forked from quic-go/quic-go
use the optimized HKDF-Expand-Label everywhere
This commit is contained in:
@@ -9,8 +9,8 @@ import (
|
|||||||
)
|
)
|
||||||
|
|
||||||
func createAEAD(suite *qtls.CipherSuiteTLS13, trafficSecret []byte) cipher.AEAD {
|
func createAEAD(suite *qtls.CipherSuiteTLS13, trafficSecret []byte) cipher.AEAD {
|
||||||
key := qtls.HkdfExpandLabel(suite.Hash, trafficSecret, []byte{}, "quic key", suite.KeyLen)
|
key := hkdfExpandLabel(suite.Hash, trafficSecret, []byte{}, "quic key", suite.KeyLen)
|
||||||
iv := qtls.HkdfExpandLabel(suite.Hash, trafficSecret, []byte{}, "quic iv", suite.IVLen())
|
iv := hkdfExpandLabel(suite.Hash, trafficSecret, []byte{}, "quic iv", suite.IVLen())
|
||||||
return suite.AEAD(key, iv)
|
return suite.AEAD(key, iv)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -115,7 +115,7 @@ func (a *updatableAEAD) rollKeys(now time.Time) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
func (a *updatableAEAD) getNextTrafficSecret(hash crypto.Hash, ts []byte) []byte {
|
func (a *updatableAEAD) getNextTrafficSecret(hash crypto.Hash, ts []byte) []byte {
|
||||||
return qtls.HkdfExpandLabel(hash, ts, []byte{}, "quic ku", hash.Size())
|
return hkdfExpandLabel(hash, ts, []byte{}, "quic ku", hash.Size())
|
||||||
}
|
}
|
||||||
|
|
||||||
// For the client, this function is called before SetWriteKey.
|
// For the client, this function is called before SetWriteKey.
|
||||||
|
|||||||
Reference in New Issue
Block a user