Closed
Bug 1647752
Opened 4 years ago
Closed 4 years ago
Update DTLS 1.3 to draft-38
Categories
(NSS :: Libraries, enhancement, P1)
NSS
Libraries
Tracking
(Not tracked)
RESOLVED
FIXED
3.55
People
(Reporter: kjacobs, Assigned: kjacobs)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
Tracking update from -34 to -38.
Assignee | ||
Comment 1•4 years ago
•
|
||
This patch updates DTLS 1.3 to draft-38. Specifically:
ssl_ct_ack
value changes from 25 to 26.- AEAD limits in
tls13_UnprotectRecord
enforce a maximum of 2^36-1 (as we only support GCM/ChaCha20 AEADs) decryption failures before the connection is closed. - Post-handshake authentication will no longer be negotiated in DTLS 1.3. This allows us to side-step the more convoluted state machine requirements.
Assignee | ||
Comment 2•4 years ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•