commit 13ed7c9d049fe78f70ca92b6966deeab95e17332
author Frédéric Lécaille <flecaille@haproxy.com> Thu Jun 22 14:51:28 2023 +0200
committer Christopher Faulet <cfaulet@haproxy.com> Mon Jul 03 08:05:49 2023 +0200
tree a18bd8b0fee650c9b101de0dc14552490f3f55d2
parent 0960b526959945c86f1e8d2c8e2e799f553a50d1

MINOR: quic: Reduce the maximum length of TLS secrets

The maximum length of the secrets derived by the TLS stack is 384 bits.
This reduces the size of the objects provided by the "quic_tls_secret" pool by
16 bytes.

Should be backported as far as 2.6

(cherry picked from commit a5c1a3b774fc5200e32548d7fa8a16ae4c976247)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>

include/haproxy/quic_tls-t.h

diff --git a/include/haproxy/quic_tls-t.h b/include/haproxy/quic_tls-t.h
index 9e00e2e..9520ac7 100644
--- a/include/haproxy/quic_tls-t.h
+++ b/include/haproxy/quic_tls-t.h
@@ -44,7 +44,7 @@
 /* AEAD iv and secrete key lengths */
 #define QUIC_TLS_IV_LEN     12 /* bytes */
 #define QUIC_TLS_KEY_LEN    32 /* bytes */
-#define QUIC_TLS_SECRET_LEN 64 /* bytes */
+#define QUIC_TLS_SECRET_LEN 48 /* bytes */
 /* The ciphersuites for AEAD QUIC-TLS have 16-bytes authentication tags */
 #define QUIC_TLS_TAG_LEN    16 /* bytes */