openbsd/src/lib/libssl/tls13_key_schedule.c, branch OPENBSD_6_8_BASE

Correct update of application traffic secrets to use an empty context

2019-11-17T21:01:08+00:00

rather than the hash of an empty context ok jsing@

NULL out mdctx to prevent possible double free introduced in version 1.4

2018-11-13T01:25:13+00:00

Spotted by maestre@, ok tb@

Avoid a double allocation and memory leak.

2018-11-10T01:34:02+00:00

Reported by Ben L

Fix last of the empty hash nonsense

2018-11-10T00:18:25+00:00

ok jsing@

Fix the TLSv1.3 key schedule implementation.

2018-11-09T23:56:20+00:00

When the RFC refers to ("") for key derivation, it is referring to the transcript hash of an empty string, not an empty string. Rename tls13_secrets_new() to tls13_secrets_create(), make it take an EVP_MD * and calculate the hash of an empty string so that we have it available for the "derived" and other steps. Merge tls13_secrets_init() into the same function, remove the EVP_MD * from other functions and use the empty string hash at the appropriate places. ok beck@ tb@

KNF

2018-11-08T23:50:54+00:00

Move #include to the header.

2018-11-08T20:38:25+00:00

discussed with beck and jsing

Add initial TLS 1.3 key schedule support with basic regress tests

2018-11-07T19:43:12+00:00

ok jsing@ tb@