/* ssl/s3_lib.c */

/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)

* All rights reserved.

*

* This package is an SSL implementation written

* by Eric Young (eay@cryptsoft.com).

* The implementation was written so as to conform with Netscapes SSL.

*

* This library is free for commercial and non-commercial use as long as

* the following conditions are aheared to. The following conditions

* apply to all code found in this distribution, be it the RC4, RSA,

* lhash, DES, etc., code; not just the SSL code. The SSL documentation

* included with this distribution is covered by the same copyright terms

* except that the holder is Tim Hudson (tjh@cryptsoft.com).

*

* Copyright remains Eric Young's, and as such any Copyright notices in

* the code are not to be removed.

* If this package is used in a product, Eric Young should be given attribution

* as the author of the parts of the library used.

* This can be in the form of a textual message at program startup or

* in documentation (online or textual) provided with the package.

*

* Redistribution and use in source and binary forms, with or without

* modification, are permitted provided that the following conditions

* are met:

* 1. Redistributions of source code must retain the copyright

* notice, this list of conditions and the following disclaimer.

* 2. Redistributions in binary form must reproduce the above copyright

* notice, this list of conditions and the following disclaimer in the

* documentation and/or other materials provided with the distribution.

* 3. All advertising materials mentioning features or use of this software

* must display the following acknowledgement:

* "This product includes cryptographic software written by

* Eric Young (eay@cryptsoft.com)"

* The word 'cryptographic' can be left out if the rouines from the library

* being used are not cryptographic related :-).

* 4. If you include any Windows specific code (or a derivative thereof) from

* the apps directory (application code) you must include an acknowledgement:

* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"

*

* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND

* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE

* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE

* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL

* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS

* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY

* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF

* SUCH DAMAGE.

*

* The licence and distribution terms for any publically available version or

* derivative of this code cannot be changed. i.e. this code cannot simply be

* copied and put under another distribution licence

* [including the GNU Public Licence.]

*/

/* ====================================================================

* Copyright (c) 1998-2007 The OpenSSL Project. All rights reserved.

*

* Redistribution and use in source and binary forms, with or without

* modification, are permitted provided that the following conditions

* are met:

*

* 1. Redistributions of source code must retain the above copyright

* notice, this list of conditions and the following disclaimer.

*

* 2. Redistributions in binary form must reproduce the above copyright

* notice, this list of conditions and the following disclaimer in

* the documentation and/or other materials provided with the

* distribution.

*

* 3. All advertising materials mentioning features or use of this

* software must display the following acknowledgment:

* "This product includes software developed by the OpenSSL Project

* for use in the OpenSSL Toolkit. (http://www.openssl.org/)"

*

* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to

* endorse or promote products derived from this software without

* prior written permission. For written permission, please contact

* openssl-core@openssl.org.

*

* 5. Products derived from this software may not be called "OpenSSL"

* nor may "OpenSSL" appear in their names without prior written

* permission of the OpenSSL Project.

*

* 6. Redistributions of any form whatsoever must retain the following

* acknowledgment:

* "This product includes software developed by the OpenSSL Project

* for use in the OpenSSL Toolkit (http://www.openssl.org/)"

*

* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY

* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR

* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

* OF THE POSSIBILITY OF SUCH DAMAGE.

* ====================================================================

*

* This product includes cryptographic software written by Eric Young

* (eay@cryptsoft.com). This product includes software written by Tim

* Hudson (tjh@cryptsoft.com).

*

*/

/* ====================================================================

* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.

*

* Portions of the attached software ("Contribution") are developed by

* SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.

*

* The Contribution is licensed pursuant to the OpenSSL open source

* license provided above.

*

* ECC cipher suite support in OpenSSL originally written by

* Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories.

*

*/

/* ====================================================================

* Copyright 2005 Nokia. All rights reserved.

*

* The portions of the attached software ("Contribution") is developed by

* Nokia Corporation and is licensed pursuant to the OpenSSL open source

* license.

*

* The Contribution, originally written by Mika Kousa and Pasi Eronen of

* Nokia Corporation, consists of the "PSK" (Pre-Shared Key) ciphersuites

* support (see RFC 4279) to OpenSSL.

*

* No patent licenses or other rights except those expressly stated in

* the OpenSSL open source license shall be deemed granted or received

* expressly, by implication, estoppel, or otherwise.

*

* No assurances are provided by Nokia that the Contribution does not

* infringe the patent or other intellectual property rights of any third

* party or that the license provides you with all the necessary rights

* to make use of the Contribution.

*

* THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN

* ADDITION TO THE DISCLAIMERS INCLUDED IN THE LICENSE, NOKIA

* SPECIFICALLY DISCLAIMS ANY LIABILITY FOR CLAIMS BROUGHT BY YOU OR ANY

* OTHER ENTITY BASED ON INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OR

* OTHERWISE.

*/

#include <stdio.h>

#include <openssl/objects.h>

#include "ssl_locl.h"

#include "kssl_lcl.h"

#ifndef OPENSSL_NO_TLSEXT

#ifndef OPENSSL_NO_EC

#include "../crypto/ec/ec_lcl.h"

#endif /* OPENSSL_NO_EC */

#endif /* OPENSSL_NO_TLSEXT */

#include <openssl/md5.h>

#ifndef OPENSSL_NO_DH

#include <openssl/dh.h>

#endif

const char ssl3_version_str[]="SSLv3" OPENSSL_VERSION_PTEXT;

#define SSL3_NUM_CIPHERS (sizeof(ssl3_ciphers)/sizeof(SSL_CIPHER))

/* list of available SSLv3 ciphers (sorted by id) */

OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={

/* The RSA ciphers */

/* Cipher 01 */

{

1,

SSL3_TXT_RSA_NULL_MD5,

SSL3_CK_RSA_NULL_MD5,

SSL_kRSA,

SSL_aRSA,

SSL_eNULL,

SSL_MD5,

SSL_SSLV3,

SSL_NOT_EXP|SSL_STRONG_NONE,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

0,

0,

},

/* Cipher 02 */

{

1,

SSL3_TXT_RSA_NULL_SHA,

SSL3_CK_RSA_NULL_SHA,

SSL_kRSA,

SSL_aRSA,

SSL_eNULL,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_STRONG_NONE|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

0,

0,

},

/* Cipher 03 */

{

1,

SSL3_TXT_RSA_RC4_40_MD5,

SSL3_CK_RSA_RC4_40_MD5,

SSL_kRSA,

SSL_aRSA,

SSL_RC4,

SSL_MD5,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

128,

},

/* Cipher 04 */

{

1,

SSL3_TXT_RSA_RC4_128_MD5,

SSL3_CK_RSA_RC4_128_MD5,

SSL_kRSA,

SSL_aRSA,

SSL_RC4,

SSL_MD5,

SSL_SSLV3,

SSL_NOT_EXP|SSL_MEDIUM,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 05 */

{

1,

SSL3_TXT_RSA_RC4_128_SHA,

SSL3_CK_RSA_RC4_128_SHA,

SSL_kRSA,

SSL_aRSA,

SSL_RC4,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_MEDIUM,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 06 */

{

1,

SSL3_TXT_RSA_RC2_40_MD5,

SSL3_CK_RSA_RC2_40_MD5,

SSL_kRSA,

SSL_aRSA,

SSL_RC2,

SSL_MD5,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

128,

},

/* Cipher 07 */

#ifndef OPENSSL_NO_IDEA

{

1,

SSL3_TXT_RSA_IDEA_128_SHA,

SSL3_CK_RSA_IDEA_128_SHA,

SSL_kRSA,

SSL_aRSA,

SSL_IDEA,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_MEDIUM,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

#endif

/* Cipher 08 */

{

1,

SSL3_TXT_RSA_DES_40_CBC_SHA,

SSL3_CK_RSA_DES_40_CBC_SHA,

SSL_kRSA,

SSL_aRSA,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

56,

},

/* Cipher 09 */

{

1,

SSL3_TXT_RSA_DES_64_CBC_SHA,

SSL3_CK_RSA_DES_64_CBC_SHA,

SSL_kRSA,

SSL_aRSA,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_LOW,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

56,

56,

},

/* Cipher 0A */

{

1,

SSL3_TXT_RSA_DES_192_CBC3_SHA,

SSL3_CK_RSA_DES_192_CBC3_SHA,

SSL_kRSA,

SSL_aRSA,

SSL_3DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

168,

168,

},

/* The DH ciphers */

/* Cipher 0B */

{

0,

SSL3_TXT_DH_DSS_DES_40_CBC_SHA,

SSL3_CK_DH_DSS_DES_40_CBC_SHA,

SSL_kDHd,

SSL_aDH,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

56,

},

/* Cipher 0C */

{

0, /* not implemented (non-ephemeral DH) */

SSL3_TXT_DH_DSS_DES_64_CBC_SHA,

SSL3_CK_DH_DSS_DES_64_CBC_SHA,

SSL_kDHd,

SSL_aDH,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_LOW,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

56,

56,

},

/* Cipher 0D */

{

0, /* not implemented (non-ephemeral DH) */

SSL3_TXT_DH_DSS_DES_192_CBC3_SHA,

SSL3_CK_DH_DSS_DES_192_CBC3_SHA,

SSL_kDHd,

SSL_aDH,

SSL_3DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

168,

168,

},

/* Cipher 0E */

{

0, /* not implemented (non-ephemeral DH) */

SSL3_TXT_DH_RSA_DES_40_CBC_SHA,

SSL3_CK_DH_RSA_DES_40_CBC_SHA,

SSL_kDHr,

SSL_aDH,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

56,

},

/* Cipher 0F */

{

0, /* not implemented (non-ephemeral DH) */

SSL3_TXT_DH_RSA_DES_64_CBC_SHA,

SSL3_CK_DH_RSA_DES_64_CBC_SHA,

SSL_kDHr,

SSL_aDH,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_LOW,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

56,

56,

},

/* Cipher 10 */

{

0, /* not implemented (non-ephemeral DH) */

SSL3_TXT_DH_RSA_DES_192_CBC3_SHA,

SSL3_CK_DH_RSA_DES_192_CBC3_SHA,

SSL_kDHr,

SSL_aDH,

SSL_3DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

168,

168,

},

/* The Ephemeral DH ciphers */

/* Cipher 11 */

{

1,

SSL3_TXT_EDH_DSS_DES_40_CBC_SHA,

SSL3_CK_EDH_DSS_DES_40_CBC_SHA,

SSL_kEDH,

SSL_aDSS,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

56,

},

/* Cipher 12 */

{

1,

SSL3_TXT_EDH_DSS_DES_64_CBC_SHA,

SSL3_CK_EDH_DSS_DES_64_CBC_SHA,

SSL_kEDH,

SSL_aDSS,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_LOW,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

56,

56,

},

/* Cipher 13 */

{

1,

SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA,

SSL3_CK_EDH_DSS_DES_192_CBC3_SHA,

SSL_kEDH,

SSL_aDSS,

SSL_3DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

168,

168,

},

/* Cipher 14 */

{

1,

SSL3_TXT_EDH_RSA_DES_40_CBC_SHA,

SSL3_CK_EDH_RSA_DES_40_CBC_SHA,

SSL_kEDH,

SSL_aRSA,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

56,

},

/* Cipher 15 */

{

1,

SSL3_TXT_EDH_RSA_DES_64_CBC_SHA,

SSL3_CK_EDH_RSA_DES_64_CBC_SHA,

SSL_kEDH,

SSL_aRSA,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_LOW,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

56,

56,

},

/* Cipher 16 */

{

1,

SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA,

SSL3_CK_EDH_RSA_DES_192_CBC3_SHA,

SSL_kEDH,

SSL_aRSA,

SSL_3DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

168,

168,

},

/* Cipher 17 */

{

1,

SSL3_TXT_ADH_RC4_40_MD5,

SSL3_CK_ADH_RC4_40_MD5,

SSL_kEDH,

SSL_aNULL,

SSL_RC4,

SSL_MD5,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

128,

},

/* Cipher 18 */

{

1,

SSL3_TXT_ADH_RC4_128_MD5,

SSL3_CK_ADH_RC4_128_MD5,

SSL_kEDH,

SSL_aNULL,

SSL_RC4,

SSL_MD5,

SSL_SSLV3,

SSL_NOT_EXP|SSL_MEDIUM,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 19 */

{

1,

SSL3_TXT_ADH_DES_40_CBC_SHA,

SSL3_CK_ADH_DES_40_CBC_SHA,

SSL_kEDH,

SSL_aNULL,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

128,

},

/* Cipher 1A */

{

1,

SSL3_TXT_ADH_DES_64_CBC_SHA,

SSL3_CK_ADH_DES_64_CBC_SHA,

SSL_kEDH,

SSL_aNULL,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_LOW,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

56,

56,

},

/* Cipher 1B */

{

1,

SSL3_TXT_ADH_DES_192_CBC_SHA,

SSL3_CK_ADH_DES_192_CBC_SHA,

SSL_kEDH,

SSL_aNULL,

SSL_3DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

168,

168,

},

/* Fortezza ciphersuite from SSL 3.0 spec */

#if 0

/* Cipher 1C */

{

0,

SSL3_TXT_FZA_DMS_NULL_SHA,

SSL3_CK_FZA_DMS_NULL_SHA,

SSL_kFZA,

SSL_aFZA,

SSL_eNULL,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_STRONG_NONE,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

0,

0,

},

/* Cipher 1D */

{

0,

SSL3_TXT_FZA_DMS_FZA_SHA,

SSL3_CK_FZA_DMS_FZA_SHA,

SSL_kFZA,

SSL_aFZA,

SSL_eFZA,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_STRONG_NONE,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

0,

0,

},

/* Cipher 1E */

{

0,

SSL3_TXT_FZA_DMS_RC4_SHA,

SSL3_CK_FZA_DMS_RC4_SHA,

SSL_kFZA,

SSL_aFZA,

SSL_RC4,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_MEDIUM,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

#endif

#ifndef OPENSSL_NO_KRB5

/* The Kerberos ciphers*/

/* Cipher 1E */

{

1,

SSL3_TXT_KRB5_DES_64_CBC_SHA,

SSL3_CK_KRB5_DES_64_CBC_SHA,

SSL_kKRB5,

SSL_aKRB5,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_LOW,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

56,

56,

},

/* Cipher 1F */

{

1,

SSL3_TXT_KRB5_DES_192_CBC3_SHA,

SSL3_CK_KRB5_DES_192_CBC3_SHA,

SSL_kKRB5,

SSL_aKRB5,

SSL_3DES,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

168,

168,

},

/* Cipher 20 */

{

1,

SSL3_TXT_KRB5_RC4_128_SHA,

SSL3_CK_KRB5_RC4_128_SHA,

SSL_kKRB5,

SSL_aKRB5,

SSL_RC4,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_MEDIUM,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 21 */

{

1,

SSL3_TXT_KRB5_IDEA_128_CBC_SHA,

SSL3_CK_KRB5_IDEA_128_CBC_SHA,

SSL_kKRB5,

SSL_aKRB5,

SSL_IDEA,

SSL_SHA1,

SSL_SSLV3,

SSL_NOT_EXP|SSL_MEDIUM,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 22 */

{

1,

SSL3_TXT_KRB5_DES_64_CBC_MD5,

SSL3_CK_KRB5_DES_64_CBC_MD5,

SSL_kKRB5,

SSL_aKRB5,

SSL_DES,

SSL_MD5,

SSL_SSLV3,

SSL_NOT_EXP|SSL_LOW,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

56,

56,

},

/* Cipher 23 */

{

1,

SSL3_TXT_KRB5_DES_192_CBC3_MD5,

SSL3_CK_KRB5_DES_192_CBC3_MD5,

SSL_kKRB5,

SSL_aKRB5,

SSL_3DES,

SSL_MD5,

SSL_SSLV3,

SSL_NOT_EXP|SSL_HIGH,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

168,

168,

},

/* Cipher 24 */

{

1,

SSL3_TXT_KRB5_RC4_128_MD5,

SSL3_CK_KRB5_RC4_128_MD5,

SSL_kKRB5,

SSL_aKRB5,

SSL_RC4,

SSL_MD5,

SSL_SSLV3,

SSL_NOT_EXP|SSL_MEDIUM,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 25 */

{

1,

SSL3_TXT_KRB5_IDEA_128_CBC_MD5,

SSL3_CK_KRB5_IDEA_128_CBC_MD5,

SSL_kKRB5,

SSL_aKRB5,

SSL_IDEA,

SSL_MD5,

SSL_SSLV3,

SSL_NOT_EXP|SSL_MEDIUM,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 26 */

{

1,

SSL3_TXT_KRB5_DES_40_CBC_SHA,

SSL3_CK_KRB5_DES_40_CBC_SHA,

SSL_kKRB5,

SSL_aKRB5,

SSL_DES,

SSL_SHA1,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

56,

},

/* Cipher 27 */

{

1,

SSL3_TXT_KRB5_RC2_40_CBC_SHA,

SSL3_CK_KRB5_RC2_40_CBC_SHA,

SSL_kKRB5,

SSL_aKRB5,

SSL_RC2,

SSL_SHA1,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

128,

},

/* Cipher 28 */

{

1,

SSL3_TXT_KRB5_RC4_40_SHA,

SSL3_CK_KRB5_RC4_40_SHA,

SSL_kKRB5,

SSL_aKRB5,

SSL_RC4,

SSL_SHA1,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

128,

},

/* Cipher 29 */

{

1,

SSL3_TXT_KRB5_DES_40_CBC_MD5,

SSL3_CK_KRB5_DES_40_CBC_MD5,

SSL_kKRB5,

SSL_aKRB5,

SSL_DES,

SSL_MD5,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

56,

},

/* Cipher 2A */

{

1,

SSL3_TXT_KRB5_RC2_40_CBC_MD5,

SSL3_CK_KRB5_RC2_40_CBC_MD5,

SSL_kKRB5,

SSL_aKRB5,

SSL_RC2,

SSL_MD5,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

128,

},

/* Cipher 2B */

{

1,

SSL3_TXT_KRB5_RC4_40_MD5,

SSL3_CK_KRB5_RC4_40_MD5,

SSL_kKRB5,

SSL_aKRB5,

SSL_RC4,

SSL_MD5,

SSL_SSLV3,

SSL_EXPORT|SSL_EXP40,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

40,

128,

},

#endif /* OPENSSL_NO_KRB5 */

/* New AES ciphersuites */

/* Cipher 2F */

{

1,

TLS1_TXT_RSA_WITH_AES_128_SHA,

TLS1_CK_RSA_WITH_AES_128_SHA,

SSL_kRSA,

SSL_aRSA,

SSL_AES128,

SSL_SHA1,

SSL_TLSV1,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 30 */

{

0,

TLS1_TXT_DH_DSS_WITH_AES_128_SHA,

TLS1_CK_DH_DSS_WITH_AES_128_SHA,

SSL_kDHd,

SSL_aDH,

SSL_AES128,

SSL_SHA1,

SSL_TLSV1,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 31 */

{

0,

TLS1_TXT_DH_RSA_WITH_AES_128_SHA,

TLS1_CK_DH_RSA_WITH_AES_128_SHA,

SSL_kDHr,

SSL_aDH,

SSL_AES128,

SSL_SHA1,

SSL_TLSV1,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 32 */

{

1,

TLS1_TXT_DHE_DSS_WITH_AES_128_SHA,

TLS1_CK_DHE_DSS_WITH_AES_128_SHA,

SSL_kEDH,

SSL_aDSS,

SSL_AES128,

SSL_SHA1,

SSL_TLSV1,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 33 */

{

1,

TLS1_TXT_DHE_RSA_WITH_AES_128_SHA,

TLS1_CK_DHE_RSA_WITH_AES_128_SHA,

SSL_kEDH,

SSL_aRSA,

SSL_AES128,

SSL_SHA1,

SSL_TLSV1,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 34 */

{

1,

TLS1_TXT_ADH_WITH_AES_128_SHA,

TLS1_CK_ADH_WITH_AES_128_SHA,

SSL_kEDH,

SSL_aNULL,

SSL_AES128,

SSL_SHA1,

SSL_TLSV1,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

128,

128,

},

/* Cipher 35 */

{

1,

TLS1_TXT_RSA_WITH_AES_256_SHA,

TLS1_CK_RSA_WITH_AES_256_SHA,

SSL_kRSA,

SSL_aRSA,

SSL_AES256,

SSL_SHA1,

SSL_TLSV1,

SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,

SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,

256,

256,

},

/* Cipher 36 */

{

0,

TLS1_TXT_DH_DSS_WITH_AES_256_SHA,

TLS1_CK_DH_DSS_WITH_AES_256_SHA,

SSL_kDHd,

SSL_aDH,