFDA4DF8D91E8FEF55B7394B7AD5B7D0B6C12207"      \ | 
|  | 386 | "C9F98D11ED34DBF6C6BA0B2C8BBC27BE6A00E0A0B9C49708"      \ | 
|  | 387 | "B3BF8A317091883681286130BC8985DB1602E714415D9330"      \ | 
|  | 388 | "278273C7DE31EFDC7310F7121FD5A07415987D9ADC0A486D"      \ | 
|  | 389 | "CDF93ACC44328387315D75E198C641A480CD86A1B9E587E8"      \ | 
|  | 390 | "BE60E69CC928B2B9C52172E413042E9B23F10B0E16E79763"      \ | 
|  | 391 | "C9B53DCF4BA80A29E3FB73C16B8E75B97EF363E2FFA31F71"      \ | 
|  | 392 | "CF9DE5384E71B81C0AC4DFFE0C10E64F" ) | 
|  | 393 |  | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 394 | /** | 
|  | 395 | * The hexadecimal presentation of the chosen generator of the 2048-bit MODP | 
|  | 396 | * Group with 224-bit Prime Order Subgroup, as defined in <em>RFC-5114: | 
|  | 397 | * Additional Diffie-Hellman Groups for Use with IETF Standards</em>. | 
|  | 398 | */ | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 399 | #define MBEDTLS_DHM_RFC5114_MODP_2048_G                         \ | 
|  | 400 | MBEDTLS_DEPRECATED_STRING_CONSTANT(                         \ | 
|  | 401 | "AC4032EF4F2D9AE39DF30B5C8FFDAC506CDEBE7B89998CAF"      \ | 
|  | 402 | "74866A08CFE4FFE3A6824A4E10B9A6F0DD921F01A70C4AFA"      \ | 
|  | 403 | "AB739D7700C29F52C57DB17C620A8652BE5E9001A8D66AD7"      \ | 
|  | 404 | "C17669101999024AF4D027275AC1348BB8A762D0521BC98A"      \ | 
|  | 405 | "E247150422EA1ED409939D54DA7460CDB5F6C6B250717CBE"      \ | 
|  | 406 | "F180EB34118E98D119529A45D6F834566E3025E316A330EF"      \ | 
|  | 407 | "BB77A86F0C1AB15B051AE3D428C8F8ACB70A8137150B8EEB"      \ | 
|  | 408 | "10E183EDD19963DDD9E263E4770589EF6AA21E7F5F2FF381"      \ | 
|  | 409 | "B539CCE3409D13CD566AFBB48D6C019181E1BCFE94B30269"      \ | 
|  | 410 | "EDFE72FE9B6AA4BD7B5A0F1C71CFFF4C19C418E1F6EC0179"      \ | 
|  | 411 | "81BC087F2A7065B384B890D3191F2BFA" ) | 
|  | 412 |  | 
|  | 413 | /** | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 414 | * The hexadecimal presentation of the prime underlying the 2048-bit MODP | 
|  | 415 | * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) | 
|  | 416 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. | 
|  | 417 | * | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 418 | * \deprecated The hex-encoded primes from RFC 3625 are deprecated and | 
|  | 419 | *             superseded by the corresponding macros providing them as | 
|  | 420 | *             binary constants. Their hex-encoded constants are likely | 
|  | 421 | *             to be removed in a future version of the library. | 
|  | 422 | * | 
|  | 423 | */ | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 424 | #define MBEDTLS_DHM_RFC3526_MODP_2048_P                         \ | 
|  | 425 | MBEDTLS_DEPRECATED_STRING_CONSTANT(                         \ | 
|  | 426 | "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1"      \ | 
|  | 427 | "29024E088A67CC74020BBEA63B139B22514A08798E3404DD"      \ | 
|  | 428 | "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245"      \ | 
|  | 429 | "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED"      \ | 
|  | 430 | "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D"      \ | 
|  | 431 | "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F"      \ | 
|  | 432 | "83655D23DCA3AD961C62F356208552BB9ED529077096966D"      \ | 
|  | 433 | "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B"      \ | 
|  | 434 | "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9"      \ | 
|  | 435 | "DE2BCBF6955817183995497CEA956AE515D2261898FA0510"      \ | 
|  | 436 | "15728E5A8AACAA68FFFFFFFFFFFFFFFF" ) | 
|  | 437 |  | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 438 | /** | 
|  | 439 | * The hexadecimal presentation of the chosen generator of the 2048-bit MODP | 
|  | 440 | * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) | 
|  | 441 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. | 
|  | 442 | */ | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 443 | #define MBEDTLS_DHM_RFC3526_MODP_2048_G                         \ | 
| Hanno Becker | 5e6b8d7 | 2017-10-04 13:41:36 +0100 | [diff] [blame] | 444 | MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" ) | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 445 |  | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 446 | /** | 
|  | 447 | * The hexadecimal presentation of the prime underlying the 3072-bit MODP | 
|  | 448 | * Group, as defined in <em>RFC-3072: More Modular Exponential (MODP) | 
|  | 449 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. | 
|  | 450 | */ | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 451 | #define MBEDTLS_DHM_RFC3526_MODP_3072_P                         \ | 
|  | 452 | MBEDTLS_DEPRECATED_STRING_CONSTANT(                         \ | 
|  | 453 | "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1"      \ | 
|  | 454 | "29024E088A67CC74020BBEA63B139B22514A08798E3404DD"      \ | 
|  | 455 | "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245"      \ | 
|  | 456 | "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED"      \ | 
|  | 457 | "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D"      \ | 
|  | 458 | "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F"      \ | 
|  | 459 | "83655D23DCA3AD961C62F356208552BB9ED529077096966D"      \ | 
|  | 460 | "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B"      \ | 
|  | 461 | "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9"      \ | 
|  | 462 | "DE2BCBF6955817183995497CEA956AE515D2261898FA0510"      \ | 
|  | 463 | "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64"      \ | 
|  | 464 | "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7"      \ | 
|  | 465 | "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B"      \ | 
|  | 466 | "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C"      \ | 
|  | 467 | "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31"      \ | 
|  | 468 | "43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF" ) | 
|  | 469 |  | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 470 | /** | 
|  | 471 | * The hexadecimal presentation of the chosen generator of the 3072-bit MODP | 
|  | 472 | * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) | 
|  | 473 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. | 
|  | 474 | */ | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 475 | #define MBEDTLS_DHM_RFC3526_MODP_3072_G                      \ | 
| Hanno Becker | 5e6b8d7 | 2017-10-04 13:41:36 +0100 | [diff] [blame] | 476 | MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" ) | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 477 |  | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 478 | /** | 
|  | 479 | * The hexadecimal presentation of the prime underlying the 4096-bit MODP | 
|  | 480 | * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) | 
|  | 481 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. | 
|  | 482 | */ | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 483 | #define MBEDTLS_DHM_RFC3526_MODP_4096_P                      \ | 
|  | 484 | MBEDTLS_DEPRECATED_STRING_CONSTANT(                      \ | 
|  | 485 | "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1"   \ | 
|  | 486 | "29024E088A67CC74020BBEA63B139B22514A08798E3404DD"   \ | 
|  | 487 | "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245"   \ | 
|  | 488 | "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED"   \ | 
|  | 489 | "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D"   \ | 
|  | 490 | "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F"   \ | 
|  | 491 | "83655D23DCA3AD961C62F356208552BB9ED529077096966D"   \ | 
|  | 492 | "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B"   \ | 
|  | 493 | "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9"   \ | 
|  | 494 | "DE2BCBF6955817183995497CEA956AE515D2261898FA0510"   \ | 
|  | 495 | "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64"   \ | 
|  | 496 | "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7"   \ | 
|  | 497 | "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B"   \ | 
|  | 498 | "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C"   \ | 
|  | 499 | "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31"   \ | 
|  | 500 | "43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7"   \ | 
|  | 501 | "88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA"   \ | 
|  | 502 | "2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6"   \ | 
|  | 503 | "287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED"   \ | 
|  | 504 | "1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9"   \ | 
|  | 505 | "93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934063199"   \ | 
|  | 506 | "FFFFFFFFFFFFFFFF" ) | 
|  | 507 |  | 
| Jaeden Amero | 9564e97 | 2018-01-30 16:56:13 +0000 | [diff] [blame] | 508 | /** | 
|  | 509 | * The hexadecimal presentation of the chosen generator of the 4096-bit MODP | 
|  | 510 | * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) | 
|  | 511 | * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. | 
|  | 512 | */ | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 513 | #define MBEDTLS_DHM_RFC3526_MODP_4096_G                      \ | 
| Hanno Becker | 5e6b8d7 | 2017-10-04 13:41:36 +0100 | [diff] [blame] | 514 | MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" ) | 
| Hanno Becker | e2fcfa8 | 2017-10-04 13:12:15 +0100 | [diff] [blame] | 515 |  | 
|  | 516 | #endif /* MBEDTLS_DEPRECATED_REMOVED */ | 
|  | 517 |  | 
|  | 518 | /* | 
|  | 519 | * Trustworthy DHM parameters in binary form | 
|  | 520 | */ | 
|  | 521 |  | 
|  | 522 | #define MBEDTLS_DHM_RFC3526_MODP_2048_P_BIN {        \ | 
|  | 523 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ | 
|  | 524 | 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \ | 
|  | 525 | 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \ | 
|  | 526 | 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \ | 
|  | 527 | 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \ | 
|  | 528 | 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \ | 
|  | 529 | 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \ | 
|  | 530 | 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \ | 
|  | 531 | 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \ | 
|  | 532 | 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \ | 
|  | 533 | 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \ | 
|  | 534 | 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \ | 
|  | 535 | 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \ | 
|  | 536 | 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \ | 
|  | 537 | 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \ | 
|  | 538 | 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \ | 
|  | 539 | 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \ | 
|  | 540 | 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \ | 
|  | 541 | 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \ | 
|  | 542 | 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \ | 
|  | 543 | 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \ | 
|  | 544 | 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \ | 
|  | 545 | 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \ | 
|  | 546 | 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \ | 
|  | 547 | 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \ | 
|  | 548 | 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \ | 
|  | 549 | 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \ | 
|  | 550 | 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \ | 
|  | 551 | 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \ | 
|  | 552 | 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \ | 
|  | 553 | 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAC, 0xAA, 0x68, \ | 
|  | 554 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } | 
|  | 555 |  | 
|  | 556 | #define MBEDTLS_DHM_RFC3526_MODP_2048_G_BIN { 0x02 } | 
|  | 557 |  | 
|  | 558 | #define MBEDTLS_DHM_RFC3526_MODP_3072_P_BIN {       \ | 
|  | 559 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ | 
|  | 560 | 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \ | 
|  | 561 | 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \ | 
|  | 562 | 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \ | 
|  | 563 | 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \ | 
|  | 564 | 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \ | 
|  | 565 | 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \ | 
|  | 566 | 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \ | 
|  | 567 | 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \ | 
|  | 568 | 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \ | 
|  | 569 | 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \ | 
|  | 570 | 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \ | 
|  | 571 | 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \ | 
|  | 572 | 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \ | 
|  | 573 | 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \ | 
|  | 574 | 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \ | 
|  | 575 | 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \ | 
|  | 576 | 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \ | 
|  | 577 | 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \ | 
|  | 578 | 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \ | 
|  | 579 | 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \ | 
|  | 580 | 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \ | 
|  | 581 | 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \ | 
|  | 582 | 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \ | 
|  | 583 | 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \ | 
|  | 584 | 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \ | 
|  | 585 | 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \ | 
|  | 586 | 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \ | 
|  | 587 | 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \ | 
|  | 588 | 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \ | 
|  | 589 | 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D, \ | 
|  | 590 | 0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33, \ | 
|  | 591 | 0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64, \ | 
|  | 592 | 0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, \ | 
|  | 593 | 0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, \ | 
|  | 594 | 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7, \ | 
|  | 595 | 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7, \ | 
|  | 596 | 0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D, \ | 
|  | 597 | 0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B, \ | 
|  | 598 | 0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64, \ | 
|  | 599 | 0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, \ | 
|  | 600 | 0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, \ | 
|  | 601 | 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C, \ | 
|  | 602 | 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2, \ | 
|  | 603 | 0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31, \ | 
|  | 604 | 0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E, \ | 
|  | 605 | 0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x3A, 0xD2, 0xCA, \ | 
|  | 606 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } | 
|  | 607 |  | 
|  | 608 | #define MBEDTLS_DHM_RFC3526_MODP_3072_G_BIN { 0x02 } | 
|  | 609 |  | 
|  | 610 | #define MBEDTLS_DHM_RFC3526_MODP_4096_P_BIN  {       \ | 
|  | 611 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,  \ | 
|  | 612 | 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,  \ | 
|  | 613 | 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,  \ | 
|  | 614 | 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,  \ | 
|  | 615 | 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,  \ | 
|  | 616 | 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,  \ | 
|  | 617 | 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,  \ | 
|  | 618 | 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,  \ | 
|  | 619 | 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,  \ | 
|  | 620 | 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,  \ | 
|  | 621 | 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,  \ | 
|  | 622 | 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,  \ | 
|  | 623 | 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,  \ | 
|  | 624 | 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,  \ | 
|  | 625 | 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D,  \ | 
|  | 626 | 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05,  \ | 
|  | 627 | 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A,  \ | 
|  | 628 | 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F,  \ | 
|  | 629 | 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96,  \ | 
|  | 630 | 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB,  \ | 
|  | 631 | 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D,  \ | 
|  | 632 | 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04,  \ | 
|  | 633 | 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C,  \ | 
|  | 634 | 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B,  \ | 
|  | 635 | 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03,  \ | 
|  | 636 | 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F,  \ | 
|  | 637 | 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9,  \ | 
|  | 638 | 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18,  \ | 
|  | 639 | 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5,  \ | 
|  | 640 | 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10,  \ | 
|  | 641 | 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D,  \ | 
|  | 642 | 0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33,  \ | 
|  | 643 | 0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64,  \ | 
|  | 644 | 0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A,  \ | 
|  | 645 | 0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D,  \ | 
|  | 646 | 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7,  \ | 
|  | 647 | 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7,  \ | 
|  | 648 | 0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D,  \ | 
|  | 649 | 0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B,  \ | 
|  | 650 | 0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64,  \ | 
|  | 651 | 0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64,  \ | 
|  | 652 | 0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C,  \ | 
|  | 653 | 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C,  \ | 
|  | 654 | 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2,  \ | 
|  | 655 | 0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31,  \ | 
|  | 656 | 0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E,  \ | 
|  | 657 | 0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x21, 0x08, 0x01,  \ | 
|  | 658 | 0x1A, 0x72, 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7,  \ | 
|  | 659 | 0x88, 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26,  \ | 
|  | 660 | 0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, 0x3C,  \ | 
|  | 661 | 0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, 0x0B, 0xDA,  \ | 
|  | 662 | 0x25, 0x83, 0xE9, 0xCA, 0x2A, 0xD4, 0x4C, 0xE8,  \ | 
|  | 663 | 0xDB, 0xBB, 0xC2, 0xDB, 0x04, 0xDE, 0x8E, 0xF9,  \ | 
|  | 664 | 0x2E, 0x8E, 0xFC, 0x14, 0x1F, 0xBE, 0xCA, 0xA6,  \ | 
|  | 665 | 0x28, 0x7C, 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D,  \ | 
|  | 666 | 0x99, 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2,  \ | 
|  | 667 | 0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, 0xED,  \ | 
|  | 668 | 0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, 0xD7, 0xAF,  \ | 
|  | 669 | 0xB8, 0x1B, 0xDD, 0x76, 0x21, 0x70, 0x48, 0x1C,  \ | 
|  | 670 | 0xD0, 0x06, 0x91, 0x27, 0xD5, 0xB0, 0x5A, 0xA9,  \ | 
|  | 671 | 0x93, 0xB4, 0xEA, 0x98, 0x8D, 0x8F, 0xDD, 0xC1,  \ | 
|  | 672 | 0x86, 0xFF, 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F,  \ | 
|  | 673 | 0x4D, 0xF4, 0x35, 0xC9, 0x34, 0x06, 0x31, 0x99,  \ | 
|  | 674 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } | 
|  | 675 |  | 
|  | 676 | #define MBEDTLS_DHM_RFC3526_MODP_4096_G_BIN { 0x02 } | 
|  | 677 |  | 
|  | 678 | #define MBEDTLS_DHM_RFC7919_FFDHE2048_P_BIN {        \ | 
|  | 679 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ | 
|  | 680 | 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ | 
|  | 681 | 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ | 
|  | 682 | 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ | 
|  | 683 | 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ | 
|  | 684 | 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ | 
|  | 685 | 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ | 
|  | 686 | 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ | 
|  | 687 | 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ | 
|  | 688 | 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ | 
|  | 689 | 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ | 
|  | 690 | 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ | 
|  | 691 | 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ | 
|  | 692 | 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ | 
|  | 693 | 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ | 
|  | 694 | 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ | 
|  | 695 | 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ | 
|  | 696 | 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ | 
|  | 697 | 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ | 
|  | 698 | 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ | 
|  | 699 | 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ | 
|  | 700 | 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ | 
|  | 701 | 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ | 
|  | 702 | 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ | 
|  | 703 | 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ | 
|  | 704 | 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ | 
|  | 705 | 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ | 
|  | 706 | 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ | 
|  | 707 | 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ | 
|  | 708 | 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ | 
|  | 709 | 0x88, 0x6B, 0x42, 0x38, 0x61, 0x28, 0x5C, 0x97, \ | 
|  | 710 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, } | 
|  | 711 |  | 
|  | 712 | #define MBEDTLS_DHM_RFC7919_FFDHE2048_G_BIN { 0x02 } | 
|  | 713 |  | 
|  | 714 | #define MBEDTLS_DHM_RFC7919_FFDHE3072_P_BIN { \ | 
|  | 715 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ | 
|  | 716 | 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ | 
|  | 717 | 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ | 
|  | 718 | 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ | 
|  | 719 | 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ | 
|  | 720 | 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ | 
|  | 721 | 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ | 
|  | 722 | 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ | 
|  | 723 | 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ | 
|  | 724 | 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ | 
|  | 725 | 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ | 
|  | 726 | 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ | 
|  | 727 | 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ | 
|  | 728 | 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ | 
|  | 729 | 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ | 
|  | 730 | 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ | 
|  | 731 | 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ | 
|  | 732 | 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ | 
|  | 733 | 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ | 
|  | 734 | 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ | 
|  | 735 | 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ | 
|  | 736 | 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ | 
|  | 737 | 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ | 
|  | 738 | 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ | 
|  | 739 | 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ | 
|  | 740 | 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ | 
|  | 741 | 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ | 
|  | 742 | 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ | 
|  | 743 | 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ | 
|  | 744 | 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ | 
|  | 745 | 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ | 
|  | 746 | 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ | 
|  | 747 | 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ | 
|  | 748 | 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ | 
|  | 749 | 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ | 
|  | 750 | 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ | 
|  | 751 | 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ | 
|  | 752 | 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ | 
|  | 753 | 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ | 
|  | 754 | 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ | 
|  | 755 | 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ | 
|  | 756 | 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ | 
|  | 757 | 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ | 
|  | 758 | 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ | 
|  | 759 | 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ | 
|  | 760 | 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ | 
|  | 761 | 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0xC6, 0x2E, 0x37, \ | 
|  | 762 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } | 
|  | 763 |  | 
|  | 764 | #define MBEDTLS_DHM_RFC7919_FFDHE3072_G_BIN { 0x02 } | 
|  | 765 |  | 
|  | 766 | #define MBEDTLS_DHM_RFC7919_FFDHE4096_P_BIN {        \ | 
|  | 767 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ | 
|  | 768 | 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ | 
|  | 769 | 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ | 
|  | 770 | 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ | 
|  | 771 | 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ | 
|  | 772 | 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ | 
|  | 773 | 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ | 
|  | 774 | 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ | 
|  | 775 | 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ | 
|  | 776 | 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ | 
|  | 777 | 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ | 
|  | 778 | 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ | 
|  | 779 | 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ | 
|  | 780 | 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ | 
|  | 781 | 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ | 
|  | 782 | 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ | 
|  | 783 | 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ | 
|  | 784 | 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ | 
|  | 785 | 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ | 
|  | 786 | 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ | 
|  | 787 | 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ | 
|  | 788 | 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ | 
|  | 789 | 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ | 
|  | 790 | 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ | 
|  | 791 | 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ | 
|  | 792 | 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ | 
|  | 793 | 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ | 
|  | 794 | 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ | 
|  | 795 | 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ | 
|  | 796 | 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ | 
|  | 797 | 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ | 
|  | 798 | 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ | 
|  | 799 | 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ | 
|  | 800 | 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ | 
|  | 801 | 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ | 
|  | 802 | 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ | 
|  | 803 | 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ | 
|  | 804 | 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ | 
|  | 805 | 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ | 
|  | 806 | 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ | 
|  | 807 | 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ | 
|  | 808 | 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ | 
|  | 809 | 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ | 
|  | 810 | 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ | 
|  | 811 | 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ | 
|  | 812 | 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ | 
|  | 813 | 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \ | 
|  | 814 | 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \ | 
|  | 815 | 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \ | 
|  | 816 | 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \ | 
|  | 817 | 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \ | 
|  | 818 | 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \ | 
|  | 819 | 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \ | 
|  | 820 | 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \ | 
|  | 821 | 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \ | 
|  | 822 | 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \ | 
|  | 823 | 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \ | 
|  | 824 | 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \ | 
|  | 825 | 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \ | 
|  | 826 | 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \ | 
|  | 827 | 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \ | 
|  | 828 | 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \ | 
|  | 829 | 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x65, 0x5F, 0x6A, \ | 
|  | 830 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } | 
|  | 831 |  | 
|  | 832 | #define MBEDTLS_DHM_RFC7919_FFDHE4096_G_BIN { 0x02 } | 
|  | 833 |  | 
|  | 834 | #define MBEDTLS_DHM_RFC7919_FFDHE6144_P_BIN {        \ | 
|  | 835 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ | 
|  | 836 | 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ | 
|  | 837 | 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ | 
|  | 838 | 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ | 
|  | 839 | 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ | 
|  | 840 | 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ | 
|  | 841 | 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ | 
|  | 842 | 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ | 
|  | 843 | 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ | 
|  | 844 | 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ | 
|  | 845 | 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ | 
|  | 846 | 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ | 
|  | 847 | 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ | 
|  | 848 | 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ | 
|  | 849 | 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ | 
|  | 850 | 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ | 
|  | 851 | 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ | 
|  | 852 | 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ | 
|  | 853 | 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ | 
|  | 854 | 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ | 
|  | 855 | 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ | 
|  | 856 | 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ | 
|  | 857 | 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ | 
|  | 858 | 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ | 
|  | 859 | 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ | 
|  | 860 | 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ | 
|  | 861 | 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ | 
|  | 862 | 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ | 
|  | 863 | 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ | 
|  | 864 | 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ | 
|  | 865 | 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ | 
|  | 866 | 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ | 
|  | 867 | 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ | 
|  | 868 | 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ | 
|  | 869 | 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ | 
|  | 870 | 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ | 
|  | 871 | 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ | 
|  | 872 | 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ | 
|  | 873 | 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ | 
|  | 874 | 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ | 
|  | 875 | 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ | 
|  | 876 | 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ | 
|  | 877 | 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ | 
|  | 878 | 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ | 
|  | 879 | 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ | 
|  | 880 | 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ | 
|  | 881 | 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \ | 
|  | 882 | 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \ | 
|  | 883 | 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \ | 
|  | 884 | 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \ | 
|  | 885 | 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \ | 
|  | 886 | 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \ | 
|  | 887 | 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \ | 
|  | 888 | 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \ | 
|  | 889 | 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \ | 
|  | 890 | 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \ | 
|  | 891 | 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \ | 
|  | 892 | 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \ | 
|  | 893 | 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \ | 
|  | 894 | 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \ | 
|  | 895 | 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \ | 
|  | 896 | 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \ | 
|  | 897 | 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \ | 
|  | 898 | 0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \ | 
|  | 899 | 0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \ | 
|  | 900 | 0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \ | 
|  | 901 | 0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \ | 
|  | 902 | 0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \ | 
|  | 903 | 0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \ | 
|  | 904 | 0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \ | 
|  | 905 | 0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \ | 
|  | 906 | 0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \ | 
|  | 907 | 0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \ | 
|  | 908 | 0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \ | 
|  | 909 | 0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \ | 
|  | 910 | 0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \ | 
|  | 911 | 0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \ | 
|  | 912 | 0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \ | 
|  | 913 | 0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \ | 
|  | 914 | 0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \ | 
|  | 915 | 0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \ | 
|  | 916 | 0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \ | 
|  | 917 | 0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \ | 
|  | 918 | 0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \ | 
|  | 919 | 0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \ | 
|  | 920 | 0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \ | 
|  | 921 | 0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \ | 
|  | 922 | 0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \ | 
|  | 923 | 0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \ | 
|  | 924 | 0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \ | 
|  | 925 | 0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \ | 
|  | 926 | 0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \ | 
|  | 927 | 0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \ | 
|  | 928 | 0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \ | 
|  | 929 | 0xA4, 0x0E, 0x32, 0x9C, 0xD0, 0xE4, 0x0E, 0x65, \ | 
|  | 930 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } | 
|  | 931 |  | 
|  | 932 | #define MBEDTLS_DHM_RFC7919_FFDHE6144_G_BIN { 0x02 } | 
|  | 933 |  | 
|  | 934 | #define MBEDTLS_DHM_RFC7919_FFDHE8192_P_BIN {        \ | 
|  | 935 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ | 
|  | 936 | 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ | 
|  | 937 | 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ | 
|  | 938 | 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ | 
|  | 939 | 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ | 
|  | 940 | 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ | 
|  | 941 | 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ | 
|  | 942 | 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ | 
|  | 943 | 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ | 
|  | 944 | 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ | 
|  | 945 | 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ | 
|  | 946 | 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ | 
|  | 947 | 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ | 
|  | 948 | 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ | 
|  | 949 | 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ | 
|  | 950 | 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ | 
|  | 951 | 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ | 
|  | 952 | 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ | 
|  | 953 | 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ | 
|  | 954 | 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ | 
|  | 955 | 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ | 
|  | 956 | 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ | 
|  | 957 | 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ | 
|  | 958 | 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ | 
|  | 959 | 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ | 
|  | 960 | 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ | 
|  | 961 | 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ | 
|  | 962 | 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ | 
|  | 963 | 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ | 
|  | 964 | 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ | 
|  | 965 | 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ | 
|  | 966 | 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ | 
|  | 967 | 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ | 
|  | 968 | 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ | 
|  | 969 | 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ | 
|  | 970 | 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ | 
|  | 971 | 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ | 
|  | 972 | 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ | 
|  | 973 | 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ | 
|  | 974 | 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ | 
|  | 975 | 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ | 
|  | 976 | 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ | 
|  | 977 | 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ | 
|  | 978 | 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ | 
|  | 979 | 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ | 
|  | 980 | 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ | 
|  | 981 | 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \ | 
|  | 982 | 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \ | 
|  | 983 | 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \ | 
|  | 984 | 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \ | 
|  | 985 | 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \ | 
|  | 986 | 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \ | 
|  | 987 | 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \ | 
|  | 988 | 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \ | 
|  | 989 | 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \ | 
|  | 990 | 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \ | 
|  | 991 | 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \ | 
|  | 992 | 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \ | 
|  | 993 | 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \ | 
|  | 994 | 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \ | 
|  | 995 | 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \ | 
|  | 996 | 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \ | 
|  | 997 | 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \ | 
|  | 998 | 0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \ | 
|  | 999 | 0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \ | 
|  | 1000 | 0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \ | 
|  | 1001 | 0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \ | 
|  | 1002 | 0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \ | 
|  | 1003 | 0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \ | 
|  | 1004 | 0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \ | 
|  | 1005 | 0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \ | 
|  | 1006 | 0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \ | 
|  | 1007 | 0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \ | 
|  | 1008 | 0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \ | 
|  | 1009 | 0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \ | 
|  | 1010 | 0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \ | 
|  | 1011 | 0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \ | 
|  | 1012 | 0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \ | 
|  | 1013 | 0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \ | 
|  | 1014 | 0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \ | 
|  | 1015 | 0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \ | 
|  | 1016 | 0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \ | 
|  | 1017 | 0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \ | 
|  | 1018 | 0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \ | 
|  | 1019 | 0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \ | 
|  | 1020 | 0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \ | 
|  | 1021 | 0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \ | 
|  | 1022 | 0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \ | 
|  | 1023 | 0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \ | 
|  | 1024 | 0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \ | 
|  | 1025 | 0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \ | 
|  | 1026 | 0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \ | 
|  | 1027 | 0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \ | 
|  | 1028 | 0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \ | 
|  | 1029 | 0xA4, 0x0E, 0x32, 0x9C, 0xCF, 0xF4, 0x6A, 0xAA, \ | 
|  | 1030 | 0x36, 0xAD, 0x00, 0x4C, 0xF6, 0x00, 0xC8, 0x38, \ | 
|  | 1031 | 0x1E, 0x42, 0x5A, 0x31, 0xD9, 0x51, 0xAE, 0x64, \ | 
|  | 1032 | 0xFD, 0xB2, 0x3F, 0xCE, 0xC9, 0x50, 0x9D, 0x43, \ | 
|  | 1033 | 0x68, 0x7F, 0xEB, 0x69, 0xED, 0xD1, 0xCC, 0x5E, \ | 
|  | 1034 | 0x0B, 0x8C, 0xC3, 0xBD, 0xF6, 0x4B, 0x10, 0xEF, \ | 
|  | 1035 | 0x86, 0xB6, 0x31, 0x42, 0xA3, 0xAB, 0x88, 0x29, \ | 
|  | 1036 | 0x55, 0x5B, 0x2F, 0x74, 0x7C, 0x93, 0x26, 0x65, \ | 
|  | 1037 | 0xCB, 0x2C, 0x0F, 0x1C, 0xC0, 0x1B, 0xD7, 0x02, \ | 
|  | 1038 | 0x29, 0x38, 0x88, 0x39, 0xD2, 0xAF, 0x05, 0xE4, \ | 
|  | 1039 | 0x54, 0x50, 0x4A, 0xC7, 0x8B, 0x75, 0x82, 0x82, \ | 
|  | 1040 | 0x28, 0x46, 0xC0, 0xBA, 0x35, 0xC3, 0x5F, 0x5C, \ | 
|  | 1041 | 0x59, 0x16, 0x0C, 0xC0, 0x46, 0xFD, 0x82, 0x51, \ | 
|  | 1042 | 0x54, 0x1F, 0xC6, 0x8C, 0x9C, 0x86, 0xB0, 0x22, \ | 
|  | 1043 | 0xBB, 0x70, 0x99, 0x87, 0x6A, 0x46, 0x0E, 0x74, \ | 
|  | 1044 | 0x51, 0xA8, 0xA9, 0x31, 0x09, 0x70, 0x3F, 0xEE, \ | 
|  | 1045 | 0x1C, 0x21, 0x7E, 0x6C, 0x38, 0x26, 0xE5, 0x2C, \ | 
|  | 1046 | 0x51, 0xAA, 0x69, 0x1E, 0x0E, 0x42, 0x3C, 0xFC, \ | 
|  | 1047 | 0x99, 0xE9, 0xE3, 0x16, 0x50, 0xC1, 0x21, 0x7B, \ | 
|  | 1048 | 0x62, 0x48, 0x16, 0xCD, 0xAD, 0x9A, 0x95, 0xF9, \ | 
|  | 1049 | 0xD5, 0xB8, 0x01, 0x94, 0x88, 0xD9, 0xC0, 0xA0, \ | 
|  | 1050 | 0xA1, 0xFE, 0x30, 0x75, 0xA5, 0x77, 0xE2, 0x31, \ | 
|  | 1051 | 0x83, 0xF8, 0x1D, 0x4A, 0x3F, 0x2F, 0xA4, 0x57, \ | 
|  | 1052 | 0x1E, 0xFC, 0x8C, 0xE0, 0xBA, 0x8A, 0x4F, 0xE8, \ | 
|  | 1053 | 0xB6, 0x85, 0x5D, 0xFE, 0x72, 0xB0, 0xA6, 0x6E, \ | 
|  | 1054 | 0xDE, 0xD2, 0xFB, 0xAB, 0xFB, 0xE5, 0x8A, 0x30, \ | 
|  | 1055 | 0xFA, 0xFA, 0xBE, 0x1C, 0x5D, 0x71, 0xA8, 0x7E, \ | 
|  | 1056 | 0x2F, 0x74, 0x1E, 0xF8, 0xC1, 0xFE, 0x86, 0xFE, \ | 
|  | 1057 | 0xA6, 0xBB, 0xFD, 0xE5, 0x30, 0x67, 0x7F, 0x0D, \ | 
|  | 1058 | 0x97, 0xD1, 0x1D, 0x49, 0xF7, 0xA8, 0x44, 0x3D, \ | 
|  | 1059 | 0x08, 0x22, 0xE5, 0x06, 0xA9, 0xF4, 0x61, 0x4E, \ | 
|  | 1060 | 0x01, 0x1E, 0x2A, 0x94, 0x83, 0x8F, 0xF8, 0x8C, \ | 
|  | 1061 | 0xD6, 0x8C, 0x8B, 0xB7, 0xC5, 0xC6, 0x42, 0x4C, \ | 
|  | 1062 | 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } | 
|  | 1063 |  | 
|  | 1064 | #define MBEDTLS_DHM_RFC7919_FFDHE8192_G_BIN { 0x02 } | 
|  | 1065 |  | 
| Paul Bakker | 9af723c | 2014-05-01 13:03:14 +0200 | [diff] [blame] | 1066 | #endif /* dhm.h */ |