Function get_usable_ciphersuites

scapy/layers/tls/crypto/suites.py:1299–1318

From a list of proposed ciphersuites, this function returns a list of usable cipher suites, i.e. for which key exchange, cipher and hash algorithms are known to be implemented and usable in current version of the TLS extension. The order of the cipher suites in the list returned by

(li, kx)

def get_usable_ciphersuites(li, kx):
    """
    From a list of proposed ciphersuites, this function returns a list of
    usable cipher suites, i.e. for which key exchange, cipher and hash
    algorithms are known to be implemented and usable in current version of the
    TLS extension. The order of the cipher suites in the list returned by the
    function matches the one of the proposal.
    """
    res = []
    for c in li:
        if c in _tls_cipher_suites_cls:
            cipher = _tls_cipher_suites_cls[c]
            if cipher.usable:
                # XXX select among RSA and ECDSA cipher suites
                # according to the key(s) the server was given
                if (cipher.kx_alg.anonymous or
                   kx in cipher.kx_alg.name or
                   cipher.kx_alg.name == "TLS13"):
                    res.append(c)
    return res