httptls

var (
	// EncryptionAlgoList is a map of encryption algorithms to their human-readable names.
	EncryptionAlgoList = map[EncryptionAlgo]string{
		Encrypt28147CNT:       "28147-CNT",
		Encrypt3DESEDECBC:     "3DES-EDE-CBC",
		EncryptAES128CBC:      "AES-128-CBC",
		EncryptAES128CCM:      "AES-128-CCM",
		EncryptAES128CCM8:     "AES-128-CCM-8",
		EncryptAES128GCM:      "AES-128-GCM",
		EncryptAES256CBC:      "AES-256-CBC",
		EncryptAES256CCM:      "AES-256-CCM",
		EncryptAES256CCM8:     "AES-256-CCM-8",
		EncryptAES256GCM:      "AES-256-GCM",
		EncryptARIA128CBC:     "ARIA-128-CBC",
		EncryptARIA128GCM:     "ARIA-128-GCM",
		EncryptARIA256CBC:     "ARIA-256-CBC",
		EncryptARIA256GCM:     "ARIA-256-GCM",
		EncryptCamellia128CBC: "Camellia-128-CBC",
		EncryptCamellia128GCM: "Camellia-128-GCM",
		EncryptCamellia256CBC: "Camellia-256-CBC",
		EncryptCamellia256GCM: "Camellia-256-GCM",
		EncryptChaChaPoly:     "CHACHA20-POLY1305",
		EncryptDES40CBC:       "DES-40-CBC",
		EncryptDESCBC:         "DES-CBC",
		EncryptDESCBC40:       "DES-CBC-40",
		EncryptIDEACBC:        "IDEA-CBC",
		EncryptKuznyechikCTR:  "Kuznyechik-CTR",
		EncryptKuznyechikMGML: "Kuznyechik-MGM-L",
		EncryptKuznyechikMGMS: "Kuznyechik-MGM-S",
		EncryptMagmaCTR:       "Magma-CTR",
		EncryptMagmaMGML:      "Magma-MGM-L",
		EncryptMagmaMGMS:      "Magma-MGM-S",
		EncryptNULL:           "NULL",
		EncryptRC2CBC40:       "RC2-CBC-40",
		EncryptRC2CBC56:       "RC2-CBC-56",
		EncryptRC4128:         "RC4-128",
		EncryptRC440:          "RC4-40",
		EncryptRC456:          "RC4-56",
		EncryptSEEDCBC:        "SEED-CBC",
		EncryptSM4CCM:         "SM4-CCM",
		EncryptSM4GCM:         "SM4-GCM",
	}

	// AEADList is a map of Authenticated Encryption with Associated Data (AEAD)
	// encryption modes of operation. AEAD offers a much higher degree of security
	// than traditional encryption algorithms. They consist of GCM, CCM, and
	// Poly1305 modes.
	AEADList = map[EncryptionAlgo]bool{
		EncryptAES128CCM:      true,
		EncryptAES128CCM8:     true,
		EncryptAES128GCM:      true,
		EncryptAES256CCM:      true,
		EncryptAES256CCM8:     true,
		EncryptAES256GCM:      true,
		EncryptARIA128GCM:     true,
		EncryptARIA256GCM:     true,
		EncryptCamellia128GCM: true,
		EncryptCamellia256GCM: true,
		EncryptChaChaPoly:     true,
		EncryptSM4CCM:         true,
		EncryptSM4GCM:         true,
	}

	// NIST_SP_800_52EncList is oddly-named, but more understandable in this
	// format. As opposed to AEAD or PFS, the NIST SP 800-52 list requires
	// cipher suites which are a combination of cipher suites sections (key
	// exchange + auth sig + encryption + hash).
	//
	// See §3.3.1.1.1 Cipher Suites for ECDSA Certificates
	// See §3.3.1.1.2 Cipher Suites for RSA Certificates
	NIST_SP_800_52EncList = map[EncryptionAlgo]bool{
		EncryptAES128CBC:  true,
		EncryptAES128CCM:  true,
		EncryptAES128CCM8: true,
		EncryptAES128GCM:  true,
		EncryptAES256CBC:  true,
		EncryptAES256CCM:  true,
		EncryptAES256CCM8: true,
		EncryptAES256GCM:  true,
	}
)

var (
	// HashList is a map of hashing functions to their human-readable names.
	HashList = map[Hash]string{
		HashNone:   "None",
		HashMD5:    "MD5",
		HashSHA1:   "SHA-1",
		HashSHA224: "SHA-2, 224 bits",
		HashSHA256: "SHA-2, 256 bits",
		HashSHA384: "SHA-2, 384 bits",
		HashSHA512: "SHA-2, 512 bits",
		HashGOSTR:  "GOST R 34.10-2012 (Imitovstavka)",
		HashNULL:   "NULL",
		HashSM3:    "ShangMi-3 (SM3)",
	}

	// NIST_SP_800_52HashList is oddly-named, but more understandable in this
	// format. As opposed to AEAD or PFS, the NIST SP 800-52 list requires
	// cipher suites which are a combination of cipher suites sections (key
	// exchange + auth sig + encryption + hash).
	//
	// See §3.3.1.1.1 Cipher Suites for ECDSA Certificates
	// See §3.3.1.1.2 Cipher Suites for RSA Certificates
	NIST_SP_800_52HashList = map[Hash]bool{
		HashSHA256: true,
		HashSHA384: true,
	}
)

var (
	// KeyExchangeList is a map of key exchange algorithms to their human-readable names.
	KeyExchangeList = map[KeyExchange]string{
		KexNone:        "None",
		KexDH:          "Diffie-Hellman (Non-Ephemeral) (ECDH)",
		KexDHE:         "Diffie-Hellman (Ephemeral) (ECDHE)",
		KexECCPWD:      "ECCPWD",
		KexECDH:        "Elliptic Curve Diffie-Hellman (Non-Ephemeral) (ECDH)",
		KexECDHE:       "Elliptic Curve Diffie-Hellman (Ephemeral) (ECDHE)",
		KexGOSTR341094: "GOST R 34.10-1994",
		KexGOSTR341001: "GOST R 34.10-2001",
		KexKRB5:        "Kerberos (KRB5)",
		KexNULL:        "NULL",
		KexPSK:         "Pre-Shared Keys (PSK)",
		KexRSA:         "RSA",
		KexSRP:         "Secure Remote Password (SRP)",
		KexSM2:         "ShangMi-2 (SM2)",
	}

	// PFSList is a map of key exchange algorithms which fall under the definition
	// of Perfect Forward Secrecy (PFS). Perfect Forward Secrecy (PFS) is a property
	// of secure communication protocols in which compromise of long-term keys does
	// not compromise past session keys.
	PFSList = map[KeyExchange]bool{
		KexDHE:   true,
		KexECDHE: true,
	}

	// NIST_SP_800_52KexList is oddly-named, but more understandable in this
	// format. As opposed to AEAD or PFS, the NIST SP 800-52 list requires
	// cipher suites which are a combination of cipher suites sections (key
	// exchange + auth sig + encryption + hash).
	//
	// See §3.3.1.1.1 Cipher Suites for ECDSA Certificates
	// See §3.3.1.1.2 Cipher Suites for RSA Certificates
	NIST_SP_800_52KexList = map[KeyExchange]bool{
		KexDHE:   true,
		KexECDHE: true,
	}
)

var (
	// AuthenticationList is a map of signature algorithms to their human-readable names.
	AuthenticationList = map[Signature]string{
		SigAnonymous:   "Anonymous",
		SigDSA:         "NIST Digital Signature (DSA)",
		SigECCPWD:      "ECCPWD",
		SigECDSA:       "Elliptic Curve Digital Signature (ECDSA)",
		SigED25519:     "Edwards-curve Digital Signature (ED25519)",
		SigED448:       "Edwards-curve Digital Signature (ED448)",
		SigGOST256:     "Russian GOST 256-bit",
		SigGOST512:     "Russian GOST 512-bit",
		SigGOSTR341001: "GOST R 34.10-2001 (GOSTR341001)",
		SigGOSTR341094: "GOST R 34.10-1994 (GOSTR341094)",
		SigKRB5:        "Kerberos",
		SigNULL:        "NULL",
		SigPSK:         "Pre-Shared Keys (PSK)",
		SigRSA:         "RSA",
		SigSHA1:        "Secure Hash Algorithm 1 (SHA-1)",
		SigSHA1DSS:     "Secure Hash Algorithm 1 (SHA-1) with NIST DSS (SHA-1 DSS)",
		SigSHA1RSA:     "Secure Hash Algorithm 1 (SHA-1) with RSA (SHA-1 RSA)",
		SigSHA256:      "Secure Hash Algorithm 256 (SHA-256)",
		SigSHA384:      "Secure Hash Algorithm 384 (SHA-384)",
		SigSM2:         "ShangMi-2 (SM2)",
	}

	// NIST_SP_800_52AuthList is oddly-named, but more understandable in this
	// format. As opposed to AEAD or PFS, the NIST SP 800-52 list requires
	// cipher suites which are a combination of cipher suites sections (key
	// exchange + auth sig + encryption + hash).
	//
	// See §3.3.1.1.1 Cipher Suites for ECDSA Certificates
	// See §3.3.1.1.2 Cipher Suites for RSA Certificates
	NIST_SP_800_52AuthList = map[Signature]bool{
		SigECDSA: true,
		SigRSA:   true,
	}

	// FIPS-186 defines an allowed set of signature authentication algorithms.
	FIPS186List = map[Signature]bool{
		SigECDSA: true,
		SigRSA:   true,
	}
)

var CipherList = map[uint16]CipherData{}/* 342 elements not displayed */

var StrengthList = map[CipherStrength]string{
	StrengthInsecure:    "Insecure",
	StrengthWeak:        "Weak",
	StrengthSecure:      "Secure",
	StrengthRecommended: "Recommended",
}

var TLSVersion = map[uint16]string{
	0x0002: "SSLv2",
	0x0300: "SSLv3",
	0x0301: "TLSv1.0",
	0x0302: "TLSv1.1",
	0x0303: "TLSv1.2",
	0x0304: "TLSv1.3",
}