summaryrefslogtreecommitdiff
path: root/etc/etc.sgi
diff options
context:
space:
mode:
authorJoel Sing <jsing@cvs.openbsd.org>2018-11-09 23:56:21 +0000
committerJoel Sing <jsing@cvs.openbsd.org>2018-11-09 23:56:21 +0000
commitb7e468ea901aa443f6a17fb3f3f6a76d6712110a (patch)
tree6e9dd6602d55b521e16ff10514b2101265ee91cd /etc/etc.sgi
parent436014ab592231761f35d6cb52fca0c6b86cb394 (diff)
Fix the TLSv1.3 key schedule implementation.
When the RFC refers to ("") for key derivation, it is referring to the transcript hash of an empty string, not an empty string. Rename tls13_secrets_new() to tls13_secrets_create(), make it take an EVP_MD * and calculate the hash of an empty string so that we have it available for the "derived" and other steps. Merge tls13_secrets_init() into the same function, remove the EVP_MD * from other functions and use the empty string hash at the appropriate places. ok beck@ tb@
Diffstat (limited to 'etc/etc.sgi')
0 files changed, 0 insertions, 0 deletions