1 /** 2 * \file dhm.h 3 * 4 * \brief This file contains Diffie-Hellman-Merkle (DHM) key exchange 5 * definitions and functions. 6 * 7 * Diffie-Hellman-Merkle (DHM) key exchange is defined in 8 * <em>RFC-2631: Diffie-Hellman Key Agreement Method</em> and 9 * <em>Public-Key Cryptography Standards (PKCS) #3: Diffie 10 * Hellman Key Agreement Standard</em>. 11 * 12 * <em>RFC-3526: More Modular Exponential (MODP) Diffie-Hellman groups for 13 * Internet Key Exchange (IKE)</em> defines a number of standardized 14 * Diffie-Hellman groups for IKE. 15 * 16 * <em>RFC-5114: Additional Diffie-Hellman Groups for Use with IETF 17 * Standards</em> defines a number of standardized Diffie-Hellman 18 * groups that can be used. 19 * 20 * \warning The security of the DHM key exchange relies on the proper choice 21 * of prime modulus - optimally, it should be a safe prime. The usage 22 * of non-safe primes both decreases the difficulty of the underlying 23 * discrete logarithm problem and can lead to small subgroup attacks 24 * leaking private exponent bits when invalid public keys are used 25 * and not detected. This is especially relevant if the same DHM 26 * parameters are reused for multiple key exchanges as in static DHM, 27 * while the criticality of small-subgroup attacks is lower for 28 * ephemeral DHM. 29 * 30 * \warning For performance reasons, the code does neither perform primality 31 * nor safe primality tests, nor the expensive checks for invalid 32 * subgroups. Moreover, even if these were performed, non-standardized 33 * primes cannot be trusted because of the possibility of backdoors 34 * that can't be effectively checked for. 35 * 36 * \warning Diffie-Hellman-Merkle is therefore a security risk when not using 37 * standardized primes generated using a trustworthy ("nothing up 38 * my sleeve") method, such as the RFC 3526 / 7919 primes. In the TLS 39 * protocol, DH parameters need to be negotiated, so using the default 40 * primes systematically is not always an option. If possible, use 41 * Elliptic Curve Diffie-Hellman (ECDH), which has better performance, 42 * and for which the TLS protocol mandates the use of standard 43 * parameters. 44 * 45 */ 46 /* 47 * Copyright The Mbed TLS Contributors 48 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later 49 * 50 * This file is provided under the Apache License 2.0, or the 51 * GNU General Public License v2.0 or later. 52 * 53 * ********** 54 * Apache License 2.0: 55 * 56 * Licensed under the Apache License, Version 2.0 (the "License"); you may 57 * not use this file except in compliance with the License. 58 * You may obtain a copy of the License at 59 * 60 * http://www.apache.org/licenses/LICENSE-2.0 61 * 62 * Unless required by applicable law or agreed to in writing, software 63 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT 64 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 65 * See the License for the specific language governing permissions and 66 * limitations under the License. 67 * 68 * ********** 69 * 70 * ********** 71 * GNU General Public License v2.0 or later: 72 * 73 * This program is free software; you can redistribute it and/or modify 74 * it under the terms of the GNU General Public License as published by 75 * the Free Software Foundation; either version 2 of the License, or 76 * (at your option) any later version. 77 * 78 * This program is distributed in the hope that it will be useful, 79 * but WITHOUT ANY WARRANTY; without even the implied warranty of 80 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 81 * GNU General Public License for more details. 82 * 83 * You should have received a copy of the GNU General Public License along 84 * with this program; if not, write to the Free Software Foundation, Inc., 85 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. 86 * 87 * ********** 88 */ 89 90 #ifndef MBEDTLS_DHM_H 91 #define MBEDTLS_DHM_H 92 93 #if !defined(MBEDTLS_CONFIG_FILE) 94 #include "config.h" 95 #else 96 #include MBEDTLS_CONFIG_FILE 97 #endif 98 #include "bignum.h" 99 100 /* 101 * DHM Error codes 102 */ 103 #define MBEDTLS_ERR_DHM_BAD_INPUT_DATA -0x3080 /**< Bad input parameters. */ 104 #define MBEDTLS_ERR_DHM_READ_PARAMS_FAILED -0x3100 /**< Reading of the DHM parameters failed. */ 105 #define MBEDTLS_ERR_DHM_MAKE_PARAMS_FAILED -0x3180 /**< Making of the DHM parameters failed. */ 106 #define MBEDTLS_ERR_DHM_READ_PUBLIC_FAILED -0x3200 /**< Reading of the public values failed. */ 107 #define MBEDTLS_ERR_DHM_MAKE_PUBLIC_FAILED -0x3280 /**< Making of the public value failed. */ 108 #define MBEDTLS_ERR_DHM_CALC_SECRET_FAILED -0x3300 /**< Calculation of the DHM secret failed. */ 109 #define MBEDTLS_ERR_DHM_INVALID_FORMAT -0x3380 /**< The ASN.1 data is not formatted correctly. */ 110 #define MBEDTLS_ERR_DHM_ALLOC_FAILED -0x3400 /**< Allocation of memory failed. */ 111 #define MBEDTLS_ERR_DHM_FILE_IO_ERROR -0x3480 /**< Read or write of file failed. */ 112 113 /* MBEDTLS_ERR_DHM_HW_ACCEL_FAILED is deprecated and should not be used. */ 114 #define MBEDTLS_ERR_DHM_HW_ACCEL_FAILED -0x3500 /**< DHM hardware accelerator failed. */ 115 116 #define MBEDTLS_ERR_DHM_SET_GROUP_FAILED -0x3580 /**< Setting the modulus and generator failed. */ 117 118 #ifdef __cplusplus 119 extern "C" { 120 #endif 121 122 #if !defined(MBEDTLS_DHM_ALT) 123 124 /** 125 * \brief The DHM context structure. 126 */ 127 typedef struct mbedtls_dhm_context 128 { 129 size_t len; /*!< The size of \p P in Bytes. */ 130 mbedtls_mpi P; /*!< The prime modulus. */ 131 mbedtls_mpi G; /*!< The generator. */ 132 mbedtls_mpi X; /*!< Our secret value. */ 133 mbedtls_mpi GX; /*!< Our public key = \c G^X mod \c P. */ 134 mbedtls_mpi GY; /*!< The public key of the peer = \c G^Y mod \c P. */ 135 mbedtls_mpi K; /*!< The shared secret = \c G^(XY) mod \c P. */ 136 mbedtls_mpi RP; /*!< The cached value = \c R^2 mod \c P. */ 137 mbedtls_mpi Vi; /*!< The blinding value. */ 138 mbedtls_mpi Vf; /*!< The unblinding value. */ 139 mbedtls_mpi pX; /*!< The previous \c X. */ 140 } 141 mbedtls_dhm_context; 142 143 #else /* MBEDTLS_DHM_ALT */ 144 #include "dhm_alt.h" 145 #endif /* MBEDTLS_DHM_ALT */ 146 147 /** 148 * \brief This function initializes the DHM context. 149 * 150 * \param ctx The DHM context to initialize. 151 */ 152 void mbedtls_dhm_init( mbedtls_dhm_context *ctx ); 153 154 /** 155 * \brief This function parses the DHM parameters in a 156 * TLS ServerKeyExchange handshake message 157 * (DHM modulus, generator, and public key). 158 * 159 * \note In a TLS handshake, this is the how the client 160 * sets up its DHM context from the server's public 161 * DHM key material. 162 * 163 * \param ctx The DHM context to use. This must be initialized. 164 * \param p On input, *p must be the start of the input buffer. 165 * On output, *p is updated to point to the end of the data 166 * that has been read. On success, this is the first byte 167 * past the end of the ServerKeyExchange parameters. 168 * On error, this is the point at which an error has been 169 * detected, which is usually not useful except to debug 170 * failures. 171 * \param end The end of the input buffer. 172 * 173 * \return \c 0 on success. 174 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure. 175 */ 176 int mbedtls_dhm_read_params( mbedtls_dhm_context *ctx, 177 unsigned char **p, 178 const unsigned char *end ); 179 180 /** 181 * \brief This function generates a DHM key pair and exports its 182 * public part together with the DHM parameters in the format 183 * used in a TLS ServerKeyExchange handshake message. 184 * 185 * \note This function assumes that the DHM parameters \c ctx->P 186 * and \c ctx->G have already been properly set. For that, use 187 * mbedtls_dhm_set_group() below in conjunction with 188 * mbedtls_mpi_read_binary() and mbedtls_mpi_read_string(). 189 * 190 * \note In a TLS handshake, this is the how the server generates 191 * and exports its DHM key material. 192 * 193 * \param ctx The DHM context to use. This must be initialized 194 * and have the DHM parameters set. It may or may not 195 * already have imported the peer's public key. 196 * \param x_size The private key size in Bytes. 197 * \param olen The address at which to store the number of Bytes 198 * written on success. This must not be \c NULL. 199 * \param output The destination buffer. This must be a writable buffer of 200 * sufficient size to hold the reduced binary presentation of 201 * the modulus, the generator and the public key, each wrapped 202 * with a 2-byte length field. It is the responsibility of the 203 * caller to ensure that enough space is available. Refer to 204 * mbedtls_mpi_size() to computing the byte-size of an MPI. 205 * \param f_rng The RNG function. Must not be \c NULL. 206 * \param p_rng The RNG context to be passed to \p f_rng. This may be 207 * \c NULL if \p f_rng doesn't need a context parameter. 208 * 209 * \return \c 0 on success. 210 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure. 211 */ 212 int mbedtls_dhm_make_params( mbedtls_dhm_context *ctx, int x_size, 213 unsigned char *output, size_t *olen, 214 int (*f_rng)(void *, unsigned char *, size_t), 215 void *p_rng ); 216 217 /** 218 * \brief This function sets the prime modulus and generator. 219 * 220 * \note This function can be used to set \c ctx->P, \c ctx->G 221 * in preparation for mbedtls_dhm_make_params(). 222 * 223 * \param ctx The DHM context to configure. This must be initialized. 224 * \param P The MPI holding the DHM prime modulus. This must be 225 * an initialized MPI. 226 * \param G The MPI holding the DHM generator. This must be an 227 * initialized MPI. 228 * 229 * \return \c 0 if successful. 230 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure. 231 */ 232 int mbedtls_dhm_set_group( mbedtls_dhm_context *ctx, 233 const mbedtls_mpi *P, 234 const mbedtls_mpi *G ); 235 236 /** 237 * \brief This function imports the raw public value of the peer. 238 * 239 * \note In a TLS handshake, this is the how the server imports 240 * the Client's public DHM key. 241 * 242 * \param ctx The DHM context to use. This must be initialized and have 243 * its DHM parameters set, e.g. via mbedtls_dhm_set_group(). 244 * It may or may not already have generated its own private key. 245 * \param input The input buffer containing the \c G^Y value of the peer. 246 * This must be a readable buffer of size \p ilen Bytes. 247 * \param ilen The size of the input buffer \p input in Bytes. 248 * 249 * \return \c 0 on success. 250 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure. 251 */ 252 int mbedtls_dhm_read_public( mbedtls_dhm_context *ctx, 253 const unsigned char *input, size_t ilen ); 254 255 /** 256 * \brief This function creates a DHM key pair and exports 257 * the raw public key in big-endian format. 258 * 259 * \note The destination buffer is always fully written 260 * so as to contain a big-endian representation of G^X mod P. 261 * If it is larger than \c ctx->len, it is padded accordingly 262 * with zero-bytes at the beginning. 263 * 264 * \param ctx The DHM context to use. This must be initialized and 265 * have the DHM parameters set. It may or may not already 266 * have imported the peer's public key. 267 * \param x_size The private key size in Bytes. 268 * \param output The destination buffer. This must be a writable buffer of 269 * size \p olen Bytes. 270 * \param olen The length of the destination buffer. This must be at least 271 * equal to `ctx->len` (the size of \c P). 272 * \param f_rng The RNG function. This must not be \c NULL. 273 * \param p_rng The RNG context to be passed to \p f_rng. This may be \c NULL 274 * if \p f_rng doesn't need a context argument. 275 * 276 * \return \c 0 on success. 277 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure. 278 */ 279 int mbedtls_dhm_make_public( mbedtls_dhm_context *ctx, int x_size, 280 unsigned char *output, size_t olen, 281 int (*f_rng)(void *, unsigned char *, size_t), 282 void *p_rng ); 283 284 /** 285 * \brief This function derives and exports the shared secret 286 * \c (G^Y)^X mod \c P. 287 * 288 * \note If \p f_rng is not \c NULL, it is used to blind the input as 289 * a countermeasure against timing attacks. Blinding is used 290 * only if our private key \c X is re-used, and not used 291 * otherwise. We recommend always passing a non-NULL 292 * \p f_rng argument. 293 * 294 * \param ctx The DHM context to use. This must be initialized 295 * and have its own private key generated and the peer's 296 * public key imported. 297 * \param output The buffer to write the generated shared key to. This 298 * must be a writable buffer of size \p output_size Bytes. 299 * \param output_size The size of the destination buffer. This must be at 300 * least the size of \c ctx->len (the size of \c P). 301 * \param olen On exit, holds the actual number of Bytes written. 302 * \param f_rng The RNG function, for blinding purposes. This may 303 * b \c NULL if blinding isn't needed. 304 * \param p_rng The RNG context. This may be \c NULL if \p f_rng 305 * doesn't need a context argument. 306 * 307 * \return \c 0 on success. 308 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure. 309 */ 310 int mbedtls_dhm_calc_secret( mbedtls_dhm_context *ctx, 311 unsigned char *output, size_t output_size, size_t *olen, 312 int (*f_rng)(void *, unsigned char *, size_t), 313 void *p_rng ); 314 315 /** 316 * \brief This function frees and clears the components 317 * of a DHM context. 318 * 319 * \param ctx The DHM context to free and clear. This may be \c NULL, 320 * in which case this function is a no-op. If it is not \c NULL, 321 * it must point to an initialized DHM context. 322 */ 323 void mbedtls_dhm_free( mbedtls_dhm_context *ctx ); 324 325 #if defined(MBEDTLS_ASN1_PARSE_C) 326 /** \ingroup x509_module */ 327 /** 328 * \brief This function parses DHM parameters in PEM or DER format. 329 * 330 * \param dhm The DHM context to import the DHM parameters into. 331 * This must be initialized. 332 * \param dhmin The input buffer. This must be a readable buffer of 333 * length \p dhminlen Bytes. 334 * \param dhminlen The size of the input buffer \p dhmin, including the 335 * terminating \c NULL Byte for PEM data. 336 * 337 * \return \c 0 on success. 338 * \return An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX error 339 * code on failure. 340 */ 341 int mbedtls_dhm_parse_dhm( mbedtls_dhm_context *dhm, const unsigned char *dhmin, 342 size_t dhminlen ); 343 344 #if defined(MBEDTLS_FS_IO) 345 /** \ingroup x509_module */ 346 /** 347 * \brief This function loads and parses DHM parameters from a file. 348 * 349 * \param dhm The DHM context to load the parameters to. 350 * This must be initialized. 351 * \param path The filename to read the DHM parameters from. 352 * This must not be \c NULL. 353 * 354 * \return \c 0 on success. 355 * \return An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX 356 * error code on failure. 357 */ 358 int mbedtls_dhm_parse_dhmfile( mbedtls_dhm_context *dhm, const char *path ); 359 #endif /* MBEDTLS_FS_IO */ 360 #endif /* MBEDTLS_ASN1_PARSE_C */ 361 362 #if defined(MBEDTLS_SELF_TEST) 363 364 /** 365 * \brief The DMH checkup routine. 366 * 367 * \return \c 0 on success. 368 * \return \c 1 on failure. 369 */ 370 int mbedtls_dhm_self_test( int verbose ); 371 372 #endif /* MBEDTLS_SELF_TEST */ 373 #ifdef __cplusplus 374 } 375 #endif 376 377 /** 378 * RFC 3526, RFC 5114 and RFC 7919 standardize a number of 379 * Diffie-Hellman groups, some of which are included here 380 * for use within the SSL/TLS module and the user's convenience 381 * when configuring the Diffie-Hellman parameters by hand 382 * through \c mbedtls_ssl_conf_dh_param. 383 * 384 * The following lists the source of the above groups in the standards: 385 * - RFC 5114 section 2.2: 2048-bit MODP Group with 224-bit Prime Order Subgroup 386 * - RFC 3526 section 3: 2048-bit MODP Group 387 * - RFC 3526 section 4: 3072-bit MODP Group 388 * - RFC 3526 section 5: 4096-bit MODP Group 389 * - RFC 7919 section A.1: ffdhe2048 390 * - RFC 7919 section A.2: ffdhe3072 391 * - RFC 7919 section A.3: ffdhe4096 392 * - RFC 7919 section A.4: ffdhe6144 393 * - RFC 7919 section A.5: ffdhe8192 394 * 395 * The constants with suffix "_p" denote the chosen prime moduli, while 396 * the constants with suffix "_g" denote the chosen generator 397 * of the associated prime field. 398 * 399 * The constants further suffixed with "_bin" are provided in binary format, 400 * while all other constants represent null-terminated strings holding the 401 * hexadecimal presentation of the respective numbers. 402 * 403 * The primes from RFC 3526 and RFC 7919 have been generating by the following 404 * trust-worthy procedure: 405 * - Fix N in { 2048, 3072, 4096, 6144, 8192 } and consider the N-bit number 406 * the first and last 64 bits are all 1, and the remaining N - 128 bits of 407 * which are 0x7ff...ff. 408 * - Add the smallest multiple of the first N - 129 bits of the binary expansion 409 * of pi (for RFC 5236) or e (for RFC 7919) to this intermediate bit-string 410 * such that the resulting integer is a safe-prime. 411 * - The result is the respective RFC 3526 / 7919 prime, and the corresponding 412 * generator is always chosen to be 2 (which is a square for these prime, 413 * hence the corresponding subgroup has order (p-1)/2 and avoids leaking a 414 * bit in the private exponent). 415 * 416 */ 417 418 #if !defined(MBEDTLS_DEPRECATED_REMOVED) 419 420 /** 421 * \warning The origin of the primes in RFC 5114 is not documented and 422 * their use therefore constitutes a security risk! 423 * 424 * \deprecated The hex-encoded primes from RFC 5114 are deprecated and are 425 * likely to be removed in a future version of the library without 426 * replacement. 427 */ 428 429 /** 430 * The hexadecimal presentation of the prime underlying the 431 * 2048-bit MODP Group with 224-bit Prime Order Subgroup, as defined 432 * in <em>RFC-5114: Additional Diffie-Hellman Groups for Use with 433 * IETF Standards</em>. 434 */ 435 #define MBEDTLS_DHM_RFC5114_MODP_2048_P \ 436 MBEDTLS_DEPRECATED_STRING_CONSTANT( \ 437 "AD107E1E9123A9D0D660FAA79559C51FA20D64E5683B9FD1" \ 438 "B54B1597B61D0A75E6FA141DF95A56DBAF9A3C407BA1DF15" \ 439 "EB3D688A309C180E1DE6B85A1274A0A66D3F8152AD6AC212" \ 440 "9037C9EDEFDA4DF8D91E8FEF55B7394B7AD5B7D0B6C12207" \ 441 "C9F98D11ED34DBF6C6BA0B2C8BBC27BE6A00E0A0B9C49708" \ 442 "B3BF8A317091883681286130BC8985DB1602E714415D9330" \ 443 "278273C7DE31EFDC7310F7121FD5A07415987D9ADC0A486D" \ 444 "CDF93ACC44328387315D75E198C641A480CD86A1B9E587E8" \ 445 "BE60E69CC928B2B9C52172E413042E9B23F10B0E16E79763" \ 446 "C9B53DCF4BA80A29E3FB73C16B8E75B97EF363E2FFA31F71" \ 447 "CF9DE5384E71B81C0AC4DFFE0C10E64F" ) 448 449 /** 450 * The hexadecimal presentation of the chosen generator of the 2048-bit MODP 451 * Group with 224-bit Prime Order Subgroup, as defined in <em>RFC-5114: 452 * Additional Diffie-Hellman Groups for Use with IETF Standards</em>. 453 */ 454 #define MBEDTLS_DHM_RFC5114_MODP_2048_G \ 455 MBEDTLS_DEPRECATED_STRING_CONSTANT( \ 456 "AC4032EF4F2D9AE39DF30B5C8FFDAC506CDEBE7B89998CAF" \ 457 "74866A08CFE4FFE3A6824A4E10B9A6F0DD921F01A70C4AFA" \ 458 "AB739D7700C29F52C57DB17C620A8652BE5E9001A8D66AD7" \ 459 "C17669101999024AF4D027275AC1348BB8A762D0521BC98A" \ 460 "E247150422EA1ED409939D54DA7460CDB5F6C6B250717CBE" \ 461 "F180EB34118E98D119529A45D6F834566E3025E316A330EF" \ 462 "BB77A86F0C1AB15B051AE3D428C8F8ACB70A8137150B8EEB" \ 463 "10E183EDD19963DDD9E263E4770589EF6AA21E7F5F2FF381" \ 464 "B539CCE3409D13CD566AFBB48D6C019181E1BCFE94B30269" \ 465 "EDFE72FE9B6AA4BD7B5A0F1C71CFFF4C19C418E1F6EC0179" \ 466 "81BC087F2A7065B384B890D3191F2BFA" ) 467 468 /** 469 * The hexadecimal presentation of the prime underlying the 2048-bit MODP 470 * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) 471 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. 472 * 473 * \deprecated The hex-encoded primes from RFC 3625 are deprecated and 474 * superseded by the corresponding macros providing them as 475 * binary constants. Their hex-encoded constants are likely 476 * to be removed in a future version of the library. 477 * 478 */ 479 #define MBEDTLS_DHM_RFC3526_MODP_2048_P \ 480 MBEDTLS_DEPRECATED_STRING_CONSTANT( \ 481 "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \ 482 "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \ 483 "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \ 484 "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \ 485 "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \ 486 "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \ 487 "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \ 488 "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \ 489 "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \ 490 "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \ 491 "15728E5A8AACAA68FFFFFFFFFFFFFFFF" ) 492 493 /** 494 * The hexadecimal presentation of the chosen generator of the 2048-bit MODP 495 * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) 496 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. 497 */ 498 #define MBEDTLS_DHM_RFC3526_MODP_2048_G \ 499 MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" ) 500 501 /** 502 * The hexadecimal presentation of the prime underlying the 3072-bit MODP 503 * Group, as defined in <em>RFC-3072: More Modular Exponential (MODP) 504 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. 505 */ 506 #define MBEDTLS_DHM_RFC3526_MODP_3072_P \ 507 MBEDTLS_DEPRECATED_STRING_CONSTANT( \ 508 "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \ 509 "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \ 510 "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \ 511 "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \ 512 "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \ 513 "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \ 514 "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \ 515 "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \ 516 "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \ 517 "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \ 518 "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" \ 519 "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" \ 520 "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" \ 521 "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" \ 522 "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" \ 523 "43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF" ) 524 525 /** 526 * The hexadecimal presentation of the chosen generator of the 3072-bit MODP 527 * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) 528 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. 529 */ 530 #define MBEDTLS_DHM_RFC3526_MODP_3072_G \ 531 MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" ) 532 533 /** 534 * The hexadecimal presentation of the prime underlying the 4096-bit MODP 535 * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) 536 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. 537 */ 538 #define MBEDTLS_DHM_RFC3526_MODP_4096_P \ 539 MBEDTLS_DEPRECATED_STRING_CONSTANT( \ 540 "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \ 541 "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \ 542 "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \ 543 "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \ 544 "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \ 545 "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \ 546 "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \ 547 "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \ 548 "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \ 549 "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \ 550 "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" \ 551 "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" \ 552 "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" \ 553 "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" \ 554 "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" \ 555 "43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7" \ 556 "88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA" \ 557 "2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6" \ 558 "287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED" \ 559 "1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9" \ 560 "93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934063199" \ 561 "FFFFFFFFFFFFFFFF" ) 562 563 /** 564 * The hexadecimal presentation of the chosen generator of the 4096-bit MODP 565 * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP) 566 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>. 567 */ 568 #define MBEDTLS_DHM_RFC3526_MODP_4096_G \ 569 MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" ) 570 571 #endif /* MBEDTLS_DEPRECATED_REMOVED */ 572 573 /* 574 * Trustworthy DHM parameters in binary form 575 */ 576 577 #define MBEDTLS_DHM_RFC3526_MODP_2048_P_BIN { \ 578 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ 579 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \ 580 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \ 581 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \ 582 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \ 583 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \ 584 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \ 585 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \ 586 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \ 587 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \ 588 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \ 589 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \ 590 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \ 591 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \ 592 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \ 593 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \ 594 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \ 595 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \ 596 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \ 597 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \ 598 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \ 599 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \ 600 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \ 601 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \ 602 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \ 603 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \ 604 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \ 605 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \ 606 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \ 607 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \ 608 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAC, 0xAA, 0x68, \ 609 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } 610 611 #define MBEDTLS_DHM_RFC3526_MODP_2048_G_BIN { 0x02 } 612 613 #define MBEDTLS_DHM_RFC3526_MODP_3072_P_BIN { \ 614 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ 615 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \ 616 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \ 617 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \ 618 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \ 619 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \ 620 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \ 621 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \ 622 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \ 623 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \ 624 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \ 625 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \ 626 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \ 627 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \ 628 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \ 629 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \ 630 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \ 631 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \ 632 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \ 633 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \ 634 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \ 635 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \ 636 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \ 637 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \ 638 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \ 639 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \ 640 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \ 641 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \ 642 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \ 643 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \ 644 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D, \ 645 0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33, \ 646 0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64, \ 647 0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, \ 648 0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, \ 649 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7, \ 650 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7, \ 651 0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D, \ 652 0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B, \ 653 0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64, \ 654 0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, \ 655 0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, \ 656 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C, \ 657 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2, \ 658 0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31, \ 659 0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E, \ 660 0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x3A, 0xD2, 0xCA, \ 661 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } 662 663 #define MBEDTLS_DHM_RFC3526_MODP_3072_G_BIN { 0x02 } 664 665 #define MBEDTLS_DHM_RFC3526_MODP_4096_P_BIN { \ 666 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ 667 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \ 668 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \ 669 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \ 670 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \ 671 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \ 672 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \ 673 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \ 674 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \ 675 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \ 676 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \ 677 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \ 678 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \ 679 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \ 680 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \ 681 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \ 682 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \ 683 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \ 684 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \ 685 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \ 686 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \ 687 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \ 688 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \ 689 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \ 690 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \ 691 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \ 692 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \ 693 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \ 694 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \ 695 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \ 696 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D, \ 697 0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33, \ 698 0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64, \ 699 0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, \ 700 0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, \ 701 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7, \ 702 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7, \ 703 0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D, \ 704 0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B, \ 705 0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64, \ 706 0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, \ 707 0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, \ 708 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C, \ 709 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2, \ 710 0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31, \ 711 0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E, \ 712 0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x21, 0x08, 0x01, \ 713 0x1A, 0x72, 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7, \ 714 0x88, 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26, \ 715 0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, 0x3C, \ 716 0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, 0x0B, 0xDA, \ 717 0x25, 0x83, 0xE9, 0xCA, 0x2A, 0xD4, 0x4C, 0xE8, \ 718 0xDB, 0xBB, 0xC2, 0xDB, 0x04, 0xDE, 0x8E, 0xF9, \ 719 0x2E, 0x8E, 0xFC, 0x14, 0x1F, 0xBE, 0xCA, 0xA6, \ 720 0x28, 0x7C, 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D, \ 721 0x99, 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2, \ 722 0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, 0xED, \ 723 0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, 0xD7, 0xAF, \ 724 0xB8, 0x1B, 0xDD, 0x76, 0x21, 0x70, 0x48, 0x1C, \ 725 0xD0, 0x06, 0x91, 0x27, 0xD5, 0xB0, 0x5A, 0xA9, \ 726 0x93, 0xB4, 0xEA, 0x98, 0x8D, 0x8F, 0xDD, 0xC1, \ 727 0x86, 0xFF, 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F, \ 728 0x4D, 0xF4, 0x35, 0xC9, 0x34, 0x06, 0x31, 0x99, \ 729 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } 730 731 #define MBEDTLS_DHM_RFC3526_MODP_4096_G_BIN { 0x02 } 732 733 #define MBEDTLS_DHM_RFC7919_FFDHE2048_P_BIN { \ 734 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ 735 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ 736 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ 737 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ 738 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ 739 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ 740 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ 741 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ 742 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ 743 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ 744 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ 745 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ 746 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ 747 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ 748 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ 749 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ 750 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ 751 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ 752 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ 753 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ 754 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ 755 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ 756 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ 757 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ 758 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ 759 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ 760 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ 761 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ 762 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ 763 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ 764 0x88, 0x6B, 0x42, 0x38, 0x61, 0x28, 0x5C, 0x97, \ 765 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, } 766 767 #define MBEDTLS_DHM_RFC7919_FFDHE2048_G_BIN { 0x02 } 768 769 #define MBEDTLS_DHM_RFC7919_FFDHE3072_P_BIN { \ 770 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ 771 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ 772 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ 773 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ 774 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ 775 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ 776 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ 777 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ 778 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ 779 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ 780 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ 781 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ 782 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ 783 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ 784 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ 785 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ 786 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ 787 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ 788 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ 789 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ 790 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ 791 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ 792 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ 793 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ 794 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ 795 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ 796 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ 797 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ 798 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ 799 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ 800 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ 801 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ 802 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ 803 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ 804 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ 805 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ 806 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ 807 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ 808 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ 809 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ 810 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ 811 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ 812 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ 813 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ 814 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ 815 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ 816 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0xC6, 0x2E, 0x37, \ 817 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } 818 819 #define MBEDTLS_DHM_RFC7919_FFDHE3072_G_BIN { 0x02 } 820 821 #define MBEDTLS_DHM_RFC7919_FFDHE4096_P_BIN { \ 822 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ 823 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ 824 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ 825 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ 826 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ 827 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ 828 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ 829 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ 830 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ 831 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ 832 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ 833 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ 834 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ 835 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ 836 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ 837 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ 838 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ 839 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ 840 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ 841 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ 842 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ 843 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ 844 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ 845 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ 846 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ 847 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ 848 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ 849 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ 850 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ 851 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ 852 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ 853 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ 854 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ 855 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ 856 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ 857 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ 858 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ 859 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ 860 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ 861 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ 862 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ 863 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ 864 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ 865 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ 866 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ 867 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ 868 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \ 869 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \ 870 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \ 871 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \ 872 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \ 873 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \ 874 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \ 875 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \ 876 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \ 877 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \ 878 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \ 879 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \ 880 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \ 881 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \ 882 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \ 883 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \ 884 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x65, 0x5F, 0x6A, \ 885 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } 886 887 #define MBEDTLS_DHM_RFC7919_FFDHE4096_G_BIN { 0x02 } 888 889 #define MBEDTLS_DHM_RFC7919_FFDHE6144_P_BIN { \ 890 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ 891 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ 892 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ 893 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ 894 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ 895 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ 896 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ 897 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ 898 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ 899 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ 900 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ 901 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ 902 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ 903 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ 904 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ 905 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ 906 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ 907 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ 908 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ 909 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ 910 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ 911 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ 912 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ 913 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ 914 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ 915 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ 916 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ 917 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ 918 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ 919 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ 920 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ 921 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ 922 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ 923 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ 924 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ 925 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ 926 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ 927 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ 928 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ 929 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ 930 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ 931 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ 932 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ 933 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ 934 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ 935 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ 936 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \ 937 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \ 938 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \ 939 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \ 940 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \ 941 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \ 942 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \ 943 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \ 944 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \ 945 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \ 946 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \ 947 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \ 948 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \ 949 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \ 950 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \ 951 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \ 952 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \ 953 0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \ 954 0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \ 955 0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \ 956 0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \ 957 0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \ 958 0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \ 959 0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \ 960 0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \ 961 0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \ 962 0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \ 963 0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \ 964 0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \ 965 0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \ 966 0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \ 967 0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \ 968 0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \ 969 0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \ 970 0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \ 971 0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \ 972 0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \ 973 0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \ 974 0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \ 975 0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \ 976 0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \ 977 0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \ 978 0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \ 979 0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \ 980 0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \ 981 0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \ 982 0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \ 983 0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \ 984 0xA4, 0x0E, 0x32, 0x9C, 0xD0, 0xE4, 0x0E, 0x65, \ 985 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } 986 987 #define MBEDTLS_DHM_RFC7919_FFDHE6144_G_BIN { 0x02 } 988 989 #define MBEDTLS_DHM_RFC7919_FFDHE8192_P_BIN { \ 990 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \ 991 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \ 992 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \ 993 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \ 994 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \ 995 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \ 996 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \ 997 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \ 998 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \ 999 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \ 1000 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \ 1001 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \ 1002 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \ 1003 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \ 1004 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \ 1005 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \ 1006 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \ 1007 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \ 1008 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \ 1009 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \ 1010 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \ 1011 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \ 1012 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \ 1013 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \ 1014 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \ 1015 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \ 1016 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \ 1017 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \ 1018 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \ 1019 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \ 1020 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \ 1021 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \ 1022 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \ 1023 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \ 1024 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \ 1025 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \ 1026 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \ 1027 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \ 1028 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \ 1029 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \ 1030 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \ 1031 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \ 1032 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \ 1033 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \ 1034 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \ 1035 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \ 1036 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \ 1037 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \ 1038 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \ 1039 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \ 1040 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \ 1041 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \ 1042 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \ 1043 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \ 1044 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \ 1045 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \ 1046 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \ 1047 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \ 1048 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \ 1049 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \ 1050 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \ 1051 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \ 1052 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \ 1053 0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \ 1054 0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \ 1055 0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \ 1056 0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \ 1057 0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \ 1058 0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \ 1059 0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \ 1060 0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \ 1061 0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \ 1062 0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \ 1063 0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \ 1064 0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \ 1065 0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \ 1066 0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \ 1067 0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \ 1068 0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \ 1069 0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \ 1070 0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \ 1071 0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \ 1072 0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \ 1073 0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \ 1074 0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \ 1075 0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \ 1076 0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \ 1077 0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \ 1078 0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \ 1079 0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \ 1080 0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \ 1081 0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \ 1082 0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \ 1083 0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \ 1084 0xA4, 0x0E, 0x32, 0x9C, 0xCF, 0xF4, 0x6A, 0xAA, \ 1085 0x36, 0xAD, 0x00, 0x4C, 0xF6, 0x00, 0xC8, 0x38, \ 1086 0x1E, 0x42, 0x5A, 0x31, 0xD9, 0x51, 0xAE, 0x64, \ 1087 0xFD, 0xB2, 0x3F, 0xCE, 0xC9, 0x50, 0x9D, 0x43, \ 1088 0x68, 0x7F, 0xEB, 0x69, 0xED, 0xD1, 0xCC, 0x5E, \ 1089 0x0B, 0x8C, 0xC3, 0xBD, 0xF6, 0x4B, 0x10, 0xEF, \ 1090 0x86, 0xB6, 0x31, 0x42, 0xA3, 0xAB, 0x88, 0x29, \ 1091 0x55, 0x5B, 0x2F, 0x74, 0x7C, 0x93, 0x26, 0x65, \ 1092 0xCB, 0x2C, 0x0F, 0x1C, 0xC0, 0x1B, 0xD7, 0x02, \ 1093 0x29, 0x38, 0x88, 0x39, 0xD2, 0xAF, 0x05, 0xE4, \ 1094 0x54, 0x50, 0x4A, 0xC7, 0x8B, 0x75, 0x82, 0x82, \ 1095 0x28, 0x46, 0xC0, 0xBA, 0x35, 0xC3, 0x5F, 0x5C, \ 1096 0x59, 0x16, 0x0C, 0xC0, 0x46, 0xFD, 0x82, 0x51, \ 1097 0x54, 0x1F, 0xC6, 0x8C, 0x9C, 0x86, 0xB0, 0x22, \ 1098 0xBB, 0x70, 0x99, 0x87, 0x6A, 0x46, 0x0E, 0x74, \ 1099 0x51, 0xA8, 0xA9, 0x31, 0x09, 0x70, 0x3F, 0xEE, \ 1100 0x1C, 0x21, 0x7E, 0x6C, 0x38, 0x26, 0xE5, 0x2C, \ 1101 0x51, 0xAA, 0x69, 0x1E, 0x0E, 0x42, 0x3C, 0xFC, \ 1102 0x99, 0xE9, 0xE3, 0x16, 0x50, 0xC1, 0x21, 0x7B, \ 1103 0x62, 0x48, 0x16, 0xCD, 0xAD, 0x9A, 0x95, 0xF9, \ 1104 0xD5, 0xB8, 0x01, 0x94, 0x88, 0xD9, 0xC0, 0xA0, \ 1105 0xA1, 0xFE, 0x30, 0x75, 0xA5, 0x77, 0xE2, 0x31, \ 1106 0x83, 0xF8, 0x1D, 0x4A, 0x3F, 0x2F, 0xA4, 0x57, \ 1107 0x1E, 0xFC, 0x8C, 0xE0, 0xBA, 0x8A, 0x4F, 0xE8, \ 1108 0xB6, 0x85, 0x5D, 0xFE, 0x72, 0xB0, 0xA6, 0x6E, \ 1109 0xDE, 0xD2, 0xFB, 0xAB, 0xFB, 0xE5, 0x8A, 0x30, \ 1110 0xFA, 0xFA, 0xBE, 0x1C, 0x5D, 0x71, 0xA8, 0x7E, \ 1111 0x2F, 0x74, 0x1E, 0xF8, 0xC1, 0xFE, 0x86, 0xFE, \ 1112 0xA6, 0xBB, 0xFD, 0xE5, 0x30, 0x67, 0x7F, 0x0D, \ 1113 0x97, 0xD1, 0x1D, 0x49, 0xF7, 0xA8, 0x44, 0x3D, \ 1114 0x08, 0x22, 0xE5, 0x06, 0xA9, 0xF4, 0x61, 0x4E, \ 1115 0x01, 0x1E, 0x2A, 0x94, 0x83, 0x8F, 0xF8, 0x8C, \ 1116 0xD6, 0x8C, 0x8B, 0xB7, 0xC5, 0xC6, 0x42, 0x4C, \ 1117 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF } 1118 1119 #define MBEDTLS_DHM_RFC7919_FFDHE8192_G_BIN { 0x02 } 1120 1121 #endif /* dhm.h */ 1122