dtls.c: add cipher_suite_param_t

Use cipher_suite_param_t for cipher-suite specific mac_len and key_exchange_algorithm. Introduce dtls_cipher_index_t for simplified cipher-suite parameter lookup. Cleanup old functions. Signed-off-by: Achim Kraus <[email protected]>
eclipse · Jan 24, 2023 · 78639df · 78639df
1 parent 1c58d5d
commit 78639df
Show file tree

Hide file tree

Showing 3 changed files with 291 additions and 244 deletions.
diff --git a/crypto.c b/crypto.c
@@ -187,7 +187,7 @@ dtls_security_parameters_t *dtls_security_new(void)
 
   memset(security, 0, sizeof(*security));
 
-  security->cipher = TLS_NULL_WITH_NULL_NULL;
+  security->cipher_index = DTLS_CIPHER_INDEX_NULL;
   security->compression = TLS_COMPRESSION_NULL;
 
   return security;

diff --git a/crypto.h b/crypto.h
@@ -49,6 +49,12 @@
 #define DTLS_MASTER_SECRET_LENGTH 48
 #define DTLS_RANDOM_LENGTH 32
 
+/** Type of index in cipher parameter table */
+typedef uint8_t dtls_cipher_index_t;
+/** Index in cipher parameter table for NULL cipher */
+#define DTLS_CIPHER_INDEX_NULL 0
+
+
 typedef enum { AES128=0 
 } dtls_crypto_alg;
 
@@ -105,7 +111,7 @@ typedef struct {
 typedef struct {
   dtls_compression_t compression;	/**< compression method */
 
-  dtls_cipher_t cipher;		/**< cipher type */
+  dtls_cipher_index_t cipher_index;	/**< internal index for cipher_suite_params, DTLS_CIPHER_INDEX_NULL for TLS_NULL_WITH_NULL_NULL */
   uint16_t epoch;	     /**< counter for cipher state changes*/
   uint64_t rseq;	     /**< sequence number of last record sent */
 
@@ -135,7 +141,7 @@ typedef struct {
   dtls_hs_state_t hs_state;  /**< handshake protocol status */
 
   dtls_compression_t compression;		/**< compression method */
-  dtls_cipher_t cipher;		/**< cipher type */
+  dtls_cipher_index_t cipher_index;		/**< internal index for cipher_suite_params, DTLS_CIPHER_INDEX_NULL for TLS_NULL_WITH_NULL_NULL */
   unsigned int do_client_auth:1;
   unsigned int extended_master_secret:1;
   union {