xref: /reactos/sdk/include/reactos/libs/mbedtls/dhm.h (revision cbda039f)
1 /**
2  * \file dhm.h
3  *
4  * \brief   This file contains Diffie-Hellman-Merkle (DHM) key exchange
5  *          definitions and functions.
6  *
7  * Diffie-Hellman-Merkle (DHM) key exchange is defined in
8  * <em>RFC-2631: Diffie-Hellman Key Agreement Method</em> and
9  * <em>Public-Key Cryptography Standards (PKCS) #3: Diffie
10  * Hellman Key Agreement Standard</em>.
11  *
12  * <em>RFC-3526: More Modular Exponential (MODP) Diffie-Hellman groups for
13  * Internet Key Exchange (IKE)</em> defines a number of standardized
14  * Diffie-Hellman groups for IKE.
15  *
16  * <em>RFC-5114: Additional Diffie-Hellman Groups for Use with IETF
17  * Standards</em> defines a number of standardized Diffie-Hellman
18  * groups that can be used.
19  *
20  * \warning  The security of the DHM key exchange relies on the proper choice
21  *           of prime modulus - optimally, it should be a safe prime. The usage
22  *           of non-safe primes both decreases the difficulty of the underlying
23  *           discrete logarithm problem and can lead to small subgroup attacks
24  *           leaking private exponent bits when invalid public keys are used
25  *           and not detected. This is especially relevant if the same DHM
26  *           parameters are reused for multiple key exchanges as in static DHM,
27  *           while the criticality of small-subgroup attacks is lower for
28  *           ephemeral DHM.
29  *
30  * \warning  For performance reasons, the code does neither perform primality
31  *           nor safe primality tests, nor the expensive checks for invalid
32  *           subgroups. Moreover, even if these were performed, non-standardized
33  *           primes cannot be trusted because of the possibility of backdoors
34  *           that can't be effectively checked for.
35  *
36  * \warning  Diffie-Hellman-Merkle is therefore a security risk when not using
37  *           standardized primes generated using a trustworthy ("nothing up
38  *           my sleeve") method, such as the RFC 3526 / 7919 primes. In the TLS
39  *           protocol, DH parameters need to be negotiated, so using the default
40  *           primes systematically is not always an option. If possible, use
41  *           Elliptic Curve Diffie-Hellman (ECDH), which has better performance,
42  *           and for which the TLS protocol mandates the use of standard
43  *           parameters.
44  *
45  */
46 /*
47  *  Copyright The Mbed TLS Contributors
48  *  SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
49  *
50  *  This file is provided under the Apache License 2.0, or the
51  *  GNU General Public License v2.0 or later.
52  *
53  *  **********
54  *  Apache License 2.0:
55  *
56  *  Licensed under the Apache License, Version 2.0 (the "License"); you may
57  *  not use this file except in compliance with the License.
58  *  You may obtain a copy of the License at
59  *
60  *  http://www.apache.org/licenses/LICENSE-2.0
61  *
62  *  Unless required by applicable law or agreed to in writing, software
63  *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
64  *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
65  *  See the License for the specific language governing permissions and
66  *  limitations under the License.
67  *
68  *  **********
69  *
70  *  **********
71  *  GNU General Public License v2.0 or later:
72  *
73  *  This program is free software; you can redistribute it and/or modify
74  *  it under the terms of the GNU General Public License as published by
75  *  the Free Software Foundation; either version 2 of the License, or
76  *  (at your option) any later version.
77  *
78  *  This program is distributed in the hope that it will be useful,
79  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
80  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
81  *  GNU General Public License for more details.
82  *
83  *  You should have received a copy of the GNU General Public License along
84  *  with this program; if not, write to the Free Software Foundation, Inc.,
85  *  51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
86  *
87  *  **********
88  */
89 
90 #ifndef MBEDTLS_DHM_H
91 #define MBEDTLS_DHM_H
92 
93 #if !defined(MBEDTLS_CONFIG_FILE)
94 #include "config.h"
95 #else
96 #include MBEDTLS_CONFIG_FILE
97 #endif
98 #include "bignum.h"
99 
100 /*
101  * DHM Error codes
102  */
103 #define MBEDTLS_ERR_DHM_BAD_INPUT_DATA                    -0x3080  /**< Bad input parameters. */
104 #define MBEDTLS_ERR_DHM_READ_PARAMS_FAILED                -0x3100  /**< Reading of the DHM parameters failed. */
105 #define MBEDTLS_ERR_DHM_MAKE_PARAMS_FAILED                -0x3180  /**< Making of the DHM parameters failed. */
106 #define MBEDTLS_ERR_DHM_READ_PUBLIC_FAILED                -0x3200  /**< Reading of the public values failed. */
107 #define MBEDTLS_ERR_DHM_MAKE_PUBLIC_FAILED                -0x3280  /**< Making of the public value failed. */
108 #define MBEDTLS_ERR_DHM_CALC_SECRET_FAILED                -0x3300  /**< Calculation of the DHM secret failed. */
109 #define MBEDTLS_ERR_DHM_INVALID_FORMAT                    -0x3380  /**< The ASN.1 data is not formatted correctly. */
110 #define MBEDTLS_ERR_DHM_ALLOC_FAILED                      -0x3400  /**< Allocation of memory failed. */
111 #define MBEDTLS_ERR_DHM_FILE_IO_ERROR                     -0x3480  /**< Read or write of file failed. */
112 
113 /* MBEDTLS_ERR_DHM_HW_ACCEL_FAILED is deprecated and should not be used. */
114 #define MBEDTLS_ERR_DHM_HW_ACCEL_FAILED                   -0x3500  /**< DHM hardware accelerator failed. */
115 
116 #define MBEDTLS_ERR_DHM_SET_GROUP_FAILED                  -0x3580  /**< Setting the modulus and generator failed. */
117 
118 #ifdef __cplusplus
119 extern "C" {
120 #endif
121 
122 #if !defined(MBEDTLS_DHM_ALT)
123 
124 /**
125  * \brief          The DHM context structure.
126  */
127 typedef struct mbedtls_dhm_context
128 {
129     size_t len;         /*!<  The size of \p P in Bytes. */
130     mbedtls_mpi P;      /*!<  The prime modulus. */
131     mbedtls_mpi G;      /*!<  The generator. */
132     mbedtls_mpi X;      /*!<  Our secret value. */
133     mbedtls_mpi GX;     /*!<  Our public key = \c G^X mod \c P. */
134     mbedtls_mpi GY;     /*!<  The public key of the peer = \c G^Y mod \c P. */
135     mbedtls_mpi K;      /*!<  The shared secret = \c G^(XY) mod \c P. */
136     mbedtls_mpi RP;     /*!<  The cached value = \c R^2 mod \c P. */
137     mbedtls_mpi Vi;     /*!<  The blinding value. */
138     mbedtls_mpi Vf;     /*!<  The unblinding value. */
139     mbedtls_mpi pX;     /*!<  The previous \c X. */
140 }
141 mbedtls_dhm_context;
142 
143 #else /* MBEDTLS_DHM_ALT */
144 #include "dhm_alt.h"
145 #endif /* MBEDTLS_DHM_ALT */
146 
147 /**
148  * \brief          This function initializes the DHM context.
149  *
150  * \param ctx      The DHM context to initialize.
151  */
152 void mbedtls_dhm_init( mbedtls_dhm_context *ctx );
153 
154 /**
155  * \brief          This function parses the DHM parameters in a
156  *                 TLS ServerKeyExchange handshake message
157  *                 (DHM modulus, generator, and public key).
158  *
159  * \note           In a TLS handshake, this is the how the client
160  *                 sets up its DHM context from the server's public
161  *                 DHM key material.
162  *
163  * \param ctx      The DHM context to use. This must be initialized.
164  * \param p        On input, *p must be the start of the input buffer.
165  *                 On output, *p is updated to point to the end of the data
166  *                 that has been read. On success, this is the first byte
167  *                 past the end of the ServerKeyExchange parameters.
168  *                 On error, this is the point at which an error has been
169  *                 detected, which is usually not useful except to debug
170  *                 failures.
171  * \param end      The end of the input buffer.
172  *
173  * \return         \c 0 on success.
174  * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure.
175  */
176 int mbedtls_dhm_read_params( mbedtls_dhm_context *ctx,
177                              unsigned char **p,
178                              const unsigned char *end );
179 
180 /**
181  * \brief          This function generates a DHM key pair and exports its
182  *                 public part together with the DHM parameters in the format
183  *                 used in a TLS ServerKeyExchange handshake message.
184  *
185  * \note           This function assumes that the DHM parameters \c ctx->P
186  *                 and \c ctx->G have already been properly set. For that, use
187  *                 mbedtls_dhm_set_group() below in conjunction with
188  *                 mbedtls_mpi_read_binary() and mbedtls_mpi_read_string().
189  *
190  * \note           In a TLS handshake, this is the how the server generates
191  *                 and exports its DHM key material.
192  *
193  * \param ctx      The DHM context to use. This must be initialized
194  *                 and have the DHM parameters set. It may or may not
195  *                 already have imported the peer's public key.
196  * \param x_size   The private key size in Bytes.
197  * \param olen     The address at which to store the number of Bytes
198  *                 written on success. This must not be \c NULL.
199  * \param output   The destination buffer. This must be a writable buffer of
200  *                 sufficient size to hold the reduced binary presentation of
201  *                 the modulus, the generator and the public key, each wrapped
202  *                 with a 2-byte length field. It is the responsibility of the
203  *                 caller to ensure that enough space is available. Refer to
204  *                 mbedtls_mpi_size() to computing the byte-size of an MPI.
205  * \param f_rng    The RNG function. Must not be \c NULL.
206  * \param p_rng    The RNG context to be passed to \p f_rng. This may be
207  *                 \c NULL if \p f_rng doesn't need a context parameter.
208  *
209  * \return         \c 0 on success.
210  * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure.
211  */
212 int mbedtls_dhm_make_params( mbedtls_dhm_context *ctx, int x_size,
213                      unsigned char *output, size_t *olen,
214                      int (*f_rng)(void *, unsigned char *, size_t),
215                      void *p_rng );
216 
217 /**
218  * \brief          This function sets the prime modulus and generator.
219  *
220  * \note           This function can be used to set \c ctx->P, \c ctx->G
221  *                 in preparation for mbedtls_dhm_make_params().
222  *
223  * \param ctx      The DHM context to configure. This must be initialized.
224  * \param P        The MPI holding the DHM prime modulus. This must be
225  *                 an initialized MPI.
226  * \param G        The MPI holding the DHM generator. This must be an
227  *                 initialized MPI.
228  *
229  * \return         \c 0 if successful.
230  * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure.
231  */
232 int mbedtls_dhm_set_group( mbedtls_dhm_context *ctx,
233                            const mbedtls_mpi *P,
234                            const mbedtls_mpi *G );
235 
236 /**
237  * \brief          This function imports the raw public value of the peer.
238  *
239  * \note           In a TLS handshake, this is the how the server imports
240  *                 the Client's public DHM key.
241  *
242  * \param ctx      The DHM context to use. This must be initialized and have
243  *                 its DHM parameters set, e.g. via mbedtls_dhm_set_group().
244  *                 It may or may not already have generated its own private key.
245  * \param input    The input buffer containing the \c G^Y value of the peer.
246  *                 This must be a readable buffer of size \p ilen Bytes.
247  * \param ilen     The size of the input buffer \p input in Bytes.
248  *
249  * \return         \c 0 on success.
250  * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure.
251  */
252 int mbedtls_dhm_read_public( mbedtls_dhm_context *ctx,
253                      const unsigned char *input, size_t ilen );
254 
255 /**
256  * \brief          This function creates a DHM key pair and exports
257  *                 the raw public key in big-endian format.
258  *
259  * \note           The destination buffer is always fully written
260  *                 so as to contain a big-endian representation of G^X mod P.
261  *                 If it is larger than \c ctx->len, it is padded accordingly
262  *                 with zero-bytes at the beginning.
263  *
264  * \param ctx      The DHM context to use. This must be initialized and
265  *                 have the DHM parameters set. It may or may not already
266  *                 have imported the peer's public key.
267  * \param x_size   The private key size in Bytes.
268  * \param output   The destination buffer. This must be a writable buffer of
269  *                 size \p olen Bytes.
270  * \param olen     The length of the destination buffer. This must be at least
271  *                 equal to `ctx->len` (the size of \c P).
272  * \param f_rng    The RNG function. This must not be \c NULL.
273  * \param p_rng    The RNG context to be passed to \p f_rng. This may be \c NULL
274  *                 if \p f_rng doesn't need a context argument.
275  *
276  * \return         \c 0 on success.
277  * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure.
278  */
279 int mbedtls_dhm_make_public( mbedtls_dhm_context *ctx, int x_size,
280                      unsigned char *output, size_t olen,
281                      int (*f_rng)(void *, unsigned char *, size_t),
282                      void *p_rng );
283 
284 /**
285  * \brief          This function derives and exports the shared secret
286  *                 \c (G^Y)^X mod \c P.
287  *
288  * \note           If \p f_rng is not \c NULL, it is used to blind the input as
289  *                 a countermeasure against timing attacks. Blinding is used
290  *                 only if our private key \c X is re-used, and not used
291  *                 otherwise. We recommend always passing a non-NULL
292  *                 \p f_rng argument.
293  *
294  * \param ctx           The DHM context to use. This must be initialized
295  *                      and have its own private key generated and the peer's
296  *                      public key imported.
297  * \param output        The buffer to write the generated shared key to. This
298  *                      must be a writable buffer of size \p output_size Bytes.
299  * \param output_size   The size of the destination buffer. This must be at
300  *                      least the size of \c ctx->len (the size of \c P).
301  * \param olen          On exit, holds the actual number of Bytes written.
302  * \param f_rng         The RNG function, for blinding purposes. This may
303  *                      b \c NULL if blinding isn't needed.
304  * \param p_rng         The RNG context. This may be \c NULL if \p f_rng
305  *                      doesn't need a context argument.
306  *
307  * \return              \c 0 on success.
308  * \return              An \c MBEDTLS_ERR_DHM_XXX error code on failure.
309  */
310 int mbedtls_dhm_calc_secret( mbedtls_dhm_context *ctx,
311                      unsigned char *output, size_t output_size, size_t *olen,
312                      int (*f_rng)(void *, unsigned char *, size_t),
313                      void *p_rng );
314 
315 /**
316  * \brief          This function frees and clears the components
317  *                 of a DHM context.
318  *
319  * \param ctx      The DHM context to free and clear. This may be \c NULL,
320  *                 in which case this function is a no-op. If it is not \c NULL,
321  *                 it must point to an initialized DHM context.
322  */
323 void mbedtls_dhm_free( mbedtls_dhm_context *ctx );
324 
325 #if defined(MBEDTLS_ASN1_PARSE_C)
326 /** \ingroup x509_module */
327 /**
328  * \brief             This function parses DHM parameters in PEM or DER format.
329  *
330  * \param dhm         The DHM context to import the DHM parameters into.
331  *                    This must be initialized.
332  * \param dhmin       The input buffer. This must be a readable buffer of
333  *                    length \p dhminlen Bytes.
334  * \param dhminlen    The size of the input buffer \p dhmin, including the
335  *                    terminating \c NULL Byte for PEM data.
336  *
337  * \return            \c 0 on success.
338  * \return            An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX error
339  *                    code on failure.
340  */
341 int mbedtls_dhm_parse_dhm( mbedtls_dhm_context *dhm, const unsigned char *dhmin,
342                            size_t dhminlen );
343 
344 #if defined(MBEDTLS_FS_IO)
345 /** \ingroup x509_module */
346 /**
347  * \brief          This function loads and parses DHM parameters from a file.
348  *
349  * \param dhm      The DHM context to load the parameters to.
350  *                 This must be initialized.
351  * \param path     The filename to read the DHM parameters from.
352  *                 This must not be \c NULL.
353  *
354  * \return         \c 0 on success.
355  * \return         An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX
356  *                 error code on failure.
357  */
358 int mbedtls_dhm_parse_dhmfile( mbedtls_dhm_context *dhm, const char *path );
359 #endif /* MBEDTLS_FS_IO */
360 #endif /* MBEDTLS_ASN1_PARSE_C */
361 
362 #if defined(MBEDTLS_SELF_TEST)
363 
364 /**
365  * \brief          The DMH checkup routine.
366  *
367  * \return         \c 0 on success.
368  * \return         \c 1 on failure.
369  */
370 int mbedtls_dhm_self_test( int verbose );
371 
372 #endif /* MBEDTLS_SELF_TEST */
373 #ifdef __cplusplus
374 }
375 #endif
376 
377 /**
378  * RFC 3526, RFC 5114 and RFC 7919 standardize a number of
379  * Diffie-Hellman groups, some of which are included here
380  * for use within the SSL/TLS module and the user's convenience
381  * when configuring the Diffie-Hellman parameters by hand
382  * through \c mbedtls_ssl_conf_dh_param.
383  *
384  * The following lists the source of the above groups in the standards:
385  * - RFC 5114 section 2.2:  2048-bit MODP Group with 224-bit Prime Order Subgroup
386  * - RFC 3526 section 3:    2048-bit MODP Group
387  * - RFC 3526 section 4:    3072-bit MODP Group
388  * - RFC 3526 section 5:    4096-bit MODP Group
389  * - RFC 7919 section A.1:  ffdhe2048
390  * - RFC 7919 section A.2:  ffdhe3072
391  * - RFC 7919 section A.3:  ffdhe4096
392  * - RFC 7919 section A.4:  ffdhe6144
393  * - RFC 7919 section A.5:  ffdhe8192
394  *
395  * The constants with suffix "_p" denote the chosen prime moduli, while
396  * the constants with suffix "_g" denote the chosen generator
397  * of the associated prime field.
398  *
399  * The constants further suffixed with "_bin" are provided in binary format,
400  * while all other constants represent null-terminated strings holding the
401  * hexadecimal presentation of the respective numbers.
402  *
403  * The primes from RFC 3526 and RFC 7919 have been generating by the following
404  * trust-worthy procedure:
405  * - Fix N in { 2048, 3072, 4096, 6144, 8192 } and consider the N-bit number
406  *   the first and last 64 bits are all 1, and the remaining N - 128 bits of
407  *   which are 0x7ff...ff.
408  * - Add the smallest multiple of the first N - 129 bits of the binary expansion
409  *   of pi (for RFC 5236) or e (for RFC 7919) to this intermediate bit-string
410  *   such that the resulting integer is a safe-prime.
411  * - The result is the respective RFC 3526 / 7919 prime, and the corresponding
412  *   generator is always chosen to be 2 (which is a square for these prime,
413  *   hence the corresponding subgroup has order (p-1)/2 and avoids leaking a
414  *   bit in the private exponent).
415  *
416  */
417 
418 #if !defined(MBEDTLS_DEPRECATED_REMOVED)
419 
420 /**
421  * \warning The origin of the primes in RFC 5114 is not documented and
422  *          their use therefore constitutes a security risk!
423  *
424  * \deprecated The hex-encoded primes from RFC 5114 are deprecated and are
425  *             likely to be removed in a future version of the library without
426  *             replacement.
427  */
428 
429 /**
430  * The hexadecimal presentation of the prime underlying the
431  * 2048-bit MODP Group with 224-bit Prime Order Subgroup, as defined
432  * in <em>RFC-5114: Additional Diffie-Hellman Groups for Use with
433  * IETF Standards</em>.
434  */
435 #define MBEDTLS_DHM_RFC5114_MODP_2048_P                         \
436     MBEDTLS_DEPRECATED_STRING_CONSTANT(                         \
437         "AD107E1E9123A9D0D660FAA79559C51FA20D64E5683B9FD1"      \
438         "B54B1597B61D0A75E6FA141DF95A56DBAF9A3C407BA1DF15"      \
439         "EB3D688A309C180E1DE6B85A1274A0A66D3F8152AD6AC212"      \
440         "9037C9EDEFDA4DF8D91E8FEF55B7394B7AD5B7D0B6C12207"      \
441         "C9F98D11ED34DBF6C6BA0B2C8BBC27BE6A00E0A0B9C49708"      \
442         "B3BF8A317091883681286130BC8985DB1602E714415D9330"      \
443         "278273C7DE31EFDC7310F7121FD5A07415987D9ADC0A486D"      \
444         "CDF93ACC44328387315D75E198C641A480CD86A1B9E587E8"      \
445         "BE60E69CC928B2B9C52172E413042E9B23F10B0E16E79763"      \
446         "C9B53DCF4BA80A29E3FB73C16B8E75B97EF363E2FFA31F71"      \
447         "CF9DE5384E71B81C0AC4DFFE0C10E64F" )
448 
449 /**
450  * The hexadecimal presentation of the chosen generator of the 2048-bit MODP
451  * Group with 224-bit Prime Order Subgroup, as defined in <em>RFC-5114:
452  * Additional Diffie-Hellman Groups for Use with IETF Standards</em>.
453  */
454 #define MBEDTLS_DHM_RFC5114_MODP_2048_G                         \
455     MBEDTLS_DEPRECATED_STRING_CONSTANT(                         \
456         "AC4032EF4F2D9AE39DF30B5C8FFDAC506CDEBE7B89998CAF"      \
457         "74866A08CFE4FFE3A6824A4E10B9A6F0DD921F01A70C4AFA"      \
458         "AB739D7700C29F52C57DB17C620A8652BE5E9001A8D66AD7"      \
459         "C17669101999024AF4D027275AC1348BB8A762D0521BC98A"      \
460         "E247150422EA1ED409939D54DA7460CDB5F6C6B250717CBE"      \
461         "F180EB34118E98D119529A45D6F834566E3025E316A330EF"      \
462         "BB77A86F0C1AB15B051AE3D428C8F8ACB70A8137150B8EEB"      \
463         "10E183EDD19963DDD9E263E4770589EF6AA21E7F5F2FF381"      \
464         "B539CCE3409D13CD566AFBB48D6C019181E1BCFE94B30269"      \
465         "EDFE72FE9B6AA4BD7B5A0F1C71CFFF4C19C418E1F6EC0179"      \
466         "81BC087F2A7065B384B890D3191F2BFA" )
467 
468 /**
469  * The hexadecimal presentation of the prime underlying the 2048-bit MODP
470  * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
471  * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
472  *
473  * \deprecated The hex-encoded primes from RFC 3625 are deprecated and
474  *             superseded by the corresponding macros providing them as
475  *             binary constants. Their hex-encoded constants are likely
476  *             to be removed in a future version of the library.
477  *
478  */
479 #define MBEDTLS_DHM_RFC3526_MODP_2048_P                         \
480     MBEDTLS_DEPRECATED_STRING_CONSTANT(                         \
481         "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1"      \
482         "29024E088A67CC74020BBEA63B139B22514A08798E3404DD"      \
483         "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245"      \
484         "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED"      \
485         "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D"      \
486         "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F"      \
487         "83655D23DCA3AD961C62F356208552BB9ED529077096966D"      \
488         "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B"      \
489         "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9"      \
490         "DE2BCBF6955817183995497CEA956AE515D2261898FA0510"      \
491         "15728E5A8AACAA68FFFFFFFFFFFFFFFF" )
492 
493 /**
494  * The hexadecimal presentation of the chosen generator of the 2048-bit MODP
495  * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
496  * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
497  */
498 #define MBEDTLS_DHM_RFC3526_MODP_2048_G                         \
499     MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" )
500 
501 /**
502  * The hexadecimal presentation of the prime underlying the 3072-bit MODP
503  * Group, as defined in <em>RFC-3072: More Modular Exponential (MODP)
504  * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
505  */
506 #define MBEDTLS_DHM_RFC3526_MODP_3072_P                         \
507     MBEDTLS_DEPRECATED_STRING_CONSTANT(                         \
508         "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1"      \
509         "29024E088A67CC74020BBEA63B139B22514A08798E3404DD"      \
510         "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245"      \
511         "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED"      \
512         "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D"      \
513         "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F"      \
514         "83655D23DCA3AD961C62F356208552BB9ED529077096966D"      \
515         "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B"      \
516         "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9"      \
517         "DE2BCBF6955817183995497CEA956AE515D2261898FA0510"      \
518         "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64"      \
519         "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7"      \
520         "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B"      \
521         "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C"      \
522         "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31"      \
523         "43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF" )
524 
525 /**
526  * The hexadecimal presentation of the chosen generator of the 3072-bit MODP
527  * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
528  * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
529  */
530 #define MBEDTLS_DHM_RFC3526_MODP_3072_G                      \
531     MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" )
532 
533 /**
534  * The hexadecimal presentation of the prime underlying the 4096-bit MODP
535  * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
536  * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
537  */
538 #define MBEDTLS_DHM_RFC3526_MODP_4096_P                      \
539     MBEDTLS_DEPRECATED_STRING_CONSTANT(                      \
540         "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1"   \
541         "29024E088A67CC74020BBEA63B139B22514A08798E3404DD"   \
542         "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245"   \
543         "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED"   \
544         "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D"   \
545         "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F"   \
546         "83655D23DCA3AD961C62F356208552BB9ED529077096966D"   \
547         "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B"   \
548         "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9"   \
549         "DE2BCBF6955817183995497CEA956AE515D2261898FA0510"   \
550         "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64"   \
551         "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7"   \
552         "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B"   \
553         "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C"   \
554         "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31"   \
555         "43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7"   \
556         "88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA"   \
557         "2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6"   \
558         "287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED"   \
559         "1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9"   \
560         "93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934063199"   \
561         "FFFFFFFFFFFFFFFF" )
562 
563 /**
564  * The hexadecimal presentation of the chosen generator of the 4096-bit MODP
565  * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
566  * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
567  */
568 #define MBEDTLS_DHM_RFC3526_MODP_4096_G                      \
569     MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" )
570 
571 #endif /* MBEDTLS_DEPRECATED_REMOVED */
572 
573 /*
574  * Trustworthy DHM parameters in binary form
575  */
576 
577 #define MBEDTLS_DHM_RFC3526_MODP_2048_P_BIN {        \
578      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
579      0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \
580      0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \
581      0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \
582      0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \
583      0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \
584      0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \
585      0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \
586      0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \
587      0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \
588      0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \
589      0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \
590      0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \
591      0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \
592      0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \
593      0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \
594      0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \
595      0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \
596      0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \
597      0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \
598      0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \
599      0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \
600      0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \
601      0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \
602      0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \
603      0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \
604      0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \
605      0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \
606      0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \
607      0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \
608      0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAC, 0xAA, 0x68, \
609      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
610 
611 #define MBEDTLS_DHM_RFC3526_MODP_2048_G_BIN { 0x02 }
612 
613 #define MBEDTLS_DHM_RFC3526_MODP_3072_P_BIN {       \
614     0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
615     0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \
616     0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \
617     0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \
618     0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \
619     0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \
620     0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \
621     0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \
622     0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \
623     0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \
624     0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \
625     0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \
626     0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \
627     0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \
628     0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \
629     0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \
630     0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \
631     0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \
632     0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \
633     0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \
634     0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \
635     0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \
636     0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \
637     0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \
638     0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \
639     0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \
640     0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \
641     0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \
642     0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \
643     0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \
644     0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D, \
645     0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33, \
646     0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64, \
647     0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, \
648     0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, \
649     0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7, \
650     0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7, \
651     0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D, \
652     0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B, \
653     0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64, \
654     0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, \
655     0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, \
656     0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C, \
657     0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2, \
658     0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31, \
659     0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E, \
660     0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x3A, 0xD2, 0xCA, \
661     0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
662 
663 #define MBEDTLS_DHM_RFC3526_MODP_3072_G_BIN { 0x02 }
664 
665 #define MBEDTLS_DHM_RFC3526_MODP_4096_P_BIN  {       \
666     0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,  \
667     0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,  \
668     0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,  \
669     0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,  \
670     0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,  \
671     0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,  \
672     0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,  \
673     0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,  \
674     0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,  \
675     0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,  \
676     0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,  \
677     0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,  \
678     0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,  \
679     0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,  \
680     0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D,  \
681     0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05,  \
682     0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A,  \
683     0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F,  \
684     0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96,  \
685     0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB,  \
686     0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D,  \
687     0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04,  \
688     0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C,  \
689     0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B,  \
690     0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03,  \
691     0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F,  \
692     0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9,  \
693     0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18,  \
694     0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5,  \
695     0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10,  \
696     0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D,  \
697     0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33,  \
698     0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64,  \
699     0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A,  \
700     0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D,  \
701     0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7,  \
702     0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7,  \
703     0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D,  \
704     0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B,  \
705     0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64,  \
706     0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64,  \
707     0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C,  \
708     0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C,  \
709     0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2,  \
710     0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31,  \
711     0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E,  \
712     0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x21, 0x08, 0x01,  \
713     0x1A, 0x72, 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7,  \
714     0x88, 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26,  \
715     0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, 0x3C,  \
716     0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, 0x0B, 0xDA,  \
717     0x25, 0x83, 0xE9, 0xCA, 0x2A, 0xD4, 0x4C, 0xE8,  \
718     0xDB, 0xBB, 0xC2, 0xDB, 0x04, 0xDE, 0x8E, 0xF9,  \
719     0x2E, 0x8E, 0xFC, 0x14, 0x1F, 0xBE, 0xCA, 0xA6,  \
720     0x28, 0x7C, 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D,  \
721     0x99, 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2,  \
722     0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, 0xED,  \
723     0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, 0xD7, 0xAF,  \
724     0xB8, 0x1B, 0xDD, 0x76, 0x21, 0x70, 0x48, 0x1C,  \
725     0xD0, 0x06, 0x91, 0x27, 0xD5, 0xB0, 0x5A, 0xA9,  \
726     0x93, 0xB4, 0xEA, 0x98, 0x8D, 0x8F, 0xDD, 0xC1,  \
727     0x86, 0xFF, 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F,  \
728     0x4D, 0xF4, 0x35, 0xC9, 0x34, 0x06, 0x31, 0x99,  \
729     0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
730 
731 #define MBEDTLS_DHM_RFC3526_MODP_4096_G_BIN { 0x02 }
732 
733 #define MBEDTLS_DHM_RFC7919_FFDHE2048_P_BIN {        \
734      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
735      0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
736      0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
737      0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
738      0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
739      0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
740      0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
741      0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
742      0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
743      0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
744      0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
745      0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
746      0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
747      0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
748      0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
749      0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
750      0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
751      0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
752      0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
753      0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
754      0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
755      0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
756      0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
757      0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
758      0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
759      0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
760      0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
761      0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
762      0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
763      0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
764      0x88, 0x6B, 0x42, 0x38, 0x61, 0x28, 0x5C, 0x97, \
765      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, }
766 
767 #define MBEDTLS_DHM_RFC7919_FFDHE2048_G_BIN { 0x02 }
768 
769 #define MBEDTLS_DHM_RFC7919_FFDHE3072_P_BIN { \
770      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
771      0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
772      0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
773      0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
774      0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
775      0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
776      0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
777      0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
778      0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
779      0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
780      0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
781      0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
782      0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
783      0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
784      0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
785      0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
786      0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
787      0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
788      0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
789      0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
790      0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
791      0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
792      0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
793      0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
794      0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
795      0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
796      0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
797      0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
798      0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
799      0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
800      0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
801      0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
802      0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
803      0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
804      0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
805      0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
806      0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
807      0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
808      0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
809      0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
810      0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
811      0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
812      0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
813      0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
814      0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
815      0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
816      0x25, 0xE4, 0x1D, 0x2B, 0x66, 0xC6, 0x2E, 0x37, \
817      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
818 
819 #define MBEDTLS_DHM_RFC7919_FFDHE3072_G_BIN { 0x02 }
820 
821 #define MBEDTLS_DHM_RFC7919_FFDHE4096_P_BIN {        \
822      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
823      0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
824      0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
825      0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
826      0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
827      0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
828      0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
829      0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
830      0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
831      0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
832      0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
833      0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
834      0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
835      0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
836      0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
837      0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
838      0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
839      0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
840      0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
841      0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
842      0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
843      0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
844      0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
845      0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
846      0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
847      0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
848      0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
849      0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
850      0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
851      0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
852      0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
853      0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
854      0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
855      0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
856      0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
857      0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
858      0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
859      0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
860      0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
861      0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
862      0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
863      0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
864      0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
865      0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
866      0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
867      0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
868      0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
869      0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
870      0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
871      0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
872      0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
873      0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
874      0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
875      0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
876      0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
877      0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
878      0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
879      0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
880      0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
881      0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
882      0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
883      0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
884      0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x65, 0x5F, 0x6A, \
885      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
886 
887 #define MBEDTLS_DHM_RFC7919_FFDHE4096_G_BIN { 0x02 }
888 
889 #define MBEDTLS_DHM_RFC7919_FFDHE6144_P_BIN {        \
890      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
891      0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
892      0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
893      0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
894      0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
895      0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
896      0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
897      0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
898      0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
899      0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
900      0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
901      0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
902      0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
903      0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
904      0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
905      0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
906      0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
907      0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
908      0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
909      0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
910      0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
911      0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
912      0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
913      0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
914      0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
915      0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
916      0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
917      0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
918      0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
919      0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
920      0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
921      0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
922      0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
923      0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
924      0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
925      0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
926      0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
927      0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
928      0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
929      0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
930      0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
931      0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
932      0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
933      0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
934      0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
935      0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
936      0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
937      0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
938      0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
939      0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
940      0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
941      0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
942      0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
943      0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
944      0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
945      0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
946      0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
947      0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
948      0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
949      0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
950      0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
951      0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
952      0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \
953      0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \
954      0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \
955      0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \
956      0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \
957      0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \
958      0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \
959      0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \
960      0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \
961      0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \
962      0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \
963      0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \
964      0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \
965      0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \
966      0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \
967      0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \
968      0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \
969      0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \
970      0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \
971      0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \
972      0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \
973      0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \
974      0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \
975      0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \
976      0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \
977      0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \
978      0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \
979      0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \
980      0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \
981      0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \
982      0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \
983      0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \
984      0xA4, 0x0E, 0x32, 0x9C, 0xD0, 0xE4, 0x0E, 0x65, \
985      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
986 
987 #define MBEDTLS_DHM_RFC7919_FFDHE6144_G_BIN { 0x02 }
988 
989 #define MBEDTLS_DHM_RFC7919_FFDHE8192_P_BIN {        \
990      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
991      0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
992      0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
993      0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
994      0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
995      0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
996      0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
997      0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
998      0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
999      0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
1000      0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
1001      0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
1002      0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
1003      0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
1004      0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
1005      0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
1006      0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
1007      0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
1008      0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
1009      0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
1010      0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
1011      0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
1012      0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
1013      0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
1014      0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
1015      0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
1016      0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
1017      0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
1018      0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
1019      0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
1020      0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
1021      0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
1022      0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
1023      0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
1024      0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
1025      0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
1026      0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
1027      0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
1028      0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
1029      0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
1030      0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
1031      0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
1032      0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
1033      0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
1034      0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
1035      0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
1036      0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
1037      0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
1038      0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
1039      0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
1040      0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
1041      0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
1042      0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
1043      0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
1044      0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
1045      0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
1046      0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
1047      0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
1048      0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
1049      0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
1050      0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
1051      0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
1052      0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \
1053      0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \
1054      0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \
1055      0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \
1056      0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \
1057      0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \
1058      0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \
1059      0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \
1060      0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \
1061      0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \
1062      0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \
1063      0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \
1064      0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \
1065      0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \
1066      0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \
1067      0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \
1068      0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \
1069      0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \
1070      0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \
1071      0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \
1072      0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \
1073      0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \
1074      0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \
1075      0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \
1076      0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \
1077      0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \
1078      0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \
1079      0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \
1080      0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \
1081      0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \
1082      0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \
1083      0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \
1084      0xA4, 0x0E, 0x32, 0x9C, 0xCF, 0xF4, 0x6A, 0xAA, \
1085      0x36, 0xAD, 0x00, 0x4C, 0xF6, 0x00, 0xC8, 0x38, \
1086      0x1E, 0x42, 0x5A, 0x31, 0xD9, 0x51, 0xAE, 0x64, \
1087      0xFD, 0xB2, 0x3F, 0xCE, 0xC9, 0x50, 0x9D, 0x43, \
1088      0x68, 0x7F, 0xEB, 0x69, 0xED, 0xD1, 0xCC, 0x5E, \
1089      0x0B, 0x8C, 0xC3, 0xBD, 0xF6, 0x4B, 0x10, 0xEF, \
1090      0x86, 0xB6, 0x31, 0x42, 0xA3, 0xAB, 0x88, 0x29, \
1091      0x55, 0x5B, 0x2F, 0x74, 0x7C, 0x93, 0x26, 0x65, \
1092      0xCB, 0x2C, 0x0F, 0x1C, 0xC0, 0x1B, 0xD7, 0x02, \
1093      0x29, 0x38, 0x88, 0x39, 0xD2, 0xAF, 0x05, 0xE4, \
1094      0x54, 0x50, 0x4A, 0xC7, 0x8B, 0x75, 0x82, 0x82, \
1095      0x28, 0x46, 0xC0, 0xBA, 0x35, 0xC3, 0x5F, 0x5C, \
1096      0x59, 0x16, 0x0C, 0xC0, 0x46, 0xFD, 0x82, 0x51, \
1097      0x54, 0x1F, 0xC6, 0x8C, 0x9C, 0x86, 0xB0, 0x22, \
1098      0xBB, 0x70, 0x99, 0x87, 0x6A, 0x46, 0x0E, 0x74, \
1099      0x51, 0xA8, 0xA9, 0x31, 0x09, 0x70, 0x3F, 0xEE, \
1100      0x1C, 0x21, 0x7E, 0x6C, 0x38, 0x26, 0xE5, 0x2C, \
1101      0x51, 0xAA, 0x69, 0x1E, 0x0E, 0x42, 0x3C, 0xFC, \
1102      0x99, 0xE9, 0xE3, 0x16, 0x50, 0xC1, 0x21, 0x7B, \
1103      0x62, 0x48, 0x16, 0xCD, 0xAD, 0x9A, 0x95, 0xF9, \
1104      0xD5, 0xB8, 0x01, 0x94, 0x88, 0xD9, 0xC0, 0xA0, \
1105      0xA1, 0xFE, 0x30, 0x75, 0xA5, 0x77, 0xE2, 0x31, \
1106      0x83, 0xF8, 0x1D, 0x4A, 0x3F, 0x2F, 0xA4, 0x57, \
1107      0x1E, 0xFC, 0x8C, 0xE0, 0xBA, 0x8A, 0x4F, 0xE8, \
1108      0xB6, 0x85, 0x5D, 0xFE, 0x72, 0xB0, 0xA6, 0x6E, \
1109      0xDE, 0xD2, 0xFB, 0xAB, 0xFB, 0xE5, 0x8A, 0x30, \
1110      0xFA, 0xFA, 0xBE, 0x1C, 0x5D, 0x71, 0xA8, 0x7E, \
1111      0x2F, 0x74, 0x1E, 0xF8, 0xC1, 0xFE, 0x86, 0xFE, \
1112      0xA6, 0xBB, 0xFD, 0xE5, 0x30, 0x67, 0x7F, 0x0D, \
1113      0x97, 0xD1, 0x1D, 0x49, 0xF7, 0xA8, 0x44, 0x3D, \
1114      0x08, 0x22, 0xE5, 0x06, 0xA9, 0xF4, 0x61, 0x4E, \
1115      0x01, 0x1E, 0x2A, 0x94, 0x83, 0x8F, 0xF8, 0x8C, \
1116      0xD6, 0x8C, 0x8B, 0xB7, 0xC5, 0xC6, 0x42, 0x4C, \
1117      0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
1118 
1119 #define MBEDTLS_DHM_RFC7919_FFDHE8192_G_BIN { 0x02 }
1120 
1121 #endif /* dhm.h */
1122