dhm.h 53 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096
  1. /**
  2. * \file dhm.h
  3. *
  4. * \brief This file contains Diffie-Hellman-Merkle (DHM) key exchange
  5. * definitions and functions.
  6. *
  7. * Diffie-Hellman-Merkle (DHM) key exchange is defined in
  8. * <em>RFC-2631: Diffie-Hellman Key Agreement Method</em> and
  9. * <em>Public-Key Cryptography Standards (PKCS) #3: Diffie
  10. * Hellman Key Agreement Standard</em>.
  11. *
  12. * <em>RFC-3526: More Modular Exponential (MODP) Diffie-Hellman groups for
  13. * Internet Key Exchange (IKE)</em> defines a number of standardized
  14. * Diffie-Hellman groups for IKE.
  15. *
  16. * <em>RFC-5114: Additional Diffie-Hellman Groups for Use with IETF
  17. * Standards</em> defines a number of standardized Diffie-Hellman
  18. * groups that can be used.
  19. *
  20. * \warning The security of the DHM key exchange relies on the proper choice
  21. * of prime modulus - optimally, it should be a safe prime. The usage
  22. * of non-safe primes both decreases the difficulty of the underlying
  23. * discrete logarithm problem and can lead to small subgroup attacks
  24. * leaking private exponent bits when invalid public keys are used
  25. * and not detected. This is especially relevant if the same DHM
  26. * parameters are reused for multiple key exchanges as in static DHM,
  27. * while the criticality of small-subgroup attacks is lower for
  28. * ephemeral DHM.
  29. *
  30. * \warning For performance reasons, the code does neither perform primality
  31. * nor safe primality tests, nor the expensive checks for invalid
  32. * subgroups. Moreover, even if these were performed, non-standardized
  33. * primes cannot be trusted because of the possibility of backdoors
  34. * that can't be effectively checked for.
  35. *
  36. * \warning Diffie-Hellman-Merkle is therefore a security risk when not using
  37. * standardized primes generated using a trustworthy ("nothing up
  38. * my sleeve") method, such as the RFC 3526 / 7919 primes. In the TLS
  39. * protocol, DH parameters need to be negotiated, so using the default
  40. * primes systematically is not always an option. If possible, use
  41. * Elliptic Curve Diffie-Hellman (ECDH), which has better performance,
  42. * and for which the TLS protocol mandates the use of standard
  43. * parameters.
  44. *
  45. */
  46. /*
  47. * Copyright (C) 2006-2018, Arm Limited (or its affiliates), All Rights Reserved
  48. * SPDX-License-Identifier: Apache-2.0
  49. *
  50. * Licensed under the Apache License, Version 2.0 (the "License"); you may
  51. * not use this file except in compliance with the License.
  52. * You may obtain a copy of the License at
  53. *
  54. * http://www.apache.org/licenses/LICENSE-2.0
  55. *
  56. * Unless required by applicable law or agreed to in writing, software
  57. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
  58. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  59. * See the License for the specific language governing permissions and
  60. * limitations under the License.
  61. *
  62. * This file is part of Mbed TLS (https://tls.mbed.org)
  63. */
  64. #ifndef MBEDTLS_DHM_H
  65. #define MBEDTLS_DHM_H
  66. #if !defined(MBEDTLS_CONFIG_FILE)
  67. #include "config.h"
  68. #else
  69. #include MBEDTLS_CONFIG_FILE
  70. #endif
  71. #include "bignum.h"
  72. /*
  73. * DHM Error codes
  74. */
  75. #define MBEDTLS_ERR_DHM_BAD_INPUT_DATA -0x3080 /**< Bad input parameters. */
  76. #define MBEDTLS_ERR_DHM_READ_PARAMS_FAILED -0x3100 /**< Reading of the DHM parameters failed. */
  77. #define MBEDTLS_ERR_DHM_MAKE_PARAMS_FAILED -0x3180 /**< Making of the DHM parameters failed. */
  78. #define MBEDTLS_ERR_DHM_READ_PUBLIC_FAILED -0x3200 /**< Reading of the public values failed. */
  79. #define MBEDTLS_ERR_DHM_MAKE_PUBLIC_FAILED -0x3280 /**< Making of the public value failed. */
  80. #define MBEDTLS_ERR_DHM_CALC_SECRET_FAILED -0x3300 /**< Calculation of the DHM secret failed. */
  81. #define MBEDTLS_ERR_DHM_INVALID_FORMAT -0x3380 /**< The ASN.1 data is not formatted correctly. */
  82. #define MBEDTLS_ERR_DHM_ALLOC_FAILED -0x3400 /**< Allocation of memory failed. */
  83. #define MBEDTLS_ERR_DHM_FILE_IO_ERROR -0x3480 /**< Read or write of file failed. */
  84. /* MBEDTLS_ERR_DHM_HW_ACCEL_FAILED is deprecated and should not be used. */
  85. #define MBEDTLS_ERR_DHM_HW_ACCEL_FAILED -0x3500 /**< DHM hardware accelerator failed. */
  86. #define MBEDTLS_ERR_DHM_SET_GROUP_FAILED -0x3580 /**< Setting the modulus and generator failed. */
  87. #ifdef __cplusplus
  88. extern "C" {
  89. #endif
  90. #if !defined(MBEDTLS_DHM_ALT)
  91. /**
  92. * \brief The DHM context structure.
  93. */
  94. typedef struct mbedtls_dhm_context
  95. {
  96. size_t len; /*!< The size of \p P in Bytes. */
  97. mbedtls_mpi P; /*!< The prime modulus. */
  98. mbedtls_mpi G; /*!< The generator. */
  99. mbedtls_mpi X; /*!< Our secret value. */
  100. mbedtls_mpi GX; /*!< Our public key = \c G^X mod \c P. */
  101. mbedtls_mpi GY; /*!< The public key of the peer = \c G^Y mod \c P. */
  102. mbedtls_mpi K; /*!< The shared secret = \c G^(XY) mod \c P. */
  103. mbedtls_mpi RP; /*!< The cached value = \c R^2 mod \c P. */
  104. mbedtls_mpi Vi; /*!< The blinding value. */
  105. mbedtls_mpi Vf; /*!< The unblinding value. */
  106. mbedtls_mpi pX; /*!< The previous \c X. */
  107. }
  108. mbedtls_dhm_context;
  109. #else /* MBEDTLS_DHM_ALT */
  110. #include "dhm_alt.h"
  111. #endif /* MBEDTLS_DHM_ALT */
  112. /**
  113. * \brief This function initializes the DHM context.
  114. *
  115. * \param ctx The DHM context to initialize.
  116. */
  117. void mbedtls_dhm_init( mbedtls_dhm_context *ctx );
  118. /**
  119. * \brief This function parses the DHM parameters in a
  120. * TLS ServerKeyExchange handshake message
  121. * (DHM modulus, generator, and public key).
  122. *
  123. * \note In a TLS handshake, this is the how the client
  124. * sets up its DHM context from the server's public
  125. * DHM key material.
  126. *
  127. * \param ctx The DHM context to use. This must be initialized.
  128. * \param p On input, *p must be the start of the input buffer.
  129. * On output, *p is updated to point to the end of the data
  130. * that has been read. On success, this is the first byte
  131. * past the end of the ServerKeyExchange parameters.
  132. * On error, this is the point at which an error has been
  133. * detected, which is usually not useful except to debug
  134. * failures.
  135. * \param end The end of the input buffer.
  136. *
  137. * \return \c 0 on success.
  138. * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
  139. */
  140. int mbedtls_dhm_read_params( mbedtls_dhm_context *ctx,
  141. unsigned char **p,
  142. const unsigned char *end );
  143. /**
  144. * \brief This function generates a DHM key pair and exports its
  145. * public part together with the DHM parameters in the format
  146. * used in a TLS ServerKeyExchange handshake message.
  147. *
  148. * \note This function assumes that the DHM parameters \c ctx->P
  149. * and \c ctx->G have already been properly set. For that, use
  150. * mbedtls_dhm_set_group() below in conjunction with
  151. * mbedtls_mpi_read_binary() and mbedtls_mpi_read_string().
  152. *
  153. * \note In a TLS handshake, this is the how the server generates
  154. * and exports its DHM key material.
  155. *
  156. * \param ctx The DHM context to use. This must be initialized
  157. * and have the DHM parameters set. It may or may not
  158. * already have imported the peer's public key.
  159. * \param x_size The private key size in Bytes.
  160. * \param olen The address at which to store the number of Bytes
  161. * written on success. This must not be \c NULL.
  162. * \param output The destination buffer. This must be a writable buffer of
  163. * sufficient size to hold the reduced binary presentation of
  164. * the modulus, the generator and the public key, each wrapped
  165. * with a 2-byte length field. It is the responsibility of the
  166. * caller to ensure that enough space is available. Refer to
  167. * mbedtls_mpi_size() to computing the byte-size of an MPI.
  168. * \param f_rng The RNG function. Must not be \c NULL.
  169. * \param p_rng The RNG context to be passed to \p f_rng. This may be
  170. * \c NULL if \p f_rng doesn't need a context parameter.
  171. *
  172. * \return \c 0 on success.
  173. * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
  174. */
  175. int mbedtls_dhm_make_params( mbedtls_dhm_context *ctx, int x_size,
  176. unsigned char *output, size_t *olen,
  177. int (*f_rng)(void *, unsigned char *, size_t),
  178. void *p_rng );
  179. /**
  180. * \brief This function sets the prime modulus and generator.
  181. *
  182. * \note This function can be used to set \c ctx->P, \c ctx->G
  183. * in preparation for mbedtls_dhm_make_params().
  184. *
  185. * \param ctx The DHM context to configure. This must be initialized.
  186. * \param P The MPI holding the DHM prime modulus. This must be
  187. * an initialized MPI.
  188. * \param G The MPI holding the DHM generator. This must be an
  189. * initialized MPI.
  190. *
  191. * \return \c 0 if successful.
  192. * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
  193. */
  194. int mbedtls_dhm_set_group( mbedtls_dhm_context *ctx,
  195. const mbedtls_mpi *P,
  196. const mbedtls_mpi *G );
  197. /**
  198. * \brief This function imports the raw public value of the peer.
  199. *
  200. * \note In a TLS handshake, this is the how the server imports
  201. * the Client's public DHM key.
  202. *
  203. * \param ctx The DHM context to use. This must be initialized and have
  204. * its DHM parameters set, e.g. via mbedtls_dhm_set_group().
  205. * It may or may not already have generated its own private key.
  206. * \param input The input buffer containing the \c G^Y value of the peer.
  207. * This must be a readable buffer of size \p ilen Bytes.
  208. * \param ilen The size of the input buffer \p input in Bytes.
  209. *
  210. * \return \c 0 on success.
  211. * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
  212. */
  213. int mbedtls_dhm_read_public( mbedtls_dhm_context *ctx,
  214. const unsigned char *input, size_t ilen );
  215. /**
  216. * \brief This function creates a DHM key pair and exports
  217. * the raw public key in big-endian format.
  218. *
  219. * \note The destination buffer is always fully written
  220. * so as to contain a big-endian representation of G^X mod P.
  221. * If it is larger than \c ctx->len, it is padded accordingly
  222. * with zero-bytes at the beginning.
  223. *
  224. * \param ctx The DHM context to use. This must be initialized and
  225. * have the DHM parameters set. It may or may not already
  226. * have imported the peer's public key.
  227. * \param x_size The private key size in Bytes.
  228. * \param output The destination buffer. This must be a writable buffer of
  229. * size \p olen Bytes.
  230. * \param olen The length of the destination buffer. This must be at least
  231. * equal to `ctx->len` (the size of \c P).
  232. * \param f_rng The RNG function. This must not be \c NULL.
  233. * \param p_rng The RNG context to be passed to \p f_rng. This may be \c NULL
  234. * if \p f_rng doesn't need a context argument.
  235. *
  236. * \return \c 0 on success.
  237. * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
  238. */
  239. int mbedtls_dhm_make_public( mbedtls_dhm_context *ctx, int x_size,
  240. unsigned char *output, size_t olen,
  241. int (*f_rng)(void *, unsigned char *, size_t),
  242. void *p_rng );
  243. /**
  244. * \brief This function derives and exports the shared secret
  245. * \c (G^Y)^X mod \c P.
  246. *
  247. * \note If \p f_rng is not \c NULL, it is used to blind the input as
  248. * a countermeasure against timing attacks. Blinding is used
  249. * only if our private key \c X is re-used, and not used
  250. * otherwise. We recommend always passing a non-NULL
  251. * \p f_rng argument.
  252. *
  253. * \param ctx The DHM context to use. This must be initialized
  254. * and have its own private key generated and the peer's
  255. * public key imported.
  256. * \param output The buffer to write the generated shared key to. This
  257. * must be a writable buffer of size \p output_size Bytes.
  258. * \param output_size The size of the destination buffer. This must be at
  259. * least the size of \c ctx->len (the size of \c P).
  260. * \param olen On exit, holds the actual number of Bytes written.
  261. * \param f_rng The RNG function, for blinding purposes. This may
  262. * b \c NULL if blinding isn't needed.
  263. * \param p_rng The RNG context. This may be \c NULL if \p f_rng
  264. * doesn't need a context argument.
  265. *
  266. * \return \c 0 on success.
  267. * \return An \c MBEDTLS_ERR_DHM_XXX error code on failure.
  268. */
  269. int mbedtls_dhm_calc_secret( mbedtls_dhm_context *ctx,
  270. unsigned char *output, size_t output_size, size_t *olen,
  271. int (*f_rng)(void *, unsigned char *, size_t),
  272. void *p_rng );
  273. /**
  274. * \brief This function frees and clears the components
  275. * of a DHM context.
  276. *
  277. * \param ctx The DHM context to free and clear. This may be \c NULL,
  278. * in which case this function is a no-op. If it is not \c NULL,
  279. * it must point to an initialized DHM context.
  280. */
  281. void mbedtls_dhm_free( mbedtls_dhm_context *ctx );
  282. #if defined(MBEDTLS_ASN1_PARSE_C)
  283. /** \ingroup x509_module */
  284. /**
  285. * \brief This function parses DHM parameters in PEM or DER format.
  286. *
  287. * \param dhm The DHM context to import the DHM parameters into.
  288. * This must be initialized.
  289. * \param dhmin The input buffer. This must be a readable buffer of
  290. * length \p dhminlen Bytes.
  291. * \param dhminlen The size of the input buffer \p dhmin, including the
  292. * terminating \c NULL Byte for PEM data.
  293. *
  294. * \return \c 0 on success.
  295. * \return An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX error
  296. * code on failure.
  297. */
  298. int mbedtls_dhm_parse_dhm( mbedtls_dhm_context *dhm, const unsigned char *dhmin,
  299. size_t dhminlen );
  300. #if defined(MBEDTLS_FS_IO)
  301. /** \ingroup x509_module */
  302. /**
  303. * \brief This function loads and parses DHM parameters from a file.
  304. *
  305. * \param dhm The DHM context to load the parameters to.
  306. * This must be initialized.
  307. * \param path The filename to read the DHM parameters from.
  308. * This must not be \c NULL.
  309. *
  310. * \return \c 0 on success.
  311. * \return An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX
  312. * error code on failure.
  313. */
  314. int mbedtls_dhm_parse_dhmfile( mbedtls_dhm_context *dhm, const char *path );
  315. #endif /* MBEDTLS_FS_IO */
  316. #endif /* MBEDTLS_ASN1_PARSE_C */
  317. #if defined(MBEDTLS_SELF_TEST)
  318. /**
  319. * \brief The DMH checkup routine.
  320. *
  321. * \return \c 0 on success.
  322. * \return \c 1 on failure.
  323. */
  324. int mbedtls_dhm_self_test( int verbose );
  325. #endif /* MBEDTLS_SELF_TEST */
  326. #ifdef __cplusplus
  327. }
  328. #endif
  329. /**
  330. * RFC 3526, RFC 5114 and RFC 7919 standardize a number of
  331. * Diffie-Hellman groups, some of which are included here
  332. * for use within the SSL/TLS module and the user's convenience
  333. * when configuring the Diffie-Hellman parameters by hand
  334. * through \c mbedtls_ssl_conf_dh_param.
  335. *
  336. * The following lists the source of the above groups in the standards:
  337. * - RFC 5114 section 2.2: 2048-bit MODP Group with 224-bit Prime Order Subgroup
  338. * - RFC 3526 section 3: 2048-bit MODP Group
  339. * - RFC 3526 section 4: 3072-bit MODP Group
  340. * - RFC 3526 section 5: 4096-bit MODP Group
  341. * - RFC 7919 section A.1: ffdhe2048
  342. * - RFC 7919 section A.2: ffdhe3072
  343. * - RFC 7919 section A.3: ffdhe4096
  344. * - RFC 7919 section A.4: ffdhe6144
  345. * - RFC 7919 section A.5: ffdhe8192
  346. *
  347. * The constants with suffix "_p" denote the chosen prime moduli, while
  348. * the constants with suffix "_g" denote the chosen generator
  349. * of the associated prime field.
  350. *
  351. * The constants further suffixed with "_bin" are provided in binary format,
  352. * while all other constants represent null-terminated strings holding the
  353. * hexadecimal presentation of the respective numbers.
  354. *
  355. * The primes from RFC 3526 and RFC 7919 have been generating by the following
  356. * trust-worthy procedure:
  357. * - Fix N in { 2048, 3072, 4096, 6144, 8192 } and consider the N-bit number
  358. * the first and last 64 bits are all 1, and the remaining N - 128 bits of
  359. * which are 0x7ff...ff.
  360. * - Add the smallest multiple of the first N - 129 bits of the binary expansion
  361. * of pi (for RFC 5236) or e (for RFC 7919) to this intermediate bit-string
  362. * such that the resulting integer is a safe-prime.
  363. * - The result is the respective RFC 3526 / 7919 prime, and the corresponding
  364. * generator is always chosen to be 2 (which is a square for these prime,
  365. * hence the corresponding subgroup has order (p-1)/2 and avoids leaking a
  366. * bit in the private exponent).
  367. *
  368. */
  369. #if !defined(MBEDTLS_DEPRECATED_REMOVED)
  370. /**
  371. * \warning The origin of the primes in RFC 5114 is not documented and
  372. * their use therefore constitutes a security risk!
  373. *
  374. * \deprecated The hex-encoded primes from RFC 5114 are deprecated and are
  375. * likely to be removed in a future version of the library without
  376. * replacement.
  377. */
  378. /**
  379. * The hexadecimal presentation of the prime underlying the
  380. * 2048-bit MODP Group with 224-bit Prime Order Subgroup, as defined
  381. * in <em>RFC-5114: Additional Diffie-Hellman Groups for Use with
  382. * IETF Standards</em>.
  383. */
  384. #define MBEDTLS_DHM_RFC5114_MODP_2048_P \
  385. MBEDTLS_DEPRECATED_STRING_CONSTANT( \
  386. "AD107E1E9123A9D0D660FAA79559C51FA20D64E5683B9FD1" \
  387. "B54B1597B61D0A75E6FA141DF95A56DBAF9A3C407BA1DF15" \
  388. "EB3D688A309C180E1DE6B85A1274A0A66D3F8152AD6AC212" \
  389. "9037C9EDEFDA4DF8D91E8FEF55B7394B7AD5B7D0B6C12207" \
  390. "C9F98D11ED34DBF6C6BA0B2C8BBC27BE6A00E0A0B9C49708" \
  391. "B3BF8A317091883681286130BC8985DB1602E714415D9330" \
  392. "278273C7DE31EFDC7310F7121FD5A07415987D9ADC0A486D" \
  393. "CDF93ACC44328387315D75E198C641A480CD86A1B9E587E8" \
  394. "BE60E69CC928B2B9C52172E413042E9B23F10B0E16E79763" \
  395. "C9B53DCF4BA80A29E3FB73C16B8E75B97EF363E2FFA31F71" \
  396. "CF9DE5384E71B81C0AC4DFFE0C10E64F" )
  397. /**
  398. * The hexadecimal presentation of the chosen generator of the 2048-bit MODP
  399. * Group with 224-bit Prime Order Subgroup, as defined in <em>RFC-5114:
  400. * Additional Diffie-Hellman Groups for Use with IETF Standards</em>.
  401. */
  402. #define MBEDTLS_DHM_RFC5114_MODP_2048_G \
  403. MBEDTLS_DEPRECATED_STRING_CONSTANT( \
  404. "AC4032EF4F2D9AE39DF30B5C8FFDAC506CDEBE7B89998CAF" \
  405. "74866A08CFE4FFE3A6824A4E10B9A6F0DD921F01A70C4AFA" \
  406. "AB739D7700C29F52C57DB17C620A8652BE5E9001A8D66AD7" \
  407. "C17669101999024AF4D027275AC1348BB8A762D0521BC98A" \
  408. "E247150422EA1ED409939D54DA7460CDB5F6C6B250717CBE" \
  409. "F180EB34118E98D119529A45D6F834566E3025E316A330EF" \
  410. "BB77A86F0C1AB15B051AE3D428C8F8ACB70A8137150B8EEB" \
  411. "10E183EDD19963DDD9E263E4770589EF6AA21E7F5F2FF381" \
  412. "B539CCE3409D13CD566AFBB48D6C019181E1BCFE94B30269" \
  413. "EDFE72FE9B6AA4BD7B5A0F1C71CFFF4C19C418E1F6EC0179" \
  414. "81BC087F2A7065B384B890D3191F2BFA" )
  415. /**
  416. * The hexadecimal presentation of the prime underlying the 2048-bit MODP
  417. * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
  418. * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
  419. *
  420. * \deprecated The hex-encoded primes from RFC 3625 are deprecated and
  421. * superseded by the corresponding macros providing them as
  422. * binary constants. Their hex-encoded constants are likely
  423. * to be removed in a future version of the library.
  424. *
  425. */
  426. #define MBEDTLS_DHM_RFC3526_MODP_2048_P \
  427. MBEDTLS_DEPRECATED_STRING_CONSTANT( \
  428. "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \
  429. "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \
  430. "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \
  431. "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \
  432. "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \
  433. "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \
  434. "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \
  435. "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \
  436. "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \
  437. "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \
  438. "15728E5A8AACAA68FFFFFFFFFFFFFFFF" )
  439. /**
  440. * The hexadecimal presentation of the chosen generator of the 2048-bit MODP
  441. * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
  442. * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
  443. */
  444. #define MBEDTLS_DHM_RFC3526_MODP_2048_G \
  445. MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" )
  446. /**
  447. * The hexadecimal presentation of the prime underlying the 3072-bit MODP
  448. * Group, as defined in <em>RFC-3072: More Modular Exponential (MODP)
  449. * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
  450. */
  451. #define MBEDTLS_DHM_RFC3526_MODP_3072_P \
  452. MBEDTLS_DEPRECATED_STRING_CONSTANT( \
  453. "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \
  454. "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \
  455. "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \
  456. "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \
  457. "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \
  458. "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \
  459. "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \
  460. "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \
  461. "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \
  462. "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \
  463. "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" \
  464. "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" \
  465. "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" \
  466. "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" \
  467. "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" \
  468. "43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF" )
  469. /**
  470. * The hexadecimal presentation of the chosen generator of the 3072-bit MODP
  471. * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
  472. * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
  473. */
  474. #define MBEDTLS_DHM_RFC3526_MODP_3072_G \
  475. MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" )
  476. /**
  477. * The hexadecimal presentation of the prime underlying the 4096-bit MODP
  478. * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
  479. * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
  480. */
  481. #define MBEDTLS_DHM_RFC3526_MODP_4096_P \
  482. MBEDTLS_DEPRECATED_STRING_CONSTANT( \
  483. "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \
  484. "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" \
  485. "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" \
  486. "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" \
  487. "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" \
  488. "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" \
  489. "83655D23DCA3AD961C62F356208552BB9ED529077096966D" \
  490. "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" \
  491. "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" \
  492. "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" \
  493. "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" \
  494. "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" \
  495. "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" \
  496. "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" \
  497. "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" \
  498. "43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7" \
  499. "88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA" \
  500. "2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6" \
  501. "287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED" \
  502. "1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9" \
  503. "93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934063199" \
  504. "FFFFFFFFFFFFFFFF" )
  505. /**
  506. * The hexadecimal presentation of the chosen generator of the 4096-bit MODP
  507. * Group, as defined in <em>RFC-3526: More Modular Exponential (MODP)
  508. * Diffie-Hellman groups for Internet Key Exchange (IKE)</em>.
  509. */
  510. #define MBEDTLS_DHM_RFC3526_MODP_4096_G \
  511. MBEDTLS_DEPRECATED_STRING_CONSTANT( "02" )
  512. #endif /* MBEDTLS_DEPRECATED_REMOVED */
  513. /*
  514. * Trustworthy DHM parameters in binary form
  515. */
  516. #define MBEDTLS_DHM_RFC3526_MODP_2048_P_BIN { \
  517. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
  518. 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \
  519. 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \
  520. 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \
  521. 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \
  522. 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \
  523. 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \
  524. 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \
  525. 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \
  526. 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \
  527. 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \
  528. 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \
  529. 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \
  530. 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \
  531. 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \
  532. 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \
  533. 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \
  534. 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \
  535. 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \
  536. 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \
  537. 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \
  538. 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \
  539. 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \
  540. 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \
  541. 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \
  542. 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \
  543. 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \
  544. 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \
  545. 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \
  546. 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \
  547. 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAC, 0xAA, 0x68, \
  548. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
  549. #define MBEDTLS_DHM_RFC3526_MODP_2048_G_BIN { 0x02 }
  550. #define MBEDTLS_DHM_RFC3526_MODP_3072_P_BIN { \
  551. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
  552. 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \
  553. 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \
  554. 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \
  555. 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \
  556. 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \
  557. 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \
  558. 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \
  559. 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \
  560. 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \
  561. 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \
  562. 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \
  563. 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \
  564. 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \
  565. 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \
  566. 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \
  567. 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \
  568. 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \
  569. 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \
  570. 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \
  571. 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \
  572. 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \
  573. 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \
  574. 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \
  575. 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \
  576. 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \
  577. 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \
  578. 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \
  579. 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \
  580. 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \
  581. 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D, \
  582. 0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33, \
  583. 0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64, \
  584. 0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, \
  585. 0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, \
  586. 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7, \
  587. 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7, \
  588. 0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D, \
  589. 0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B, \
  590. 0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64, \
  591. 0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, \
  592. 0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, \
  593. 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C, \
  594. 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2, \
  595. 0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31, \
  596. 0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E, \
  597. 0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x3A, 0xD2, 0xCA, \
  598. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
  599. #define MBEDTLS_DHM_RFC3526_MODP_3072_G_BIN { 0x02 }
  600. #define MBEDTLS_DHM_RFC3526_MODP_4096_P_BIN { \
  601. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
  602. 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \
  603. 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \
  604. 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \
  605. 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \
  606. 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \
  607. 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \
  608. 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \
  609. 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \
  610. 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \
  611. 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \
  612. 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \
  613. 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \
  614. 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \
  615. 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \
  616. 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \
  617. 0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \
  618. 0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \
  619. 0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \
  620. 0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \
  621. 0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \
  622. 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \
  623. 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \
  624. 0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \
  625. 0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \
  626. 0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \
  627. 0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \
  628. 0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \
  629. 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \
  630. 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \
  631. 0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D, \
  632. 0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33, \
  633. 0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64, \
  634. 0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, \
  635. 0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, \
  636. 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7, \
  637. 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7, \
  638. 0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D, \
  639. 0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B, \
  640. 0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64, \
  641. 0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, \
  642. 0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, \
  643. 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C, \
  644. 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2, \
  645. 0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31, \
  646. 0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E, \
  647. 0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x21, 0x08, 0x01, \
  648. 0x1A, 0x72, 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7, \
  649. 0x88, 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26, \
  650. 0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, 0x3C, \
  651. 0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, 0x0B, 0xDA, \
  652. 0x25, 0x83, 0xE9, 0xCA, 0x2A, 0xD4, 0x4C, 0xE8, \
  653. 0xDB, 0xBB, 0xC2, 0xDB, 0x04, 0xDE, 0x8E, 0xF9, \
  654. 0x2E, 0x8E, 0xFC, 0x14, 0x1F, 0xBE, 0xCA, 0xA6, \
  655. 0x28, 0x7C, 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D, \
  656. 0x99, 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2, \
  657. 0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, 0xED, \
  658. 0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, 0xD7, 0xAF, \
  659. 0xB8, 0x1B, 0xDD, 0x76, 0x21, 0x70, 0x48, 0x1C, \
  660. 0xD0, 0x06, 0x91, 0x27, 0xD5, 0xB0, 0x5A, 0xA9, \
  661. 0x93, 0xB4, 0xEA, 0x98, 0x8D, 0x8F, 0xDD, 0xC1, \
  662. 0x86, 0xFF, 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F, \
  663. 0x4D, 0xF4, 0x35, 0xC9, 0x34, 0x06, 0x31, 0x99, \
  664. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
  665. #define MBEDTLS_DHM_RFC3526_MODP_4096_G_BIN { 0x02 }
  666. #define MBEDTLS_DHM_RFC7919_FFDHE2048_P_BIN { \
  667. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
  668. 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
  669. 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
  670. 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
  671. 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
  672. 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
  673. 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
  674. 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
  675. 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
  676. 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
  677. 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
  678. 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
  679. 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
  680. 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
  681. 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
  682. 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
  683. 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
  684. 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
  685. 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
  686. 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
  687. 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
  688. 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
  689. 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
  690. 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
  691. 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
  692. 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
  693. 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
  694. 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
  695. 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
  696. 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
  697. 0x88, 0x6B, 0x42, 0x38, 0x61, 0x28, 0x5C, 0x97, \
  698. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, }
  699. #define MBEDTLS_DHM_RFC7919_FFDHE2048_G_BIN { 0x02 }
  700. #define MBEDTLS_DHM_RFC7919_FFDHE3072_P_BIN { \
  701. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
  702. 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
  703. 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
  704. 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
  705. 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
  706. 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
  707. 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
  708. 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
  709. 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
  710. 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
  711. 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
  712. 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
  713. 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
  714. 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
  715. 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
  716. 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
  717. 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
  718. 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
  719. 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
  720. 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
  721. 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
  722. 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
  723. 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
  724. 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
  725. 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
  726. 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
  727. 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
  728. 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
  729. 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
  730. 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
  731. 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
  732. 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
  733. 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
  734. 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
  735. 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
  736. 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
  737. 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
  738. 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
  739. 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
  740. 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
  741. 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
  742. 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
  743. 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
  744. 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
  745. 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
  746. 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
  747. 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0xC6, 0x2E, 0x37, \
  748. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
  749. #define MBEDTLS_DHM_RFC7919_FFDHE3072_G_BIN { 0x02 }
  750. #define MBEDTLS_DHM_RFC7919_FFDHE4096_P_BIN { \
  751. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
  752. 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
  753. 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
  754. 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
  755. 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
  756. 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
  757. 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
  758. 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
  759. 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
  760. 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
  761. 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
  762. 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
  763. 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
  764. 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
  765. 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
  766. 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
  767. 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
  768. 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
  769. 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
  770. 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
  771. 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
  772. 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
  773. 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
  774. 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
  775. 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
  776. 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
  777. 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
  778. 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
  779. 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
  780. 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
  781. 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
  782. 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
  783. 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
  784. 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
  785. 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
  786. 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
  787. 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
  788. 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
  789. 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
  790. 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
  791. 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
  792. 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
  793. 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
  794. 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
  795. 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
  796. 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
  797. 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
  798. 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
  799. 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
  800. 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
  801. 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
  802. 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
  803. 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
  804. 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
  805. 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
  806. 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
  807. 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
  808. 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
  809. 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
  810. 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
  811. 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
  812. 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
  813. 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x65, 0x5F, 0x6A, \
  814. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
  815. #define MBEDTLS_DHM_RFC7919_FFDHE4096_G_BIN { 0x02 }
  816. #define MBEDTLS_DHM_RFC7919_FFDHE6144_P_BIN { \
  817. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
  818. 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
  819. 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
  820. 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
  821. 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
  822. 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
  823. 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
  824. 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
  825. 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
  826. 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
  827. 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
  828. 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
  829. 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
  830. 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
  831. 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
  832. 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
  833. 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
  834. 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
  835. 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
  836. 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
  837. 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
  838. 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
  839. 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
  840. 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
  841. 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
  842. 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
  843. 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
  844. 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
  845. 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
  846. 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
  847. 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
  848. 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
  849. 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
  850. 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
  851. 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
  852. 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
  853. 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
  854. 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
  855. 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
  856. 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
  857. 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
  858. 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
  859. 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
  860. 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
  861. 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
  862. 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
  863. 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
  864. 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
  865. 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
  866. 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
  867. 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
  868. 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
  869. 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
  870. 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
  871. 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
  872. 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
  873. 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
  874. 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
  875. 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
  876. 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
  877. 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
  878. 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
  879. 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \
  880. 0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \
  881. 0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \
  882. 0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \
  883. 0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \
  884. 0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \
  885. 0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \
  886. 0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \
  887. 0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \
  888. 0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \
  889. 0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \
  890. 0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \
  891. 0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \
  892. 0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \
  893. 0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \
  894. 0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \
  895. 0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \
  896. 0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \
  897. 0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \
  898. 0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \
  899. 0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \
  900. 0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \
  901. 0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \
  902. 0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \
  903. 0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \
  904. 0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \
  905. 0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \
  906. 0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \
  907. 0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \
  908. 0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \
  909. 0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \
  910. 0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \
  911. 0xA4, 0x0E, 0x32, 0x9C, 0xD0, 0xE4, 0x0E, 0x65, \
  912. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
  913. #define MBEDTLS_DHM_RFC7919_FFDHE6144_G_BIN { 0x02 }
  914. #define MBEDTLS_DHM_RFC7919_FFDHE8192_P_BIN { \
  915. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
  916. 0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
  917. 0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
  918. 0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
  919. 0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
  920. 0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
  921. 0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
  922. 0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
  923. 0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
  924. 0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
  925. 0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
  926. 0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
  927. 0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
  928. 0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
  929. 0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
  930. 0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
  931. 0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
  932. 0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
  933. 0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
  934. 0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
  935. 0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
  936. 0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
  937. 0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
  938. 0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
  939. 0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
  940. 0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
  941. 0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
  942. 0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
  943. 0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
  944. 0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
  945. 0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
  946. 0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
  947. 0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
  948. 0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
  949. 0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
  950. 0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
  951. 0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
  952. 0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
  953. 0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
  954. 0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
  955. 0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
  956. 0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
  957. 0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
  958. 0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
  959. 0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
  960. 0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
  961. 0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
  962. 0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
  963. 0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
  964. 0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
  965. 0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
  966. 0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
  967. 0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
  968. 0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
  969. 0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
  970. 0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
  971. 0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
  972. 0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
  973. 0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
  974. 0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
  975. 0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
  976. 0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
  977. 0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \
  978. 0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \
  979. 0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \
  980. 0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \
  981. 0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \
  982. 0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \
  983. 0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \
  984. 0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \
  985. 0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \
  986. 0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \
  987. 0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \
  988. 0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \
  989. 0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \
  990. 0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \
  991. 0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \
  992. 0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \
  993. 0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \
  994. 0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \
  995. 0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \
  996. 0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \
  997. 0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \
  998. 0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \
  999. 0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \
  1000. 0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \
  1001. 0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \
  1002. 0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \
  1003. 0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \
  1004. 0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \
  1005. 0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \
  1006. 0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \
  1007. 0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \
  1008. 0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \
  1009. 0xA4, 0x0E, 0x32, 0x9C, 0xCF, 0xF4, 0x6A, 0xAA, \
  1010. 0x36, 0xAD, 0x00, 0x4C, 0xF6, 0x00, 0xC8, 0x38, \
  1011. 0x1E, 0x42, 0x5A, 0x31, 0xD9, 0x51, 0xAE, 0x64, \
  1012. 0xFD, 0xB2, 0x3F, 0xCE, 0xC9, 0x50, 0x9D, 0x43, \
  1013. 0x68, 0x7F, 0xEB, 0x69, 0xED, 0xD1, 0xCC, 0x5E, \
  1014. 0x0B, 0x8C, 0xC3, 0xBD, 0xF6, 0x4B, 0x10, 0xEF, \
  1015. 0x86, 0xB6, 0x31, 0x42, 0xA3, 0xAB, 0x88, 0x29, \
  1016. 0x55, 0x5B, 0x2F, 0x74, 0x7C, 0x93, 0x26, 0x65, \
  1017. 0xCB, 0x2C, 0x0F, 0x1C, 0xC0, 0x1B, 0xD7, 0x02, \
  1018. 0x29, 0x38, 0x88, 0x39, 0xD2, 0xAF, 0x05, 0xE4, \
  1019. 0x54, 0x50, 0x4A, 0xC7, 0x8B, 0x75, 0x82, 0x82, \
  1020. 0x28, 0x46, 0xC0, 0xBA, 0x35, 0xC3, 0x5F, 0x5C, \
  1021. 0x59, 0x16, 0x0C, 0xC0, 0x46, 0xFD, 0x82, 0x51, \
  1022. 0x54, 0x1F, 0xC6, 0x8C, 0x9C, 0x86, 0xB0, 0x22, \
  1023. 0xBB, 0x70, 0x99, 0x87, 0x6A, 0x46, 0x0E, 0x74, \
  1024. 0x51, 0xA8, 0xA9, 0x31, 0x09, 0x70, 0x3F, 0xEE, \
  1025. 0x1C, 0x21, 0x7E, 0x6C, 0x38, 0x26, 0xE5, 0x2C, \
  1026. 0x51, 0xAA, 0x69, 0x1E, 0x0E, 0x42, 0x3C, 0xFC, \
  1027. 0x99, 0xE9, 0xE3, 0x16, 0x50, 0xC1, 0x21, 0x7B, \
  1028. 0x62, 0x48, 0x16, 0xCD, 0xAD, 0x9A, 0x95, 0xF9, \
  1029. 0xD5, 0xB8, 0x01, 0x94, 0x88, 0xD9, 0xC0, 0xA0, \
  1030. 0xA1, 0xFE, 0x30, 0x75, 0xA5, 0x77, 0xE2, 0x31, \
  1031. 0x83, 0xF8, 0x1D, 0x4A, 0x3F, 0x2F, 0xA4, 0x57, \
  1032. 0x1E, 0xFC, 0x8C, 0xE0, 0xBA, 0x8A, 0x4F, 0xE8, \
  1033. 0xB6, 0x85, 0x5D, 0xFE, 0x72, 0xB0, 0xA6, 0x6E, \
  1034. 0xDE, 0xD2, 0xFB, 0xAB, 0xFB, 0xE5, 0x8A, 0x30, \
  1035. 0xFA, 0xFA, 0xBE, 0x1C, 0x5D, 0x71, 0xA8, 0x7E, \
  1036. 0x2F, 0x74, 0x1E, 0xF8, 0xC1, 0xFE, 0x86, 0xFE, \
  1037. 0xA6, 0xBB, 0xFD, 0xE5, 0x30, 0x67, 0x7F, 0x0D, \
  1038. 0x97, 0xD1, 0x1D, 0x49, 0xF7, 0xA8, 0x44, 0x3D, \
  1039. 0x08, 0x22, 0xE5, 0x06, 0xA9, 0xF4, 0x61, 0x4E, \
  1040. 0x01, 0x1E, 0x2A, 0x94, 0x83, 0x8F, 0xF8, 0x8C, \
  1041. 0xD6, 0x8C, 0x8B, 0xB7, 0xC5, 0xC6, 0x42, 0x4C, \
  1042. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
  1043. #define MBEDTLS_DHM_RFC7919_FFDHE8192_G_BIN { 0x02 }
  1044. #endif /* dhm.h */