Mbed-TLS / mbedtls

An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
https://www.trustedfirmware.org/projects/mbed-tls/
Other
5.08k stars 2.52k forks source link

Refine new mbedtls_tls_prf_types for tls1.3 #6682

Open xkqian opened 1 year ago

xkqian commented 1 year ago

We have mbedtls_tls_prf_types which is not very proper for the tls1.3 types.

An example: When we call ssl->f_export_keys(), in mbedtls_ssl_tls13_generate_handshake_keys(), we have not proper type for it, and currently only use MBEDTLS_SSL_TLS_PRF_NONE instead.

We need to define new constants for TLS1.3.

Justification

Mbed TLS needs this because When we want to export keys in mbedtls_ssl_tls13_generate_handshake_keys() or mbedtls_ssl_tls13_generate_application_keys(), we have not proper type for it, and currently only use MBEDTLS_SSL_TLS_PRF_NONE instead

sarveshb14 commented 1 year ago

Hi @xkqian , Is there any update on this ? Thanks

xkqian commented 1 year ago

Hi @xkqian , Is there any update on this ? Thanks

Sorry, no update about this issue till now. Are there any urgent requirements of this usage?