From 746cc5cc40bef22d606cd22d1feb10d73a7b3d11 Mon Sep 17 00:00:00 2001 From: Shang Qingyu Date: Wed, 15 May 2024 21:38:08 +0800 Subject: CryptoPkg: Add support for aes128-sha256 and aes256-sha256 cipher REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4739 AES256-SHA256 is a Tls1.2 suite we need to support, add it to deflt_ciphers in OpensslStub. Signed-off-by: Shang Qingyu Cc: Jiewen Yao Reviewed-by: Yi Li --- CryptoPkg/Library/OpensslLib/OpensslStub/uefiprov.c | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'CryptoPkg') diff --git a/CryptoPkg/Library/OpensslLib/OpensslStub/uefiprov.c b/CryptoPkg/Library/OpensslLib/OpensslStub/uefiprov.c index 40ab7e9..f2af6a4 100644 --- a/CryptoPkg/Library/OpensslLib/OpensslStub/uefiprov.c +++ b/CryptoPkg/Library/OpensslLib/OpensslStub/uefiprov.c @@ -141,6 +141,17 @@ static const OSSL_ALGORITHM_CAPABLE deflt_ciphers[] = { ALG(PROV_NAMES_AES_192_GCM, ossl_aes192gcm_functions), ALG(PROV_NAMES_AES_128_GCM, ossl_aes128gcm_functions), + ALGC ( + PROV_NAMES_AES_128_CBC_HMAC_SHA256, + ossl_aes128cbc_hmac_sha256_functions, + ossl_cipher_capable_aes_cbc_hmac_sha256 + ), + ALGC ( + PROV_NAMES_AES_256_CBC_HMAC_SHA256, + ossl_aes256cbc_hmac_sha256_functions, + ossl_cipher_capable_aes_cbc_hmac_sha256 + ), + { { NULL, NULL, NULL }, NULL } }; static OSSL_ALGORITHM exported_ciphers[OSSL_NELEM(deflt_ciphers)]; -- cgit v1.1