anchor.diff:                                                           | ClientOpts]}]),
       
       ssl_test_lib:check_server_alert(Server, Client, insufficient_security).
  -
  -%%--------------------------------------------------------------------
  -supported_groups() ->
  -    [{doc,"Test the supported_groups option in TLS 1.3."}].
  -
  -supported_groups(Config) when is_list(Config) ->
  -    ClientOpts = ssl_test_lib:ssl_options(client_rsa_opts, Config),
  -    ServerOpts = ssl_test_lib:ssl_options(server_rsa_opts, Config),
  -
  -    {ClientNode, ServerNode, Hostname} = ssl_test_lib:run_where(Config),
  -
  -    Server = ssl_test_lib:start_server([{node, ServerNode}, {port, 0},
  -					{from, self()},
  -                                        {mfa, {ssl_test_lib, send_recv_result_active, []}},
  -                                        {options, [{supported_groups, [x448, x25519]} | ServerOpts]}]),
  -    Port = ssl_test_lib:inet_port(Server),
  -    Client = ssl_test_lib:start_client([{node, ClientNode}, {port, Port},
  -					{host, Hostname},
  -                                        {from, self()},
  -                                        {mfa, {ssl_test_lib, send_recv_result_active, []}},
  -                                        {options, [{supported_groups,[x448]} | ClientOpts]}]),
  -
  -    ssl_test_lib:check_result(Server, ok, Client, ok),
  -
  -    ssl_test_lib:close(Server),
  -    ssl_test_lib:close(Client).
   
   %%--------------------------------------------------------------------
   handshake_continue() ->
  
positive.code:     ServerOpts =  [{beast_mitigation, one_n_minus_one} | ssl_test_lib:ssl_options(server_rsa_opts, Config)],
      
      ssl_test_lib:basic_test(ClientOpts, ServerOpts, Config).
  
  %%--------------------------------------------------------------------
  %% Internal functions ------------------------------------------------
  
negative.code:                                                                      cipher => aes_256_cbc,
                                                                       mac => sha,
                                                                       prf => default_prf}).
  
  %%--------------------------------------------------------------------
  honor_client_cipher_order() ->
      [{doc,"Test API honor server cipher order."}].
  