From 1fa5088c0b6c82dca3438584a0bc33ecccf7a233 Mon Sep 17 00:00:00 2001 From: Ronald Cron Date: Mon, 27 Sep 2021 12:06:52 +0200 Subject: [PATCH] Improve comment about PSK TLS 1.3 configuration options Signed-off-by: Ronald Cron --- docs/architecture/tls13-experimental.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/architecture/tls13-experimental.md b/docs/architecture/tls13-experimental.md index 1eef961a80..ee4e5fb592 100644 --- a/docs/architecture/tls13-experimental.md +++ b/docs/architecture/tls13-experimental.md @@ -163,7 +163,10 @@ the handshake with an handshake_failure closure alert. | MBEDTLS_USE_PSA_CRYPTO | no | (1) Some support has already been upstreamed but it is incomplete. - (2) Make sense in TLS 1.3 context but their current definition is TLS 1.2 only. + (2) Key exchange configuration options for TLS 1.3 will likely to be + organized around the notion of key exchange mode along the line + of the MBEDTLS_SSL_TLS13_KEY_EXCHANGE_MODE_NONE/PSK/PSK_EPHEMERAL/EPHEMERAL + runtime configuration macros. Not in the plan yet but probably necessary for a viable client: - server_name extension