1 /**
2  * \file dhm.h
3  *
4  * \brief   This file contains Diffie-Hellman-Merkle (DHM) key exchange
5  *          definitions and functions.
6  *
7  * Diffie-Hellman-Merkle (DHM) key exchange is defined in
8  * <em>RFC-2631: Diffie-Hellman Key Agreement Method</em> and
9  * <em>Public-Key Cryptography Standards (PKCS) #3: Diffie
10  * Hellman Key Agreement Standard</em>.
11  *
12  * <em>RFC-3526: More Modular Exponential (MODP) Diffie-Hellman groups for
13  * Internet Key Exchange (IKE)</em> defines a number of standardized
14  * Diffie-Hellman groups for IKE.
15  *
16  * <em>RFC-5114: Additional Diffie-Hellman Groups for Use with IETF
17  * Standards</em> defines a number of standardized Diffie-Hellman
18  * groups that can be used.
19  *
20  * \warning  The security of the DHM key exchange relies on the proper choice
21  *           of prime modulus - optimally, it should be a safe prime. The usage
22  *           of non-safe primes both decreases the difficulty of the underlying
23  *           discrete logarithm problem and can lead to small subgroup attacks
24  *           leaking private exponent bits when invalid public keys are used
25  *           and not detected. This is especially relevant if the same DHM
26  *           parameters are reused for multiple key exchanges as in static DHM,
27  *           while the criticality of small-subgroup attacks is lower for
28  *           ephemeral DHM.
29  *
30  * \warning  For performance reasons, the code does neither perform primality
31  *           nor safe primality tests, nor the expensive checks for invalid
32  *           subgroups. Moreover, even if these were performed, non-standardized
33  *           primes cannot be trusted because of the possibility of backdoors
34  *           that can't be effectively checked for.
35  *
36  * \warning  Diffie-Hellman-Merkle is therefore a security risk when not using
37  *           standardized primes generated using a trustworthy ("nothing up
38  *           my sleeve") method, such as the RFC 3526 / 7919 primes. In the TLS
39  *           protocol, DH parameters need to be negotiated, so using the default
40  *           primes systematically is not always an option. If possible, use
41  *           Elliptic Curve Diffie-Hellman (ECDH), which has better performance,
42  *           and for which the TLS protocol mandates the use of standard
43  *           parameters.
44  *
45  */
46 /*
47  *  Copyright The Mbed TLS Contributors
48  *  SPDX-License-Identifier: Apache-2.0
49  *
50  *  Licensed under the Apache License, Version 2.0 (the "License"); you may
51  *  not use this file except in compliance with the License.
52  *  You may obtain a copy of the License at
53  *
54  *  http://www.apache.org/licenses/LICENSE-2.0
55  *
56  *  Unless required by applicable law or agreed to in writing, software
57  *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
58  *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
59  *  See the License for the specific language governing permissions and
60  *  limitations under the License.
61  */
62 
63 #ifndef MBEDTLS_DHM_H
64 #define MBEDTLS_DHM_H
65 #include "mbedtls/private_access.h"
66 
67 #include "mbedtls/build_info.h"
68 #include "mbedtls/bignum.h"
69 
70 /*
71  * DHM Error codes
72  */
73 /** Bad input parameters. */
74 #define MBEDTLS_ERR_DHM_BAD_INPUT_DATA                    -0x3080
75 /** Reading of the DHM parameters failed. */
76 #define MBEDTLS_ERR_DHM_READ_PARAMS_FAILED                -0x3100
77 /** Making of the DHM parameters failed. */
78 #define MBEDTLS_ERR_DHM_MAKE_PARAMS_FAILED                -0x3180
79 /** Reading of the public values failed. */
80 #define MBEDTLS_ERR_DHM_READ_PUBLIC_FAILED                -0x3200
81 /** Making of the public value failed. */
82 #define MBEDTLS_ERR_DHM_MAKE_PUBLIC_FAILED                -0x3280
83 /** Calculation of the DHM secret failed. */
84 #define MBEDTLS_ERR_DHM_CALC_SECRET_FAILED                -0x3300
85 /** The ASN.1 data is not formatted correctly. */
86 #define MBEDTLS_ERR_DHM_INVALID_FORMAT                    -0x3380
87 /** Allocation of memory failed. */
88 #define MBEDTLS_ERR_DHM_ALLOC_FAILED                      -0x3400
89 /** Read or write of file failed. */
90 #define MBEDTLS_ERR_DHM_FILE_IO_ERROR                     -0x3480
91 /** Setting the modulus and generator failed. */
92 #define MBEDTLS_ERR_DHM_SET_GROUP_FAILED                  -0x3580
93 
94 /** Which parameter to access in mbedtls_dhm_get_value(). */
95 typedef enum {
96     MBEDTLS_DHM_PARAM_P,  /*!<  The prime modulus. */
97     MBEDTLS_DHM_PARAM_G,  /*!<  The generator. */
98     MBEDTLS_DHM_PARAM_X,  /*!<  Our secret value. */
99     MBEDTLS_DHM_PARAM_GX, /*!<  Our public key = \c G^X mod \c P. */
100     MBEDTLS_DHM_PARAM_GY, /*!<  The public key of the peer = \c G^Y mod \c P. */
101     MBEDTLS_DHM_PARAM_K,  /*!<  The shared secret = \c G^(XY) mod \c P. */
102 } mbedtls_dhm_parameter;
103 
104 #ifdef __cplusplus
105 extern "C" {
106 #endif
107 
108 #if !defined(MBEDTLS_DHM_ALT)
109 
110 /**
111  * \brief          The DHM context structure.
112  */
113 typedef struct mbedtls_dhm_context {
114     mbedtls_mpi MBEDTLS_PRIVATE(P);      /*!<  The prime modulus. */
115     mbedtls_mpi MBEDTLS_PRIVATE(G);      /*!<  The generator. */
116     mbedtls_mpi MBEDTLS_PRIVATE(X);      /*!<  Our secret value. */
117     mbedtls_mpi MBEDTLS_PRIVATE(GX);     /*!<  Our public key = \c G^X mod \c P. */
118     mbedtls_mpi MBEDTLS_PRIVATE(GY);     /*!<  The public key of the peer = \c G^Y mod \c P. */
119     mbedtls_mpi MBEDTLS_PRIVATE(K);      /*!<  The shared secret = \c G^(XY) mod \c P. */
120     mbedtls_mpi MBEDTLS_PRIVATE(RP);     /*!<  The cached value = \c R^2 mod \c P. */
121     mbedtls_mpi MBEDTLS_PRIVATE(Vi);     /*!<  The blinding value. */
122     mbedtls_mpi MBEDTLS_PRIVATE(Vf);     /*!<  The unblinding value. */
123     mbedtls_mpi MBEDTLS_PRIVATE(pX);     /*!<  The previous \c X. */
124 }
125 mbedtls_dhm_context;
126 
127 #else /* MBEDTLS_DHM_ALT */
128 #include "dhm_alt.h"
129 #endif /* MBEDTLS_DHM_ALT */
130 
131 /**
132  * \brief          This function initializes the DHM context.
133  *
134  * \param ctx      The DHM context to initialize.
135  */
136 void mbedtls_dhm_init(mbedtls_dhm_context *ctx);
137 
138 /**
139  * \brief          This function parses the DHM parameters in a
140  *                 TLS ServerKeyExchange handshake message
141  *                 (DHM modulus, generator, and public key).
142  *
143  * \note           In a TLS handshake, this is the how the client
144  *                 sets up its DHM context from the server's public
145  *                 DHM key material.
146  *
147  * \param ctx      The DHM context to use. This must be initialized.
148  * \param p        On input, *p must be the start of the input buffer.
149  *                 On output, *p is updated to point to the end of the data
150  *                 that has been read. On success, this is the first byte
151  *                 past the end of the ServerKeyExchange parameters.
152  *                 On error, this is the point at which an error has been
153  *                 detected, which is usually not useful except to debug
154  *                 failures.
155  * \param end      The end of the input buffer.
156  *
157  * \return         \c 0 on success.
158  * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure.
159  */
160 int mbedtls_dhm_read_params(mbedtls_dhm_context *ctx,
161                             unsigned char **p,
162                             const unsigned char *end);
163 
164 /**
165  * \brief          This function generates a DHM key pair and exports its
166  *                 public part together with the DHM parameters in the format
167  *                 used in a TLS ServerKeyExchange handshake message.
168  *
169  * \note           This function assumes that the DHM parameters \c ctx->P
170  *                 and \c ctx->G have already been properly set. For that, use
171  *                 mbedtls_dhm_set_group() below in conjunction with
172  *                 mbedtls_mpi_read_binary() and mbedtls_mpi_read_string().
173  *
174  * \note           In a TLS handshake, this is the how the server generates
175  *                 and exports its DHM key material.
176  *
177  * \param ctx      The DHM context to use. This must be initialized
178  *                 and have the DHM parameters set. It may or may not
179  *                 already have imported the peer's public key.
180  * \param x_size   The private key size in Bytes.
181  * \param olen     The address at which to store the number of Bytes
182  *                 written on success. This must not be \c NULL.
183  * \param output   The destination buffer. This must be a writable buffer of
184  *                 sufficient size to hold the reduced binary presentation of
185  *                 the modulus, the generator and the public key, each wrapped
186  *                 with a 2-byte length field. It is the responsibility of the
187  *                 caller to ensure that enough space is available. Refer to
188  *                 mbedtls_mpi_size() to computing the byte-size of an MPI.
189  * \param f_rng    The RNG function. Must not be \c NULL.
190  * \param p_rng    The RNG context to be passed to \p f_rng. This may be
191  *                 \c NULL if \p f_rng doesn't need a context parameter.
192  *
193  * \return         \c 0 on success.
194  * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure.
195  */
196 int mbedtls_dhm_make_params(mbedtls_dhm_context *ctx, int x_size,
197                             unsigned char *output, size_t *olen,
198                             int (*f_rng)(void *, unsigned char *, size_t),
199                             void *p_rng);
200 
201 /**
202  * \brief          This function sets the prime modulus and generator.
203  *
204  * \note           This function can be used to set \c ctx->P, \c ctx->G
205  *                 in preparation for mbedtls_dhm_make_params().
206  *
207  * \param ctx      The DHM context to configure. This must be initialized.
208  * \param P        The MPI holding the DHM prime modulus. This must be
209  *                 an initialized MPI.
210  * \param G        The MPI holding the DHM generator. This must be an
211  *                 initialized MPI.
212  *
213  * \return         \c 0 if successful.
214  * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure.
215  */
216 int mbedtls_dhm_set_group(mbedtls_dhm_context *ctx,
217                           const mbedtls_mpi *P,
218                           const mbedtls_mpi *G);
219 
220 /**
221  * \brief          This function imports the raw public value of the peer.
222  *
223  * \note           In a TLS handshake, this is the how the server imports
224  *                 the Client's public DHM key.
225  *
226  * \param ctx      The DHM context to use. This must be initialized and have
227  *                 its DHM parameters set, e.g. via mbedtls_dhm_set_group().
228  *                 It may or may not already have generated its own private key.
229  * \param input    The input buffer containing the \c G^Y value of the peer.
230  *                 This must be a readable buffer of size \p ilen Bytes.
231  * \param ilen     The size of the input buffer \p input in Bytes.
232  *
233  * \return         \c 0 on success.
234  * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure.
235  */
236 int mbedtls_dhm_read_public(mbedtls_dhm_context *ctx,
237                             const unsigned char *input, size_t ilen);
238 
239 /**
240  * \brief          This function creates a DHM key pair and exports
241  *                 the raw public key in big-endian format.
242  *
243  * \note           The destination buffer is always fully written
244  *                 so as to contain a big-endian representation of G^X mod P.
245  *                 If it is larger than \c ctx->len, it is padded accordingly
246  *                 with zero-bytes at the beginning.
247  *
248  * \param ctx      The DHM context to use. This must be initialized and
249  *                 have the DHM parameters set. It may or may not already
250  *                 have imported the peer's public key.
251  * \param x_size   The private key size in Bytes.
252  * \param output   The destination buffer. This must be a writable buffer of
253  *                 size \p olen Bytes.
254  * \param olen     The length of the destination buffer. This must be at least
255  *                 equal to `ctx->len` (the size of \c P).
256  * \param f_rng    The RNG function. This must not be \c NULL.
257  * \param p_rng    The RNG context to be passed to \p f_rng. This may be \c NULL
258  *                 if \p f_rng doesn't need a context argument.
259  *
260  * \return         \c 0 on success.
261  * \return         An \c MBEDTLS_ERR_DHM_XXX error code on failure.
262  */
263 int mbedtls_dhm_make_public(mbedtls_dhm_context *ctx, int x_size,
264                             unsigned char *output, size_t olen,
265                             int (*f_rng)(void *, unsigned char *, size_t),
266                             void *p_rng);
267 
268 /**
269  * \brief          This function derives and exports the shared secret
270  *                 \c (G^Y)^X mod \c P.
271  *
272  * \note           If \p f_rng is not \c NULL, it is used to blind the input as
273  *                 a countermeasure against timing attacks. Blinding is used
274  *                 only if our private key \c X is re-used, and not used
275  *                 otherwise. We recommend always passing a non-NULL
276  *                 \p f_rng argument.
277  *
278  * \param ctx           The DHM context to use. This must be initialized
279  *                      and have its own private key generated and the peer's
280  *                      public key imported.
281  * \param output        The buffer to write the generated shared key to. This
282  *                      must be a writable buffer of size \p output_size Bytes.
283  * \param output_size   The size of the destination buffer. This must be at
284  *                      least the size of \c ctx->len (the size of \c P).
285  * \param olen          On exit, holds the actual number of Bytes written.
286  * \param f_rng         The RNG function. Must not be \c NULL. Used for
287  *                      blinding.
288  * \param p_rng         The RNG context to be passed to \p f_rng. This may be
289  *                      \c NULL if \p f_rng doesn't need a context parameter.
290  *
291  * \return              \c 0 on success.
292  * \return              An \c MBEDTLS_ERR_DHM_XXX error code on failure.
293  */
294 int mbedtls_dhm_calc_secret(mbedtls_dhm_context *ctx,
295                             unsigned char *output, size_t output_size, size_t *olen,
296                             int (*f_rng)(void *, unsigned char *, size_t),
297                             void *p_rng);
298 
299 /**
300  * \brief          This function returns the size of the prime modulus in bits.
301  *
302  * \param ctx      The DHM context to query.
303  *
304  * \return         The size of the prime modulus in bits,
305  *                 i.e. the number n such that 2^(n-1) <= P < 2^n.
306  */
307 size_t mbedtls_dhm_get_bitlen(const mbedtls_dhm_context *ctx);
308 
309 /**
310  * \brief          This function returns the size of the prime modulus in bytes.
311  *
312  * \param ctx      The DHM context to query.
313  *
314  * \return         The size of the prime modulus in bytes,
315  *                 i.e. the number n such that 2^(8*(n-1)) <= P < 2^(8*n).
316  */
317 size_t mbedtls_dhm_get_len(const mbedtls_dhm_context *ctx);
318 
319 /**
320  * \brief          This function copies a parameter of a DHM key.
321  *
322  * \param ctx      The DHM context to query.
323  * \param param    The parameter to copy.
324  * \param dest     The MPI object to copy the value into. It must be
325  *                 initialized.
326  *
327  * \return         \c 0 on success.
328  * \return         #MBEDTLS_ERR_DHM_BAD_INPUT_DATA if \p field is invalid.
329  * \return         An \c MBEDTLS_ERR_MPI_XXX error code if the copy fails.
330  */
331 int mbedtls_dhm_get_value(const mbedtls_dhm_context *ctx,
332                           mbedtls_dhm_parameter param,
333                           mbedtls_mpi *dest);
334 
335 /**
336  * \brief          This function frees and clears the components
337  *                 of a DHM context.
338  *
339  * \param ctx      The DHM context to free and clear. This may be \c NULL,
340  *                 in which case this function is a no-op. If it is not \c NULL,
341  *                 it must point to an initialized DHM context.
342  */
343 void mbedtls_dhm_free(mbedtls_dhm_context *ctx);
344 
345 #if defined(MBEDTLS_ASN1_PARSE_C)
346 /**
347  * \brief             This function parses DHM parameters in PEM or DER format.
348  *
349  * \param dhm         The DHM context to import the DHM parameters into.
350  *                    This must be initialized.
351  * \param dhmin       The input buffer. This must be a readable buffer of
352  *                    length \p dhminlen Bytes.
353  * \param dhminlen    The size of the input buffer \p dhmin, including the
354  *                    terminating \c NULL Byte for PEM data.
355  *
356  * \return            \c 0 on success.
357  * \return            An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX error
358  *                    code on failure.
359  */
360 int mbedtls_dhm_parse_dhm(mbedtls_dhm_context *dhm, const unsigned char *dhmin,
361                           size_t dhminlen);
362 
363 #if defined(MBEDTLS_FS_IO)
364 /**
365  * \brief          This function loads and parses DHM parameters from a file.
366  *
367  * \param dhm      The DHM context to load the parameters to.
368  *                 This must be initialized.
369  * \param path     The filename to read the DHM parameters from.
370  *                 This must not be \c NULL.
371  *
372  * \return         \c 0 on success.
373  * \return         An \c MBEDTLS_ERR_DHM_XXX or \c MBEDTLS_ERR_PEM_XXX
374  *                 error code on failure.
375  */
376 int mbedtls_dhm_parse_dhmfile(mbedtls_dhm_context *dhm, const char *path);
377 #endif /* MBEDTLS_FS_IO */
378 #endif /* MBEDTLS_ASN1_PARSE_C */
379 
380 #if defined(MBEDTLS_SELF_TEST)
381 
382 /**
383  * \brief          The DMH checkup routine.
384  *
385  * \return         \c 0 on success.
386  * \return         \c 1 on failure.
387  */
388 int mbedtls_dhm_self_test(int verbose);
389 
390 #endif /* MBEDTLS_SELF_TEST */
391 #ifdef __cplusplus
392 }
393 #endif
394 
395 /**
396  * RFC 3526, RFC 5114 and RFC 7919 standardize a number of
397  * Diffie-Hellman groups, some of which are included here
398  * for use within the SSL/TLS module and the user's convenience
399  * when configuring the Diffie-Hellman parameters by hand
400  * through \c mbedtls_ssl_conf_dh_param.
401  *
402  * The following lists the source of the above groups in the standards:
403  * - RFC 5114 section 2.2:  2048-bit MODP Group with 224-bit Prime Order Subgroup
404  * - RFC 3526 section 3:    2048-bit MODP Group
405  * - RFC 3526 section 4:    3072-bit MODP Group
406  * - RFC 3526 section 5:    4096-bit MODP Group
407  * - RFC 7919 section A.1:  ffdhe2048
408  * - RFC 7919 section A.2:  ffdhe3072
409  * - RFC 7919 section A.3:  ffdhe4096
410  * - RFC 7919 section A.4:  ffdhe6144
411  * - RFC 7919 section A.5:  ffdhe8192
412  *
413  * The constants with suffix "_p" denote the chosen prime moduli, while
414  * the constants with suffix "_g" denote the chosen generator
415  * of the associated prime field.
416  *
417  * The constants further suffixed with "_bin" are provided in binary format,
418  * while all other constants represent null-terminated strings holding the
419  * hexadecimal presentation of the respective numbers.
420  *
421  * The primes from RFC 3526 and RFC 7919 have been generating by the following
422  * trust-worthy procedure:
423  * - Fix N in { 2048, 3072, 4096, 6144, 8192 } and consider the N-bit number
424  *   the first and last 64 bits are all 1, and the remaining N - 128 bits of
425  *   which are 0x7ff...ff.
426  * - Add the smallest multiple of the first N - 129 bits of the binary expansion
427  *   of pi (for RFC 5236) or e (for RFC 7919) to this intermediate bit-string
428  *   such that the resulting integer is a safe-prime.
429  * - The result is the respective RFC 3526 / 7919 prime, and the corresponding
430  *   generator is always chosen to be 2 (which is a square for these prime,
431  *   hence the corresponding subgroup has order (p-1)/2 and avoids leaking a
432  *   bit in the private exponent).
433  *
434  */
435 
436 /*
437  * Trustworthy DHM parameters in binary form
438  */
439 
440 #define MBEDTLS_DHM_RFC3526_MODP_2048_P_BIN {        \
441         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
442         0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \
443         0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \
444         0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \
445         0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \
446         0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \
447         0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \
448         0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \
449         0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \
450         0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \
451         0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \
452         0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \
453         0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \
454         0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \
455         0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \
456         0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \
457         0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \
458         0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \
459         0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \
460         0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \
461         0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \
462         0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \
463         0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \
464         0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \
465         0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \
466         0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \
467         0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \
468         0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \
469         0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \
470         0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \
471         0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAC, 0xAA, 0x68, \
472         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
473 
474 #define MBEDTLS_DHM_RFC3526_MODP_2048_G_BIN { 0x02 }
475 
476 #define MBEDTLS_DHM_RFC3526_MODP_3072_P_BIN {       \
477         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
478         0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, \
479         0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1, \
480         0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74, \
481         0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22, \
482         0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, \
483         0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, \
484         0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37, \
485         0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45, \
486         0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6, \
487         0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, \
488         0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, \
489         0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, \
490         0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, \
491         0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D, \
492         0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05, \
493         0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A, \
494         0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F, \
495         0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96, \
496         0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, \
497         0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, \
498         0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04, \
499         0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C, \
500         0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B, \
501         0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03, \
502         0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F, \
503         0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, \
504         0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, \
505         0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5, \
506         0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10, \
507         0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D, \
508         0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33, \
509         0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64, \
510         0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, \
511         0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, \
512         0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7, \
513         0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7, \
514         0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D, \
515         0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B, \
516         0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64, \
517         0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, \
518         0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, \
519         0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C, \
520         0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2, \
521         0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31, \
522         0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E, \
523         0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x3A, 0xD2, 0xCA, \
524         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
525 
526 #define MBEDTLS_DHM_RFC3526_MODP_3072_G_BIN { 0x02 }
527 
528 #define MBEDTLS_DHM_RFC3526_MODP_4096_P_BIN  {       \
529         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,  \
530         0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,  \
531         0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,  \
532         0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,  \
533         0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,  \
534         0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,  \
535         0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,  \
536         0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,  \
537         0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,  \
538         0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,  \
539         0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,  \
540         0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,  \
541         0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,  \
542         0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,  \
543         0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D,  \
544         0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05,  \
545         0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A,  \
546         0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F,  \
547         0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96,  \
548         0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB,  \
549         0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D,  \
550         0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04,  \
551         0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C,  \
552         0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B,  \
553         0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03,  \
554         0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F,  \
555         0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9,  \
556         0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18,  \
557         0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5,  \
558         0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10,  \
559         0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D,  \
560         0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33,  \
561         0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64,  \
562         0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A,  \
563         0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D,  \
564         0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7,  \
565         0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7,  \
566         0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D,  \
567         0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B,  \
568         0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64,  \
569         0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64,  \
570         0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C,  \
571         0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C,  \
572         0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2,  \
573         0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31,  \
574         0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E,  \
575         0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x21, 0x08, 0x01,  \
576         0x1A, 0x72, 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7,  \
577         0x88, 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26,  \
578         0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, 0x3C,  \
579         0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, 0x0B, 0xDA,  \
580         0x25, 0x83, 0xE9, 0xCA, 0x2A, 0xD4, 0x4C, 0xE8,  \
581         0xDB, 0xBB, 0xC2, 0xDB, 0x04, 0xDE, 0x8E, 0xF9,  \
582         0x2E, 0x8E, 0xFC, 0x14, 0x1F, 0xBE, 0xCA, 0xA6,  \
583         0x28, 0x7C, 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D,  \
584         0x99, 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2,  \
585         0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, 0xED,  \
586         0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, 0xD7, 0xAF,  \
587         0xB8, 0x1B, 0xDD, 0x76, 0x21, 0x70, 0x48, 0x1C,  \
588         0xD0, 0x06, 0x91, 0x27, 0xD5, 0xB0, 0x5A, 0xA9,  \
589         0x93, 0xB4, 0xEA, 0x98, 0x8D, 0x8F, 0xDD, 0xC1,  \
590         0x86, 0xFF, 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F,  \
591         0x4D, 0xF4, 0x35, 0xC9, 0x34, 0x06, 0x31, 0x99,  \
592         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
593 
594 #define MBEDTLS_DHM_RFC3526_MODP_4096_G_BIN { 0x02 }
595 
596 #define MBEDTLS_DHM_RFC7919_FFDHE2048_P_BIN {        \
597         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
598         0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
599         0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
600         0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
601         0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
602         0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
603         0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
604         0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
605         0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
606         0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
607         0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
608         0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
609         0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
610         0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
611         0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
612         0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
613         0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
614         0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
615         0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
616         0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
617         0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
618         0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
619         0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
620         0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
621         0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
622         0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
623         0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
624         0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
625         0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
626         0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
627         0x88, 0x6B, 0x42, 0x38, 0x61, 0x28, 0x5C, 0x97, \
628         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, }
629 
630 #define MBEDTLS_DHM_RFC7919_FFDHE2048_G_BIN { 0x02 }
631 
632 #define MBEDTLS_DHM_RFC7919_FFDHE3072_P_BIN { \
633         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
634         0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
635         0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
636         0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
637         0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
638         0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
639         0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
640         0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
641         0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
642         0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
643         0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
644         0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
645         0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
646         0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
647         0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
648         0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
649         0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
650         0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
651         0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
652         0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
653         0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
654         0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
655         0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
656         0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
657         0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
658         0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
659         0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
660         0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
661         0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
662         0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
663         0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
664         0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
665         0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
666         0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
667         0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
668         0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
669         0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
670         0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
671         0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
672         0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
673         0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
674         0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
675         0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
676         0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
677         0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
678         0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
679         0x25, 0xE4, 0x1D, 0x2B, 0x66, 0xC6, 0x2E, 0x37, \
680         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
681 
682 #define MBEDTLS_DHM_RFC7919_FFDHE3072_G_BIN { 0x02 }
683 
684 #define MBEDTLS_DHM_RFC7919_FFDHE4096_P_BIN {        \
685         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
686         0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
687         0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
688         0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
689         0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
690         0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
691         0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
692         0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
693         0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
694         0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
695         0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
696         0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
697         0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
698         0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
699         0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
700         0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
701         0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
702         0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
703         0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
704         0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
705         0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
706         0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
707         0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
708         0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
709         0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
710         0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
711         0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
712         0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
713         0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
714         0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
715         0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
716         0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
717         0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
718         0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
719         0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
720         0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
721         0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
722         0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
723         0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
724         0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
725         0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
726         0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
727         0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
728         0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
729         0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
730         0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
731         0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
732         0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
733         0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
734         0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
735         0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
736         0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
737         0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
738         0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
739         0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
740         0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
741         0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
742         0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
743         0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
744         0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
745         0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
746         0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
747         0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x65, 0x5F, 0x6A, \
748         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
749 
750 #define MBEDTLS_DHM_RFC7919_FFDHE4096_G_BIN { 0x02 }
751 
752 #define MBEDTLS_DHM_RFC7919_FFDHE6144_P_BIN {        \
753         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
754         0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
755         0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
756         0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
757         0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
758         0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
759         0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
760         0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
761         0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
762         0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
763         0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
764         0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
765         0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
766         0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
767         0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
768         0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
769         0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
770         0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
771         0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
772         0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
773         0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
774         0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
775         0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
776         0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
777         0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
778         0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
779         0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
780         0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
781         0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
782         0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
783         0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
784         0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
785         0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
786         0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
787         0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
788         0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
789         0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
790         0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
791         0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
792         0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
793         0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
794         0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
795         0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
796         0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
797         0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
798         0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
799         0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
800         0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
801         0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
802         0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
803         0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
804         0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
805         0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
806         0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
807         0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
808         0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
809         0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
810         0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
811         0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
812         0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
813         0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
814         0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
815         0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \
816         0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \
817         0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \
818         0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \
819         0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \
820         0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \
821         0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \
822         0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \
823         0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \
824         0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \
825         0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \
826         0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \
827         0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \
828         0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \
829         0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \
830         0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \
831         0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \
832         0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \
833         0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \
834         0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \
835         0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \
836         0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \
837         0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \
838         0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \
839         0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \
840         0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \
841         0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \
842         0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \
843         0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \
844         0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \
845         0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \
846         0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \
847         0xA4, 0x0E, 0x32, 0x9C, 0xD0, 0xE4, 0x0E, 0x65, \
848         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
849 
850 #define MBEDTLS_DHM_RFC7919_FFDHE6144_G_BIN { 0x02 }
851 
852 #define MBEDTLS_DHM_RFC7919_FFDHE8192_P_BIN {        \
853         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, \
854         0xAD, 0xF8, 0x54, 0x58, 0xA2, 0xBB, 0x4A, 0x9A, \
855         0xAF, 0xDC, 0x56, 0x20, 0x27, 0x3D, 0x3C, 0xF1, \
856         0xD8, 0xB9, 0xC5, 0x83, 0xCE, 0x2D, 0x36, 0x95, \
857         0xA9, 0xE1, 0x36, 0x41, 0x14, 0x64, 0x33, 0xFB, \
858         0xCC, 0x93, 0x9D, 0xCE, 0x24, 0x9B, 0x3E, 0xF9, \
859         0x7D, 0x2F, 0xE3, 0x63, 0x63, 0x0C, 0x75, 0xD8, \
860         0xF6, 0x81, 0xB2, 0x02, 0xAE, 0xC4, 0x61, 0x7A, \
861         0xD3, 0xDF, 0x1E, 0xD5, 0xD5, 0xFD, 0x65, 0x61, \
862         0x24, 0x33, 0xF5, 0x1F, 0x5F, 0x06, 0x6E, 0xD0, \
863         0x85, 0x63, 0x65, 0x55, 0x3D, 0xED, 0x1A, 0xF3, \
864         0xB5, 0x57, 0x13, 0x5E, 0x7F, 0x57, 0xC9, 0x35, \
865         0x98, 0x4F, 0x0C, 0x70, 0xE0, 0xE6, 0x8B, 0x77, \
866         0xE2, 0xA6, 0x89, 0xDA, 0xF3, 0xEF, 0xE8, 0x72, \
867         0x1D, 0xF1, 0x58, 0xA1, 0x36, 0xAD, 0xE7, 0x35, \
868         0x30, 0xAC, 0xCA, 0x4F, 0x48, 0x3A, 0x79, 0x7A, \
869         0xBC, 0x0A, 0xB1, 0x82, 0xB3, 0x24, 0xFB, 0x61, \
870         0xD1, 0x08, 0xA9, 0x4B, 0xB2, 0xC8, 0xE3, 0xFB, \
871         0xB9, 0x6A, 0xDA, 0xB7, 0x60, 0xD7, 0xF4, 0x68, \
872         0x1D, 0x4F, 0x42, 0xA3, 0xDE, 0x39, 0x4D, 0xF4, \
873         0xAE, 0x56, 0xED, 0xE7, 0x63, 0x72, 0xBB, 0x19, \
874         0x0B, 0x07, 0xA7, 0xC8, 0xEE, 0x0A, 0x6D, 0x70, \
875         0x9E, 0x02, 0xFC, 0xE1, 0xCD, 0xF7, 0xE2, 0xEC, \
876         0xC0, 0x34, 0x04, 0xCD, 0x28, 0x34, 0x2F, 0x61, \
877         0x91, 0x72, 0xFE, 0x9C, 0xE9, 0x85, 0x83, 0xFF, \
878         0x8E, 0x4F, 0x12, 0x32, 0xEE, 0xF2, 0x81, 0x83, \
879         0xC3, 0xFE, 0x3B, 0x1B, 0x4C, 0x6F, 0xAD, 0x73, \
880         0x3B, 0xB5, 0xFC, 0xBC, 0x2E, 0xC2, 0x20, 0x05, \
881         0xC5, 0x8E, 0xF1, 0x83, 0x7D, 0x16, 0x83, 0xB2, \
882         0xC6, 0xF3, 0x4A, 0x26, 0xC1, 0xB2, 0xEF, 0xFA, \
883         0x88, 0x6B, 0x42, 0x38, 0x61, 0x1F, 0xCF, 0xDC, \
884         0xDE, 0x35, 0x5B, 0x3B, 0x65, 0x19, 0x03, 0x5B, \
885         0xBC, 0x34, 0xF4, 0xDE, 0xF9, 0x9C, 0x02, 0x38, \
886         0x61, 0xB4, 0x6F, 0xC9, 0xD6, 0xE6, 0xC9, 0x07, \
887         0x7A, 0xD9, 0x1D, 0x26, 0x91, 0xF7, 0xF7, 0xEE, \
888         0x59, 0x8C, 0xB0, 0xFA, 0xC1, 0x86, 0xD9, 0x1C, \
889         0xAE, 0xFE, 0x13, 0x09, 0x85, 0x13, 0x92, 0x70, \
890         0xB4, 0x13, 0x0C, 0x93, 0xBC, 0x43, 0x79, 0x44, \
891         0xF4, 0xFD, 0x44, 0x52, 0xE2, 0xD7, 0x4D, 0xD3, \
892         0x64, 0xF2, 0xE2, 0x1E, 0x71, 0xF5, 0x4B, 0xFF, \
893         0x5C, 0xAE, 0x82, 0xAB, 0x9C, 0x9D, 0xF6, 0x9E, \
894         0xE8, 0x6D, 0x2B, 0xC5, 0x22, 0x36, 0x3A, 0x0D, \
895         0xAB, 0xC5, 0x21, 0x97, 0x9B, 0x0D, 0xEA, 0xDA, \
896         0x1D, 0xBF, 0x9A, 0x42, 0xD5, 0xC4, 0x48, 0x4E, \
897         0x0A, 0xBC, 0xD0, 0x6B, 0xFA, 0x53, 0xDD, 0xEF, \
898         0x3C, 0x1B, 0x20, 0xEE, 0x3F, 0xD5, 0x9D, 0x7C, \
899         0x25, 0xE4, 0x1D, 0x2B, 0x66, 0x9E, 0x1E, 0xF1, \
900         0x6E, 0x6F, 0x52, 0xC3, 0x16, 0x4D, 0xF4, 0xFB, \
901         0x79, 0x30, 0xE9, 0xE4, 0xE5, 0x88, 0x57, 0xB6, \
902         0xAC, 0x7D, 0x5F, 0x42, 0xD6, 0x9F, 0x6D, 0x18, \
903         0x77, 0x63, 0xCF, 0x1D, 0x55, 0x03, 0x40, 0x04, \
904         0x87, 0xF5, 0x5B, 0xA5, 0x7E, 0x31, 0xCC, 0x7A, \
905         0x71, 0x35, 0xC8, 0x86, 0xEF, 0xB4, 0x31, 0x8A, \
906         0xED, 0x6A, 0x1E, 0x01, 0x2D, 0x9E, 0x68, 0x32, \
907         0xA9, 0x07, 0x60, 0x0A, 0x91, 0x81, 0x30, 0xC4, \
908         0x6D, 0xC7, 0x78, 0xF9, 0x71, 0xAD, 0x00, 0x38, \
909         0x09, 0x29, 0x99, 0xA3, 0x33, 0xCB, 0x8B, 0x7A, \
910         0x1A, 0x1D, 0xB9, 0x3D, 0x71, 0x40, 0x00, 0x3C, \
911         0x2A, 0x4E, 0xCE, 0xA9, 0xF9, 0x8D, 0x0A, 0xCC, \
912         0x0A, 0x82, 0x91, 0xCD, 0xCE, 0xC9, 0x7D, 0xCF, \
913         0x8E, 0xC9, 0xB5, 0x5A, 0x7F, 0x88, 0xA4, 0x6B, \
914         0x4D, 0xB5, 0xA8, 0x51, 0xF4, 0x41, 0x82, 0xE1, \
915         0xC6, 0x8A, 0x00, 0x7E, 0x5E, 0x0D, 0xD9, 0x02, \
916         0x0B, 0xFD, 0x64, 0xB6, 0x45, 0x03, 0x6C, 0x7A, \
917         0x4E, 0x67, 0x7D, 0x2C, 0x38, 0x53, 0x2A, 0x3A, \
918         0x23, 0xBA, 0x44, 0x42, 0xCA, 0xF5, 0x3E, 0xA6, \
919         0x3B, 0xB4, 0x54, 0x32, 0x9B, 0x76, 0x24, 0xC8, \
920         0x91, 0x7B, 0xDD, 0x64, 0xB1, 0xC0, 0xFD, 0x4C, \
921         0xB3, 0x8E, 0x8C, 0x33, 0x4C, 0x70, 0x1C, 0x3A, \
922         0xCD, 0xAD, 0x06, 0x57, 0xFC, 0xCF, 0xEC, 0x71, \
923         0x9B, 0x1F, 0x5C, 0x3E, 0x4E, 0x46, 0x04, 0x1F, \
924         0x38, 0x81, 0x47, 0xFB, 0x4C, 0xFD, 0xB4, 0x77, \
925         0xA5, 0x24, 0x71, 0xF7, 0xA9, 0xA9, 0x69, 0x10, \
926         0xB8, 0x55, 0x32, 0x2E, 0xDB, 0x63, 0x40, 0xD8, \
927         0xA0, 0x0E, 0xF0, 0x92, 0x35, 0x05, 0x11, 0xE3, \
928         0x0A, 0xBE, 0xC1, 0xFF, 0xF9, 0xE3, 0xA2, 0x6E, \
929         0x7F, 0xB2, 0x9F, 0x8C, 0x18, 0x30, 0x23, 0xC3, \
930         0x58, 0x7E, 0x38, 0xDA, 0x00, 0x77, 0xD9, 0xB4, \
931         0x76, 0x3E, 0x4E, 0x4B, 0x94, 0xB2, 0xBB, 0xC1, \
932         0x94, 0xC6, 0x65, 0x1E, 0x77, 0xCA, 0xF9, 0x92, \
933         0xEE, 0xAA, 0xC0, 0x23, 0x2A, 0x28, 0x1B, 0xF6, \
934         0xB3, 0xA7, 0x39, 0xC1, 0x22, 0x61, 0x16, 0x82, \
935         0x0A, 0xE8, 0xDB, 0x58, 0x47, 0xA6, 0x7C, 0xBE, \
936         0xF9, 0xC9, 0x09, 0x1B, 0x46, 0x2D, 0x53, 0x8C, \
937         0xD7, 0x2B, 0x03, 0x74, 0x6A, 0xE7, 0x7F, 0x5E, \
938         0x62, 0x29, 0x2C, 0x31, 0x15, 0x62, 0xA8, 0x46, \
939         0x50, 0x5D, 0xC8, 0x2D, 0xB8, 0x54, 0x33, 0x8A, \
940         0xE4, 0x9F, 0x52, 0x35, 0xC9, 0x5B, 0x91, 0x17, \
941         0x8C, 0xCF, 0x2D, 0xD5, 0xCA, 0xCE, 0xF4, 0x03, \
942         0xEC, 0x9D, 0x18, 0x10, 0xC6, 0x27, 0x2B, 0x04, \
943         0x5B, 0x3B, 0x71, 0xF9, 0xDC, 0x6B, 0x80, 0xD6, \
944         0x3F, 0xDD, 0x4A, 0x8E, 0x9A, 0xDB, 0x1E, 0x69, \
945         0x62, 0xA6, 0x95, 0x26, 0xD4, 0x31, 0x61, 0xC1, \
946         0xA4, 0x1D, 0x57, 0x0D, 0x79, 0x38, 0xDA, 0xD4, \
947         0xA4, 0x0E, 0x32, 0x9C, 0xCF, 0xF4, 0x6A, 0xAA, \
948         0x36, 0xAD, 0x00, 0x4C, 0xF6, 0x00, 0xC8, 0x38, \
949         0x1E, 0x42, 0x5A, 0x31, 0xD9, 0x51, 0xAE, 0x64, \
950         0xFD, 0xB2, 0x3F, 0xCE, 0xC9, 0x50, 0x9D, 0x43, \
951         0x68, 0x7F, 0xEB, 0x69, 0xED, 0xD1, 0xCC, 0x5E, \
952         0x0B, 0x8C, 0xC3, 0xBD, 0xF6, 0x4B, 0x10, 0xEF, \
953         0x86, 0xB6, 0x31, 0x42, 0xA3, 0xAB, 0x88, 0x29, \
954         0x55, 0x5B, 0x2F, 0x74, 0x7C, 0x93, 0x26, 0x65, \
955         0xCB, 0x2C, 0x0F, 0x1C, 0xC0, 0x1B, 0xD7, 0x02, \
956         0x29, 0x38, 0x88, 0x39, 0xD2, 0xAF, 0x05, 0xE4, \
957         0x54, 0x50, 0x4A, 0xC7, 0x8B, 0x75, 0x82, 0x82, \
958         0x28, 0x46, 0xC0, 0xBA, 0x35, 0xC3, 0x5F, 0x5C, \
959         0x59, 0x16, 0x0C, 0xC0, 0x46, 0xFD, 0x82, 0x51, \
960         0x54, 0x1F, 0xC6, 0x8C, 0x9C, 0x86, 0xB0, 0x22, \
961         0xBB, 0x70, 0x99, 0x87, 0x6A, 0x46, 0x0E, 0x74, \
962         0x51, 0xA8, 0xA9, 0x31, 0x09, 0x70, 0x3F, 0xEE, \
963         0x1C, 0x21, 0x7E, 0x6C, 0x38, 0x26, 0xE5, 0x2C, \
964         0x51, 0xAA, 0x69, 0x1E, 0x0E, 0x42, 0x3C, 0xFC, \
965         0x99, 0xE9, 0xE3, 0x16, 0x50, 0xC1, 0x21, 0x7B, \
966         0x62, 0x48, 0x16, 0xCD, 0xAD, 0x9A, 0x95, 0xF9, \
967         0xD5, 0xB8, 0x01, 0x94, 0x88, 0xD9, 0xC0, 0xA0, \
968         0xA1, 0xFE, 0x30, 0x75, 0xA5, 0x77, 0xE2, 0x31, \
969         0x83, 0xF8, 0x1D, 0x4A, 0x3F, 0x2F, 0xA4, 0x57, \
970         0x1E, 0xFC, 0x8C, 0xE0, 0xBA, 0x8A, 0x4F, 0xE8, \
971         0xB6, 0x85, 0x5D, 0xFE, 0x72, 0xB0, 0xA6, 0x6E, \
972         0xDE, 0xD2, 0xFB, 0xAB, 0xFB, 0xE5, 0x8A, 0x30, \
973         0xFA, 0xFA, 0xBE, 0x1C, 0x5D, 0x71, 0xA8, 0x7E, \
974         0x2F, 0x74, 0x1E, 0xF8, 0xC1, 0xFE, 0x86, 0xFE, \
975         0xA6, 0xBB, 0xFD, 0xE5, 0x30, 0x67, 0x7F, 0x0D, \
976         0x97, 0xD1, 0x1D, 0x49, 0xF7, 0xA8, 0x44, 0x3D, \
977         0x08, 0x22, 0xE5, 0x06, 0xA9, 0xF4, 0x61, 0x4E, \
978         0x01, 0x1E, 0x2A, 0x94, 0x83, 0x8F, 0xF8, 0x8C, \
979         0xD6, 0x8C, 0x8B, 0xB7, 0xC5, 0xC6, 0x42, 0x4C, \
980         0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }
981 
982 #define MBEDTLS_DHM_RFC7919_FFDHE8192_G_BIN { 0x02 }
983 
984 #endif /* dhm.h */
985