Additional secure PSK cipher suites
Open
- Dominant language
- Java
- Stars
- 1.4k
- Forks
- 326
- Avg merge
- 16h 22m
- Merged PRs (30d)
- 17
Description
Hello,
Could you add support for additional secure PSK cipher suites apart from TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256 ?
CHACHA20 is not mentioned in CNSA: https://www.rfc-editor.org/rfc/rfc9151 and thus we cannot use it.
By secure I mean "recommended" or "secure" according to
https://ciphersuite.info/search/?security=secure&q=PSK
https://ciphersuite.info/search/?security=recommended&q=PSK
especially I am interested in
TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 and TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384
I am asking for PSK cipher suites because we are not able to use certificate-based ciphers suites on legacy devices.
Contributor guide
Assessment
This issue has not been assessed yet.