[gnutls-devel] GnuTLS | WIP: TLS 1.3: ignore "early_data" extension (!706)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Fri Aug 3 16:40:03 CEST 2018


Nikos Mavrogiannopoulos started a new discussion on lib/record.c:

>  
>  	_mbuffer_head_remove_bytes(&session->internals.record_recv_buffer,
>  				   record.header_size + record.length);
> +	/* As early data must always be encrypted, treat it as
> +	 * decryption failure if otherwise. */
> +	if (ret >= 0 &&
> +	    (session->internals.hsk_flags & HSK_EARLY_DATA_INDICATED) &&

Is my understanding that this flag is used while the early data are in flight only and reset afterwards? Maybe the name `HSK_EARLY_DATA_IN_FLIGHT` is more descriptive to help understand for this particular test.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/706#note_92372438
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20180803/d777620e/attachment-0001.html>


More information about the Gnutls-devel mailing list