mirror of
https://github.com/refraction-networking/utls.git
synced 2025-04-03 20:17:36 +03:00
65b9e15fc2
Ever since session ticket key rotation was introduced in CL 9072, we've been including a prefix in every ticket to identify what key it's encrypted with. It's a small privacy gain, but the cost of trial decryptions is also small, especially since the first key is probably the most frequently used. Also reissue tickets on every resumption so that the next connection can't be linked to all the previous ones. Again the privacy gain is small but the performance cost is small and it comes with a reduction in complexity. For #60105 Change-Id: I852f297162d2b79a3d9bf61f6171e8ce94b2537a Reviewed-on: https://go-review.googlesource.com/c/go/+/496817 Reviewed-by: Damien Neil <dneil@google.com> Reviewed-by: Matthew Dempsky <mdempsky@google.com> Run-TryBot: Damien Neil <dneil@google.com> TryBot-Result: Gopher Robot <gobot@golang.org>
53 lines
3.9 KiB
Text
53 lines
3.9 KiB
Text
>>> Flow 1 (client to server)
|
|
00000000 16 03 01 01 02 01 00 00 fe 03 03 e3 e1 0d a8 3d |...............=|
|
|
00000010 e9 cb 74 24 6a 25 53 ec 29 6d 19 89 78 e4 24 71 |..t$j%S.)m..x.$q|
|
|
00000020 bb b8 e1 02 75 1d 1b 62 b2 d1 8b 20 6b d1 d9 2c |....u..b... k..,|
|
|
00000030 43 20 d8 cb bd fe b9 0e f0 84 36 03 d8 07 d0 04 |C ........6.....|
|
|
00000040 8d 16 e3 fa 68 04 83 b7 87 1b 2b ea 00 04 00 2f |....h.....+..../|
|
|
00000050 00 ff 01 00 00 b1 00 23 00 71 00 00 00 00 00 00 |.......#.q......|
|
|
00000060 00 00 00 00 00 00 00 00 00 00 94 6f 2c 9f 83 51 |...........o,..Q|
|
|
00000070 ed 14 ef 68 ca 42 c5 4c 97 70 11 14 b7 27 54 f2 |...h.B.L.p...'T.|
|
|
00000080 0b 35 d5 93 d8 86 9e 86 0d 11 33 11 84 b9 59 93 |.5........3...Y.|
|
|
00000090 6a 5e 6e 08 47 99 d9 5f 9f 69 0e 93 08 3b 97 12 |j^n.G.._.i...;..|
|
|
000000a0 68 d8 55 e9 f8 d0 69 88 49 38 16 d9 3f 52 8c 19 |h.U...i.I8..?R..|
|
|
000000b0 e1 48 5e 98 ea cb 31 f9 bd 50 3e 89 32 ed 0e 48 |.H^...1..P>.2..H|
|
|
000000c0 fa 8f 86 87 da 06 f5 c7 8a b7 00 00 16 00 00 00 |................|
|
|
000000d0 17 00 00 00 0d 00 30 00 2e 04 03 05 03 06 03 08 |......0.........|
|
|
000000e0 07 08 08 08 09 08 0a 08 0b 08 04 08 05 08 06 04 |................|
|
|
000000f0 01 05 01 06 01 03 03 02 03 03 01 02 01 03 02 02 |................|
|
|
00000100 02 04 02 05 02 06 02 |.......|
|
|
>>> Flow 2 (server to client)
|
|
00000000 16 03 03 00 55 02 00 00 51 03 03 00 00 00 00 00 |....U...Q.......|
|
|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
|
|
00000020 00 00 00 44 4f 57 4e 47 52 44 01 20 6b d1 d9 2c |...DOWNGRD. k..,|
|
|
00000030 43 20 d8 cb bd fe b9 0e f0 84 36 03 d8 07 d0 04 |C ........6.....|
|
|
00000040 8d 16 e3 fa 68 04 83 b7 87 1b 2b ea 00 2f 00 00 |....h.....+../..|
|
|
00000050 09 00 23 00 00 ff 01 00 01 00 16 03 03 00 7b 04 |..#...........{.|
|
|
00000060 00 00 77 00 00 00 00 00 71 00 00 00 00 00 00 00 |..w.....q.......|
|
|
00000070 00 00 00 00 00 00 00 00 00 94 6f 2c 9f 83 51 ed |..........o,..Q.|
|
|
00000080 14 ef 68 ca 42 c5 4c 97 70 11 14 b7 27 54 f2 0b |..h.B.L.p...'T..|
|
|
00000090 35 d5 93 d8 86 9e 86 0d 11 33 11 84 b9 59 93 6a |5........3...Y.j|
|
|
000000a0 5e 6e 08 47 99 d9 5f 9f 69 0e 93 08 3b 97 12 68 |^n.G.._.i...;..h|
|
|
000000b0 d8 55 e9 f8 d0 69 88 49 38 16 d9 3f 52 8c 19 e1 |.U...i.I8..?R...|
|
|
000000c0 48 5e 98 ea cb 31 f9 bd 50 3e 89 32 ed 0e 48 fa |H^...1..P>.2..H.|
|
|
000000d0 8f 86 87 da 06 f5 c7 8a b7 00 14 03 03 00 01 01 |................|
|
|
000000e0 16 03 03 00 40 00 00 00 00 00 00 00 00 00 00 00 |....@...........|
|
|
000000f0 00 00 00 00 00 d4 c4 c1 96 eb 80 4c e9 74 73 a2 |...........L.ts.|
|
|
00000100 d8 35 09 8c b6 f6 4f 7c 3c 21 36 c7 94 36 37 48 |.5....O|<!6..67H|
|
|
00000110 a0 eb fa 71 dd f9 1f 99 e9 44 ae 80 15 b0 90 d9 |...q.....D......|
|
|
00000120 a2 82 b5 4e 86 |...N.|
|
|
>>> Flow 3 (client to server)
|
|
00000000 14 03 03 00 01 01 16 03 03 00 40 86 f3 8d ad ab |..........@.....|
|
|
00000010 d5 20 16 bd c0 97 60 77 08 99 c7 7b 47 20 9b 37 |. ....`w...{G .7|
|
|
00000020 da 0b 21 99 0a 22 6a 43 92 5c 89 11 10 c6 e2 99 |..!.."jC.\......|
|
|
00000030 01 5b f4 ce 18 0d 16 3f 57 0d fb b3 b4 f2 a5 8d |.[.....?W.......|
|
|
00000040 97 4f 60 b3 41 22 49 43 55 4f f5 |.O`.A"ICUO.|
|
|
>>> Flow 4 (server to client)
|
|
00000000 17 03 03 00 40 00 00 00 00 00 00 00 00 00 00 00 |....@...........|
|
|
00000010 00 00 00 00 00 c5 9b b2 da 9a 9a d8 eb cc 3c 96 |..............<.|
|
|
00000020 4a d1 28 e8 dd b1 b3 b8 1c bd 9f fb ee f8 05 95 |J.(.............|
|
|
00000030 47 a5 c5 77 de e1 66 c8 04 3f 4e 49 d0 95 3d 11 |G..w..f..?NI..=.|
|
|
00000040 5e 7e 10 3d 15 15 03 03 00 30 00 00 00 00 00 00 |^~.=.....0......|
|
|
00000050 00 00 00 00 00 00 00 00 00 00 cf c4 0c 9e 82 c2 |................|
|
|
00000060 89 30 4c 29 98 6e 0e d1 37 3d f7 54 d3 1c 2e a6 |.0L).n..7=.T....|
|
|
00000070 cd 3a b7 7b 58 ed fb 88 c6 f2 |.:.{X.....|
|