add comment for clarity regarding ciphers selected by ciper constant

algesten · Jan 21, 2025 · 3c041ac · 3c041ac
1 parent ea24875
commit 3c041ac
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/crypto/ossl/dtls.rs b/src/crypto/ossl/dtls.rs
@@ -13,6 +13,8 @@ use super::io_buf::IoBuffer;
 use super::stream::TlsStream;
 use super::CryptoError;
 
+// We restrict cipher suites to those that include ephermeral Diffie-Hellman or ephemeral
+// Elliptical Curve Diffie-Hellman AND AES-256 or AES-GCM.
 const DTLS_CIPHERS: &str = "ECDHE+AESGCM:DHE+AESGCM:ECDHE+AES256:DHE+AES256";
 
 pub struct OsslDtlsImpl {