Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add TLS13-KDF #446

Merged
merged 4 commits into from
Oct 1, 2024
Merged

Add TLS13-KDF #446

merged 4 commits into from
Oct 1, 2024

Commits on Oct 1, 2024

  1. Add a generic digest utility function 

    In preparation to reuse outside of the specific object.c use case.
Also adds a better and more flexible interface.

Signed-off-by: Simo Sorce <simo@redhat.com>
    @simo5
    simo5 committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    6b51b63 View commit details
    Browse the repository at this point in the history

  2. Implement support for ec point compression query 

    OpenSSL TLS code needs to know if the EC public key is in compressed or
uncompressed representation, for peer keys.
Add support to return this information from public keys.

Signed-off-by: Simo Sorce <simo@redhat.com>
    @simo5
    simo5 committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    bc17192 View commit details
    Browse the repository at this point in the history

  3. Add the TLS13-KDF OpenSSL Key Derivation Function 

    OpenSSL has a special TLS 1.3 KDF that perform TLS 1.3 specific and
limited actions using an underlying HKDF implementation.

Implement it the way OpenSSL expect it to work.

Signed-off-by: Simo Sorce <simo@redhat.com>
    @simo5
    simo5 committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    4f034a2 View commit details
    Browse the repository at this point in the history

  4. Test TLS1.3 connection forcing all ops on token 

    This is used primarily to test TLS13-KDF.
Note that we have to disable digest ops on the token as OpenSSL requires
context duplication to work, and most tokens do not really offer it.

Signed-off-by: Simo Sorce <simo@redhat.com>
    @simo5
    simo5 committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    b7c9bb6 View commit details
    Browse the repository at this point in the history