Gilles Peskine 311f54d0ee tls_prf: support an empty master secret ...

In TLS, the master secret is always a key. But EAP-TLS uses the TLS
PRF to derive an IV with an empty string for the "secret" input. The
code always stored the secret into a key slot before calling the TLS
PRF, but this doesn't work when the secret is empty, since PSA Crypto
no longer supports empty keys. Add a special case for an empty secret.

2019-09-23 18:19:22 +02:00

415 KiB

Raw Blame History

View Raw