cloudflare / tls-tris

crypto/tls, now with 100% more 1.3. THE API IS NOT STABLE AND DOCUMENTATION IS NOT GUARANTEED.
Other
293 stars 50 forks source link

implement TLS exporter for TLS 1.3 as specified by sec. 7.5 #150

Closed aead closed 5 years ago

aead commented 5 years ago

This commit implements TLS exporters for TLS 1.3 as specified by https://tools.ietf.org/html/rfc8446#section-7.5.

The (early) export master secret are computed during the handshake. After the handshake is completed the client can export a secret bound to a context value.

As recommended by RFC 8446 this commit adds two separate APIs to avoid accidentally using an early exporter when a regular one is desired or vice versa.

Updates #86