3

While studying the list of available TLS cipher suites, I noticed the following two:

  • TLS_DHE_PSK_WITH_AES_128_CCM
  • TLS_PSK_DHE_WITH_AES_128_CCM_8

They are defined in RFC 6655, Section 4.

Is there any reason why the "DHE" and "PSK" parts are switched around? Does this only have legacy/compatibility reasons or are there actual technical differences?

Improve this question

1 Answer 1

Reset to default
3

It's a mistake. See Errata 3987 for this RFC:

Section 4 says:

         CipherSuite TLS_PSK_DHE_WITH_AES_128_CCM_8 = {0xC0,0xAA}
         CipherSuite TLS_PSK_DHE_WITH_AES_256_CCM_8 = {0xC0,0xAB}

It should say:

         CipherSuite TLS_DHE_PSK_WITH_AES_128_CCM_8 = {0xC0,0xAA}
         CipherSuite TLS_DHE_PSK_WITH_AES_256_CCM_8 = {0xC0,0xAB}
Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .