TLS Cipher suites TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8

[nasapro...@gmail.com]

Hi, does golang support TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 ?

[Brian Candler]

https://golang.org/pkg/crypto/tls/#pkg-constants

[nasapro...@gmail.com]

Ok it doesn’t. Will we support it?
Seems like there aren’t any CCM ciphers on that list.

[kddavi...@gmail.com]

Taken from https://www.iana.org/assignments/tls-parameters/tls-parameters.xml:

Note

    CCM_8 cipher suites are not marked as "Recommended".  These
    cipher suites have a significantly truncated authentication tag
    that represents a security trade-off that may not be appropriate
    for general environments.

The go crypto libraries implement algorithms that are easy to use by a broad set of users in the general case, so while it may exist in a third party package, I would be surprised if it made its way into the standard library.

[Brian Candler]

There is always github.com/spacemonkeygo/openssl

(even then, openssl deprecates non-recommended crypto, so you may need to build against an old version)