]> git.ipfire.org Git - thirdparty/strongswan.git/commit
openssl: Add a prf+ implementation based on OpenSSL's HKDF implementation
authorTobias Brunner <tobias@strongswan.org>
Fri, 11 Feb 2022 15:38:34 +0000 (16:38 +0100)
committerTobias Brunner <tobias@strongswan.org>
Thu, 14 Apr 2022 16:54:24 +0000 (18:54 +0200)
commit2b9b579af9ddf80e56ed1eb10bbbb8b76a2a299b
tree6bbb0b02fcf832dc65cc712515b61a31afa5579c
parent9e228de60af5702be492f8c27c389c2d77eaa43e
openssl: Add a prf+ implementation based on OpenSSL's HKDF implementation

The HKDF-Expand() function defined in RFC 5869 is basically the same as
IKEv2's prf+(), so we can use the former to implement the latter.
However, we can only support HMAC-based PRFs this way, which should be
fine as others are rarely used.
src/libstrongswan/plugins/openssl/Makefile.am
src/libstrongswan/plugins/openssl/openssl_kdf.c [new file with mode: 0644]
src/libstrongswan/plugins/openssl/openssl_kdf.h [new file with mode: 0644]
src/libstrongswan/plugins/openssl/openssl_plugin.c