ECDHE-RSA for lightweight TLS handshake

[cometurrata]

Hello,
it seems that Sming could benefit from enabling ECDHE-RSA instead of DHE-RSA. (Faster and lighter TLS).

https://security.stackexchange.com/questions/14731/what-is-ecdhe-rsa

Unfortunately axtls does not provide support for ECDHE, but mbed-tls does !

Any particular reason for not using mbed-tls ?
Has it already been discussed ?
Any hint of what I should start with ?
Do you think it could bring something useful ?

Thanks.

[slaff]

Any particular reason for not using mbed-tls ?

We have already started discussing this in #1713. What we lack is an abstraction that would allow us to switch during linking type between the different SSL implementations.

Any hint of what I should start with ?

@cometurrata if you want you can start with building that abstraction and adding axtls and mbed-tls implementations?

[slaff]

@cometurrata PR #1999 will be merged soon. Once that is done you can add the new SSL adapter based on mbed-tls.

[slaff]

@cometurrata the SSL adapters are now merged in the develop branch. Bearssl supports ECDHE https://bearssl.org/support.html