openssl/ssl
Pauli f7d998a206 tls/prov: move the TLS 1.3 KDF code to providers
This function needs to be power up tested as part of the FIPS validation and
thus it needs to be inside the provider boundary.  This is realised by
introducing a new KDF "TLS13-KDF" which does the required massaging of
parameters but is otherwise functionally equivalent to HKDF.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/16203)
2021-08-05 15:43:59 +10:00
..
record Update copyright year 2021-07-29 15:41:35 +01:00
statem tls_process_{client,server}_certificate(): allow verify_callback return > 1 2021-07-21 11:46:18 +02:00
bio_ssl.c
build.info
d1_lib.c Fix dtls timeout dead code 2021-07-29 10:08:07 -07:00
d1_msg.c
d1_srtp.c
ktls.c KTLS: AES-CCM in TLS-1.3 is broken on 5.x kernels, disable it 2021-07-27 13:19:20 +10:00
methods.c
pqueue.c
s3_cbc.c fips module header inclusion fine-tunning 2021-07-06 10:52:27 +10:00
s3_enc.c
s3_lib.c
s3_msg.c
ssl_asn1.c
ssl_cert_table.h
ssl_cert.c cross-reference the DH and RSA SECLEVEL to level of security mappings 2021-06-23 09:26:15 +10:00
ssl_ciph.c
ssl_conf.c Disabling Encrypt-then-MAC extension in s_client/s_server 2021-06-15 22:14:34 +02:00
ssl_err_legacy.c Update copyright year 2021-06-17 13:24:59 +01:00
ssl_err.c
ssl_init.c Update copyright year 2021-06-17 13:24:59 +01:00
ssl_lib.c Fix some minor record layer issues 2021-07-17 08:50:55 -07:00
ssl_local.h Fix dtls timeout dead code 2021-07-29 10:08:07 -07:00
ssl_mcnf.c
ssl_rsa_legacy.c
ssl_rsa.c
ssl_sess.c Add missing session timeout calc 2021-07-28 10:37:21 +10:00
ssl_stat.c
ssl_txt.c Update copyright year 2021-06-17 13:24:59 +01:00
ssl_utst.c
sslerr.h
t1_enc.c
t1_lib.c ssl: replace tabs with spaces 2021-06-19 15:51:12 +10:00
t1_trce.c
tls13_enc.c tls/prov: move the TLS 1.3 KDF code to providers 2021-08-05 15:43:59 +10:00
tls_depr.c
tls_srp.c