| commit | e397d860b28b8a00b875f8a911beb32c7651ac28 | [log] [tgz] |
|---|---|---|
| author | Emeric Brun <ebrun@haproxy.com> | Tue Jul 04 14:56:08 2023 +0200 |
| committer | Christopher Faulet <cfaulet@haproxy.com> | Fri Jul 21 15:35:41 2023 +0200 |
| tree | ea1e37614c148795ec368356e5509cc71e42fdf2 | |
| parent | 28f430cf9ea33e4023ecaefbeec4403ea6f6099c [diff] |
BUG/MINOR: quic: retry token remove one useless intermediate expand According to rfc 5869 about hkdf, extract function returns a pseudo random key usable to perform expand using labels to derive keys. So the intermediate expand on a label is useless, the key should be strong enought using only one expand. This patch should be backported until v2.6 (cherry picked from commit cc0a4fa0cc9eb7e50a343b20e6bdff7c88f31351) Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>