1529813 - Expose HKDF functions for QUIC

Status: RESOLVED FIXED

(NSS :: Libraries, enhancement)

Description

[Martin Thomson [:mt:]]

QUIC needs HKDF-Extract. It also needs to do DeriveSecret (not the more general form of HKDF-Expand-Label). Exposing functions that take a version and ciphersuite as input rather than CK_MECHANISM_TYPE and SSLHashType would be advisable.

Comment 1

[Martin Thomson [:mt:]]

https://hg.mozilla.org/projects/nss/rev/a5f74f7c1d73390d724b40d2a7b5da7605d5fc12

Comment 2

[Martin Thomson [:mt:]]

Attachment: Bug 1529813 - Expose HKDF-Expand-Label, r?ekr

I forgot about packet number encryption. This will help with that.

I decided to replace DeriveSecret with this. No point in having that when you have this.

Comment 3

[Martin Thomson [:mt:]]

https://hg.mozilla.org/projects/nss/rev/5ea3ab44389052cd2a8174350b86fb8fdadce075

Comment 4

[Martin Thomson [:mt:]]

Attachment: Bug 1529813 - Expose Hkdf-Expand-Label with mechanism, r?ekr

It turns out that leaf keys sometimes need to be exposed with different
mechanisms and sizes. The default function provides something good enough for
use with the AEAD functions that were exposed, but if you want to use the key
directly, that isn't enough. So here we are: new arguments for specifying the
mechanism and key size are needed.

Comment 5

[Martin Thomson [:mt:]]

Reopening. Should be able to re-close this very soon.

Comment 6

[Martin Thomson [:mt:]]

trunk: https://hg.mozilla.org/projects/nss/rev/03d7bcade60aa49fa7561215c83c176d0709b200
3.43 branch: https://hg.mozilla.org/projects/nss/rev/cf30a49bf53e6ae06a55c4ed63302c893c072b74