mirror of
https://github.com/XTLS/REALITY.git
synced 2026-09-28 09:58:03 +03:00
yuhan6665
04a9e83d29
Tested against Google Chrome Canary 150.0.7834.0. The Client-TLSv10, Client-TLSv11, and Client-TLSv12 recordings need to change because they are configured with a version range that includes TLS 1.3 (even if the OpenSSL server selects the lower one), so they include ML-DSA signature algorithms in the Client Hello. The Client-TLSv13 and Server-TLSv13-ClientAuthRequested* recordings need to change because they now advertise ML-DSA support. Because of #79481, we need to regenerate all recordings anyway, so defer doing so to the next CL 779662, to avoid churning twice and bloating the git history. Fixes #78888 Change-Id: I14e6a89b459166155261aa8fc0edb83c6a6a6964 Reviewed-on: https://go-review.googlesource.com/c/go/+/776709 Reviewed-by: Roland Shoemaker <roland@golang.org> Reviewed-by: Dmitri Shuralyov <dmitshur@google.com> TryBot-Bypass: Filippo Valsorda <filippo@golang.org> Auto-Submit: Filippo Valsorda <filippo@golang.org>
85 lines
2.1 KiB
Go
85 lines
2.1 KiB
Go
// Copyright 2025 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
//go:build !boringcrypto
|
|
|
|
package reality
|
|
|
|
import (
|
|
"crypto/ecdsa"
|
|
"crypto/ed25519"
|
|
"crypto/elliptic"
|
|
"crypto/mldsa"
|
|
"crypto/rsa"
|
|
"crypto/x509"
|
|
)
|
|
|
|
// These FIPS 140-3 policies allow anything approved by SP 800-140C
|
|
// and SP 800-140D, and tested as part of the Go Cryptographic Module.
|
|
//
|
|
// Notably, not SHA-1, 3DES, RC4, ChaCha20Poly1305, RSA PKCS #1 v1.5 key
|
|
// transport, or TLS 1.0—1.1 (because we don't test its KDF).
|
|
//
|
|
// These are not default lists, but filters to apply to the default or
|
|
// configured lists. Missing items are treated as if they were not implemented.
|
|
//
|
|
// They are applied when the fips140 GODEBUG is "on" or "only".
|
|
|
|
var (
|
|
allowedSupportedVersionsFIPS = []uint16{
|
|
VersionTLS12,
|
|
VersionTLS13,
|
|
}
|
|
allowedCurvePreferencesFIPS = []CurveID{
|
|
X25519MLKEM768,
|
|
SecP256r1MLKEM768,
|
|
SecP384r1MLKEM1024,
|
|
CurveP256,
|
|
CurveP384,
|
|
CurveP521,
|
|
}
|
|
allowedSignatureAlgorithmsFIPS = []SignatureScheme{
|
|
PSSWithSHA256,
|
|
ECDSAWithP256AndSHA256,
|
|
Ed25519,
|
|
MLDSA44,
|
|
MLDSA65,
|
|
MLDSA87,
|
|
PSSWithSHA384,
|
|
PSSWithSHA512,
|
|
PKCS1WithSHA256,
|
|
PKCS1WithSHA384,
|
|
PKCS1WithSHA512,
|
|
ECDSAWithP384AndSHA384,
|
|
ECDSAWithP521AndSHA512,
|
|
}
|
|
allowedCipherSuitesFIPS = []uint16{
|
|
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
|
|
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
|
|
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
|
|
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
|
|
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
|
|
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
|
|
}
|
|
allowedCipherSuitesTLS13FIPS = []uint16{
|
|
TLS_AES_128_GCM_SHA256,
|
|
TLS_AES_256_GCM_SHA384,
|
|
}
|
|
)
|
|
|
|
func isCertificateAllowedFIPS(c *x509.Certificate) bool {
|
|
switch k := c.PublicKey.(type) {
|
|
case *rsa.PublicKey:
|
|
return k.N.BitLen() >= 2048
|
|
case *ecdsa.PublicKey:
|
|
return k.Curve == elliptic.P256() || k.Curve == elliptic.P384() || k.Curve == elliptic.P521()
|
|
case ed25519.PublicKey:
|
|
return true
|
|
case *mldsa.PublicKey:
|
|
// Only for the native module.
|
|
return true //!boring.Enabled
|
|
default:
|
|
return false
|
|
}
|
|
} |