Skip to content

Commit

Permalink
Merge branch 'fix_hkdf_expand_label'
Browse files Browse the repository at this point in the history
  • Loading branch information
martinthomson committed Jul 30, 2018
2 parents 35d2348 + e3d2dba commit 159268e
Showing 1 changed file with 9 additions and 7 deletions.
16 changes: 9 additions & 7 deletions draft-ietf-quic-tls.md
Expand Up @@ -633,13 +633,15 @@ connection. Specifically:

~~~
initial_salt = 0x9c108f98520a5c5c32968e950e8a2c5fe06d6c38
initial_secret =
HKDF-Extract(initial_salt, client_dst_connection_id)

client_initial_secret =
HKDF-Expand-Label(initial_secret, "client in", Hash.length)
server_initial_secret =
HKDF-Expand-Label(initial_secret, "server in", Hash.length)
initial_secret = HKDF-Extract(initial_salt,
client_dst_connection_id)

client_initial_secret = HKDF-Expand-Label(initial_secret,
"client in", "",
Hash.length)
server_initial_secret = HKDF-Expand-Label(initial_secret,
"server in", "",
Hash.length)
~~~

Note that if the server sends a Retry, the client's Initial will correspond to a
Expand Down

0 comments on commit 159268e

Please sign in to comment.