| commit | a9c5d8da58c02d58097b8d7b592255c9fead5110 | [log] [tgz] |
|---|---|---|
| author | Frédéric Lécaille <flecaille@haproxy.com> | Thu May 12 14:44:51 2022 +0200 |
| committer | Frédéric Lécaille <flecaille@haproxy.com> | Fri May 20 16:57:12 2022 +0200 |
| tree | 0495e21667bf5e4b4af86684db46d085bb4841f1 | |
| parent | 359d877f733a7d53748ea9e3756219ccca948d7e [diff] |
MINOR: quic_tls: Add quic_tls_derive_retry_token_secret() This function must be used to derive strong secrets from a non pseudo-random secret (cluster-secret setting in our case) and an IV. First it call quic_hkdf_extract_and_expand() to do that for a temporary strong secret (tmpkey) then two calls to quic_hkdf_expand() reusing this strong temporary secret to derive the final strong secret and IV.