tls-hkdf: Implement resumption key generation

This commit is contained in:
Pascal Knecht
2021-02-12 14:35:23 +01:00
committed by Tobias Brunner
parent 9ef46cfaf9
commit 3e535c31b4
2 changed files with 52 additions and 0 deletions
+11
View File
@@ -126,6 +126,17 @@ struct tls_hkdf_t {
bool (*export)(tls_hkdf_t *this, char *label, chunk_t context,
chunk_t messages, size_t length, chunk_t *key);
/**
* Generate resumption PSKs.
*
* @param messages handshake messages
* @param nonce nonce to use for this PSK
* @param psk generated PSK
* @return TRUE if PSK successfully generated
*/
bool (*resume)(tls_hkdf_t *this, chunk_t messages, chunk_t nonce,
chunk_t *psk);
/**
* Use the internal PRF to allocate data (mainly for the finished message
* where the key is from derive_finished() and the seed is the transcript