wolfSSL / wolfssl

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3!
https://www.wolfssl.com
GNU General Public License v2.0
2.31k stars 823 forks source link

Default session ticket enc/dec: allow AES-CBC with HMAC #7703

Closed SparkiDev closed 2 months ago

SparkiDev commented 3 months ago

Description

Add option to use AES-CBC with HMAC for default session ticket enc/dec. Defaults to AES-128-CBC with HMAC-SHA256. Options include: WOLFSSL_TICKET_ENC_HMAC_SHA512 for HMAC-SHA512 WOLFSSL_TICKET_ENC_HMAC_SHA384 for HMAC-SHA384 WOLFSSL_TICKET_ENC_AES256_CBC for AES-256-CBC

Fixes zd#18205

Testing

./configure '--disable-shared' '--enable-session-ticket' 'CFLAGS=-DWOLFSSL_TICKET_ENC_CBC_HMAC'

Checklist