Skip to content

Conversation

@LinuxJedi
Copy link
Member

@LinuxJedi LinuxJedi commented Feb 4, 2025

This adds the diffie-hellman-group16-sha512 key exchange and hmac-sha2-512 mac support.

Echoserver can now take -x for key exchange and -m for mac setting, so that this can be used in the test suite.

New test added for this and it has been tested against OpenSSH.

@LinuxJedi
Copy link
Member Author

Note, this is expected to conflict with #763 around the test area, I can fix that when it happens.

@LinuxJedi LinuxJedi force-pushed the more-kex branch 5 times, most recently from d7c80da to 3e95486 Compare February 4, 2025 11:04
@LinuxJedi
Copy link
Member Author

Tweaked the Zephyr packet size as the slightly larger KEX packet blows the tiny default TX buffer.

@LinuxJedi
Copy link
Member Author

Moved to draft, there is a bug in HMAC-SHA2-512 which I am investigating.

@LinuxJedi LinuxJedi marked this pull request as ready for review February 6, 2025 17:18
@LinuxJedi
Copy link
Member Author

Problem found, should be good now.

ejohnstown
ejohnstown previously approved these changes Feb 10, 2025
This adds the `diffie-hellman-group16-sha512` key exchange and
`hmac-sha2-512` mac support.

Echoserver can now take `-x` for key exchange and `-m` for mac setting,
 and `-c` for cipher so that this can be used in the test suite.
@LinuxJedi
Copy link
Member Author

Rebased to fix merge conflicts.

@JacobBarthelmeh JacobBarthelmeh merged commit 697f54a into wolfSSL:master Feb 12, 2025
75 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants