lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-08-07 06:42:56 +03:00
Code Activity

TLS 1.3: Fix selected key exchange mode check

Browse Source 
ECDHE operations have to be done in
ephemeral and PSK-ephemeral key exchange
mode, not just ephemeral key exhange mode.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
This commit is contained in:
Ronald Cron
2022-07-20 16:21:43 +02:00
parent 7085aa42ee
commit 2d8b7ac898
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
library/ssl_tls13_keys.c
View File

@@ -1237,7 +1237,7 @@ int mbedtls_ssl_tls13_key_schedule_stage_handshake( mbedtls_ssl_context *ssl )
* client_handshake_traffic_secret and server_handshake_traffic_secret * client_handshake_traffic_secret and server_handshake_traffic_secret
* are derived in the handshake secret derivation stage. * are derived in the handshake secret derivation stage.
*/ */
if( mbedtls_ssl_tls13_ephemeral_enabled( ssl ) ) if( mbedtls_ssl_tls13_some_ephemeral_enabled( ssl ) )
{ {
if( mbedtls_ssl_tls13_named_group_is_ecdhe( handshake->offered_group_id ) ) if( mbedtls_ssl_tls13_named_group_is_ecdhe( handshake->offered_group_id ) )
{ {