From cdb2936244b345f68d036e071db428aa06006c5e Mon Sep 17 00:00:00 2001 From: Marco Oliverio Date: Thu, 20 Jan 2022 11:03:40 +0100 Subject: [PATCH] dtls-srtp: PRF: fix correct order of client/server random in seed see RFC 5705 Section 4 --- src/ssl.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/ssl.c b/src/ssl.c index 7a7540f94..4fc587b2c 100644 --- a/src/ssl.c +++ b/src/ssl.c @@ -1418,8 +1418,8 @@ int wolfSSL_export_dtls_srtp_keying_material(WOLFSSL* ssl, } #ifdef WOLFSSL_HAVE_PRF - XMEMCPY(seed, ssl->arrays->serverRandom, RAN_LEN); - XMEMCPY(seed + RAN_LEN, ssl->arrays->clientRandom, RAN_LEN); + XMEMCPY(seed, ssl->arrays->clientRandom, RAN_LEN); + XMEMCPY(seed + RAN_LEN, ssl->arrays->serverRandom, RAN_LEN); PRIVATE_KEY_UNLOCK(); ret = wc_PRF_TLSv1(out, profile->kdfBits, /* out: generated keys / salt */