Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | NULL out mdctx to prevent possible double free introduced in version 1.4 | beck | 2018-11-13 | 1 | -1/+2 |
| | | | | Spotted by maestre@, ok tb@ | ||||
* | Avoid a double allocation and memory leak. | jsing | 2018-11-10 | 1 | -4/+2 |
| | | | | Reported by Ben L <bobsayshilol at live dot co dot uk> | ||||
* | Fix last of the empty hash nonsense | beck | 2018-11-10 | 1 | -26/+3 |
| | | | | ok jsing@ | ||||
* | Fix the TLSv1.3 key schedule implementation. | jsing | 2018-11-09 | 1 | -56/+81 |
| | | | | | | | | | | | | When the RFC refers to ("") for key derivation, it is referring to the transcript hash of an empty string, not an empty string. Rename tls13_secrets_new() to tls13_secrets_create(), make it take an EVP_MD * and calculate the hash of an empty string so that we have it available for the "derived" and other steps. Merge tls13_secrets_init() into the same function, remove the EVP_MD * from other functions and use the empty string hash at the appropriate places. ok beck@ tb@ | ||||
* | KNF | beck | 2018-11-08 | 1 | -3/+4 |
| | |||||
* | Move #include <openssl/evp.h> to the header. | tb | 2018-11-08 | 1 | -2/+1 |
| | | | | discussed with beck and jsing | ||||
* | Add initial TLS 1.3 key schedule support with basic regress tests | beck | 2018-11-07 | 1 | -0/+375 |
ok jsing@ tb@ |