init commit

output/Libraries/BouncyCastle.Crypto/Org/BouncyCastle/Crypto/Tls/PskTlsServer.cs

@@ -0,0 +1,70 @@
+using Org.BouncyCastle.Crypto.Agreement;
+using Org.BouncyCastle.Crypto.Parameters;
+
+namespace Org.BouncyCastle.Crypto.Tls;
+
+public class PskTlsServer : AbstractTlsServer
+{
+	protected TlsPskIdentityManager mPskIdentityManager;
+
+	public PskTlsServer(TlsPskIdentityManager pskIdentityManager)
+		: this(new DefaultTlsCipherFactory(), pskIdentityManager)
+	{
+	}
+
+	public PskTlsServer(TlsCipherFactory cipherFactory, TlsPskIdentityManager pskIdentityManager)
+		: base(cipherFactory)
+	{
+		mPskIdentityManager = pskIdentityManager;
+	}
+
+	protected virtual TlsEncryptionCredentials GetRsaEncryptionCredentials()
+	{
+		throw new TlsFatalAlert(80);
+	}
+
+	protected virtual DHParameters GetDHParameters()
+	{
+		return DHStandardGroups.rfc7919_ffdhe2048;
+	}
+
+	protected override int[] GetCipherSuites()
+	{
+		return new int[4] { 49207, 49205, 178, 144 };
+	}
+
+	public override TlsCredentials GetCredentials()
+	{
+		switch (TlsUtilities.GetKeyExchangeAlgorithm(mSelectedCipherSuite))
+		{
+		case 13:
+		case 14:
+		case 24:
+			return null;
+		case 15:
+			return GetRsaEncryptionCredentials();
+		default:
+			throw new TlsFatalAlert(80);
+		}
+	}
+
+	public override TlsKeyExchange GetKeyExchange()
+	{
+		int keyExchangeAlgorithm = TlsUtilities.GetKeyExchangeAlgorithm(mSelectedCipherSuite);
+		switch (keyExchangeAlgorithm)
+		{
+		case 13:
+		case 14:
+		case 15:
+		case 24:
+			return CreatePskKeyExchange(keyExchangeAlgorithm);
+		default:
+			throw new TlsFatalAlert(80);
+		}
+	}
+
+	protected virtual TlsKeyExchange CreatePskKeyExchange(int keyExchange)
+	{
+		return new TlsPskKeyExchange(keyExchange, mSupportedSignatureAlgorithms, null, mPskIdentityManager, null, GetDHParameters(), mNamedCurves, mClientECPointFormats, mServerECPointFormats);
+	}
+}