net: boost AES-GCM ciphers if the machine has AES-NI.

net/third_party/nss/ssl/ssl3con.c

 /* -*- Mode: C; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
 /*
  * SSL3 Protocol
  *
  * This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 /* TODO(ekr): Implement HelloVerifyRequest on server side. OK for now. */
 
@@ skipping 12405 matching lines @@
         pref   = suite->enabled;
         rv     = SECSuccess;
     } else {
         pref   = SSL_NOT_ALLOWED;
         rv     = SECFailure;    /* err code was set by Lookup. */
     }
     *enabled = pref;
     return rv;
 }
 
+SECStatus
+ssl3_CipherOrderSet(sslSocket *ss, const ssl3CipherSuite *ciphers, unsigned int len)
+{
+    unsigned int i;
+
+    for (i = 0; i < len; i++) {
+        PRUint16 id = ciphers[i];
+        unsigned int existingIndex, j;
+        PRBool found = PR_FALSE;
+
+        for (j = i; j < ssl_V3_SUITES_IMPLEMENTED; j++) {
+            if (ss->cipherSuites[j].cipher_suite == id) {
+                existingIndex = j;
+                found = PR_TRUE;
+                break;
+            }
+        }
+
+        if (!found) {
+            PORT_SetError(SSL_ERROR_UNKNOWN_CIPHER_SUITE);
+            return SECFailure;
+        }
+
+        if (existingIndex != i) {
+            const ssl3CipherSuiteCfg temp = ss->cipherSuites[i];
+            ss->cipherSuites[i] = ss->cipherSuites[existingIndex];
+            ss->cipherSuites[existingIndex] = temp;
+        }
+    }
+
+    /* Disable all cipher suites that weren't included. */
+    for (; i < ssl_V3_SUITES_IMPLEMENTED; i++) {
+        ss->cipherSuites[i].enabled = 0;
+    }
+
+    return SECSuccess;
+}
+
 /* copy global default policy into socket. */
 void
 ssl3_InitSocketPolicy(sslSocket *ss)
 {
     PORT_Memcpy(ss->cipherSuites, cipherSuites, sizeof cipherSuites);
 }
 
 SECStatus
 ssl3_GetTLSUniqueChannelBinding(sslSocket *ss,
                                 unsigned char *out,
@@ skipping 212 matching lines @@
             PORT_Free(ss->ssl3.hs.recvdFragments.buf);
         }
     }
 
     ss->ssl3.initialized = PR_FALSE;
 
     SECITEM_FreeItem(&ss->ssl3.nextProto, PR_FALSE);
 }
 
 /* End of ssl3con.c */