Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Additional secure PSK cipher suites #1148

Open
sikor opened this issue Jun 14, 2023 · 0 comments
Open

Additional secure PSK cipher suites #1148

sikor opened this issue Jun 14, 2023 · 0 comments

Comments

@sikor
Copy link

sikor commented Jun 14, 2023

Hello,
Could you add support for additional secure PSK cipher suites apart from TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256 ?
CHACHA20 is not mentioned in CNSA: https://www.rfc-editor.org/rfc/rfc9151 and thus we cannot use it.

By secure I mean "recommended" or "secure" according to
https://ciphersuite.info/search/?security=secure&q=PSK
https://ciphersuite.info/search/?security=recommended&q=PSK

especially I am interested in
TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 and TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384

I am asking for PSK cipher suites because we are not able to use certificate-based ciphers suites on legacy devices.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant