Expose PQ_DEFAULT in TlsCipherPreference enum (#865)

Add `TLS_CIPHER_PQ_DEFAULT` to `TlsCipherPreference` enum.
awslabs · Feb 11, 2025 · a5c53e6 · a5c53e6
1 parent c0c2a85
commit a5c53e6
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 4 deletions.
diff --git a/crt/aws-c-event-stream b/crt/aws-c-event-stream
diff --git a/crt/aws-c-io b/crt/aws-c-io
diff --git a/crt/s2n b/crt/s2n
diff --git a/src/main/java/software/amazon/awssdk/crt/io/TlsCipherPreference.java b/src/main/java/software/amazon/awssdk/crt/io/TlsCipherPreference.java
@@ -59,7 +59,12 @@ public enum TlsCipherPreference {
      *
      *  Both X25519MLKEM768 and P256MLKEM768 will be standardized by the IETF soon. Hybrid Groups that contain Kyber may be removed in the future.
      */
-    TLS_CIPHER_PREF_PQ_TLSv1_2_2023(7);
+    TLS_CIPHER_PREF_PQ_TLSv1_2_2023(7),
+
+    /**
+     * The latest recommended Post-quantum enabled TLS Policy. This policy may change over time.
+     */
+    TLS_CIPHER_PQ_DEFAULT(8);
 
     private int val;
+4 −2		include/aws/event-stream/event_stream.h
+1 −1		tests/CMakeLists.txt
+6 −6		tests/channel_handler_test.c
+3 −0		include/aws/io/tls_channel_handler.h
+6 −0		source/s2n/s2n_tls_channel_handler.c