2.2.73 FW_PHASE2_CRYPTO_PFS

  • Article

This enumeration is used to identify the different perfect forward secrecy (PFS) options supported.

 typedef  enum _tag_FW_PHASE2_CRYPTO_PFS
 {
   FW_PHASE2_CRYPTO_PFS_INVALID = 0,
   FW_PHASE2_CRYPTO_PFS_DISABLE = 1,
   FW_PHASE2_CRYPTO_PFS_PHASE1 = 2,
   FW_PHASE2_CRYPTO_PFS_DH1 = 3,
   FW_PHASE2_CRYPTO_PFS_DH2 = 4,
   FW_PHASE2_CRYPTO_PFS_DH2048 = 5,
   FW_PHASE2_CRYPTO_PFS_ECDH256 = 6,
   FW_PHASE2_CRYPTO_PFS_ECDH384 = 7,
   FW_PHASE2_CRYPTO_PFS_DH24 = 8,
   FW_PHASE2_CRYPTO_PFS_MAX_V2_10 = FW_PHASE2_CRYPTO_PFS_DH24 = FW_PHASE2_CRYPTO_PFS_DH24,
   FW_PHASE2_CRYPTO_PFS_MAX = 9
 } FW_PHASE2_CRYPTO_PFS;

FW_PHASE2_CRYPTO_PFS_INVALID:  This value MUST NOT be used. It is defined for simplicity in writing IDL definitions and code. This symbolic constant has a value of 0.

FW_PHASE2_CRYPTO_PFS_DISABLE:  Do not renegotiate; instead, reuse the keying material negotiated in Phase 1 (main mode). This symbolic constant has a value of 1.

FW_PHASE2_CRYPTO_PFS_PHASE1:  Use Phase 1 key exchange to negotiate a Phase 2 (quick mode) key for every Phase 2 negotiation. This symbolic constant has a value of 2.

FW_PHASE2_CRYPTO_PFS_DH1:  Use DH1 key exchange to negotiate a Phase 2 (quick mode) key for every Phase 2 negotiation. This symbolic constant has a value of 3.

FW_PHASE2_CRYPTO_PFS_DH2:  Use DH2 key exchange to negotiate a Phase 2 (quick mode) key for every Phase 2 negotiation. This symbolic constant has a value of 4.

FW_PHASE2_CRYPTO_PFS_DH2048:  Use DH2048 key exchange to negotiate a Phase 2 (quick mode) key for every Phase 2 negotiation. This symbolic constant has a value of 5.

FW_PHASE2_CRYPTO_PFS_ECDH256:  Use ECDH256 key exchange to negotiate a Phase 2 (quick mode) key for every Phase 2 negotiation. This symbolic constant has a value of 6.

FW_PHASE2_CRYPTO_PFS_ECDH384:  Use ECDH384 key exchange to negotiate a Phase 2 (quick mode) key for every Phase 2 negotiation. This symbolic constant has a value of 7.

FW_PHASE2_CRYPTO_PFS_DH24:  Use DH24 key exchange to negotiate a Phase 2 (quick mode) key for every Phase 2 negotiation. For schema versions 0x0200, 0x0201, and 0x020A, this value is invalid and MUST NOT be used. This symbolic constant has a value of 8.

FW_PHASE2_CRYPTO_PFS_MAX_V2_10 = FW_PHASE2_CRYPTO_PFS_DH24:  This value and values that exceed this value are not valid and MUST NOT be used by servers and clients with schema version 0x020A and earlier. It is defined for simplicity in writing IDL definitions and code. This symbolic constant has a value of 8.

FW_PHASE2_CRYPTO_PFS_MAX:  This value and values that exceed this value are not valid and MUST NOT be used. It is defined for simplicity in writing IDL definitions and code. This symbolic constant has a value of 9.