4 Commits

Author	SHA1	Message	Date
Tobias Frauenschläger	eb8ba6124e	Support TLS 1.3 ECC Brainpool authentication ... This also fixes TLS 1.2 authentication to only succeed in case the brainpool curve was present in the supported_groups extension.	2026-01-22 14:14:09 +01:00
Tobias Frauenschläger	a462398387	Support Brainpool ECC curve TLS 1.3 key exchange ... When both TLS 1.3 and Brainpool curves are enabled, three new groups can be used for the ECDHE key exchange according to RFC 8734: * WOLFSSL_ECC_BRAINPOOLP256R1TLS13 (31) * WOLFSSL_ECC_BRAINPOOLP384R1TLS13 (32) * WOLFSSL_ECC_BRAINPOOLP512R1TLS13 (33) Also ensure that the existing TLS 1.2 curves are sent properly. The TLS client application is updated to support handshakes via Brainpool curves using the new argument "--bpKs".	2026-01-22 14:14:09 +01:00
Sean Parkinson	dc86dad26b	ECC key load: fixes ... asn.c: Return the curve OID sum with alg_id for ECC keys. ssl_load.c: Don't permanently strip the PKCS#8 information as it contains the curve OID.	2024-07-15 15:46:05 +10:00
David Garske	10f459f891	Added TLS v1.2 and v1.3 test cases for ECC Koblitz and Brainpool curves (both server auth and mutual auth). Cipher suites: ECDHE-ECDSA-AES128-GCM-SHA256, ECDH-ECDSA-AES128-GCM-SHA256 and TLS13-AES128-GCM-SHA256.	2020-11-10 09:47:36 -08:00