pub struct KeyBlockShape {
pub enc_key_len: usize,
pub fixed_iv_len: usize,
pub explicit_nonce_len: usize,
}
Expand description
How a TLS1.2 key_block
is partitioned.
Note: ciphersuites with non-zero mac_key_length
are not currently supported.
How long keys are.
enc_key_length
terminology is from the standard (RFC5246 A.6).
How long the fixed part of the ‘IV’ is.
fixed_iv_length
terminology is from the standard (RFC5246 A.6).
This isn’t usually an IV, but we continue the terminology misuse to match the standard.
This is a non-standard extension which extends the key block to provide an initial explicit nonce offset, in a deterministic and safe way. GCM needs this, chacha20poly1305 works this way by design.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4