Add CHACHA20_POLY1305 to the ssl cipher list (#904)

haiwen · Aug 23, 2021 · 4ea33de · 4ea33de
1 parent da6bc0c
commit 4ea33de
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/app/src/main/java/com/seafile/seadroid2/ssl/SSLSeafileSocketFactory.java b/app/src/main/java/com/seafile/seadroid2/ssl/SSLSeafileSocketFactory.java
@@ -121,6 +121,7 @@ protected String[] getCipherList() {
                     "DHE-RSA-AES128-SHA",
                     "DHE-RSA-AES256-SHA",
                     "DHE-DSS-AES128-SHA",
+                    "DHE-RSA-CHACHA20-POLY1305",
                     "AES128-SHA",
                     "AES256-SHA"
             };
@@ -138,6 +139,11 @@ protected String[] getCipherList() {
                     "TLS_DHE_RSA_WITH_AES_256_CBC_SHA",
                     "TLS_DHE_DSS_WITH_AES_128_CBC_SHA",
 
+                    // ChaCha20 support for servers without AES hardware
+                    // acceleration (eg. Raspberry Pi 4)
+                    "TLS_CHACHA20_POLY1305_SHA256",
+                    "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
+
                     // backward compatibility. offers no forward security.
                     "TLS_RSA_WITH_AES_128_CBC_SHA",
                     "TLS_RSA_WITH_AES_256_CBC_SHA",