diff options
| author | Ronald Cron <ronald.cron@arm.com> | 2024-03-13 10:41:37 +0100 |
|---|---|---|
| committer | Ronald Cron <ronald.cron@arm.com> | 2024-03-15 10:41:52 +0100 |
| commit | 124ed8a775970a8df882f2b9e6eef7200d353ce9 (patch) | |
| tree | b62d476ffac5dfe2501881ce801bbdc6327488ac | |
| parent | e40e42cf21a3af4732babdaa5ed732733ff640e8 (diff) | |
| download | mbedtls-124ed8a775970a8df882f2b9e6eef7200d353ce9.zip mbedtls-124ed8a775970a8df882f2b9e6eef7200d353ce9.tar.gz mbedtls-124ed8a775970a8df882f2b9e6eef7200d353ce9.tar.bz2 | |
tls13-support.md: Some fixes
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
| -rw-r--r-- | docs/architecture/tls13-support.md | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/docs/architecture/tls13-support.md b/docs/architecture/tls13-support.md index 6db0e54..33fe76d 100644 --- a/docs/architecture/tls13-support.md +++ b/docs/architecture/tls13-support.md @@ -26,7 +26,7 @@ Support description - Mbed TLS supports ECDHE key establishment. - - Mbed TLS does not support DHE key establishment. + - Mbed TLS supports DHE key establishment. - Mbed TLS supports pre-shared keys for key establishment, pre-shared keys provisioned externally as well as provisioned via the ticket mechanism. @@ -51,7 +51,7 @@ Support description | signature_algorithms | YES | | use_srtp | no | | heartbeat | no | - | apln | YES | + | alpn | YES | | signed_certificate_timestamp | no | | client_certificate_type | no | | server_certificate_type | no | @@ -71,7 +71,8 @@ Support description Potentially all ECDHE groups: secp256r1, x25519, secp384r1, x448 and secp521r1. - Finite field groups (DHE) are not supported. + Potentially all DHE groups: + ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144 and ffdhe8192. - Supported signature algorithms (both for certificates and CertificateVerify): depends on the library configuration. @@ -105,7 +106,7 @@ Support description | Mbed TLS configuration option | Support | | ---------------------------------------- | ------- | - | MBEDTLS_SSL_ALL_ALERT_MESSAGES | no | + | MBEDTLS_SSL_ALL_ALERT_MESSAGES | yes | | MBEDTLS_SSL_ASYNC_PRIVATE | no | | MBEDTLS_SSL_CONTEXT_SERIALIZATION | no | | MBEDTLS_SSL_DEBUG_ALL | no | |