]> git.ipfire.org Git - thirdparty/haproxy.git/commit
projects / thirdparty / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 359d877) | patch
MINOR: quic_tls: Add quic_tls_derive_retry_token_secret()
authorFrédéric Lécaille <flecaille@haproxy.com>
Thu, 12 May 2022 12:44:51 +0000 (14:44 +0200)
committerFrédéric Lécaille <flecaille@haproxy.com>
Fri, 20 May 2022 14:57:12 +0000 (16:57 +0200)
commita9c5d8da58c02d58097b8d7b592255c9fead5110
tree0495e21667bf5e4b4af86684db46d085bb4841f1tree
parent359d877f733a7d53748ea9e3756219ccca948d7ecommit | diff
MINOR: quic_tls: Add quic_tls_derive_retry_token_secret()

This function must be used to derive strong secrets from a non pseudo-random
secret (cluster-secret setting in our case) and an IV. First it call
quic_hkdf_extract_and_expand() to do that for a temporary strong secret (tmpkey)
then two calls to quic_hkdf_expand() reusing this strong temporary secret
to derive the final strong secret and IV.
include/haproxy/quic_tls.h diff | blob | blame | history
src/quic_tls.c diff | blob | blame | history
Mirror of https://github.com/haproxy/haproxy.git