Skip to content

Commit 31ceb1f

Browse files
committed
Add some missing signature algorithms to the lookups
1 parent cbbf062 commit 31ceb1f

1 file changed

Lines changed: 11 additions & 0 deletions

File tree

src/lookup-tables.ts

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -519,16 +519,27 @@ export const SUPPORTED_GROUPS: Record<number, string> = {
519519
};
520520

521521
// https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-signaturescheme
522+
// Also includes legacy TLS 1.2 (hash, signature) byte-pair values from RFC 5246 section 7.4.1.4.1
522523
export const SIGNATURE_ALGORITHMS: Record<number, string> = {
524+
// Legacy TLS 1.2 byte-pair schemes (hash << 8 | sig): hash 2=SHA-1, 3=SHA-224, 4=SHA-256,
525+
// 5=SHA-384, 6=SHA-512; sig 1=RSA, 2=DSA, 3=ECDSA
523526
0x0201: 'rsa_pkcs1_sha1',
527+
0x0202: 'dsa_sha1',
524528
0x0203: 'ecdsa_sha1',
529+
0x0301: 'rsa_pkcs1_sha224',
530+
0x0302: 'dsa_sha224',
531+
0x0303: 'ecdsa_sha224',
532+
// TLS 1.3 named signature schemes
525533
0x0401: 'rsa_pkcs1_sha256',
534+
0x0402: 'dsa_sha256',
526535
0x0403: 'ecdsa_secp256r1_sha256',
527536
0x0420: 'rsa_pkcs1_sha256_legacy',
528537
0x0501: 'rsa_pkcs1_sha384',
538+
0x0502: 'dsa_sha384',
529539
0x0503: 'ecdsa_secp384r1_sha384',
530540
0x0520: 'rsa_pkcs1_sha384_legacy',
531541
0x0601: 'rsa_pkcs1_sha512',
542+
0x0602: 'dsa_sha512',
532543
0x0603: 'ecdsa_secp521r1_sha512',
533544
0x0620: 'rsa_pkcs1_sha512_legacy',
534545
0x0704: 'eccsi_sha256',

0 commit comments

Comments
 (0)