Mbed OS Reference
Loading...
Searching...
No Matches
dhm.h
Go to the documentation of this file.
1/**
2 * \file dhm.h
3 *
4 * \brief This file contains Diffie-Hellman-Merkle (DHM) key exchange
5 * definitions and functions.
6 *
7 * Diffie-Hellman-Merkle (DHM) key exchange is defined in
8 * <em>RFC-2631: Diffie-Hellman Key Agreement Method</em> and
9 * <em>Public-Key Cryptography Standards (PKCS) #3: Diffie
10 * Hellman Key Agreement Standard</em>.
11 *
12 * <em>RFC-3526: More Modular Exponential (MODP) Diffie-Hellman groups for
13 * Internet Key Exchange (IKE)</em> defines a number of standardized
14 * Diffie-Hellman groups for IKE.
15 *
16 * <em>RFC-5114: Additional Diffie-Hellman Groups for Use with IETF
17 * Standards</em> defines a number of standardized Diffie-Hellman
18 * groups that can be used.
19 *
20 * \warning The security of the DHM key exchange relies on the proper choice
21 * of prime modulus - optimally, it should be a safe prime. The usage
22 * of non-safe primes both decreases the difficulty of the underlying
23 * discrete logarithm problem and can lead to small subgroup attacks
24 * leaking private exponent bits when invalid public keys are used
25 * and not detected. This is especially relevant if the same DHM
26 * parameters are reused for multiple key exchanges as in static DHM,
27 * while the criticality of small-subgroup attacks is lower for
28 * ephemeral DHM.
29 *
30 * \warning For performance reasons, the code does neither perform primality
31 * nor safe primality tests, nor the expensive checks for invalid
32 * subgroups. Moreover, even if these were performed, non-standardized
33 * primes cannot be trusted because of the possibility of backdoors
34 * that can't be effectively checked for.
35 *
36 * \warning Diffie-Hellman-Merkle is therefore a security risk when not using
37 * standardized primes generated using a trustworthy ("nothing up
38 * my sleeve") method, such as the RFC 3526 / 7919 primes. In the TLS
39 * protocol, DH parameters need to be negotiated, so using the default
40 * primes systematically is not always an option. If possible, use
41 * Elliptic Curve Diffie-Hellman (ECDH), which has better performance,
42 * and for which the TLS protocol mandates the use of standard
43 * parameters.
44 *
45 */
46/*
47 * Copyright The Mbed TLS Contributors
48 * SPDX-License-Identifier: Apache-2.0
49 *
50 * Licensed under the Apache License, Version 2.0 (the "License"); you may
51 * not use this file except in compliance with the License.
52 * You may obtain a copy of the License at
53 *
54 * http://www.apache.org/licenses/LICENSE-2.0
55 *
56 * Unless required by applicable law or agreed to in writing, software
57 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
58 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
59 * See the License for the specific language governing permissions and
60 * limitations under the License.
61 */
62
63#ifndef MBEDTLS_DHM_H
64#define MBEDTLS_DHM_H
65
66#if !defined(MBEDTLS_CONFIG_FILE)
67#include "mbedtls/config.h"
68#else
69#include MBEDTLS_CONFIG_FILE
70#endif
71#include "mbedtls/bignum.h"
72
73/**
74 * \addtogroup mbedtls
75 * \{
76 * \defgroup mbedtls_dhm_module Diffie-Hellman-Merkle
77 * \{
78 */
79
80
81/*
82 * DHM Error codes
83 */
84#define MBEDTLS_ERR_DHM_BAD_INPUT_DATA -0x3080 /**< Bad input parameters. */
85#define MBEDTLS_ERR_DHM_READ_PARAMS_FAILED -0x3100 /**< Reading of the DHM parameters failed. */
86#define MBEDTLS_ERR_DHM_MAKE_PARAMS_FAILED -0x3180 /**< Making of the DHM parameters failed. */
87#define MBEDTLS_ERR_DHM_READ_PUBLIC_FAILED -0x3200 /**< Reading of the public values failed. */
88#define MBEDTLS_ERR_DHM_MAKE_PUBLIC_FAILED -0x3280 /**< Making of the public value failed. */
89#define MBEDTLS_ERR_DHM_CALC_SECRET_FAILED -0x3300 /**< Calculation of the DHM secret failed. */
90#define MBEDTLS_ERR_DHM_INVALID_FORMAT -0x3380 /**< The ASN.1 data is not formatted correctly. */
91#define MBEDTLS_ERR_DHM_ALLOC_FAILED -0x3400 /**< Allocation of memory failed. */
92#define MBEDTLS_ERR_DHM_FILE_IO_ERROR -0x3480 /**< Read or write of file failed. */
93
94/* MBEDTLS_ERR_DHM_HW_ACCEL_FAILED is deprecated and should not be used. */
95#define MBEDTLS_ERR_DHM_HW_ACCEL_FAILED -0x3500 /**< DHM hardware accelerator failed. */
96
97#define MBEDTLS_ERR_DHM_SET_GROUP_FAILED -0x3580 /**< Setting the modulus and generator failed. */
98
99#ifdef __cplusplus
100extern "C" {
101#endif
102
103#if !defined(MBEDTLS_DHM_ALT)
104
105/**
106 * \brief The DHM context structure.
107 */
109{
110 size_t len; /*!< The size of \p P in Bytes. */
111 mbedtls_mpi P; /*!< The prime modulus. */
112 mbedtls_mpi G; /*!< The generator. */
113 mbedtls_mpi X; /*!< Our secret value. */
114 mbedtls_mpi GX; /*!< Our public key = \c G^X mod \c P. */
115 mbedtls_mpi GY; /*!< The public key of the peer = \c G^Y mod \c P. */
116 mbedtls_mpi K; /*!< The shared secret = \c G^(XY) mod \c P. */
117 mbedtls_mpi RP; /*!< The cached value = \c R^2 mod \c P. */
118 mbedtls_mpi Vi; /*!< The blinding value. */
119 mbedtls_mpi Vf; /*!< The unblinding value. */
120 mbedtls_mpi pX; /*!< The previous \c X. */
121}
123
124#else /* MBEDTLS_DHM_ALT */
125#include "dhm_alt.h"
126#endif /* MBEDTLS_DHM_ALT */
127
128/**
129 * \brief This function initializes the DHM context.
130 *
131 * \param ctx The DHM context to initialize.
132 */
134
135/**
136 * \brief This function parses the DHM parameters in a
137 * TLS ServerKeyExchange handshake message
138 * (DHM modulus, generator, and public key).
139 *
140 * \note In a TLS handshake, this is the how the client
141 * sets up its DHM context from the server's public
142 * DHM key material.
143 *
144 * \param ctx The DHM context to use. This must be initialized.
145 * \param p On input, *p must be the start of the input buffer.
146 * On output, *p is updated to point to the end of the data
147 * that has been read. On success, this is the first byte
148 * past the end of the ServerKeyExchange parameters.
149 * On error, this is the point at which an error has been
150 * detected, which is usually not useful except to debug
151 * failures.
152 * \param end The end of the input buffer.
153 *
154 * \return \c 0 on success.
155 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
156 */
158 unsigned char **p,
159 const unsigned char *end );
160
161/**
162 * \brief This function generates a DHM key pair and exports its
163 * public part together with the DHM parameters in the format
164 * used in a TLS ServerKeyExchange handshake message.
165 *
166 * \note This function assumes that the DHM parameters \c ctx->P
167 * and \c ctx->G have already been properly set. For that, use
168 * mbedtls_dhm_set_group() below in conjunction with
169 * mbedtls_mpi_read_binary() and mbedtls_mpi_read_string().
170 *
171 * \note In a TLS handshake, this is the how the server generates
172 * and exports its DHM key material.
173 *
174 * \param ctx The DHM context to use. This must be initialized
175 * and have the DHM parameters set. It may or may not
176 * already have imported the peer's public key.
177 * \param x_size The private key size in Bytes.
178 * \param olen The address at which to store the number of Bytes
179 * written on success. This must not be \c NULL.
180 * \param output The destination buffer. This must be a writable buffer of
181 * sufficient size to hold the reduced binary presentation of
182 * the modulus, the generator and the public key, each wrapped
183 * with a 2-byte length field. It is the responsibility of the
184 * caller to ensure that enough space is available. Refer to
185 * mbedtls_mpi_size() to computing the byte-size of an MPI.
186 * \param f_rng The RNG function. Must not be \c NULL.
187 * \param p_rng The RNG context to be passed to \p f_rng. This may be
188 * \c NULL if \p f_rng doesn't need a context parameter.
189 *
190 * \return \c 0 on success.
191 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
192 */
194 unsigned char *output, size_t *olen,
195 int (*f_rng)(void *, unsigned char *, size_t),
196 void *p_rng );
197
198/**
199 * \brief This function sets the prime modulus and generator.
200 *
201 * \note This function can be used to set \c ctx->P, \c ctx->G
202 * in preparation for mbedtls_dhm_make_params().
203 *
204 * \param ctx The DHM context to configure. This must be initialized.
205 * \param P The MPI holding the DHM prime modulus. This must be
206 * an initialized MPI.
207 * \param G The MPI holding the DHM generator. This must be an
208 * initialized MPI.
209 *
210 * \return \c 0 if successful.
211 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
212 */
214 const mbedtls_mpi *P,
215 const mbedtls_mpi *G );
216
217/**
218 * \brief This function imports the raw public value of the peer.
219 *
220 * \note In a TLS handshake, this is the how the server imports
221 * the Client's public DHM key.
222 *
223 * \param ctx The DHM context to use. This must be initialized and have
224 * its DHM parameters set, e.g. via mbedtls_dhm_set_group().
225 * It may or may not already have generated its own private key.
226 * \param input The input buffer containing the \c G^Y value of the peer.
227 * This must be a readable buffer of size \p ilen Bytes.
228 * \param ilen The size of the input buffer \p input in Bytes.
229 *
230 * \return \c 0 on success.
231 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
232 */
234 const unsigned char *input, size_t ilen );
235
236/**
237 * \brief This function creates a DHM key pair and exports
238 * the raw public key in big-endian format.
239 *
240 * \note The destination buffer is always fully written
241 * so as to contain a big-endian representation of G^X mod P.
242 * If it is larger than \c ctx->len, it is padded accordingly
243 * with zero-bytes at the beginning.
244 *
245 * \param ctx The DHM context to use. This must be initialized and
246 * have the DHM parameters set. It may or may not already
247 * have imported the peer's public key.
248 * \param x_size The private key size in Bytes.
249 * \param output The destination buffer. This must be a writable buffer of
250 * size \p olen Bytes.
251 * \param olen The length of the destination buffer. This must be at least
252 * equal to `ctx->len` (the size of \c P).
253 * \param f_rng The RNG function. This must not be \c NULL.
254 * \param p_rng The RNG context to be passed to \p f_rng. This may be \c NULL
255 * if \p f_rng doesn't need a context argument.
256 *
257 * \return \c 0 on success.
258 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
259 */
261 unsigned char *output, size_t olen,
262 int (*f_rng)(void *, unsigned char *, size_t),
263 void *p_rng );
264
265/**
266 * \brief This function derives and exports the shared secret
267 * \c (G^Y)^X mod \c P.
268 *
269 * \note If \p f_rng is not \c NULL, it is used to blind the input as
270 * a countermeasure against timing attacks. Blinding is used
271 * only if our private key \c X is re-used, and not used
272 * otherwise. We recommend always passing a non-NULL
273 * \p f_rng argument.
274 *
275 * \param ctx The DHM context to use. This must be initialized
276 * and have its own private key generated and the peer's
277 * public key imported.
278 * \param output The buffer to write the generated shared key to. This
279 * must be a writable buffer of size \p output_size Bytes.
280 * \param output_size The size of the destination buffer. This must be at
281 * least the size of \c ctx->len (the size of \c P).
282 * \param olen On exit, holds the actual number of Bytes written.
283 * \param f_rng The RNG function, for blinding purposes. This may
284 * b \c NULL if blinding isn't needed.
285 * \param p_rng The RNG context. This may be \c NULL if \p f_rng
286 * doesn't need a context argument.
287 *
288 * \return \c 0 on success.
289 * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
290 */
292 unsigned char *output, size_t output_size, size_t *olen,
293 int (*f_rng)(void *, unsigned char *, size_t),
294 void *p_rng );
295
296/**
297 * \brief This function frees and clears the components
298 * of a DHM context.
299 *
300 * \param ctx The DHM context to free and clear. This may be \c NULL,
301 * in which case this function is a no-op. If it is not \c NULL,
302 * it must point to an initialized DHM context.
303 */
305
306#if defined(MBEDTLS_ASN1_PARSE_C)
307/**
308 * \brief This function parses DHM parameters in PEM or DER format.
309 *
310 * \param dhm The DHM context to import the DHM parameters into.
311 * This must be initialized.
312 * \param dhmin The input buffer. This must be a readable buffer of
313 * length \p dhminlen Bytes.
314 * \param dhminlen The size of the input buffer \p dhmin, including the
315 * terminating \c NULL Byte for PEM data.
316 *
317 * \return \c 0 on success.
318 * \return An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX error
319 * code on failure.
320 */
321int mbedtls_dhm_parse_dhm( mbedtls_dhm_context *dhm, const unsigned char *dhmin,
322 size_t dhminlen );
323
324#if defined(MBEDTLS_FS_IO)
325/**
326 * \brief This function loads and parses DHM parameters from a file.
327 *
328 * \param dhm The DHM context to load the parameters to.
329 * This must be initialized.
330 * \param path The filename to read the DHM parameters from.
331 * This must not be \c NULL.
332 *
333 * \return \c 0 on success.
334 * \return An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX
335 * error code on failure.
336 */
337int mbedtls_dhm_parse_dhmfile( mbedtls_dhm_context *dhm, const char *path );
338#endif /* MBEDTLS_FS_IO */
339#endif /* MBEDTLS_ASN1_PARSE_C */
340
341#if defined(MBEDTLS_SELF_TEST)
342
343/**
344 * \brief The DMH checkup routine.
345 *
346 * \return \c 0 on success.
347 * \return \c 1 on failure.
348 */
349int mbedtls_dhm_self_test( int verbose );
350
351#endif /* MBEDTLS_SELF_TEST */
352#ifdef __cplusplus
353}
354#endif
355
356/**
357 * RFC 3526, RFC 5114 and RFC 7919 standardize a number of
358 * Diffie-Hellman groups, some of which are included here
359 * for use within the SSL/TLS module and the user's convenience
360 * when configuring the Diffie-Hellman parameters by hand
361 * through \c mbedtls_ssl_conf_dh_param.
362 *
363 * The following lists the source of the above groups in the standards:
364 * - RFC 5114 section 2.2: 2048-bit MODP Group with 224-bit Prime Order Subgroup
365 * - RFC 3526 section 3: 2048-bit MODP Group
366 * - RFC 3526 section 4: 3072-bit MODP Group
367 * - RFC 3526 section 5: 4096-bit MODP Group
368 * - RFC 7919 section A.1: ffdhe2048
369 * - RFC 7919 section A.2: ffdhe3072
370 * - RFC 7919 section A.3: ffdhe4096
371 * - RFC 7919 section A.4: ffdhe6144
372 * - RFC 7919 section A.5: ffdhe8192
373 *
374 * The constants with suffix "_p" denote the chosen prime moduli, while
375 * the constants with suffix "_g" denote the chosen generator
376 * of the associated prime field.
377 *
378 * The constants further suffixed with "_bin" are provided in binary format,
379 * while all other constants represent null-terminated strings holding the
380 * hexadecimal presentation of the respective numbers.
381 *
382 * The primes from RFC 3526 and RFC 7919 have been generating by the following
383 * trust-worthy procedure:
384 * - Fix N in { 2048, 3072, 4096, 6144, 8192 } and consider the N-bit number
385 * the first and last 64 bits are all 1, and the remaining N - 128 bits of
386 * which are 0x7ff...ff.
387 * - Add the smallest multiple of the first N - 129 bits of the binary expansion
388 * of pi (for RFC 5236) or e (for RFC 7919) to this intermediate bit-string
389 * such that the resulting integer is a safe-prime.
390 * - The result is the respective RFC 3526 / 7919 prime, and the corresponding
391 * generator is always chosen to be 2 (which is a square for these prime,
392 * hence the corresponding subgroup has order (p-1)/2 and avoids leaking a
393 * bit in the private exponent).
394 *
395 */
396
397#if !defined(MBEDTLS_DEPRECATED_REMOVED)
398
399/**
400 * \warning The origin of the primes in RFC 5114 is not documented and
401 * their use therefore constitutes a security risk!
402 *
403 * \deprecated The hex-encoded primes from RFC 5114 are deprecated and are
404 * likely to be removed in a future version of the library without
405 * replacement.
406 */
407
408/**
409 * The hexadecimal presentation of the prime underlying the
410 * 2048-bit MODP Group with 224-bit Prime Order Subgroup, as defined
411 * in <em>RFC-5114: Additional Diffie-Hellman Groups for Use with
412 * IETF Standards</em>.
413 */
414#define MBEDTLS_DHM_RFC5114_MODP_2048_P \
415 MBEDTLS_DEPRECATED_STRING_CONSTANT( \
416 "AD107E1E9123A9D0D660FAA79559C51FA20D64E5683B9FD1" \
417 "B54B1597B61D0A75E6FA141DF95A56DBAF9A3C407BA1DF15" \
418 "EB3D688A309C180E1DE6B85A1274A0A66D3F8152AD6AC212" \
419 "9037C9EDEFDA4DF8D91E8FEF55B7394B7AD5B7D0B6C12207" \
420 "C9F98D11ED34DBF6C6BA0B2C8BBC27BE6A00E0A0B9C49708" \
421 "B3BF8A317091883681286130BC8985DB1602E714415D9330" \
422 "278273C7DE31EFDC7310F7121FD5A07415987D9ADC0A486D" \
423 "CDF93ACC44328387315D75E198C641A480CD86A1B9E587E8" \
424 "BE60E69CC928B2B9C52172E413042E9B23F10B0E16E79763" \
425 "C9B53DCF4BA80A29E3FB73C16B8E75B97EF363E2FFA31F71" \
426 "CF9DE5384E71B81C0AC4DFFE0C10E64F" )
427
428/**
429 * The hexadecimal presentation of the chosen generator of the 2048-bit MODP
430 * Group with 224-bit Prime Order Subgroup, as defined in <em>RFC-5114:
431 * Additional Diffie-Hellman Groups for Use with IETF Standards</em>.
432 */
433#define MBEDTLS_DHM_RFC5114_MODP_2048_G \
434 MBEDTLS_DEPRECATED_STRING_CONSTANT( \
435 "AC4032EF4F2D9AE39DF30B5C8FFDAC506CDEBE7B89998CAF" \
436 "74866A08CFE4FFE3A6824A4E10B9A6F0DD921F01A70C4AFA" \
437 "AB739D7700C29F52C57DB17C620A8652BE5E9001A8D66AD7" \
438 "C17669101999024AF4D027275AC1348BB8A762D0521BC98A" \
439 "E247150422EA1ED409939D54DA7460CDB5F6C6B250717CBE" \
440 "F180EB34118E98D119529A45D6F834566E3025E316A330EF" \
441 "BB77A86F0C1AB15B051AE3D428C8F8ACB70A8137150B8EEB" \
442 "10E183EDD19963DDD9E263E4770589EF6AA21E7F5F2FF381" \
443 "B539CCE3409D13CD566AFBB48D6C019181E1BCFE94B30269" \
444 "EDFE72FE9B6AA4BD7B5A0F1C71CFFF4C19C418E1F6EC0179" \
445 "81BC087F2A7065B384B890D3191F2BFA" )
446
447/**
448 * The hexadecimal presentation of the prime underlying the 2048-bit MODP
449 * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
450 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
451 *
452 * \deprecated The hex-encoded primes from RFC 3625 are deprecated and
453 * superseded by the corresponding macros providing them as
454 * binary constants. Their hex-encoded constants are likely
455 * to be removed in a future version of the library.
456 *
457 */
458#define MBEDTLS_DHM_RFC3526_MODP_2048_P \
459 MBEDTLS_DEPRECATED_STRING_CONSTANT( \
460 "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \
461 "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \
462 "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \
463 "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \
464 "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \
465 "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \
466 "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \
467 "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \
468 "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \
469 "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \
470 "15728E5A8AACAA68FFFFFFFFFFFFFFFF" )
471
472/**
473 * The hexadecimal presentation of the chosen generator of the 2048-bit MODP
474 * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
475 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
476 */
477#define MBEDTLS_DHM_RFC3526_MODP_2048_G \
478 MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" )
479
480/**
481 * The hexadecimal presentation of the prime underlying the 3072-bit MODP
482 * Group, as defined in <em>RFC-3072: More Modular Exponential (MODP)
483 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
484 */
485#define MBEDTLS_DHM_RFC3526_MODP_3072_P \
486 MBEDTLS_DEPRECATED_STRING_CONSTANT( \
487 "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \
488 "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \
489 "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \
490 "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \
491 "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \
492 "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \
493 "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \
494 "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \
495 "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \
496 "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \
497 "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" \
498 "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" \
499 "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" \
500 "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" \
501 "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" \
502 "43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF" )
503
504/**
505 * The hexadecimal presentation of the chosen generator of the 3072-bit MODP
506 * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
507 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
508 */
509#define MBEDTLS_DHM_RFC3526_MODP_3072_G \
510 MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" )
511
512/**
513 * The hexadecimal presentation of the prime underlying the 4096-bit MODP
514 * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
515 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
516 */
517#define MBEDTLS_DHM_RFC3526_MODP_4096_P \
518 MBEDTLS_DEPRECATED_STRING_CONSTANT( \
519 "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \
520 "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \
521 "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \
522 "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \
523 "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \
524 "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \
525 "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \
526 "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \
527 "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \
528 "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \
529 "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" \
530 "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" \
531 "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" \
532 "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" \
533 "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" \
534 "43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7" \
535 "88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA" \
536 "2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6" \
537 "287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED" \
538 "1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9" \
539 "93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934063199" \
540 "FFFFFFFFFFFFFFFF" )
541
542/**
543 * The hexadecimal presentation of the chosen generator of the 4096-bit MODP
544 * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
545 * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
546 */
547#define MBEDTLS_DHM_RFC3526_MODP_4096_G \
548 MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" )
549
550#endif /* MBEDTLS_DEPRECATED_REMOVED */
551
552/*
553 * Trustworthy DHM parameters in binary form
554 */
555
556#define MBEDTLS_DHM_RFC3526_MODP_2048_P_BIN { \
557 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
558 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \
559 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \
560 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \
561 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \
562 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \
563 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \
564 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \
565 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \
566 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \
567 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \
568 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \
569 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \
570 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \
571 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \
572 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \
573 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \
574 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \
575 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \
576 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \
577 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \
578 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \
579 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \
580 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \
581 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \
582 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \
583 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \
584 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \
585 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \
586 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \
587 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAC, 0xAA, 0x68, \
588 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
589
590#define MBEDTLS_DHM_RFC3526_MODP_2048_G_BIN { 0x02 }
591
592#define MBEDTLS_DHM_RFC3526_MODP_3072_P_BIN { \
593 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
594 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \
595 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \
596 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \
597 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \
598 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \
599 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \
600 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \
601 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \
602 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \
603 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \
604 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \
605 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \
606 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \
607 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \
608 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \
609 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \
610 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \
611 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \
612 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \
613 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \
614 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \
615 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \
616 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \
617 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \
618 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \
619 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \
620 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \
621 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \
622 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \
623 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D, \
624 0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33, \
625 0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64, \
626 0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, \
627 0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, \
628 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7, \
629 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7, \
630 0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D, \
631 0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B, \
632 0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64, \
633 0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, \
634 0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, \
635 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C, \
636 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2, \
637 0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31, \
638 0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E, \
639 0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x3A, 0xD2, 0xCA, \
640 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
641
642#define MBEDTLS_DHM_RFC3526_MODP_3072_G_BIN { 0x02 }
643
644#define MBEDTLS_DHM_RFC3526_MODP_4096_P_BIN { \
645 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
646 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \
647 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \
648 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \
649 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \
650 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \
651 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \
652 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \
653 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \
654 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \
655 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \
656 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \
657 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \
658 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \
659 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \
660 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \
661 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \
662 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \
663 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \
664 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \
665 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \
666 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \
667 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \
668 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \
669 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \
670 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \
671 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \
672 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \
673 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \
674 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \
675 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D, \
676 0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33, \
677 0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64, \
678 0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, \
679 0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, \
680 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7, \
681 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7, \
682 0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D, \
683 0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B, \
684 0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64, \
685 0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, \
686 0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, \
687 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C, \
688 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2, \
689 0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31, \
690 0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E, \
691 0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x21, 0x08, 0x01, \
692 0x1A, 0x72, 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7, \
693 0x88, 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26, \
694 0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, 0x3C, \
695 0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, 0x0B, 0xDA, \
696 0x25, 0x83, 0xE9, 0xCA, 0x2A, 0xD4, 0x4C, 0xE8, \
697 0xDB, 0xBB, 0xC2, 0xDB, 0x04, 0xDE, 0x8E, 0xF9, \
698 0x2E, 0x8E, 0xFC, 0x14, 0x1F, 0xBE, 0xCA, 0xA6, \
699 0x28, 0x7C, 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D, \
700 0x99, 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2, \
701 0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, 0xED, \
702 0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, 0xD7, 0xAF, \
703 0xB8, 0x1B, 0xDD, 0x76, 0x21, 0x70, 0x48, 0x1C, \
704 0xD0, 0x06, 0x91, 0x27, 0xD5, 0xB0, 0x5A, 0xA9, \
705 0x93, 0xB4, 0xEA, 0x98, 0x8D, 0x8F, 0xDD, 0xC1, \
706 0x86, 0xFF, 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F, \
707 0x4D, 0xF4, 0x35, 0xC9, 0x34, 0x06, 0x31, 0x99, \
708 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
709
710#define MBEDTLS_DHM_RFC3526_MODP_4096_G_BIN { 0x02 }
711
712#define MBEDTLS_DHM_RFC7919_FFDHE2048_P_BIN { \
713 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
714 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
715 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
716 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
717 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
718 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
719 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
720 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
721 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
722 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
723 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
724 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
725 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
726 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
727 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
728 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
729 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
730 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
731 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
732 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
733 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
734 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
735 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
736 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
737 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
738 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
739 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
740 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
741 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
742 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
743 0x88, 0x6B, 0x42, 0x38, 0x61, 0x28, 0x5C, 0x97, \
744 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, }
745
746#define MBEDTLS_DHM_RFC7919_FFDHE2048_G_BIN { 0x02 }
747
748#define MBEDTLS_DHM_RFC7919_FFDHE3072_P_BIN { \
749 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
750 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
751 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
752 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
753 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
754 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
755 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
756 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
757 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
758 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
759 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
760 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
761 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
762 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
763 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
764 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
765 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
766 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
767 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
768 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
769 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
770 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
771 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
772 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
773 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
774 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
775 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
776 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
777 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
778 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
779 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
780 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
781 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
782 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
783 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
784 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
785 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
786 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
787 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
788 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
789 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
790 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
791 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
792 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
793 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
794 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
795 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0xC6, 0x2E, 0x37, \
796 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
797
798#define MBEDTLS_DHM_RFC7919_FFDHE3072_G_BIN { 0x02 }
799
800#define MBEDTLS_DHM_RFC7919_FFDHE4096_P_BIN { \
801 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
802 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
803 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
804 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
805 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
806 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
807 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
808 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
809 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
810 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
811 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
812 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
813 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
814 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
815 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
816 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
817 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
818 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
819 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
820 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
821 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
822 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
823 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
824 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
825 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
826 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
827 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
828 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
829 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
830 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
831 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
832 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
833 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
834 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
835 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
836 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
837 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
838 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
839 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
840 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
841 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
842 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
843 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
844 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
845 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
846 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
847 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
848 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
849 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
850 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
851 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
852 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
853 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
854 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
855 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
856 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
857 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
858 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
859 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
860 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
861 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
862 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
863 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x65, 0x5F, 0x6A, \
864 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
865
866#define MBEDTLS_DHM_RFC7919_FFDHE4096_G_BIN { 0x02 }
867
868#define MBEDTLS_DHM_RFC7919_FFDHE6144_P_BIN { \
869 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
870 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
871 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
872 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
873 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
874 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
875 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
876 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
877 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
878 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
879 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
880 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
881 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
882 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
883 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
884 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
885 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
886 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
887 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
888 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
889 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
890 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
891 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
892 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
893 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
894 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
895 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
896 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
897 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
898 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
899 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
900 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
901 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
902 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
903 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
904 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
905 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
906 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
907 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
908 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
909 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
910 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
911 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
912 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
913 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
914 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
915 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
916 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
917 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
918 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
919 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
920 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
921 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
922 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
923 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
924 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
925 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
926 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
927 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
928 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
929 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
930 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
931 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \
932 0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \
933 0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \
934 0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \
935 0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \
936 0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \
937 0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \
938 0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \
939 0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \
940 0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \
941 0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \
942 0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \
943 0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \
944 0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \
945 0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \
946 0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \
947 0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \
948 0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \
949 0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \
950 0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \
951 0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \
952 0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \
953 0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \
954 0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \
955 0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \
956 0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \
957 0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \
958 0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \
959 0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \
960 0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \
961 0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \
962 0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \
963 0xA4, 0x0E, 0x32, 0x9C, 0xD0, 0xE4, 0x0E, 0x65, \
964 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
965
966#define MBEDTLS_DHM_RFC7919_FFDHE6144_G_BIN { 0x02 }
967
968#define MBEDTLS_DHM_RFC7919_FFDHE8192_P_BIN { \
969 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
970 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
971 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
972 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
973 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
974 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
975 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
976 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
977 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
978 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
979 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
980 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
981 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
982 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
983 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
984 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
985 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
986 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
987 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
988 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
989 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
990 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
991 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
992 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
993 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
994 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
995 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
996 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
997 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
998 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
999 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
1000 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
1001 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
1002 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
1003 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
1004 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
1005 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
1006 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
1007 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
1008 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
1009 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
1010 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
1011 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
1012 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
1013 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
1014 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
1015 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
1016 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
1017 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
1018 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
1019 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
1020 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
1021 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
1022 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
1023 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
1024 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
1025 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
1026 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
1027 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
1028 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
1029 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
1030 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
1031 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \
1032 0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \
1033 0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \
1034 0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \
1035 0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \
1036 0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \
1037 0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \
1038 0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \
1039 0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \
1040 0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \
1041 0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \
1042 0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \
1043 0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \
1044 0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \
1045 0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \
1046 0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \
1047 0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \
1048 0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \
1049 0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \
1050 0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \
1051 0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \
1052 0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \
1053 0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \
1054 0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \
1055 0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \
1056 0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \
1057 0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \
1058 0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \
1059 0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \
1060 0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \
1061 0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \
1062 0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \
1063 0xA4, 0x0E, 0x32, 0x9C, 0xCF, 0xF4, 0x6A, 0xAA, \
1064 0x36, 0xAD, 0x00, 0x4C, 0xF6, 0x00, 0xC8, 0x38, \
1065 0x1E, 0x42, 0x5A, 0x31, 0xD9, 0x51, 0xAE, 0x64, \
1066 0xFD, 0xB2, 0x3F, 0xCE, 0xC9, 0x50, 0x9D, 0x43, \
1067 0x68, 0x7F, 0xEB, 0x69, 0xED, 0xD1, 0xCC, 0x5E, \
1068 0x0B, 0x8C, 0xC3, 0xBD, 0xF6, 0x4B, 0x10, 0xEF, \
1069 0x86, 0xB6, 0x31, 0x42, 0xA3, 0xAB, 0x88, 0x29, \
1070 0x55, 0x5B, 0x2F, 0x74, 0x7C, 0x93, 0x26, 0x65, \
1071 0xCB, 0x2C, 0x0F, 0x1C, 0xC0, 0x1B, 0xD7, 0x02, \
1072 0x29, 0x38, 0x88, 0x39, 0xD2, 0xAF, 0x05, 0xE4, \
1073 0x54, 0x50, 0x4A, 0xC7, 0x8B, 0x75, 0x82, 0x82, \
1074 0x28, 0x46, 0xC0, 0xBA, 0x35, 0xC3, 0x5F, 0x5C, \
1075 0x59, 0x16, 0x0C, 0xC0, 0x46, 0xFD, 0x82, 0x51, \
1076 0x54, 0x1F, 0xC6, 0x8C, 0x9C, 0x86, 0xB0, 0x22, \
1077 0xBB, 0x70, 0x99, 0x87, 0x6A, 0x46, 0x0E, 0x74, \
1078 0x51, 0xA8, 0xA9, 0x31, 0x09, 0x70, 0x3F, 0xEE, \
1079 0x1C, 0x21, 0x7E, 0x6C, 0x38, 0x26, 0xE5, 0x2C, \
1080 0x51, 0xAA, 0x69, 0x1E, 0x0E, 0x42, 0x3C, 0xFC, \
1081 0x99, 0xE9, 0xE3, 0x16, 0x50, 0xC1, 0x21, 0x7B, \
1082 0x62, 0x48, 0x16, 0xCD, 0xAD, 0x9A, 0x95, 0xF9, \
1083 0xD5, 0xB8, 0x01, 0x94, 0x88, 0xD9, 0xC0, 0xA0, \
1084 0xA1, 0xFE, 0x30, 0x75, 0xA5, 0x77, 0xE2, 0x31, \
1085 0x83, 0xF8, 0x1D, 0x4A, 0x3F, 0x2F, 0xA4, 0x57, \
1086 0x1E, 0xFC, 0x8C, 0xE0, 0xBA, 0x8A, 0x4F, 0xE8, \
1087 0xB6, 0x85, 0x5D, 0xFE, 0x72, 0xB0, 0xA6, 0x6E, \
1088 0xDE, 0xD2, 0xFB, 0xAB, 0xFB, 0xE5, 0x8A, 0x30, \
1089 0xFA, 0xFA, 0xBE, 0x1C, 0x5D, 0x71, 0xA8, 0x7E, \
1090 0x2F, 0x74, 0x1E, 0xF8, 0xC1, 0xFE, 0x86, 0xFE, \
1091 0xA6, 0xBB, 0xFD, 0xE5, 0x30, 0x67, 0x7F, 0x0D, \
1092 0x97, 0xD1, 0x1D, 0x49, 0xF7, 0xA8, 0x44, 0x3D, \
1093 0x08, 0x22, 0xE5, 0x06, 0xA9, 0xF4, 0x61, 0x4E, \
1094 0x01, 0x1E, 0x2A, 0x94, 0x83, 0x8F, 0xF8, 0x8C, \
1095 0xD6, 0x8C, 0x8B, 0xB7, 0xC5, 0xC6, 0x42, 0x4C, \
1096 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
1097
1098#define MBEDTLS_DHM_RFC7919_FFDHE8192_G_BIN { 0x02 }
1099
1100/// \}
1101/// \}
1102
1103#endif /* dhm.h */
Multi-precision integer library.
Configuration options (set of defines)
void mbedtls_dhm_free(mbedtls_dhm_context *ctx)
This function frees and clears the components of a DHM context.
int mbedtls_dhm_read_public(mbedtls_dhm_context *ctx, const unsigned char *input, size_t ilen)
This function imports the raw public value of the peer.
int mbedtls_dhm_set_group(mbedtls_dhm_context *ctx, const mbedtls_mpi *P, const mbedtls_mpi *G)
This function sets the prime modulus and generator.
int mbedtls_dhm_read_params(mbedtls_dhm_context *ctx, unsigned char **p, const unsigned char *end)
This function parses the DHM parameters in a TLS ServerKeyExchange handshake message (DHM modulus,...
void mbedtls_dhm_init(mbedtls_dhm_context *ctx)
This function initializes the DHM context.
int mbedtls_dhm_calc_secret(mbedtls_dhm_context *ctx, unsigned char *output, size_t output_size, size_t *olen, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng)
This function derives and exports the shared secret (G^Y)^X mod P.
int mbedtls_dhm_make_params(mbedtls_dhm_context *ctx, int x_size, unsigned char *output, size_t *olen, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng)
This function generates a DHM key pair and exports its public part together with the DHM parameters i...
int mbedtls_dhm_make_public(mbedtls_dhm_context *ctx, int x_size, unsigned char *output, size_t olen, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng)
This function creates a DHM key pair and exports the raw public key in big-endian format.
The DHM context structure.
Definition: dhm.h:109
mbedtls_mpi GY
Definition: dhm.h:115
mbedtls_mpi P
Definition: dhm.h:111
mbedtls_mpi Vi
Definition: dhm.h:118
mbedtls_mpi RP
Definition: dhm.h:117
mbedtls_mpi Vf
Definition: dhm.h:119
mbedtls_mpi G
Definition: dhm.h:112
mbedtls_mpi pX
Definition: dhm.h:120
size_t len
Definition: dhm.h:110
mbedtls_mpi K
Definition: dhm.h:116
mbedtls_mpi X
Definition: dhm.h:113
mbedtls_mpi GX
Definition: dhm.h:114
MPI structure.
Definition: bignum.h:185