From 87c56602bc67907f0c689310dd25552e9a30c0d2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?P=C3=A9ter=20Dimitrov?= Date: Fri, 12 Apr 2019 17:13:17 +0200 Subject: ssl: Update standards_compliance.xml Change-Id: I4da2b5c4defeb4e8893e512020d4dbdb96813542 --- lib/ssl/doc/src/standards_compliance.xml | 61 ++++++++++++++++++++++---------- 1 file changed, 43 insertions(+), 18 deletions(-) (limited to 'lib/ssl') diff --git a/lib/ssl/doc/src/standards_compliance.xml b/lib/ssl/doc/src/standards_compliance.xml index c20bab4e50..25840d0fc6 100644 --- a/lib/ssl/doc/src/standards_compliance.xml +++ b/lib/ssl/doc/src/standards_compliance.xml @@ -126,8 +126,33 @@
TLS 1.3 -

This section describes the current state of standards compliance for TLS 1.3.

-

(C = Compliant, NC = Non-Compliant, P = Partially-Compliant, NA = Not Applicable)

+

OTP-22 introduces basic support for TLS 1.3 on the server side. Basic functionality + covers a simple TLS 1.3 handshake with support of the mandatory extensions + (supported_groups, signature_algorithms, key_share, supported_versions and + signature_algorithms_cert). The server supports a selective set of cryptographic algorithms:

+ + Key Exchange: ECDHE + Groups: all standard groups supported for the Diffie-Hellman key exchange + Ciphers: TLS_AES_128_GCM_SHA256 and TLS_AES_256_GCM_SHA384 + Signature Algorithms: RSA and RSA PSS + Certificates: currently only certificates with RSA keys are supported + +

Other notable features:

+ + The server supports the HelloRetryRequest mechanism + PSK and session resumption not supported + Early data and 0-RTT not supported + Key and Initialization Vector Update not supported + +

For more detailed information see the + Standards Compliance below.

+

Note that the client side is not yet functional. It is planned to be released + later in OTP-22.

 + +

The following table describes the current state of standards compliance for TLS 1.3.

+

(C = Compliant, NC = Non-Compliant, PC = Partially-Compliant, + NA = Not Applicable)

+ Section @@ -155,7 +180,7 @@ RSASSA-PSS signature schemes - P + PC 22 @@ -178,7 +203,7 @@ - P + PC 22 @@ -240,7 +265,7 @@ - P + PC 22 @@ -783,7 +808,7 @@ Server - P + PC 22 @@ -1265,7 +1290,7 @@ Server - P + PC 22 @@ -1379,7 +1404,7 @@ Server - P + PC 22 @@ -1456,7 +1481,7 @@ Server - P + PC 22 @@ -1527,7 +1552,7 @@ Server - P + PC @@ -1762,7 +1787,7 @@ - P + PC 22 @@ -1924,7 +1949,7 @@ - P + PC 22 @@ -1949,7 +1974,7 @@ Digital signatures - P + PC 22 @@ -1997,7 +2022,7 @@ - P + PC 22 @@ -2108,7 +2133,7 @@ TLS 1.3 ServerHello - P + PC 22 @@ -2160,7 +2185,7 @@ - P + PC 22 @@ -2223,7 +2248,7 @@ - P + PC 22 @@ -2289,7 +2314,7 @@ - P + PC 22 -- cgit v1.2.3