diff --git a/scripts/base/protocols/ssl/consts.bro b/scripts/base/protocols/ssl/consts.bro index b95d299dca..aaac5aab84 100644 --- a/scripts/base/protocols/ssl/consts.bro +++ b/scripts/base/protocols/ssl/consts.bro @@ -407,6 +407,11 @@ export { const TLS_CHACHA20_POLY1305_SHA256 = 0x1303; const TLS_AES_128_CCM_SHA256 = 0x1304; const TLS_AES_128_CCM_8_SHA256 = 0x1305; + # Google... + const TLS_CECPQ1_RSA_WITH_CHACHA20_POLY1305_SHA256 = 0x16b7; + const TLS_CECPQ1_ECDSA_WITH_CHACHA20_POLY1305_SHA256 = 0x16b8; + const TLS_CECPQ1_RSA_WITH_AES_256_GCM_SHA384 = 0x16b9; + const TLS_CECPQ1_ECDSA_WITH_AES_256_GCM_SHA384 = 0x16ba; # draft-bmoeller-tls-downgrade-scsv-01 const TLS_FALLBACK_SCSV = 0x5600; # RFC 4492 @@ -797,6 +802,10 @@ export { [TLS_CHACHA20_POLY1305_SHA256] = "TLS_CHACHA20_POLY1305_SHA256", [TLS_AES_128_CCM_SHA256] = "TLS_AES_128_CCM_SHA256", [TLS_AES_128_CCM_8_SHA256] = "TLS_AES_128_CCM_8_SHA256", + [TLS_CECPQ1_RSA_WITH_CHACHA20_POLY1305_SHA256] = "TLS_CECPQ1_RSA_WITH_CHACHA20_POLY1305_SHA256", + [TLS_CECPQ1_ECDSA_WITH_CHACHA20_POLY1305_SHA256] = "TLS_CECPQ1_ECDSA_WITH_CHACHA20_POLY1305_SHA256", + [TLS_CECPQ1_RSA_WITH_AES_256_GCM_SHA384] = "TLS_CECPQ1_RSA_WITH_AES_256_GCM_SHA384", + [TLS_CECPQ1_ECDSA_WITH_AES_256_GCM_SHA384] = "TLS_CECPQ1_ECDSA_WITH_AES_256_GCM_SHA384", [TLS_FALLBACK_SCSV] = "TLS_FALLBACK_SCSV", [TLS_ECDH_ECDSA_WITH_NULL_SHA] = "TLS_ECDH_ECDSA_WITH_NULL_SHA", [TLS_ECDH_ECDSA_WITH_RC4_128_SHA] = "TLS_ECDH_ECDSA_WITH_RC4_128_SHA",