utls/testdata/Server-TLSv13-ClientAuthRequestedNotGiven
Filippo Valsorda 65b9e15fc2 crypto/tls: reduce session ticket linkability
Ever since session ticket key rotation was introduced in CL 9072, we've
been including a prefix in every ticket to identify what key it's
encrypted with. It's a small privacy gain, but the cost of trial
decryptions is also small, especially since the first key is probably
the most frequently used.

Also reissue tickets on every resumption so that the next connection
can't be linked to all the previous ones. Again the privacy gain is
small but the performance cost is small and it comes with a reduction in
complexity.

For #60105

Change-Id: I852f297162d2b79a3d9bf61f6171e8ce94b2537a
Reviewed-on: https://go-review.googlesource.com/c/go/+/496817
Reviewed-by: Damien Neil <dneil@google.com>
Reviewed-by: Matthew Dempsky <mdempsky@google.com>
Run-TryBot: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-05-24 23:56:24 +00:00

103 lines
7.7 KiB
Text

>>> Flow 1 (client to server)
00000000 16 03 01 00 ca 01 00 00 c6 03 03 a1 eb cd fe ad |................|
00000010 69 19 0c 1f 2d ad 7a 14 4c dc 56 73 ba 60 ea b7 |i...-.z.L.Vs.`..|
00000020 9f 8e 54 73 3b 18 ac 7e 15 26 7d 20 d0 3a a9 23 |..Ts;..~.&} .:.#|
00000030 48 ec 62 65 0b 01 ed 9a d3 27 9f 94 c3 05 91 b1 |H.be.....'......|
00000040 88 a0 a1 1a cb 6e ed 89 f3 76 39 94 00 04 13 01 |.....n...v9.....|
00000050 00 ff 01 00 00 79 00 0b 00 04 03 00 01 02 00 0a |.....y..........|
00000060 00 0c 00 0a 00 1d 00 17 00 1e 00 19 00 18 00 16 |................|
00000070 00 00 00 17 00 00 00 0d 00 1e 00 1c 04 03 05 03 |................|
00000080 06 03 08 07 08 08 08 09 08 0a 08 0b 08 04 08 05 |................|
00000090 08 06 04 01 05 01 06 01 00 2b 00 03 02 03 04 00 |.........+......|
000000a0 2d 00 02 01 01 00 33 00 26 00 24 00 1d 00 20 53 |-.....3.&.$... S|
000000b0 56 2d f7 8c 59 8a 3b f9 bd eb ef 08 c3 15 e9 f2 |V-..Y.;.........|
000000c0 8c cf fd a8 42 54 d3 8b 5d 07 06 06 d8 3c 10 |....BT..]....<.|
>>> Flow 2 (server to client)
00000000 16 03 03 00 7a 02 00 00 76 03 03 00 00 00 00 00 |....z...v.......|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
00000020 00 00 00 00 00 00 00 00 00 00 00 20 d0 3a a9 23 |........... .:.#|
00000030 48 ec 62 65 0b 01 ed 9a d3 27 9f 94 c3 05 91 b1 |H.be.....'......|
00000040 88 a0 a1 1a cb 6e ed 89 f3 76 39 94 13 01 00 00 |.....n...v9.....|
00000050 2e 00 2b 00 02 03 04 00 33 00 24 00 1d 00 20 2f |..+.....3.$... /|
00000060 e5 7d a3 47 cd 62 43 15 28 da ac 5f bb 29 07 30 |.}.G.bC.(.._.).0|
00000070 ff f6 84 af c4 cf c2 ed 90 99 5f 58 cb 3b 74 14 |.........._X.;t.|
00000080 03 03 00 01 01 17 03 03 00 17 21 21 07 25 09 0b |..........!!.%..|
00000090 b0 e2 51 37 39 a6 b8 ab 7b 9e 53 07 3f 8c 63 18 |..Q79...{.S.?.c.|
000000a0 8e 17 03 03 00 3e d5 39 d7 6d a6 4b 9f f9 53 8c |.....>.9.m.K..S.|
000000b0 78 f5 21 5f 3e f8 37 da 37 bb 6c 17 7a ab 0f 6e |x.!_>.7.7.l.z..n|
000000c0 7e 76 93 0b c7 84 41 c9 29 21 9e 3c 65 ee 6d c7 |~v....A.)!.<e.m.|
000000d0 31 10 63 a4 56 fb 8b a5 1d 91 b2 19 57 62 94 6a |1.c.V.......Wb.j|
000000e0 23 1e ef ef 17 03 03 02 6d de c9 54 70 cf 6c 70 |#.......m..Tp.lp|
000000f0 f7 03 0a 1e 97 c8 c7 bc fa cb 44 bc 97 45 09 40 |..........D..E.@|
00000100 63 ef 02 7a ee 6b 29 cc 17 6e a6 aa 8e 0c 46 41 |c..z.k)..n....FA|
00000110 ca 36 18 77 ec 78 8b 1c d0 c2 11 94 6e ff 19 47 |.6.w.x......n..G|
00000120 09 c7 67 cf 4d 9c da 64 9e 80 2f b5 e5 9e e2 f3 |..g.M..d../.....|
00000130 9d 2a ae 45 9c 1a 48 6e 5c 3f 3f f8 65 ea e9 8f |.*.E..Hn\??.e...|
00000140 f9 2d 1c 88 b7 ef 0e 0e ce 2f 21 5e ef ec d1 6c |.-......./!^...l|
00000150 ca ad 4c 22 6a 48 4d 55 63 e2 08 78 b7 88 00 77 |..L"jHMUc..x...w|
00000160 71 bd 4d d4 c7 b3 1a 8e a1 67 64 d9 b6 8b 2f 92 |q.M......gd.../.|
00000170 08 68 28 2c eb 9f 5e cb 1d c3 97 6c e7 f8 36 3c |.h(,..^....l..6<|
00000180 1b 0c 2d ff 9b ff be e9 28 a5 69 25 23 fb fe 28 |..-.....(.i%#..(|
00000190 f9 b2 5a 2b 8d 55 42 f8 cc 50 1d 43 6c 09 f1 75 |..Z+.UB..P.Cl..u|
000001a0 86 9b fc b9 34 e6 52 a8 0f 6b c9 8f 1f 35 77 c8 |....4.R..k...5w.|
000001b0 9d ec 96 c0 0a fb 5b 64 ae 1f 79 f9 fc b5 af 20 |......[d..y.... |
000001c0 e1 a6 dc e0 fa 29 b6 9d 15 b4 cc e5 20 54 df 0a |.....)...... T..|
000001d0 74 b6 46 94 11 f3 48 25 85 4d 92 f3 a5 fb 37 46 |t.F...H%.M....7F|
000001e0 83 64 ee 61 82 85 f6 4d 8d 83 ca a5 51 7a dc f7 |.d.a...M....Qz..|
000001f0 ed cb 5c 40 3f 31 86 67 87 d8 23 c9 8b f3 5c f6 |..\@?1.g..#...\.|
00000200 f7 4b f7 45 51 c5 87 9e 2e d1 00 c3 71 7b 72 c6 |.K.EQ.......q{r.|
00000210 91 f1 4e d4 a0 10 2c 73 39 0b 22 7e f6 28 08 e3 |..N...,s9."~.(..|
00000220 28 09 09 09 f6 6e 92 73 8d 44 56 c1 f4 4a 19 4c |(....n.s.DV..J.L|
00000230 77 7e bc eb ce 40 04 eb 68 fa cf 32 bc c2 c7 66 |w~...@..h..2...f|
00000240 95 45 74 2d 1b 01 85 f7 f2 76 a0 63 f9 5f b4 cf |.Et-.....v.c._..|
00000250 ad af 8d a5 80 1d f8 2c ed 1a a4 4d a8 9c 80 56 |.......,...M...V|
00000260 dd 0e 8b 93 58 cf 5e 51 b4 6e d3 a4 ec 7c 1e 92 |....X.^Q.n...|..|
00000270 79 76 fb d2 74 c7 63 4c 51 67 d2 d5 66 06 e4 bf |yv..t.cLQg..f...|
00000280 bf 67 32 28 0e 4a 6c 78 58 a4 53 36 aa 3f 73 ae |.g2(.JlxX.S6.?s.|
00000290 c2 57 5a 04 6d 68 4f 54 54 eb 57 35 1c 46 c5 fc |.WZ.mhOTT.W5.F..|
000002a0 de bd 2e d1 c2 71 6a a6 01 4c 07 ae a9 29 fb 46 |.....qj..L...).F|
000002b0 0e 6b 99 51 bf 34 fa b2 b2 4b 3b 61 65 b2 32 83 |.k.Q.4...K;ae.2.|
000002c0 92 f7 4b 9c 55 68 5f 04 5a 6d 94 07 c4 c6 6b 10 |..K.Uh_.Zm....k.|
000002d0 bf 8f d3 1a 65 14 7e d7 c7 07 4b 78 05 ca 6b b0 |....e.~...Kx..k.|
000002e0 ca 79 c8 f1 23 cc 6b f9 a7 ed f9 12 e7 de 07 55 |.y..#.k........U|
000002f0 67 52 08 92 cf 27 69 e2 f5 91 68 0d 75 ac 32 6f |gR...'i...h.u.2o|
00000300 7b bd dc 94 f5 0c aa aa 83 3b 52 c4 b3 a2 76 f9 |{........;R...v.|
00000310 78 60 6c 25 1b c7 fb c6 b2 d2 8c cc e9 ea 4d 64 |x`l%..........Md|
00000320 87 b1 8f 69 a4 f5 f3 19 34 44 fe 75 18 67 43 3c |...i....4D.u.gC<|
00000330 14 70 b1 fe d1 cb ac 96 cd 52 52 41 4a 8a 07 9a |.p.......RRAJ...|
00000340 88 37 0d 41 f2 76 45 96 e9 92 b3 68 37 e4 c9 1a |.7.A.vE....h7...|
00000350 cf 30 a3 82 9e bf 17 03 03 00 99 aa a6 fb 04 2a |.0.............*|
00000360 45 b2 46 a6 1e 10 fb 54 c1 a9 a2 78 af 18 d9 00 |E.F....T...x....|
00000370 63 a1 4c 35 1a 4e 10 52 d5 2a 79 ec 45 aa ac 91 |c.L5.N.R.*y.E...|
00000380 f9 10 d2 45 a7 96 5a 91 08 06 c0 0c 57 3b 51 50 |...E..Z.....W;QP|
00000390 ad bf 6b 26 19 c4 ce a2 e1 b4 34 bf a1 1a f7 ba |..k&......4.....|
000003a0 ec 9f 3e a1 8b 43 09 6f a0 d4 44 87 2a d6 a0 b7 |..>..C.o..D.*...|
000003b0 2d 20 69 fd cb a2 a3 e1 5b 39 96 5e a7 c6 49 9a |- i.....[9.^..I.|
000003c0 08 ad a8 16 f7 9e 9a 70 6b bb a6 15 65 66 70 bd |.......pk...efp.|
000003d0 9c 8d 35 b8 04 6f 70 65 e7 13 d2 0b 01 f1 59 cc |..5..ope......Y.|
000003e0 34 30 c7 27 f9 7d 29 3a 06 f6 65 ee b9 e1 49 03 |40.'.}):..e...I.|
000003f0 2e 70 2a 4e 17 03 03 00 35 0a 5c ff 25 fc 85 96 |.p*N....5.\.%...|
00000400 d3 b8 75 be 51 0b 38 79 fa 15 3d 43 f7 b2 2c d0 |..u.Q.8y..=C..,.|
00000410 25 ae 1d 07 87 1e 62 7e 4f 6b f6 3b 3d 8c c8 0c |%.....b~Ok.;=...|
00000420 65 32 75 fc 02 06 ff f8 0f 5f bb 6a cf 25 |e2u......_.j.%|
>>> Flow 3 (client to server)
00000000 14 03 03 00 01 01 17 03 03 00 19 29 de a5 0a f8 |...........)....|
00000010 13 ac df 51 6b f2 e7 95 a0 4e 86 65 f9 ea 22 c8 |...Qk....N.e..".|
00000020 16 e8 da af 17 03 03 00 35 e3 74 44 e3 b2 b1 68 |........5.tD...h|
00000030 3b 45 79 b8 ec 67 6b 0c 1f 8d 48 77 d4 50 2c cb |;Ey..gk...Hw.P,.|
00000040 d1 31 f1 fa c3 7f aa 31 83 18 73 8f 8c e8 e2 de |.1.....1..s.....|
00000050 6a 74 1d 4d da ec 14 fc a5 66 d9 e8 a8 de |jt.M.....f....|
>>> Flow 4 (server to client)
00000000 17 03 03 00 83 a0 be b0 41 ae 6f 75 0c dc e8 a9 |........A.ou....|
00000010 e8 cb 7a 36 0e 70 fd 88 8b 5d a0 5c 6d 08 7d c9 |..z6.p...].\m.}.|
00000020 0b 34 73 76 d9 b0 b9 08 d7 fd dd 19 c5 27 70 7e |.4sv.........'p~|
00000030 80 1b 0b b0 28 c1 4b af 27 3e 4e 94 c1 2e 8e 9e |....(.K.'>N.....|
00000040 7c d2 22 ad 03 7f 61 c4 3e 43 db 53 82 21 e5 06 ||."...a.>C.S.!..|
00000050 d9 fb 18 44 6b 65 3a 98 ee 46 5c 5c 5d 4c 2c 2d |...Dke:..F\\]L,-|
00000060 44 0d 7c a4 bc 9f 51 a0 e3 91 02 67 87 ef e2 9a |D.|...Q....g....|
00000070 df 83 93 f0 81 4c bd 0e fa 19 7c b9 9d e6 c7 7f |.....L....|.....|
00000080 e7 6a 4b f6 70 6a f1 06 17 03 03 00 1e 8c c6 02 |.jK.pj..........|
00000090 f9 ca a1 5d 67 a0 08 12 6a e3 0f da 01 65 12 8d |...]g...j....e..|
000000a0 eb 4c aa b5 e1 d7 3a ed cb 83 82 17 03 03 00 13 |.L....:.........|
000000b0 2c 1f b8 b8 e0 8a 45 15 d7 8a 24 1d 84 39 e3 fb |,.....E...$..9..|
000000c0 29 e2 39 |).9|