Use AES-GCM-256 for session ticket protection

This commit is contained in:
Manuel Pégourié-Gonnard 2015-05-20 19:59:39 +02:00
parent 8eff512274
commit 1041a39338
2 changed files with 74 additions and 107 deletions

View file

@ -25,7 +25,7 @@
#define MBEDTLS_SSL_TICKET_H
#include "ssl.h"
#include "aes.h"
#include "cipher.h"
#if defined(MBEDTLS_THREADING_C)
#include "threading.h"
@ -40,10 +40,8 @@ extern "C" {
*/
typedef struct
{
unsigned char key_name[16]; /*!< name to quickly reject bad tickets */
mbedtls_aes_context enc; /*!< encryption context */
mbedtls_aes_context dec; /*!< decryption context */
unsigned char mac_key[16]; /*!< authentication key */
unsigned char key_name[4]; /*!< name to quickly reject bad tickets */
mbedtls_cipher_context_t cipher;/*!< cipher context */
uint32_t ticket_lifetime; /*!< lifetime of tickets in seconds */