1692930 - Update HPKE version to final

Status: RESOLVED FIXED

(NSS :: Libraries, enhancement, P1)

Description

[Martin Thomson [:mt:]]

The CFRG (specifically, the editors of the draft) have published a version with final strings and test vectors. We should update to that.

This will require some coordination as our ECH implementation depends on a draft version currently. So any changes here can't land until ECH is updated and we have arranged with server deployments to use the new ECH version. No harm in getting things prepared though.

Comment 1

[Martin Thomson [:mt:]]

Attachment: Bug 1692930 - Update HPKE to final version, r?bbeurdouche

This adds the final HPKE version string.

This removes the draft version markers from the implementation and stops
tracking the draft version with the exported syntax.

I've added the script that I used to convert the JSON test vectors from the
specification; that should allow us to pick up new tests relatively easily,
especially if we need to add new algorithms.

This change breaks several ECH test cases. As fixing those tests is
extraordinarily fiddly, I'm going to defer making those changes until we need to
update ECH. As we can't land this code until ECH is updated to depend on the
final HPKE and until we have coordinated with servers on when the ECH update can
be deployed, it should be OK to defer.

In short, don't land this without the matching ECH changes.

Comment 2

[Martin Thomson [:mt:]]

https://hg.mozilla.org/projects/nss/rev/e78141a928f4b1d98525aacf03043f17e56cac22