nrf91 Ciphers

[Aziz]

Hello,

What are all the supported cipher suites for the nrf9160? Per your documentation, it seems AES 128 is supported but not AES 256. But, based on some testing with slightly modifying the https example, I was able to verify that AES-256 was used for the test session. Can you confirm your supported ciphers as well as what type/length of private keys (ex - 4096 bit..etc.) are permitted?

Thanks.

[Albrecht Markus Schellenberger]

Hello Aziz,

you can find our supported cipher suites here (see Feature Brief → TLS Cipher suites).

We support the following ones:

mbed TLS Name / NIST Name               Value
TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384 {0xC0,0x24}
TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA    {0xC0,0x0A}
TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 {0xC0,0x23}
TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA    {0xC0,0x09}
TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA      {0xC0,0x14}
TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256   {0xC0,0x27}
TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA      {0xC0,0x13}
TLS-PSK-WITH-AES-256-CBC-SHA            {0x00,0x8D}
TLS-PSK-WITH-AES-128-CBC-SHA256         {0x00,0xAE}
TLS-PSK-WITH-AES-128-CBC-SHA            {0x00,0x8C}
TLS-PSK-WITH-AES-128-CCM-8              {0xC0,0xA8}

For all other suites, we do not have official support.

Regards,

Markus

[Aziz]

Thanks this is great. What about supported private keys type/length?