Experimental encrypt-then-mac support.
authorDr. Stephen Henson <steve@openssl.org>
Fri, 22 Mar 2013 17:12:33 +0000 (17:12 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Sun, 8 Sep 2013 12:14:03 +0000 (13:14 +0100)
commit5e3ff62c345c976cd1ffbcc5e6042f55264977f5
tree16c9ffcc2468e21f5ee445e440c835857ed94c81
parent226751ae4a1f3e00021c43399d7bb51a99c22c17
Experimental encrypt-then-mac support.

Experimental support for encrypt then mac from
draft-gutmann-tls-encrypt-then-mac-02.txt

To enable it set the appropriate extension number (0x10 for the test server)
using e.g. -DTLSEXT_TYPE_encrypt_then_mac=0x10

For non-compliant peers (i.e. just about everything) this should have no
effect.
13 files changed:
CHANGES
apps/s_cb.c
ssl/s2_clnt.c
ssl/s2_enc.c
ssl/s2_srvr.c
ssl/s3_enc.c
ssl/s3_pkt.c
ssl/ssl3.h
ssl/ssl_ciph.c
ssl/ssl_locl.h
ssl/ssl_txt.c
ssl/t1_enc.c
ssl/t1_lib.c