From b1a51abb935163cbb0b0089ad9ee8ff174341bbd Mon Sep 17 00:00:00 2001 From: Tatsuhiro Tsujikawa Date: Thu, 18 Jan 2018 15:39:45 +0900 Subject: [PATCH] Remove generation of exporter master secret on client application traffic Reviewed-by: Rich Salz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/4944) --- ssl/tls13_enc.c | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/ssl/tls13_enc.c b/ssl/tls13_enc.c index 7975be54a8..f555df54fc 100644 --- a/ssl/tls13_enc.c +++ b/ssl/tls13_enc.c @@ -562,16 +562,6 @@ int tls13_change_cipher_state(SSL *s, int which) goto err; } s->session->master_key_length = hashlen; - - /* Now we create the exporter master secret */ - if (!tls13_hkdf_expand(s, ssl_handshake_md(s), insecret, - exporter_master_secret, - sizeof(exporter_master_secret) - 1, - hash, hashlen, s->exporter_master_secret, - hashlen)) { - /* SSLfatal() already called */ - goto err; - } } if (!derive_secret_key_and_iv(s, which & SSL3_CC_WRITE, md, cipher, -- 2.25.1