Mbed-TLS / mbedtls

An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
https://www.trustedfirmware.org/projects/mbed-tls/
Other
5.2k stars 2.54k forks source link

TLS 1.3: Improve the key generation functions. #6675

Open yuhaoth opened 1 year ago

yuhaoth commented 1 year ago

Suggested enhancement

And so on.

Justification

See https://github.com/Mbed-TLS/mbedtls/pull/6538#discussion_r1030216900

The key generation of TLS 1.3 is changed for time being. Some generation functions is not used outside. And some variables can be local variable. That improvement is target to reduce the code size and memory space, improve readability for current code.

yanrayw commented 1 year ago

Create a checklist to match issues with PRs.

yanrayw commented 1 year ago

This issue is resolved by small PRs. #6773 is still in review. The PR to handle Re-consider about tls13_hs_secrets is still not uploaded.