Generic cipher max key length #226

New issue

Open

opened 2019-08-18 10:55:00 -05:00 by nanokatze · 2 comments

nanokatze commented

2019-08-18 10:55:00 -05:00

(Migrated from github.com)

Description

Given the existence of MBEDTLS_MAX_IV_LENGTH and MBEDTLS_MAX_BLOCK_LENGTH constants, which give upper bounds on ciphers' IV and block lengths respectively, would it be possible to add such a constant for ciphers' key lengths? A possible use case: github.com/ARMmbed/mbedtls@535ee4a35b/library/ssl_ticket.c (L55).

In the current default set of ciphers, AES 256 XTS https://github.com/ARMmbed/mbed-crypto/blob/development/library/cipher_wrap.c#L510 has the largest key of 512 bits (64 octets).

Issue request type

[ ] Question
[x] Enhancement
[ ] Bug

### Description Given the existence of MBEDTLS_MAX_IV_LENGTH and MBEDTLS_MAX_BLOCK_LENGTH constants, which give upper bounds on ciphers' IV and block lengths respectively, would it be possible to add such a constant for ciphers' key lengths? A possible use case: https://github.com/ARMmbed/mbedtls/blob/535ee4a35b9c4ddd059451b8fa5b201bfc89fbcf/library/ssl_ticket.c#L55. In the current default set of ciphers, AES 256 XTS https://github.com/ARMmbed/mbed-crypto/blob/development/library/cipher_wrap.c#L510 has the largest key of 512 bits (64 octets).  ### Issue request type  [ ] Question [x] Enhancement [ ] Bug

ciarmcom commented

2019-08-18 16:19:47 -05:00

(Migrated from github.com)