projects / strongswan.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0aaf124) | patch
tls-hkdf: Always use correct base key to derive finished message
authorPascal Knecht <pascal.knecht@hsr.ch>
Sun, 8 Nov 2020 14:34:39 +0000 (15:34 +0100)
committerTobias Brunner <tobias@strongswan.org>
Fri, 12 Feb 2021 13:35:23 +0000 (14:35 +0100)
commit534a7816467ca17adc41cf88402c69c674f9f752
treed224067d83500ca625d77c2da1fb1091c549c1f5tree | snapshot
parent0aaf1242d9db78f1f0d051192efe81789a25dd89commit | diff
tls-hkdf: Always use correct base key to derive finished message

The cached traffic secrets change once the application traffic secrets
are derived, but we must always use the correct base key to derive the
finished message, which are the handshake traffic secrets (RFC 8446,
section 4.4).
src/libtls/tls_hkdf.c diff | blob | history
strongSwan - IPsec VPN