221     /* Pick first available ECDHE group compatible with TLS 1.3 */  in ssl_tls13_get_default_group_id()
256  *          NamedGroup group;
307         /* Pointer to group */  in ssl_tls13_write_key_share_ext()
308         unsigned char *group = p;  in ssl_tls13_write_key_share_ext()  local
313          * - group                  (2 bytes)  in ssl_tls13_write_key_share_ext()
326         /* Write group */  in ssl_tls13_write_key_share_ext()
327         MBEDTLS_PUT_UINT16_BE(group_id, group, 0);  in ssl_tls13_write_key_share_ext()
329         MBEDTLS_PUT_UINT16_BE(key_exchange_len, group, 2);  in ssl_tls13_write_key_share_ext()
400      * group which was provided in the "supported_groups" extension in the  in ssl_tls13_parse_hrr_key_share_ext()
427      * correspond to a group which was provided in the "key_share"  in ssl_tls13_parse_hrr_key_share_ext()
461  *        NamedGroup group;
472     uint16_t group, offered_group;  in ssl_tls13_parse_key_share_ext()  local
475      * NamedGroup group; (2 bytes)  in ssl_tls13_parse_key_share_ext()
479     group = MBEDTLS_GET_UINT16_BE(p, 0);  in ssl_tls13_parse_key_share_ext()
482     /* Check that the chosen group matches the one we offered. */  in ssl_tls13_parse_key_share_ext()
484     if (offered_group != group) {  in ssl_tls13_parse_key_share_ext()
486             1, ("Invalid server key share, our group %u, their group %u",  in ssl_tls13_parse_key_share_ext()
487                 (unsigned) offered_group, (unsigned) group));  in ssl_tls13_parse_key_share_ext()
494     if (mbedtls_ssl_tls13_named_group_is_ecdhe(group) ||  in ssl_tls13_parse_key_share_ext()
495         mbedtls_ssl_tls13_named_group_is_ffdh(group)) {  in ssl_tls13_parse_key_share_ext()
497                               ("DHE group name: %s", mbedtls_ssl_named_group_to_str(group)));  in ssl_tls13_parse_key_share_ext()
1971      * We are going to re-generate a shared secret corresponding to the group  in ssl_tls13_postprocess_hrr()
1972      * selected by the server, which is different from the group for which we  in ssl_tls13_postprocess_hrr()