mirror of
https://github.com/refraction-networking/utls.git
synced 2025-04-03 20:17:36 +03:00
65b9e15fc2
Ever since session ticket key rotation was introduced in CL 9072, we've been including a prefix in every ticket to identify what key it's encrypted with. It's a small privacy gain, but the cost of trial decryptions is also small, especially since the first key is probably the most frequently used. Also reissue tickets on every resumption so that the next connection can't be linked to all the previous ones. Again the privacy gain is small but the performance cost is small and it comes with a reduction in complexity. For #60105 Change-Id: I852f297162d2b79a3d9bf61f6171e8ce94b2537a Reviewed-on: https://go-review.googlesource.com/c/go/+/496817 Reviewed-by: Damien Neil <dneil@google.com> Reviewed-by: Matthew Dempsky <mdempsky@google.com> Run-TryBot: Damien Neil <dneil@google.com> TryBot-Result: Gopher Robot <gobot@golang.org>
90 lines
6.7 KiB
Text
90 lines
6.7 KiB
Text
>>> Flow 1 (client to server)
|
|
00000000 16 03 01 00 71 01 00 00 6d 03 03 1a 33 54 ce 5c |....q...m...3T.\|
|
|
00000010 39 88 32 9d b9 24 c0 db d7 6b c2 dc 78 25 30 7b |9.2..$...k..x%0{|
|
|
00000020 70 5b b9 9f 14 7d 73 3f 75 d2 94 00 00 04 00 2f |p[...}s?u....../|
|
|
00000030 00 ff 01 00 00 40 00 23 00 00 00 16 00 00 00 17 |.....@.#........|
|
|
00000040 00 00 00 0d 00 30 00 2e 04 03 05 03 06 03 08 07 |.....0..........|
|
|
00000050 08 08 08 09 08 0a 08 0b 08 04 08 05 08 06 04 01 |................|
|
|
00000060 05 01 06 01 03 03 02 03 03 01 02 01 03 02 02 02 |................|
|
|
00000070 04 02 05 02 06 02 |......|
|
|
>>> Flow 2 (server to client)
|
|
00000000 16 03 03 00 35 02 00 00 31 03 03 00 00 00 00 00 |....5...1.......|
|
|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
|
|
00000020 00 00 00 44 4f 57 4e 47 52 44 01 00 00 2f 00 00 |...DOWNGRD.../..|
|
|
00000030 09 00 23 00 00 ff 01 00 01 00 16 03 03 02 59 0b |..#...........Y.|
|
|
00000040 00 02 55 00 02 52 00 02 4f 30 82 02 4b 30 82 01 |..U..R..O0..K0..|
|
|
00000050 b4 a0 03 02 01 02 02 09 00 e8 f0 9d 3f e2 5b ea |............?.[.|
|
|
00000060 a6 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 |.0...*.H........|
|
|
00000070 30 1f 31 0b 30 09 06 03 55 04 0a 13 02 47 6f 31 |0.1.0...U....Go1|
|
|
00000080 10 30 0e 06 03 55 04 03 13 07 47 6f 20 52 6f 6f |.0...U....Go Roo|
|
|
00000090 74 30 1e 17 0d 31 36 30 31 30 31 30 30 30 30 30 |t0...16010100000|
|
|
000000a0 30 5a 17 0d 32 35 30 31 30 31 30 30 30 30 30 30 |0Z..250101000000|
|
|
000000b0 5a 30 1a 31 0b 30 09 06 03 55 04 0a 13 02 47 6f |Z0.1.0...U....Go|
|
|
000000c0 31 0b 30 09 06 03 55 04 03 13 02 47 6f 30 81 9f |1.0...U....Go0..|
|
|
000000d0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 |0...*.H.........|
|
|
000000e0 81 8d 00 30 81 89 02 81 81 00 db 46 7d 93 2e 12 |...0.......F}...|
|
|
000000f0 27 06 48 bc 06 28 21 ab 7e c4 b6 a2 5d fe 1e 52 |'.H..(!.~...]..R|
|
|
00000100 45 88 7a 36 47 a5 08 0d 92 42 5b c2 81 c0 be 97 |E.z6G....B[.....|
|
|
00000110 79 98 40 fb 4f 6d 14 fd 2b 13 8b c2 a5 2e 67 d8 |y.@.Om..+.....g.|
|
|
00000120 d4 09 9e d6 22 38 b7 4a 0b 74 73 2b c2 34 f1 d1 |...."8.J.ts+.4..|
|
|
00000130 93 e5 96 d9 74 7b f3 58 9f 6c 61 3c c0 b0 41 d4 |....t{.X.la<..A.|
|
|
00000140 d9 2b 2b 24 23 77 5b 1c 3b bd 75 5d ce 20 54 cf |.++$#w[.;.u]. T.|
|
|
00000150 a1 63 87 1d 1e 24 c4 f3 1d 1a 50 8b aa b6 14 43 |.c...$....P....C|
|
|
00000160 ed 97 a7 75 62 f4 14 c8 52 d7 02 03 01 00 01 a3 |...ub...R.......|
|
|
00000170 81 93 30 81 90 30 0e 06 03 55 1d 0f 01 01 ff 04 |..0..0...U......|
|
|
00000180 04 03 02 05 a0 30 1d 06 03 55 1d 25 04 16 30 14 |.....0...U.%..0.|
|
|
00000190 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 |..+.........+...|
|
|
000001a0 05 07 03 02 30 0c 06 03 55 1d 13 01 01 ff 04 02 |....0...U.......|
|
|
000001b0 30 00 30 19 06 03 55 1d 0e 04 12 04 10 9f 91 16 |0.0...U.........|
|
|
000001c0 1f 43 43 3e 49 a6 de 6d b6 80 d7 9f 60 30 1b 06 |.CC>I..m....`0..|
|
|
000001d0 03 55 1d 23 04 14 30 12 80 10 48 13 49 4d 13 7e |.U.#..0...H.IM.~|
|
|
000001e0 16 31 bb a3 01 d5 ac ab 6e 7b 30 19 06 03 55 1d |.1......n{0...U.|
|
|
000001f0 11 04 12 30 10 82 0e 65 78 61 6d 70 6c 65 2e 67 |...0...example.g|
|
|
00000200 6f 6c 61 6e 67 30 0d 06 09 2a 86 48 86 f7 0d 01 |olang0...*.H....|
|
|
00000210 01 0b 05 00 03 81 81 00 9d 30 cc 40 2b 5b 50 a0 |.........0.@+[P.|
|
|
00000220 61 cb ba e5 53 58 e1 ed 83 28 a9 58 1a a9 38 a4 |a...SX...(.X..8.|
|
|
00000230 95 a1 ac 31 5a 1a 84 66 3d 43 d3 2d d9 0b f2 97 |...1Z..f=C.-....|
|
|
00000240 df d3 20 64 38 92 24 3a 00 bc cf 9c 7d b7 40 20 |.. d8.$:....}.@ |
|
|
00000250 01 5f aa d3 16 61 09 a2 76 fd 13 c3 cc e1 0c 5c |._...a..v......\|
|
|
00000260 ee b1 87 82 f1 6c 04 ed 73 bb b3 43 77 8d 0c 1c |.....l..s..Cw...|
|
|
00000270 f1 0f a1 d8 40 83 61 c9 4c 72 2b 9d ae db 46 06 |....@.a.Lr+...F.|
|
|
00000280 06 4d f4 c1 b3 3e c0 d1 bd 42 d4 db fe 3d 13 60 |.M...>...B...=.`|
|
|
00000290 84 5c 21 d3 3b e9 fa e7 16 03 03 00 04 0e 00 00 |.\!.;...........|
|
|
000002a0 00 |.|
|
|
>>> Flow 3 (client to server)
|
|
00000000 16 03 03 00 86 10 00 00 82 00 80 cd 0c 0e 56 8a |..............V.|
|
|
00000010 e3 7d cc 5b 26 5f 16 86 3c a2 c0 96 06 55 94 e4 |.}.[&_..<....U..|
|
|
00000020 64 69 6d 10 d6 64 48 6d 2e 8f 27 85 5c a8 bb 4b |dim..dHm..'.\..K|
|
|
00000030 52 f3 c4 5b be 16 3e 6a a8 ab 9d 32 a5 58 6a 2c |R..[..>j...2.Xj,|
|
|
00000040 87 bf ca b8 df 38 73 2f 51 1b ac 0b 29 e1 2a 3e |.....8s/Q...).*>|
|
|
00000050 3a 83 04 b9 9d af aa 20 7c 97 8a 7b a2 20 4d 2f |:...... |..{. M/|
|
|
00000060 eb 45 2c 2a 9e 13 73 2c 6a de e9 73 f0 fe 1b 53 |.E,*..s,j..s...S|
|
|
00000070 37 68 32 9a 18 9f 57 52 2e 9d 31 9c 03 d3 44 8b |7h2...WR..1...D.|
|
|
00000080 bd be 95 25 d9 84 24 1e b5 88 f9 14 03 03 00 01 |...%..$.........|
|
|
00000090 01 16 03 03 00 40 ca 99 75 30 ff 9f ba b1 97 43 |.....@..u0.....C|
|
|
000000a0 03 49 ee ea 73 ae bb 4d b2 1b 98 13 11 22 8f 7c |.I..s..M.....".||
|
|
000000b0 8f 1f 5b 32 36 ec 3e ad d3 8a bd f5 10 2e 35 40 |..[26.>.......5@|
|
|
000000c0 02 73 df f1 de 0d d6 c9 8d 4a 08 38 3a 31 5d b7 |.s.......J.8:1].|
|
|
000000d0 b3 31 7b 17 fe 84 |.1{...|
|
|
>>> Flow 4 (server to client)
|
|
00000000 16 03 03 00 7b 04 00 00 77 00 00 00 00 00 71 00 |....{...w.....q.|
|
|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 94 |................|
|
|
00000020 6f 2c 9f 83 51 ed 14 ef 68 ca 42 c5 4c 97 70 11 |o,..Q...h.B.L.p.|
|
|
00000030 14 b7 27 54 f2 0b 35 d5 93 d8 86 9e 86 0d 11 33 |..'T..5........3|
|
|
00000040 11 84 b9 59 93 6a 5e 6e 08 47 99 d9 5f 9f 69 0e |...Y.j^n.G.._.i.|
|
|
00000050 93 08 3b 97 12 68 d8 55 e9 f8 d0 69 88 49 38 16 |..;..h.U...i.I8.|
|
|
00000060 d9 3f 52 8c 19 e1 48 5e 98 ea cb 31 f9 bd 50 3e |.?R...H^...1..P>|
|
|
00000070 89 32 ed 0e 48 fa 8f 86 87 da 06 f5 c7 8a b7 00 |.2..H...........|
|
|
00000080 14 03 03 00 01 01 16 03 03 00 40 00 00 00 00 00 |..........@.....|
|
|
00000090 00 00 00 00 00 00 00 00 00 00 00 6c b1 c8 55 d7 |...........l..U.|
|
|
000000a0 3b 07 12 f9 c8 d6 b2 50 09 b8 26 d0 94 9d 86 6a |;......P..&....j|
|
|
000000b0 97 3b a7 20 fe 66 c8 c9 56 80 81 f9 56 13 44 2b |.;. .f..V...V.D+|
|
|
000000c0 de 56 fa c5 38 3c 4d d7 db fe 6a 17 03 03 00 40 |.V..8<M...j....@|
|
|
000000d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
|
|
000000e0 93 24 62 38 5d e3 3e 19 a1 17 91 40 09 f8 fe 93 |.$b8].>....@....|
|
|
000000f0 93 33 3e 3c 46 4d 03 68 de b6 84 d7 da 44 42 87 |.3><FM.h.....DB.|
|
|
00000100 4c b9 a7 04 da ad 97 a3 cd cb 6f 9b 25 21 ca b0 |L.........o.%!..|
|
|
00000110 15 03 03 00 30 00 00 00 00 00 00 00 00 00 00 00 |....0...........|
|
|
00000120 00 00 00 00 00 de 01 46 c3 77 b6 72 f4 44 b9 e5 |.......F.w.r.D..|
|
|
00000130 ad f5 6e 52 1b 34 3e b6 63 49 d9 0c b2 6d 92 85 |..nR.4>.cI...m..|
|
|
00000140 71 b3 64 07 d7 |q.d..|
|