[gnutls-devel] GnuTLS | gnutls_cipher_suite_get_name2: new function which works with TLS 1.3 (!1513)

[Read-only notification of GnuTLS library development activities]

Michael Catanzaro started a new discussion on lib/algorithms/ciphersuites.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1513#note_811728512

> +/**
> + * gnutls_cipher_suite_get_name2:
> + * @kx_algorithm: is a Key exchange algorithm
> + * @cipher_algorithm: is a cipher algorithm
> + * @mac_algorithm: is a MAC algorithm
> + * @prf_hash_algorithm: is a hash algorithm used in PRF
> + *
> + * This function returns the ciphersuite name when provided with individual
> + * algorithms. The full cipher suite name must be prepended by TLS or SSL
> + * depending of the protocol in use.
> + *
> + * To get a description of the current ciphersuite across versions, it
> + * is recommended to use gnutls_session_get_desc().
> + *
> + * In TLS 1.3, key exchange algorithm is not part of ciphersuite and thus
> + * @kx_algorithm should always be %GNUTLS_KX_UNKNOWN.

Isn't this also true of the MAC algorithm as well? I thought ciphersuite name was just cipher name plus PRF name? Is that wrong? 🤔️

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1513#note_811728512
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20220115/ffa0010a/attachment-0001.html>