wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-07-29 18:27:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5885 from anhu/pq_session_ticket

Browse Source 
Allow session tickets to properly resume when using PQ KEMs.
This commit is contained in:
David Garske
2022-12-13 16:32:07 -08:00
committed by GitHub
parent 64ef6aedd6 364835dc9e
commit b2d25ece98
2 changed files with 13 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
examples/client/client.c
View File

@ -398,7 +398,10 @@ static void SetKeyShare(WOLFSSL* ssl, int onlyKeyShare, int useX25519,
}
printf("Using Post-Quantum KEM: %s\n", pqcAlg);
if (wolfSSL_UseKeyShare(ssl, group) != WOLFSSL_SUCCESS) {
if (wolfSSL_UseKeyShare(ssl, group) == WOLFSSL_SUCCESS) {
groups[count++] = group;
}
else {
err_sys("unable to use post-quantum KEM");
}
}

13
src/tls.c
View File

@ -8064,7 +8064,7 @@ static int TLSX_KeyShare_Process(WOLFSSL* ssl, KeyShareEntry* keyShareEntry)
int ret;
#if defined(HAVE_SESSION_TICKET) || !defined(NO_PSK)
ssl->session->namedGroup = (byte)keyShareEntry->group;
ssl->session->namedGroup = keyShareEntry->group;
#endif
/* reset the pre master secret size */
if (ssl->arrays->preMasterSz == 0)
@ -11135,9 +11135,14 @@ int TLSX_PopulateExtensions(WOLFSSL* ssl, byte isServer)
}
if (namedGroup > 0) {
#ifdef HAVE_PQC
/* For KEMs, the key share has already been generated. */
if (!WOLFSSL_NAMED_GROUP_IS_PQC(namedGroup))
#endif
/* For KEMs, the key share has already been generated, but not
* if we are resuming. */
if (!WOLFSSL_NAMED_GROUP_IS_PQC(namedGroup)
#ifdef HAVE_SESSION_TICKET
|| ssl->options.resuming
#endif /* HAVE_SESSION_TICKET */
)
#endif /* HAVE_PQC */
ret = TLSX_KeyShare_Use(ssl, namedGroup, 0, NULL, NULL);
if (ret != 0)
return ret;