This patch updates our full list of TLS ciphersuites from the IANA data
as described in the comment about allCipherSuites in all_suites.go.
Some ciphersuites that were found in other sources were folded into that
list.
That list also includes some controversial ciphersuites required to be
used within the national boundaries of China whose security hasn't been
evaluated: TLS_SM4_GCM_SM3 (0x00C6), and TLS_SM4_CCM_SM3
(0x00C6). What to report as their security level will come in a future
PR.
The IANA data also no longer lists TLS_GOST2001-GOST89-GOST89
(0x0081). I've not yet found the reason for this, but it perhaps only
existed within a specific version of OpenSSL and was replaced with other
GOST ciphersuites also added here.
This patch updates our full list of TLS ciphersuites from the IANA data as described in the comment about
allCipherSuites
inall_suites.go
.Some ciphersuites that were found in other sources were folded into that list.
That list also includes some controversial ciphersuites required to be used within the national boundaries of China whose security hasn't been evaluated:
TLS_SM4_GCM_SM3
(0x00C6
), andTLS_SM4_CCM_SM3
(0x00C6
). What to report as their security level will come in a future PR.The IANA data also no longer lists
TLS_GOST2001-GOST89-GOST89
(0x0081
). I've not yet found the reason for this, but it perhaps only existed within a specific version of OpenSSL and was replaced with other GOST ciphersuites also added here.