Add cipher suite for TLS_ECDH_anon_WITH_AES_128_CBC_SHA(RFC 4492)
Status: Alpha
Brought to you by:
obgm
Menu
▾
▴
#17 Add cipher suite for TLS_ECDH_anon_WITH_AES_128_CBC_SHA(RFC 4492)
currently tinydtls cipher suite supports PSK, which requires that some kind of key should be exchanged between two parties before initiation of connection.
but in iot world devices initially don't have any preshared secrets but there is a sitution in which they require to create a secure channel for sharing secure data.
we can't have preshared secrets in devices as device manufactures are too diverse. so we should have anonymous cipher suite.
Discussion
Dear Olaf Bergmann,
Can I ask any feedback?
Will look into the proposed patch.
PFA patch for TLS_ECDH_anon_WITH_AES_128_CBC_SHA support
Last edit: Chul Lee 2015-04-08
I found a bug in above patch.
If I run sample(dtls-server/dtls-client) with '-v 6' option, I facing with sequence number miss-matched error.
Actually I'm not sure what is the reason.
Anyway I'll fix it.
I've found the reason of the problem.
It was a problem with the initialization in added code by me.
It fixed :)
PFA modified patch :)
I am attaching here the patch which fixed formatting issuse.
Let me know if you find any issues in attached patch.