Mode | Value |
---|---|
mode_base | 0x00 |
mode_psk | 0x01 |
mode_auth | 0x02 |
mode_auth_psk | 0x03 |
Value | KEM | Nsecret | Nenc | Npk | Nsk | Auth | Reference |
---|---|---|---|---|---|---|---|
0x0000 | (reserved) | N/A | N/A | N/A | N/A | yes | N/A |
0x0010 | DHKEM(P-256, HKDF-SHA256) | 32 | 65 | 65 | 32 | yes |
|
0x0011 | DHKEM(P-384, HKDF-SHA384) | 48 | 97 | 97 | 48 | yes |
|
0x0012 | DHKEM(P-521, HKDF-SHA512) | 64 | 133 | 133 | 66 | yes |
|
0x0020 | DHKEM(X25519, HKDF-SHA256) | 32 | 32 | 32 | 32 | yes |
|
0x0021 | DHKEM(X448, HKDF-SHA512) | 64 | 56 | 56 | 56 | yes |
|
Value | KDF | Nh | Reference |
---|---|---|---|
0x0000 | (reserved) | N/A | N/A |
0x0001 | HKDF-SHA256 | 32 |
|
0x0002 | HKDF-SHA384 | 48 |
|
0x0003 | HKDF-SHA512 | 64 |
|
Input | HKDF-SHA256 | HKDF-SHA384 | HKDF-SHA512 |
---|---|---|---|
psk | 2^{61} - 88 | 2^{125} - 152 | 2^{125} - 152 |
psk_id | 2^{61} - 93 | 2^{125} - 157 | 2^{125} - 157 |
info | 2^{61} - 91 | 2^{125} - 155 | 2^{125} - 155 |
exporter_context | 2^{61} - 120 | 2^{125} - 200 | 2^{125} - 216 |
Value | AEAD | Nk | Nn | Reference |
---|---|---|---|---|
0x0000 | (reserved) | N/A | N/A | N/A |
0x0001 | AES-128-GCM | 16 | 12 |
|
0x0002 | AES-256-GCM | 32 | 12 |
|
0x0003 | ChaCha20Poly1305 | 32 | 12 |
|
Variant | Message Sec. | Export Sec. | Sender Auth. |
---|---|---|---|
Base | y | y | N/A |
PSK | y | y | y |
Auth | y | y | y |
AuthPSK | y | y | y |