Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Round 2 Post Quantum TLS Cipher Enums #162

Merged
merged 2 commits into from
Mar 10, 2020
Merged

Add Round 2 Post Quantum TLS Cipher Enums #162

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
988c076
Add Round 2 Post Quantum TLS Cipher Enums
alexw91 Mar 9, 2020
9275545
Merge branch 'master' into r2_cipher_preferences
Mar 10, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
45 changes: 42 additions & 3 deletions src/main/java/software/amazon/awssdk/crt/io/TlsCipherPreference.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,8 +28,12 @@ public enum TlsCipherPreference {
TLS_CIPHER_SYSTEM_DEFAULT(0),

/**
* This TlsCipherPreference contains BIKE and SIKE Draft Hybrid TLS Ciphers at the top of the preference list.
* - For more info see: https://tools.ietf.org/html/draft-campagna-tls-bike-sike-hybrid
* This TlsCipherPreference contains BIKE Round 1 and SIKE Round 1 Draft Hybrid TLS Ciphers at the top of the
* preference list.
*
* For more info see:
* - https://tools.ietf.org/html/draft-campagna-tls-bike-sike-hybrid
* - https://aws.amazon.com/blogs/security/post-quantum-tls-now-supported-in-aws-kms/
*
* These Hybrid TLS ciphers perform two Key Exchanges (1 ECDHE + 1 Post-Quantum) during the TLS Handshake in order
* to combine the security of Classical ECDHE Key Exchange with the conjectured quantum-resistance of newly
Expand All @@ -43,7 +47,42 @@ public enum TlsCipherPreference {
*
* This Cipher Preference may stop being supported at any time.
*/
TLS_CIPHER_KMS_PQ_TLSv1_0_2019_06(1);
TLS_CIPHER_KMS_PQ_TLSv1_0_2019_06(1),

/**
* This TlsCipherPreference contains SIKE Round 1 Draft Hybrid TLS Ciphers at the top of the preference list.
*
* For more info see:
* - https://tools.ietf.org/html/draft-campagna-tls-bike-sike-hybrid
* - https://aws.amazon.com/blogs/security/post-quantum-tls-now-supported-in-aws-kms/
*
* This Cipher Preference may stop being supported at any time.
*/
TLS_CIPHER_PREF_KMS_PQ_SIKE_TLSv1_0_2019_11(2),

/**
* This TlsCipherPreference contains BIKE Round 2, SIKE Round 2, BIKE Round 1, and SIKE Round 1 Draft Hybrid TLS
* Ciphers at the top of the preference list.
*
* For more info see:
* - https://tools.ietf.org/html/draft-campagna-tls-bike-sike-hybrid
* - https://aws.amazon.com/blogs/security/post-quantum-tls-now-supported-in-aws-kms/
*
* This Cipher Preference may stop being supported at any time.
*/
TLS_CIPHER_PREF_KMS_PQ_TLSv1_0_2020_02(3),

/**
* This TlsCipherPreference contains SIKE Round 2 and SIKE Round 1 Draft Hybrid TLS Ciphers at the top of the
* preference list.
*
* For more info see:
* - https://tools.ietf.org/html/draft-campagna-tls-bike-sike-hybrid
* - https://aws.amazon.com/blogs/security/post-quantum-tls-now-supported-in-aws-kms/
*
* This Cipher Preference may stop being supported at any time.
*/
TLS_CIPHER_PREF_KMS_PQ_SIKE_TLSv1_0_2020_02(4);

private int val;

Expand Down