google / google/conscrypt

Additional secure PSK cipher suites

Open
#1,148 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Java
Stars
1.4k
Forks
326
Avg merge
16h 22m
Merged PRs (30d)
17

Description

Hello,
Could you add support for additional secure PSK cipher suites apart from TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256 ?
CHACHA20 is not mentioned in CNSA: https://www.rfc-editor.org/rfc/rfc9151 and thus we cannot use it.

By secure I mean "recommended" or "secure" according to
https://ciphersuite.info/search/?security=secure&q=PSK
https://ciphersuite.info/search/?security=recommended&q=PSK

especially I am interested in
TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 and TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384

I am asking for PSK cipher suites because we are not able to use certificate-based ciphers suites on legacy devices.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.