search

bytinbit / strongswan

strongSwan - IPsec-based VPN
https://www.strongswan.org
Other
2 stars 0 forks source link

libtls: ClientHello: extension key share #25

Closed ryru closed 4 years ago

ryru commented 4 years ago

Aufwandschätzung: soll=3 Stunden

The client sends one or more public keys using an algorithm that it thinks the server will support. This allows the rest of the handshake after the ClientHello and ServerHello messages to be encrypted, unlike previous protocol versions where the handshake was sent in the clear.

https://tls13.ulfheim.net/

Consider:

bytinbit commented 4 years ago

Currently, there's the magic value 0x001D in the code, it does not accept the enum-value of CURVE_25519 (32) out of unknown reasons.