[tls] Prefer X25519 as a key exchange mechanism In TLS version 1.3, the expected flow is that the client offers at least one key share in the initial ClientHello, so that key exchange can take place as soon as the ServerHello is received (without requiring a HelloRetryRequest and a second round trip). We cannot viably offer key shares for all supported groups, since the FFDHE groups have large public key values. The most likely approach will be that we offer a single key share for our most preferred group. Experiments suggest that X25519 is currently the most widely supported key exchange group. Make this the most preferred group to maximise the chance that a (future) TLS version 1.3 handshake will avoid the extra round trip for a HelloRetryRequest. Signed-off-by: Michael Brown <mcb30@ipxe.org>
iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as:
boot from a web server via HTTP or HTTPS,
boot from an iSCSI, FCoE, or AoE SAN,
control the boot process with a script,
You can use iPXE to replace the existing PXE ROM on your network card, or you can chainload into iPXE to obtain the features of iPXE without the hassle of reflashing.
iPXE is free, open-source software licensed under the GNU GPL (with some portions under GPL-compatible licences).
You can download the rolling release binaries (built from the latest commit), or use the most recent stable release.
For full documentation, visit the iPXE website.
