kaidokert / krabitls-rs / 28305328462

85%

push

github

post-handshake KeyUpdate (RFC 8446 §4.6.3) (#74)

* post-handshake KeyUpdate (RFC 8446 §4.6.3)

Handle a server KeyUpdate instead of killing the connection: rotate the
receive keys via HKDF-Expand-Label(secret, "traffic upd", "", 32), and when
update_requested is set, queue our own KeyUpdate(update_requested=0) under
the current send keys and rotate the send keys. AppData retains the
application-traffic secrets so the next generation can be derived; new
encrypt_key_update / apply_recv_key_update / apply_send_key_update round out
the typestate API. Malformed input — wrong length, an update_requested other
than 0/1, or a message coalesced after it (§5.1) — fails as MalformedKeyUpdate.

230 of 250 new or added lines in 5 files covered. (92.0%)

4627 of 5495 relevant lines covered (84.2%)

155.7 hits per line