tuxmain/boring-rustls-provider
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Make algs public
Some checks failed
Rust check / fmt (push) Has been cancelled
Details
Rust check / test-default (push) Has been cancelled
Details
Rust check / test-tls12 (push) Has been cancelled
Details
Rust check / test-logging-tls12 (push) Has been cancelled
Details
Rust check / test-mlkem (push) Has been cancelled
Details
Rust check / test-mlkem-tls12 (push) Has been cancelled
Details
Rust check / test-fips (push) Has been cancelled
Details
Rust check / check-fips (push) Has been cancelled
Details

Browse source
This commit is contained in:
Pascal Engélibert 2026-04-13 11:44:03 +02:00
commit b667e1450b
2 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
boring-rustls-provider/src/kx/mod.rs
View file

@ -6,7 +6,7 @@ mod ex;
#[cfg(feature = "mlkem")]
mod pq;
#[cfg(feature = "mlkem")]
pub(crate) use pq::X25519MlKem768;
pub use pq::X25519MlKem768;
/// Key type discriminant used by [`ex::KeyExchange`] to select the
/// appropriate peer key parsing and DH derivation logic.

12
boring-rustls-provider/src/lib.rs
View file

@ -14,7 +14,7 @@ mod hash;
mod helper;
mod hkdf;
mod hmac;
mod kx;
pub mod kx;
#[cfg(feature = "tls12")]
mod prf;
pub mod sign;
@ -96,7 +96,7 @@ impl rustls::crypto::KeyProvider for Provider {
}
#[cfg(feature = "fips")]
static ALL_FIPS_CIPHER_SUITES: &[SupportedCipherSuite] = &[
pub static ALL_FIPS_CIPHER_SUITES: &[SupportedCipherSuite] = &[
SupportedCipherSuite::Tls13(&tls13::AES_256_GCM_SHA384),
SupportedCipherSuite::Tls13(&tls13::AES_128_GCM_SHA256),
#[cfg(feature = "tls12")]
@ -110,7 +110,7 @@ static ALL_FIPS_CIPHER_SUITES: &[SupportedCipherSuite] = &[
];
#[cfg(not(feature = "fips"))]
static ALL_CIPHER_SUITES: &[SupportedCipherSuite] = &[
pub static ALL_CIPHER_SUITES: &[SupportedCipherSuite] = &[
SupportedCipherSuite::Tls13(&tls13::CHACHA20_POLY1305_SHA256),
SupportedCipherSuite::Tls13(&tls13::AES_256_GCM_SHA384),
SupportedCipherSuite::Tls13(&tls13::AES_128_GCM_SHA256),
@ -134,7 +134,7 @@ static ALL_CIPHER_SUITES: &[SupportedCipherSuite] = &[
/// The `fips` feature implies `mlkem`, so X25519MLKEM768 is always
/// available and preferred in FIPS mode.
#[cfg(feature = "fips")]
static ALL_FIPS_KX_GROUPS: &[&dyn SupportedKxGroup] = &[
pub static ALL_FIPS_KX_GROUPS: &[&dyn SupportedKxGroup] = &[
&kx::X25519MlKem768 as _, // PQ hybrid preferred
&kx::Secp256r1 as _, // P-256
&kx::Secp384r1 as _, // P-384
@ -145,7 +145,7 @@ static ALL_FIPS_KX_GROUPS: &[&dyn SupportedKxGroup] = &[
/// Matches boring's default supported group list exactly:
/// X25519MLKEM768 (when mlkem enabled), X25519, P-256, P-384.
#[cfg(all(not(feature = "fips"), feature = "mlkem"))]
static ALL_KX_GROUPS: &[&dyn SupportedKxGroup] = &[
pub static ALL_KX_GROUPS: &[&dyn SupportedKxGroup] = &[
&kx::X25519MlKem768 as _, // PQ hybrid preferred
&kx::X25519 as _,
&kx::Secp256r1 as _,
@ -154,5 +154,5 @@ static ALL_KX_GROUPS: &[&dyn SupportedKxGroup] = &[
/// See [`ALL_KX_GROUPS`] (mlkem variant).
#[cfg(not(any(feature = "fips", feature = "mlkem")))]
static ALL_KX_GROUPS: &[&dyn SupportedKxGroup] =
pub static ALL_KX_GROUPS: &[&dyn SupportedKxGroup] =
&[&kx::X25519 as _, &kx::Secp256r1 as _, &kx::Secp384r1 as _];