跳到主要内容

附录 A. 协议数据结构与常量值

本附录包含 TLS 协议使用的数据结构定义以及数值常量的参考值。所有协议元素均以本备忘录中定义的表示语言进行定义。以下补充信息以便于参考。

A.1. 记录层常量​

struct {
    uint8 major;
    uint8 minor;
} ProtocolVersion;

ProtocolVersion version = { 3, 3 };   /* TLS v1.2 */

内容类型（ContentType）值：

enum {
    change_cipher_spec(20), alert(21), handshake(22),
    application_data(23), (255)
} ContentType;

A.2. 握手协议常量​

握手消息类型（HandshakeType）：

enum {
    hello_request(0), client_hello(1), server_hello(2),
    certificate(11), server_key_exchange(12),
    certificate_request(13), server_hello_done(14),
    certificate_verify(15), client_key_exchange(16),
    finished(20), (255)
} HandshakeType;

A.3. 密码套件常量​

uint8 CipherSuite[2];

本备忘录定义的密码套件（部分）：

CipherSuite TLS_NULL_WITH_NULL_NULL                 = { 0x00,0x00 };
CipherSuite TLS_RSA_WITH_NULL_MD5                    = { 0x00,0x01 };
CipherSuite TLS_RSA_WITH_NULL_SHA                    = { 0x00,0x02 };
CipherSuite TLS_RSA_WITH_RC4_128_MD5                = { 0x00,0x04 };
CipherSuite TLS_RSA_WITH_RC4_128_SHA                = { 0x00,0x05 };
CipherSuite TLS_RSA_WITH_AES_128_CBC_SHA            = { 0x00,0x2F };
CipherSuite TLS_RSA_WITH_AES_256_CBC_SHA            = { 0x00,0x35 };
CipherSuite TLS_DH_DSS_WITH_AES_128_CBC_SHA         = { 0x00,0x30 };
CipherSuite TLS_DHE_RSA_WITH_AES_128_CBC_SHA        = { 0x00,0x33 };
CipherSuite TLS_DHE_RSA_WITH_AES_256_CBC_SHA        = { 0x00,0x39 };
CipherSuite TLS_RSA_WITH_AES_128_CBC_SHA256         = { 0x00,0x3C };
CipherSuite TLS_RSA_WITH_AES_256_CBC_SHA256         = { 0x00,0x3D };
CipherSuite TLS_RSA_WITH_AES_128_GCM_SHA256         = { 0x00,0x9C };
CipherSuite TLS_RSA_WITH_AES_256_GCM_SHA384         = { 0x00,0x9D };

A.4. 密钥交换算法​

enum { rsa, dhe_dss, dhe_rsa, dh_anon, dh_rsa, dh_dss,
       (255) } KeyExchangeAlgorithm;

A.5. 密码规格​

struct {
    ConnectionEnd          entity;
    PRFAlgorithm           prf_algorithm;
    BulkCipherAlgorithm    bulk_cipher_algorithm;
    CipherType             cipher_type;
    uint8                  enc_key_length;
    uint8                  block_length;
    uint8                  fixed_iv_length;
    uint8                  record_iv_length;
    MACAlgorithm           mac_algorithm;
    uint8                  mac_length;
    uint8                  mac_key_length;
    CompressionMethod      compression_algorithm;
    uint8                  renegotiation_info<0..255>;
} SecurityParameters;

A.6. 随机数​

struct {
    uint32 gmt_unix_time;
    opaque random_bytes[28];
} Random;

注意：本译文由 AI 翻译，可能包含错误。请参考 RFC 5246 官方英文原文进行核对。