rustls/
enums.rs

1#![allow(non_camel_case_types)]
2#![allow(missing_docs)]
3use crate::msgs::codec::{Codec, Reader};
4
5enum_builder! {
6    /// The `AlertDescription` TLS protocol enum.  Values in this enum are taken
7    /// from the various RFCs covering TLS, and are listed by IANA.
8    /// The `Unknown` item is used when processing unrecognised ordinals.
9    @U8
10    pub enum AlertDescription {
11        CloseNotify => 0x00,
12        UnexpectedMessage => 0x0a,
13        BadRecordMac => 0x14,
14        DecryptionFailed => 0x15,
15        RecordOverflow => 0x16,
16        DecompressionFailure => 0x1e,
17        HandshakeFailure => 0x28,
18        NoCertificate => 0x29,
19        BadCertificate => 0x2a,
20        UnsupportedCertificate => 0x2b,
21        CertificateRevoked => 0x2c,
22        CertificateExpired => 0x2d,
23        CertificateUnknown => 0x2e,
24        IllegalParameter => 0x2f,
25        UnknownCA => 0x30,
26        AccessDenied => 0x31,
27        DecodeError => 0x32,
28        DecryptError => 0x33,
29        ExportRestriction => 0x3c,
30        ProtocolVersion => 0x46,
31        InsufficientSecurity => 0x47,
32        InternalError => 0x50,
33        InappropriateFallback => 0x56,
34        UserCanceled => 0x5a,
35        NoRenegotiation => 0x64,
36        MissingExtension => 0x6d,
37        UnsupportedExtension => 0x6e,
38        CertificateUnobtainable => 0x6f,
39        UnrecognisedName => 0x70,
40        BadCertificateStatusResponse => 0x71,
41        BadCertificateHashValue => 0x72,
42        UnknownPSKIdentity => 0x73,
43        CertificateRequired => 0x74,
44        NoApplicationProtocol => 0x78
45    }
46}
47
48enum_builder! {
49    /// The `HandshakeType` TLS protocol enum.  Values in this enum are taken
50    /// from the various RFCs covering TLS, and are listed by IANA.
51    /// The `Unknown` item is used when processing unrecognised ordinals.
52    @U8
53    pub enum HandshakeType {
54        HelloRequest => 0x00,
55        ClientHello => 0x01,
56        ServerHello => 0x02,
57        HelloVerifyRequest => 0x03,
58        NewSessionTicket => 0x04,
59        EndOfEarlyData => 0x05,
60        HelloRetryRequest => 0x06,
61        EncryptedExtensions => 0x08,
62        Certificate => 0x0b,
63        ServerKeyExchange => 0x0c,
64        CertificateRequest => 0x0d,
65        ServerHelloDone => 0x0e,
66        CertificateVerify => 0x0f,
67        ClientKeyExchange => 0x10,
68        Finished => 0x14,
69        CertificateURL => 0x15,
70        CertificateStatus => 0x16,
71        KeyUpdate => 0x18,
72        MessageHash => 0xfe
73    }
74}
75
76enum_builder! {
77    /// The `ContentType` TLS protocol enum.  Values in this enum are taken
78    /// from the various RFCs covering TLS, and are listed by IANA.
79    /// The `Unknown` item is used when processing unrecognised ordinals.
80    @U8
81    pub enum ContentType {
82        ChangeCipherSpec => 0x14,
83        Alert => 0x15,
84        Handshake => 0x16,
85        ApplicationData => 0x17,
86        Heartbeat => 0x18
87    }
88}
89
90enum_builder! {
91    /// The `ProtocolVersion` TLS protocol enum.  Values in this enum are taken
92    /// from the various RFCs covering TLS, and are listed by IANA.
93    /// The `Unknown` item is used when processing unrecognised ordinals.
94    @U16
95    pub enum ProtocolVersion {
96        SSLv2 => 0x0200,
97        SSLv3 => 0x0300,
98        TLSv1_0 => 0x0301,
99        TLSv1_1 => 0x0302,
100        TLSv1_2 => 0x0303,
101        TLSv1_3 => 0x0304,
102        DTLSv1_0 => 0xFEFF,
103        DTLSv1_2 => 0xFEFD,
104        DTLSv1_3 => 0xFEFC
105    }
106}
107
108enum_builder! {
109    /// The `CipherSuite` TLS protocol enum.  Values in this enum are taken
110    /// from the various RFCs covering TLS, and are listed by IANA.
111    /// The `Unknown` item is used when processing unrecognised ordinals.
112    @U16
113    pub enum CipherSuite {
114        TLS_NULL_WITH_NULL_NULL => 0x0000,
115        TLS_RSA_WITH_NULL_MD5 => 0x0001,
116        TLS_RSA_WITH_NULL_SHA => 0x0002,
117        TLS_RSA_EXPORT_WITH_RC4_40_MD5 => 0x0003,
118        TLS_RSA_WITH_RC4_128_MD5 => 0x0004,
119        TLS_RSA_WITH_RC4_128_SHA => 0x0005,
120        TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 => 0x0006,
121        TLS_RSA_WITH_IDEA_CBC_SHA => 0x0007,
122        TLS_RSA_EXPORT_WITH_DES40_CBC_SHA => 0x0008,
123        TLS_RSA_WITH_DES_CBC_SHA => 0x0009,
124        TLS_RSA_WITH_3DES_EDE_CBC_SHA => 0x000a,
125        TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA => 0x000b,
126        TLS_DH_DSS_WITH_DES_CBC_SHA => 0x000c,
127        TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA => 0x000d,
128        TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA => 0x000e,
129        TLS_DH_RSA_WITH_DES_CBC_SHA => 0x000f,
130        TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA => 0x0010,
131        TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA => 0x0011,
132        TLS_DHE_DSS_WITH_DES_CBC_SHA => 0x0012,
133        TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA => 0x0013,
134        TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA => 0x0014,
135        TLS_DHE_RSA_WITH_DES_CBC_SHA => 0x0015,
136        TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA => 0x0016,
137        TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 => 0x0017,
138        TLS_DH_anon_WITH_RC4_128_MD5 => 0x0018,
139        TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA => 0x0019,
140        TLS_DH_anon_WITH_DES_CBC_SHA => 0x001a,
141        TLS_DH_anon_WITH_3DES_EDE_CBC_SHA => 0x001b,
142        SSL_FORTEZZA_KEA_WITH_NULL_SHA => 0x001c,
143        SSL_FORTEZZA_KEA_WITH_FORTEZZA_CBC_SHA => 0x001d,
144        TLS_KRB5_WITH_DES_CBC_SHA_or_SSL_FORTEZZA_KEA_WITH_RC4_128_SHA => 0x001e,
145        TLS_KRB5_WITH_3DES_EDE_CBC_SHA => 0x001f,
146        TLS_KRB5_WITH_RC4_128_SHA => 0x0020,
147        TLS_KRB5_WITH_IDEA_CBC_SHA => 0x0021,
148        TLS_KRB5_WITH_DES_CBC_MD5 => 0x0022,
149        TLS_KRB5_WITH_3DES_EDE_CBC_MD5 => 0x0023,
150        TLS_KRB5_WITH_RC4_128_MD5 => 0x0024,
151        TLS_KRB5_WITH_IDEA_CBC_MD5 => 0x0025,
152        TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA => 0x0026,
153        TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA => 0x0027,
154        TLS_KRB5_EXPORT_WITH_RC4_40_SHA => 0x0028,
155        TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5 => 0x0029,
156        TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5 => 0x002a,
157        TLS_KRB5_EXPORT_WITH_RC4_40_MD5 => 0x002b,
158        TLS_PSK_WITH_NULL_SHA => 0x002c,
159        TLS_DHE_PSK_WITH_NULL_SHA => 0x002d,
160        TLS_RSA_PSK_WITH_NULL_SHA => 0x002e,
161        TLS_RSA_WITH_AES_128_CBC_SHA => 0x002f,
162        TLS_DH_DSS_WITH_AES_128_CBC_SHA => 0x0030,
163        TLS_DH_RSA_WITH_AES_128_CBC_SHA => 0x0031,
164        TLS_DHE_DSS_WITH_AES_128_CBC_SHA => 0x0032,
165        TLS_DHE_RSA_WITH_AES_128_CBC_SHA => 0x0033,
166        TLS_DH_anon_WITH_AES_128_CBC_SHA => 0x0034,
167        TLS_RSA_WITH_AES_256_CBC_SHA => 0x0035,
168        TLS_DH_DSS_WITH_AES_256_CBC_SHA => 0x0036,
169        TLS_DH_RSA_WITH_AES_256_CBC_SHA => 0x0037,
170        TLS_DHE_DSS_WITH_AES_256_CBC_SHA => 0x0038,
171        TLS_DHE_RSA_WITH_AES_256_CBC_SHA => 0x0039,
172        TLS_DH_anon_WITH_AES_256_CBC_SHA => 0x003a,
173        TLS_RSA_WITH_NULL_SHA256 => 0x003b,
174        TLS_RSA_WITH_AES_128_CBC_SHA256 => 0x003c,
175        TLS_RSA_WITH_AES_256_CBC_SHA256 => 0x003d,
176        TLS_DH_DSS_WITH_AES_128_CBC_SHA256 => 0x003e,
177        TLS_DH_RSA_WITH_AES_128_CBC_SHA256 => 0x003f,
178        TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 => 0x0040,
179        TLS_RSA_WITH_CAMELLIA_128_CBC_SHA => 0x0041,
180        TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA => 0x0042,
181        TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA => 0x0043,
182        TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA => 0x0044,
183        TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA => 0x0045,
184        TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA => 0x0046,
185        TLS_ECDH_ECDSA_WITH_NULL_SHA_draft => 0x0047,
186        TLS_ECDH_ECDSA_WITH_RC4_128_SHA_draft => 0x0048,
187        TLS_ECDH_ECDSA_WITH_DES_CBC_SHA_draft => 0x0049,
188        TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA_draft => 0x004a,
189        TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA_draft => 0x004b,
190        TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA_draft => 0x004c,
191        TLS_ECDH_ECNRA_WITH_DES_CBC_SHA_draft => 0x004d,
192        TLS_ECDH_ECNRA_WITH_3DES_EDE_CBC_SHA_draft => 0x004e,
193        TLS_ECMQV_ECDSA_NULL_SHA_draft => 0x004f,
194        TLS_ECMQV_ECDSA_WITH_RC4_128_SHA_draft => 0x0050,
195        TLS_ECMQV_ECDSA_WITH_DES_CBC_SHA_draft => 0x0051,
196        TLS_ECMQV_ECDSA_WITH_3DES_EDE_CBC_SHA_draft => 0x0052,
197        TLS_ECMQV_ECNRA_NULL_SHA_draft => 0x0053,
198        TLS_ECMQV_ECNRA_WITH_RC4_128_SHA_draft => 0x0054,
199        TLS_ECMQV_ECNRA_WITH_DES_CBC_SHA_draft => 0x0055,
200        TLS_ECMQV_ECNRA_WITH_3DES_EDE_CBC_SHA_draft => 0x0056,
201        TLS_ECDH_anon_NULL_WITH_SHA_draft => 0x0057,
202        TLS_ECDH_anon_WITH_RC4_128_SHA_draft => 0x0058,
203        TLS_ECDH_anon_WITH_DES_CBC_SHA_draft => 0x0059,
204        TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA_draft => 0x005a,
205        TLS_ECDH_anon_EXPORT_WITH_DES40_CBC_SHA_draft => 0x005b,
206        TLS_ECDH_anon_EXPORT_WITH_RC4_40_SHA_draft => 0x005c,
207        TLS_RSA_EXPORT1024_WITH_RC4_56_MD5 => 0x0060,
208        TLS_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5 => 0x0061,
209        TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA => 0x0062,
210        TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA => 0x0063,
211        TLS_RSA_EXPORT1024_WITH_RC4_56_SHA => 0x0064,
212        TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA => 0x0065,
213        TLS_DHE_DSS_WITH_RC4_128_SHA => 0x0066,
214        TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 => 0x0067,
215        TLS_DH_DSS_WITH_AES_256_CBC_SHA256 => 0x0068,
216        TLS_DH_RSA_WITH_AES_256_CBC_SHA256 => 0x0069,
217        TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 => 0x006a,
218        TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 => 0x006b,
219        TLS_DH_anon_WITH_AES_128_CBC_SHA256 => 0x006c,
220        TLS_DH_anon_WITH_AES_256_CBC_SHA256 => 0x006d,
221        TLS_DHE_DSS_WITH_3DES_EDE_CBC_RMD => 0x0072,
222        TLS_DHE_DSS_WITH_AES_128_CBC_RMD => 0x0073,
223        TLS_DHE_DSS_WITH_AES_256_CBC_RMD => 0x0074,
224        TLS_DHE_RSA_WITH_3DES_EDE_CBC_RMD => 0x0077,
225        TLS_DHE_RSA_WITH_AES_128_CBC_RMD => 0x0078,
226        TLS_DHE_RSA_WITH_AES_256_CBC_RMD => 0x0079,
227        TLS_RSA_WITH_3DES_EDE_CBC_RMD => 0x007c,
228        TLS_RSA_WITH_AES_128_CBC_RMD => 0x007d,
229        TLS_RSA_WITH_AES_256_CBC_RMD => 0x007e,
230        TLS_GOSTR341094_WITH_28147_CNT_IMIT => 0x0080,
231        TLS_GOSTR341001_WITH_28147_CNT_IMIT => 0x0081,
232        TLS_GOSTR341094_WITH_NULL_GOSTR3411 => 0x0082,
233        TLS_GOSTR341001_WITH_NULL_GOSTR3411 => 0x0083,
234        TLS_RSA_WITH_CAMELLIA_256_CBC_SHA => 0x0084,
235        TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA => 0x0085,
236        TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA => 0x0086,
237        TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA => 0x0087,
238        TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA => 0x0088,
239        TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA => 0x0089,
240        TLS_PSK_WITH_RC4_128_SHA => 0x008a,
241        TLS_PSK_WITH_3DES_EDE_CBC_SHA => 0x008b,
242        TLS_PSK_WITH_AES_128_CBC_SHA => 0x008c,
243        TLS_PSK_WITH_AES_256_CBC_SHA => 0x008d,
244        TLS_DHE_PSK_WITH_RC4_128_SHA => 0x008e,
245        TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA => 0x008f,
246        TLS_DHE_PSK_WITH_AES_128_CBC_SHA => 0x0090,
247        TLS_DHE_PSK_WITH_AES_256_CBC_SHA => 0x0091,
248        TLS_RSA_PSK_WITH_RC4_128_SHA => 0x0092,
249        TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA => 0x0093,
250        TLS_RSA_PSK_WITH_AES_128_CBC_SHA => 0x0094,
251        TLS_RSA_PSK_WITH_AES_256_CBC_SHA => 0x0095,
252        TLS_RSA_WITH_SEED_CBC_SHA => 0x0096,
253        TLS_DH_DSS_WITH_SEED_CBC_SHA => 0x0097,
254        TLS_DH_RSA_WITH_SEED_CBC_SHA => 0x0098,
255        TLS_DHE_DSS_WITH_SEED_CBC_SHA => 0x0099,
256        TLS_DHE_RSA_WITH_SEED_CBC_SHA => 0x009a,
257        TLS_DH_anon_WITH_SEED_CBC_SHA => 0x009b,
258        TLS_RSA_WITH_AES_128_GCM_SHA256 => 0x009c,
259        TLS_RSA_WITH_AES_256_GCM_SHA384 => 0x009d,
260        TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 => 0x009e,
261        TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 => 0x009f,
262        TLS_DH_RSA_WITH_AES_128_GCM_SHA256 => 0x00a0,
263        TLS_DH_RSA_WITH_AES_256_GCM_SHA384 => 0x00a1,
264        TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 => 0x00a2,
265        TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 => 0x00a3,
266        TLS_DH_DSS_WITH_AES_128_GCM_SHA256 => 0x00a4,
267        TLS_DH_DSS_WITH_AES_256_GCM_SHA384 => 0x00a5,
268        TLS_DH_anon_WITH_AES_128_GCM_SHA256 => 0x00a6,
269        TLS_DH_anon_WITH_AES_256_GCM_SHA384 => 0x00a7,
270        TLS_PSK_WITH_AES_128_GCM_SHA256 => 0x00a8,
271        TLS_PSK_WITH_AES_256_GCM_SHA384 => 0x00a9,
272        TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 => 0x00aa,
273        TLS_DHE_PSK_WITH_AES_256_GCM_SHA384 => 0x00ab,
274        TLS_RSA_PSK_WITH_AES_128_GCM_SHA256 => 0x00ac,
275        TLS_RSA_PSK_WITH_AES_256_GCM_SHA384 => 0x00ad,
276        TLS_PSK_WITH_AES_128_CBC_SHA256 => 0x00ae,
277        TLS_PSK_WITH_AES_256_CBC_SHA384 => 0x00af,
278        TLS_PSK_WITH_NULL_SHA256 => 0x00b0,
279        TLS_PSK_WITH_NULL_SHA384 => 0x00b1,
280        TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 => 0x00b2,
281        TLS_DHE_PSK_WITH_AES_256_CBC_SHA384 => 0x00b3,
282        TLS_DHE_PSK_WITH_NULL_SHA256 => 0x00b4,
283        TLS_DHE_PSK_WITH_NULL_SHA384 => 0x00b5,
284        TLS_RSA_PSK_WITH_AES_128_CBC_SHA256 => 0x00b6,
285        TLS_RSA_PSK_WITH_AES_256_CBC_SHA384 => 0x00b7,
286        TLS_RSA_PSK_WITH_NULL_SHA256 => 0x00b8,
287        TLS_RSA_PSK_WITH_NULL_SHA384 => 0x00b9,
288        TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 => 0x00ba,
289        TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256 => 0x00bb,
290        TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256 => 0x00bc,
291        TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256 => 0x00bd,
292        TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 => 0x00be,
293        TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256 => 0x00bf,
294        TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c0,
295        TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c1,
296        TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c2,
297        TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c3,
298        TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c4,
299        TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c5,
300        TLS_EMPTY_RENEGOTIATION_INFO_SCSV => 0x00ff,
301        TLS13_AES_128_GCM_SHA256 => 0x1301,
302        TLS13_AES_256_GCM_SHA384 => 0x1302,
303        TLS13_CHACHA20_POLY1305_SHA256 => 0x1303,
304        TLS13_AES_128_CCM_SHA256 => 0x1304,
305        TLS13_AES_128_CCM_8_SHA256 => 0x1305,
306        TLS_ECDH_ECDSA_WITH_NULL_SHA => 0xc001,
307        TLS_ECDH_ECDSA_WITH_RC4_128_SHA => 0xc002,
308        TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA => 0xc003,
309        TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA => 0xc004,
310        TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA => 0xc005,
311        TLS_ECDHE_ECDSA_WITH_NULL_SHA => 0xc006,
312        TLS_ECDHE_ECDSA_WITH_RC4_128_SHA => 0xc007,
313        TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA => 0xc008,
314        TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA => 0xc009,
315        TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA => 0xc00a,
316        TLS_ECDH_RSA_WITH_NULL_SHA => 0xc00b,
317        TLS_ECDH_RSA_WITH_RC4_128_SHA => 0xc00c,
318        TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA => 0xc00d,
319        TLS_ECDH_RSA_WITH_AES_128_CBC_SHA => 0xc00e,
320        TLS_ECDH_RSA_WITH_AES_256_CBC_SHA => 0xc00f,
321        TLS_ECDHE_RSA_WITH_NULL_SHA => 0xc010,
322        TLS_ECDHE_RSA_WITH_RC4_128_SHA => 0xc011,
323        TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA => 0xc012,
324        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA => 0xc013,
325        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA => 0xc014,
326        TLS_ECDH_anon_WITH_NULL_SHA => 0xc015,
327        TLS_ECDH_anon_WITH_RC4_128_SHA => 0xc016,
328        TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA => 0xc017,
329        TLS_ECDH_anon_WITH_AES_128_CBC_SHA => 0xc018,
330        TLS_ECDH_anon_WITH_AES_256_CBC_SHA => 0xc019,
331        TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA => 0xc01a,
332        TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA => 0xc01b,
333        TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA => 0xc01c,
334        TLS_SRP_SHA_WITH_AES_128_CBC_SHA => 0xc01d,
335        TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA => 0xc01e,
336        TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA => 0xc01f,
337        TLS_SRP_SHA_WITH_AES_256_CBC_SHA => 0xc020,
338        TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA => 0xc021,
339        TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA => 0xc022,
340        TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 => 0xc023,
341        TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 => 0xc024,
342        TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 => 0xc025,
343        TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 => 0xc026,
344        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 => 0xc027,
345        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 => 0xc028,
346        TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 => 0xc029,
347        TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 => 0xc02a,
348        TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 => 0xc02b,
349        TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 => 0xc02c,
350        TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 => 0xc02d,
351        TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 => 0xc02e,
352        TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 => 0xc02f,
353        TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 => 0xc030,
354        TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 => 0xc031,
355        TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 => 0xc032,
356        TLS_ECDHE_PSK_WITH_RC4_128_SHA => 0xc033,
357        TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA => 0xc034,
358        TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA => 0xc035,
359        TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA => 0xc036,
360        TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 => 0xc037,
361        TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384 => 0xc038,
362        TLS_ECDHE_PSK_WITH_NULL_SHA => 0xc039,
363        TLS_ECDHE_PSK_WITH_NULL_SHA256 => 0xc03a,
364        TLS_ECDHE_PSK_WITH_NULL_SHA384 => 0xc03b,
365        TLS_RSA_WITH_ARIA_128_CBC_SHA256 => 0xc03c,
366        TLS_RSA_WITH_ARIA_256_CBC_SHA384 => 0xc03d,
367        TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256 => 0xc03e,
368        TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384 => 0xc03f,
369        TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256 => 0xc040,
370        TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384 => 0xc041,
371        TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256 => 0xc042,
372        TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384 => 0xc043,
373        TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256 => 0xc044,
374        TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384 => 0xc045,
375        TLS_DH_anon_WITH_ARIA_128_CBC_SHA256 => 0xc046,
376        TLS_DH_anon_WITH_ARIA_256_CBC_SHA384 => 0xc047,
377        TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256 => 0xc048,
378        TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384 => 0xc049,
379        TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256 => 0xc04a,
380        TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384 => 0xc04b,
381        TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256 => 0xc04c,
382        TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384 => 0xc04d,
383        TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256 => 0xc04e,
384        TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384 => 0xc04f,
385        TLS_RSA_WITH_ARIA_128_GCM_SHA256 => 0xc050,
386        TLS_RSA_WITH_ARIA_256_GCM_SHA384 => 0xc051,
387        TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 => 0xc052,
388        TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 => 0xc053,
389        TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256 => 0xc054,
390        TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384 => 0xc055,
391        TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256 => 0xc056,
392        TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384 => 0xc057,
393        TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256 => 0xc058,
394        TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384 => 0xc059,
395        TLS_DH_anon_WITH_ARIA_128_GCM_SHA256 => 0xc05a,
396        TLS_DH_anon_WITH_ARIA_256_GCM_SHA384 => 0xc05b,
397        TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 => 0xc05c,
398        TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 => 0xc05d,
399        TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256 => 0xc05e,
400        TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384 => 0xc05f,
401        TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 => 0xc060,
402        TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 => 0xc061,
403        TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256 => 0xc062,
404        TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384 => 0xc063,
405        TLS_PSK_WITH_ARIA_128_CBC_SHA256 => 0xc064,
406        TLS_PSK_WITH_ARIA_256_CBC_SHA384 => 0xc065,
407        TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256 => 0xc066,
408        TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384 => 0xc067,
409        TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256 => 0xc068,
410        TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384 => 0xc069,
411        TLS_PSK_WITH_ARIA_128_GCM_SHA256 => 0xc06a,
412        TLS_PSK_WITH_ARIA_256_GCM_SHA384 => 0xc06b,
413        TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256 => 0xc06c,
414        TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384 => 0xc06d,
415        TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256 => 0xc06e,
416        TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384 => 0xc06f,
417        TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256 => 0xc070,
418        TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384 => 0xc071,
419        TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 => 0xc072,
420        TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 => 0xc073,
421        TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 => 0xc074,
422        TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 => 0xc075,
423        TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 => 0xc076,
424        TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 => 0xc077,
425        TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256 => 0xc078,
426        TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384 => 0xc079,
427        TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc07a,
428        TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc07b,
429        TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc07c,
430        TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc07d,
431        TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc07e,
432        TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc07f,
433        TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256 => 0xc080,
434        TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384 => 0xc081,
435        TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256 => 0xc082,
436        TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384 => 0xc083,
437        TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256 => 0xc084,
438        TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384 => 0xc085,
439        TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc086,
440        TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc087,
441        TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc088,
442        TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc089,
443        TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc08a,
444        TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc08b,
445        TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc08c,
446        TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc08d,
447        TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256 => 0xc08e,
448        TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384 => 0xc08f,
449        TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256 => 0xc090,
450        TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384 => 0xc091,
451        TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256 => 0xc092,
452        TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384 => 0xc093,
453        TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256 => 0xc094,
454        TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384 => 0xc095,
455        TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 => 0xc096,
456        TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 => 0xc097,
457        TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256 => 0xc098,
458        TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384 => 0xc099,
459        TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 => 0xc09a,
460        TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 => 0xc09b,
461        TLS_RSA_WITH_AES_128_CCM => 0xc09c,
462        TLS_RSA_WITH_AES_256_CCM => 0xc09d,
463        TLS_DHE_RSA_WITH_AES_128_CCM => 0xc09e,
464        TLS_DHE_RSA_WITH_AES_256_CCM => 0xc09f,
465        TLS_RSA_WITH_AES_128_CCM_8 => 0xc0a0,
466        TLS_RSA_WITH_AES_256_CCM_8 => 0xc0a1,
467        TLS_DHE_RSA_WITH_AES_128_CCM_8 => 0xc0a2,
468        TLS_DHE_RSA_WITH_AES_256_CCM_8 => 0xc0a3,
469        TLS_PSK_WITH_AES_128_CCM => 0xc0a4,
470        TLS_PSK_WITH_AES_256_CCM => 0xc0a5,
471        TLS_DHE_PSK_WITH_AES_128_CCM => 0xc0a6,
472        TLS_DHE_PSK_WITH_AES_256_CCM => 0xc0a7,
473        TLS_PSK_WITH_AES_128_CCM_8 => 0xc0a8,
474        TLS_PSK_WITH_AES_256_CCM_8 => 0xc0a9,
475        TLS_PSK_DHE_WITH_AES_128_CCM_8 => 0xc0aa,
476        TLS_PSK_DHE_WITH_AES_256_CCM_8 => 0xc0ab,
477        TLS_ECDHE_ECDSA_WITH_AES_128_CCM => 0xc0ac,
478        TLS_ECDHE_ECDSA_WITH_AES_256_CCM => 0xc0ad,
479        TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 => 0xc0ae,
480        TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 => 0xc0af,
481        TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 => 0xcca8,
482        TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 => 0xcca9,
483        TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 => 0xccaa,
484        TLS_PSK_WITH_CHACHA20_POLY1305_SHA256 => 0xccab,
485        TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256 => 0xccac,
486        TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256 => 0xccad,
487        TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256 => 0xccae,
488        SSL_RSA_FIPS_WITH_DES_CBC_SHA => 0xfefe,
489        SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA => 0xfeff
490    }
491}
492
493enum_builder! {
494    /// The `SignatureScheme` TLS protocol enum.  Values in this enum are taken
495    /// from the various RFCs covering TLS, and are listed by IANA.
496    /// The `Unknown` item is used when processing unrecognised ordinals.
497    @U16
498    pub enum SignatureScheme {
499        RSA_PKCS1_SHA1 => 0x0201,
500        ECDSA_SHA1_Legacy => 0x0203,
501        RSA_PKCS1_SHA256 => 0x0401,
502        ECDSA_NISTP256_SHA256 => 0x0403,
503        RSA_PKCS1_SHA384 => 0x0501,
504        ECDSA_NISTP384_SHA384 => 0x0503,
505        RSA_PKCS1_SHA512 => 0x0601,
506        ECDSA_NISTP521_SHA512 => 0x0603,
507        RSA_PSS_SHA256 => 0x0804,
508        RSA_PSS_SHA384 => 0x0805,
509        RSA_PSS_SHA512 => 0x0806,
510        ED25519 => 0x0807,
511        ED448 => 0x0808
512    }
513}
514
515impl SignatureScheme {
516    pub(crate) fn sign(&self) -> SignatureAlgorithm {
517        match *self {
518            Self::RSA_PKCS1_SHA1
519            | Self::RSA_PKCS1_SHA256
520            | Self::RSA_PKCS1_SHA384
521            | Self::RSA_PKCS1_SHA512
522            | Self::RSA_PSS_SHA256
523            | Self::RSA_PSS_SHA384
524            | Self::RSA_PSS_SHA512 => SignatureAlgorithm::RSA,
525            Self::ECDSA_SHA1_Legacy
526            | Self::ECDSA_NISTP256_SHA256
527            | Self::ECDSA_NISTP384_SHA384
528            | Self::ECDSA_NISTP521_SHA512 => SignatureAlgorithm::ECDSA,
529            Self::ED25519 => SignatureAlgorithm::ED25519,
530            Self::ED448 => SignatureAlgorithm::ED448,
531            _ => SignatureAlgorithm::Unknown(0),
532        }
533    }
534
535    /// Whether a particular `SignatureScheme` is allowed for TLS protocol signatures
536    /// in TLS1.3.
537    ///
538    /// This prevents (eg) RSA_PKCS1_SHA256 being offered or accepted, even if our
539    /// verifier supports it for other protocol versions.
540    ///
541    /// See RFC8446 s4.2.3.
542    pub(crate) fn supported_in_tls13(&self) -> bool {
543        matches!(
544            *self,
545            Self::ECDSA_NISTP521_SHA512
546                | Self::ECDSA_NISTP384_SHA384
547                | Self::ECDSA_NISTP256_SHA256
548                | Self::RSA_PSS_SHA512
549                | Self::RSA_PSS_SHA384
550                | Self::RSA_PSS_SHA256
551                | Self::ED25519
552        )
553    }
554}
555
556enum_builder! {
557    /// The `SignatureAlgorithm` TLS protocol enum.  Values in this enum are taken
558    /// from the various RFCs covering TLS, and are listed by IANA.
559    /// The `Unknown` item is used when processing unrecognised ordinals.
560    @U8
561    pub enum SignatureAlgorithm {
562        Anonymous => 0x00,
563        RSA => 0x01,
564        DSA => 0x02,
565        ECDSA => 0x03,
566        ED25519 => 0x07,
567        ED448 => 0x08
568    }
569}
570
571#[cfg(test)]
572mod tests {
573    use super::*;
574    use crate::msgs::enums::tests::test_enum8;
575
576    #[test]
577    fn test_enums() {
578        test_enum8::<SignatureAlgorithm>(SignatureAlgorithm::Anonymous, SignatureAlgorithm::ECDSA);
579        test_enum8::<ContentType>(ContentType::ChangeCipherSpec, ContentType::Heartbeat);
580        test_enum8::<HandshakeType>(HandshakeType::HelloRequest, HandshakeType::MessageHash);
581        test_enum8::<AlertDescription>(
582            AlertDescription::CloseNotify,
583            AlertDescription::NoApplicationProtocol,
584        );
585    }
586}
rustls/enums.rs

rustls/
enums.rs
