mbedtls/library/ssl_tls13_keys.h

11  * the point of use. See e.g. the definition of mbedtls_ssl_tls13_labels_union
64 /* Maximum length of the label field in the HkdfLabel struct defined in
68 /* The maximum length of HKDF contexts used in the TLS 1.3 standard.
69  * Since contexts are always hashes of message transcripts, this can
76  * bytes of key material where hash_size is the output size of the
92  *                   This must be a readable buffer of length
94  * \param secret_len The length of \p secret in Bytes.
96  *                   This must be a readable buffer of length
98  * \param label_len  The length of \p label in Bytes.
100  *                   This must be a readable buffer of length \p ctx_len Bytes.
101  * \param ctx_len    The length of \p context in Bytes.
103  *                   This must be a writable buffer of length \p buf_len Bytes.
104  * \param buf_len    The desired size of the expanded secret in Bytes.
119  * \brief           This function is part of the TLS 1.3 key schedule.
131  *                      for the HKDF-based expansion of the secret.
133  *                      This must be a readable buffer of size
136  *                      This must be a readable buffer of size
138  * \param secret_len    Length of the secrets \p client_secret and
140  * \param key_len       The desired length of the key to be extracted in Bytes.
141  * \param iv_len        The desired length of the IV to be extracted in Bytes.
142  * \param keys          The address of the structure holding the generated
168  *                   applications of HKDF.
170  *                   This must be a readable buffer of length
172  * \param secret_len The length of \p secret in Bytes.
174  *                   This must be a readable buffer of length
176  * \param label_len  The length of \p label in Bytes.
177  * \param ctx        The hash of the \c Messages argument to the
180  * \param ctx_len    The length of \p ctx in Bytes.
181  * \param ctx_hashed This indicates whether the \p ctx contains the hash of
182  *                   the \c Messages argument in the application of the
185  *                   it is the content of \c Messages itself, in which case
186  *                   the function takes care of the hashing
188  * \param dstbuf     The target buffer to write the output of
189  *                   \c Derive-Secret to. This must be a writable buffer of
191  * \param dstbuf_len The length of \p dstbuf in Bytes.
228  *        is omitted here. Its calculation is part of the separate routine
235  *                     length is the digest size of the hash algorithm
237  * \param transcript   The transcript of the handshake so far, calculated with
239  *                     whose length is the digest size of the hash algorithm
241  * \param derived      The address of the structure in which to store
281  *                          buffer whose length is the digest size of the hash
283  * \param transcript        The transcript of the handshake so far, calculated
285  *                          buffer whose length is the digest size of the hash
287  * \param derived           The address of the structure in which to
331  *                          buffer whose length is the digest size of the hash
333  * \param transcript        The transcript of the handshake up to and including
336  *                          length is the digest size of the hash algorithm
338  * \param derived           The address of the structure in which to
361  *                          buffer whose length is the digest size of the hash
363  * \param transcript        The transcript of the handshake up to and including
366  *                          length is the digest size of the hash algorithm
368  * \param transcript_len    The length of \p transcript in Bytes.
369  * \param derived           The address of the structure in which to
410  * Each of the three secrets in turn is the basis for further
411  * key derivations, such as the derivation of traffic keys and IVs;
414  * This function implements one step in this evolution of secrets:
427  *                    applications of HKDF.
428  * \param secret_old  The address of the buffer holding the old secret
431  *                    of the hash function represented by \p hash_alg.
433  * \param input       The address of the buffer holding the additional
438  * \param input_len   The length of \p input in Bytes.
439  * \param secret_new  The address of the buffer holding the new secret
441  *                    whose size matches the output size of the hash
463  * \param psk_len     The size of \p psk in bytes.
469  *                    and its size must be equal to the digest size of
473  *                    digest size of  the hash algorithm represented by
500  *                     This must be one of the identifiers listed in
506  *                     in case of failure. This parameter is only needed if
565  * \param dst_len    The size of \p dst in bytes.
566  * \param actual_len The address at which to store the amount of data
599  *             encryption/decryption part of the transform as the decryption/
637  * \param[out]  psk_len Length of PSK.
654  * \param[in]   secret_len  Length of secret.
655  * \param[in]   label  The label of the exported key.
656  * \param[in]   label_len  The length of label.
658  * \param[in]   out_len  Length of the key to generate.