tls-tris

履歴

Adam Langley 514cfc8a40 crypto/tls: pick ECDHE curves based on server preference. Currently an ECDHE handshake uses the client's curve preference. This generally means that we use P-521. However, P-521's strength is mismatched with the rest of the cipher suite in most cases and we have a fast, constant-time implementation of P-256. With this change, Go servers will use P-256 where the client supports it although that can be overridden in the Config. LGTM=bradfitz R=bradfitz CC=golang-codereviews https://golang.org/cl/66060043		10年前
..
Client-TLSv10-ClientCert-ECDSA-ECDSA	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv10-ClientCert-ECDSA-RSA	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv10-ClientCert-RSA-ECDSA	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv10-ClientCert-RSA-RSA	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv10-ECDHE-ECDSA-AES	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv10-ECDHE-RSA-AES	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv10-RSA-RC4	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv11-ECDHE-ECDSA-AES	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv11-ECDHE-RSA-AES	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv11-RSA-RC4	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv12-ClientCert-ECDSA-ECDSA	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv12-ClientCert-ECDSA-RSA	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv12-ClientCert-RSA-ECDSA	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv12-ClientCert-RSA-RSA	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv12-ECDHE-ECDSA-AES	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv12-ECDHE-ECDSA-AES-GCM	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv12-ECDHE-RSA-AES	crypto/tls: pick ECDHE curves based on server preference.	10年前
Client-TLSv12-RSA-RC4	crypto/tls: pick ECDHE curves based on server preference.	10年前
Server-SSLv3-RSA-3DES	crypto/tls: support renegotiation extension.	10年前
Server-SSLv3-RSA-AES	crypto/tls: support renegotiation extension.	10年前
Server-SSLv3-RSA-RC4	crypto/tls: support renegotiation extension.	10年前
Server-TLSv10-ECDHE-ECDSA-AES	crypto/tls: pick ECDHE curves based on server preference.	10年前
Server-TLSv10-RSA-3DES	crypto/tls: support renegotiation extension.	10年前
Server-TLSv10-RSA-AES	crypto/tls: support renegotiation extension.	10年前
Server-TLSv10-RSA-RC4	crypto/tls: support renegotiation extension.	10年前
Server-TLSv11-RSA-RC4	crypto/tls: support renegotiation extension.	10年前
Server-TLSv12-CipherSuiteCertPreferenceECDSA	crypto/tls: pick ECDHE curves based on server preference.	10年前
Server-TLSv12-CipherSuiteCertPreferenceRSA	crypto/tls: pick ECDHE curves based on server preference.	10年前
Server-TLSv12-ClientAuthRequestedAndECDSAGiven	crypto/tls: support renegotiation extension.	10年前
Server-TLSv12-ClientAuthRequestedAndGiven	crypto/tls: support renegotiation extension.	10年前
Server-TLSv12-ClientAuthRequestedNotGiven	crypto/tls: support renegotiation extension.	10年前
Server-TLSv12-ECDHE-ECDSA-AES	crypto/tls: pick ECDHE curves based on server preference.	10年前
Server-TLSv12-IssueTicket	crypto/tls: support renegotiation extension.	10年前
Server-TLSv12-RSA-3DES	crypto/tls: support renegotiation extension.	10年前
Server-TLSv12-RSA-AES	crypto/tls: support renegotiation extension.	10年前
Server-TLSv12-RSA-AES-GCM	crypto/tls: pick ECDHE curves based on server preference.	10年前
Server-TLSv12-RSA-RC4	crypto/tls: support renegotiation extension.	10年前
Server-TLSv12-Resume	crypto/tls: support renegotiation extension.	10年前
Server-TLSv12-SNI	crypto/tls: support renegotiation extension.	10年前