aboutsummaryrefslogtreecommitdiff
path: root/src/config
diff options
context:
space:
mode:
authorMichael Brown <mcb30@ipxe.org>2022-11-07 18:09:09 +0000
committerMichael Brown <mcb30@ipxe.org>2022-11-10 09:58:44 +0000
commit688646fe6d034e98fe7cbcc9403a2d0f70434f40 (patch)
tree1c64cf601691cff448d3b3d80086b9371ab82f90 /src/config
parentf5c829b6f8397c4083bb19b00aa147bd7a628e5e (diff)
downloadipxe-688646fe6d034e98fe7cbcc9403a2d0f70434f40.zip
ipxe-688646fe6d034e98fe7cbcc9403a2d0f70434f40.tar.gz
ipxe-688646fe6d034e98fe7cbcc9403a2d0f70434f40.tar.bz2
[tls] Add GCM cipher suites
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/config')
-rw-r--r--src/config/config_crypto.c12
-rw-r--r--src/config/crypto.h3
2 files changed, 15 insertions, 0 deletions
diff --git a/src/config/config_crypto.c b/src/config/config_crypto.c
index 440bf4c..fa1996a 100644
--- a/src/config/config_crypto.c
+++ b/src/config/config_crypto.c
@@ -124,3 +124,15 @@ REQUIRE_OBJECT ( rsa_aes_cbc_sha1 );
defined ( CRYPTO_DIGEST_SHA256 )
REQUIRE_OBJECT ( rsa_aes_cbc_sha256 );
#endif
+
+/* RSA, AES-GCM, and SHA-256 */
+#if defined ( CRYPTO_PUBKEY_RSA ) && defined ( CRYPTO_CIPHER_AES_GCM ) && \
+ defined ( CRYPTO_DIGEST_SHA256 )
+REQUIRE_OBJECT ( rsa_aes_gcm_sha256 );
+#endif
+
+/* RSA, AES-GCM, and SHA-384 */
+#if defined ( CRYPTO_PUBKEY_RSA ) && defined ( CRYPTO_CIPHER_AES_GCM ) && \
+ defined ( CRYPTO_DIGEST_SHA384 )
+REQUIRE_OBJECT ( rsa_aes_gcm_sha384 );
+#endif
diff --git a/src/config/crypto.h b/src/config/crypto.h
index 7c02517..76bf14d 100644
--- a/src/config/crypto.h
+++ b/src/config/crypto.h
@@ -18,6 +18,9 @@ FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
/** AES-CBC block cipher */
#define CRYPTO_CIPHER_AES_CBC
+/** AES-GCM block cipher */
+#define CRYPTO_CIPHER_AES_GCM
+
/** MD4 digest algorithm */
//#define CRYPTO_DIGEST_MD4