hkdf

Documentation

Index

• Constants
• func ExpandLabel(secret []byte, label string, context []byte, length int, ...) []byte

Constants

const (
	ResumptionBinderLabel         = "res binder"
	ClientHandshakeTrafficLabel   = "c hs traffic"
	ServerHandshakeTrafficLabel   = "s hs traffic"
	ClientApplicationTrafficLabel = "c ap traffic"
	ServerApplicationTrafficLabel = "s ap traffic"
	ExporterLabel                 = "exp master"
	ResumptionLabel               = "res master"
	TrafficUpdateLabel            = "traffic upd"
)

const (
	KeyLogLabelTLS12                   = "CLIENT_RANDOM"
	KeyLogLabelClientHandshake         = "CLIENT_HANDSHAKE_TRAFFIC_SECRET"
	KeyLogLabelServerHandshake         = "SERVER_HANDSHAKE_TRAFFIC_SECRET"
	KeyLogLabelClientTraffic           = "CLIENT_TRAFFIC_SECRET_0"
	KeyLogLabelServerTraffic           = "SERVER_TRAFFIC_SECRET_0"
	KeyLogLabelExporterSecret          = "EXPORTER_SECRET"
	KeyLogLabelClientEarlyTafficSecret = "CLIENT_EARLY_TRAFFIC_SECRET"
)

const (
	TlsAes128GcmSha256        uint16 = 0x1301
	TlsAes256GcmSha384        uint16 = 0x1302
	TlsChacha20Poly1305Sha256 uint16 = 0x1303
)

crypto/tls/cipher_suites.go line 678 TLS 1.3 cipher suites.

Functions

func ExpandLabel

func ExpandLabel(secret []byte, label string, context []byte, length int, transcript crypto.Hash) []byte

ExpandLabel implements HKDF-Expand-Label from RFC 8446, Section 7.1.