mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-10-28 18:07:34 +08:00
f7223c3071
mbedtls_ssl_get_session() copies the whole mbedtls_ssl_session struct, including the TLS 1.3 app_secrets field. That field holds the connection's client and server application traffic secrets, the exporter master secret and the resumption master secret, so an exported session carried enough material to decrypt the connection it came from. None of these secrets is needed to resume the session: the resumption key is derived and stored separately when the NewSessionTicket is processed, session serialization does not include app_secrets, and keying-material export reads the live session. Zeroize app_secrets in the exported copy, at the export point only, so that mbedtls_ssl_session_copy() (also used by mbedtls_ssl_set_session()) is left unchanged. Fixes #10916. Signed-off-by: Joachim Bauernberger <joachim.bauernberger@protonmail.com> |
||
|---|---|---|
| .. | ||
| .jenkins | ||
| configs | ||
| git-scripts | ||
| include/test | ||
| opt-testcases | ||
| scripts | ||
| src | ||
| suites | ||
| .gitignore | ||
| CMakeLists.txt | ||
| compat-in-docker.sh | ||
| compat.sh | ||
| context-info.sh | ||
| Descriptions.txt | ||
| make-in-docker.sh | ||
| Makefile | ||
| ssl-opt.sh | ||