Closed Bug 1647752 Opened 4 years ago Closed 4 years ago

Update DTLS 1.3 to draft-38

Categories

(NSS :: Libraries, enhancement, P1)

enhancement

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: kjacobs, Assigned: kjacobs)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

Tracking update from -34 to -38.

This patch updates DTLS 1.3 to draft-38. Specifically:

  • ssl_ct_ack value changes from 25 to 26.
  • AEAD limits in tls13_UnprotectRecord enforce a maximum of 2^36-1 (as we only support GCM/ChaCha20 AEADs) decryption failures before the connection is closed.
  • Post-handshake authentication will no longer be negotiated in DTLS 1.3. This allows us to side-step the more convoluted state machine requirements.
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: