utls/testdata/Server-TLSv13-IssueTicketPreDisable
Filippo Valsorda 65b9e15fc2 crypto/tls: reduce session ticket linkability
Ever since session ticket key rotation was introduced in CL 9072, we've
been including a prefix in every ticket to identify what key it's
encrypted with. It's a small privacy gain, but the cost of trial
decryptions is also small, especially since the first key is probably
the most frequently used.

Also reissue tickets on every resumption so that the next connection
can't be linked to all the previous ones. Again the privacy gain is
small but the performance cost is small and it comes with a reduction in
complexity.

For #60105

Change-Id: I852f297162d2b79a3d9bf61f6171e8ce94b2537a
Reviewed-on: https://go-review.googlesource.com/c/go/+/496817
Reviewed-by: Damien Neil <dneil@google.com>
Reviewed-by: Matthew Dempsky <mdempsky@google.com>
Run-TryBot: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-05-24 23:56:24 +00:00

98 lines
7.3 KiB
Text

>>> Flow 1 (client to server)
00000000 16 03 01 00 ce 01 00 00 ca 03 03 78 86 2c 50 96 |...........x.,P.|
00000010 db 53 0e 9c 59 2f 08 bf b1 dc 4d a0 ab 7f 70 83 |.S..Y/....M...p.|
00000020 9f c0 06 14 51 e8 96 9f b9 23 ca 20 67 6c 7b 8c |....Q....#. gl{.|
00000030 2d de 80 d4 53 b5 1c ce bf a7 85 ec 96 d3 84 84 |-...S...........|
00000040 ad 3b 54 ff 7c c7 18 f6 0e 4d c3 ed 00 04 13 01 |.;T.|....M......|
00000050 00 ff 01 00 00 7d 00 0b 00 04 03 00 01 02 00 0a |.....}..........|
00000060 00 0c 00 0a 00 1d 00 17 00 1e 00 19 00 18 00 23 |...............#|
00000070 00 00 00 16 00 00 00 17 00 00 00 0d 00 1e 00 1c |................|
00000080 04 03 05 03 06 03 08 07 08 08 08 09 08 0a 08 0b |................|
00000090 08 04 08 05 08 06 04 01 05 01 06 01 00 2b 00 03 |.............+..|
000000a0 02 03 04 00 2d 00 02 01 01 00 33 00 26 00 24 00 |....-.....3.&.$.|
000000b0 1d 00 20 4c e5 05 bc 23 11 3c 0e 96 aa d5 9c 17 |.. L...#.<......|
000000c0 fc 51 1b c8 c9 eb 9e 68 80 5a 14 ca 76 09 68 ee |.Q.....h.Z..v.h.|
000000d0 ec b3 39 |..9|
>>> Flow 2 (server to client)
00000000 16 03 03 00 7a 02 00 00 76 03 03 00 00 00 00 00 |....z...v.......|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
00000020 00 00 00 00 00 00 00 00 00 00 00 20 67 6c 7b 8c |........... gl{.|
00000030 2d de 80 d4 53 b5 1c ce bf a7 85 ec 96 d3 84 84 |-...S...........|
00000040 ad 3b 54 ff 7c c7 18 f6 0e 4d c3 ed 13 01 00 00 |.;T.|....M......|
00000050 2e 00 2b 00 02 03 04 00 33 00 24 00 1d 00 20 2f |..+.....3.$... /|
00000060 e5 7d a3 47 cd 62 43 15 28 da ac 5f bb 29 07 30 |.}.G.bC.(.._.).0|
00000070 ff f6 84 af c4 cf c2 ed 90 99 5f 58 cb 3b 74 14 |.........._X.;t.|
00000080 03 03 00 01 01 17 03 03 00 17 8d cf 99 5f 3c c1 |............._<.|
00000090 21 8a af ce 37 12 0e 1e 1d 65 86 35 59 9d ab a9 |!...7....e.5Y...|
000000a0 b5 17 03 03 02 6d de 3b 1b 3a ad a0 e8 2f 17 de |.....m.;.:.../..|
000000b0 bd 3b 72 47 9c 6d d2 f6 62 92 8e e9 27 bb cb e2 |.;rG.m..b...'...|
000000c0 1a 2d c1 37 10 74 9b e5 bb 97 e4 a3 07 36 df f9 |.-.7.t.......6..|
000000d0 34 44 69 cb b7 95 6f 55 55 48 cb fb 2c a0 48 a4 |4Di...oUUH..,.H.|
000000e0 ea 24 32 14 c8 1e 3f 2c f0 c9 a8 03 d9 29 55 d3 |.$2...?,.....)U.|
000000f0 b7 2c 54 c6 ad 0a 07 94 f1 f3 2e 2f a0 e2 ce 6a |.,T......../...j|
00000100 67 a9 25 3f ec eb 89 82 01 62 ec 34 ae fd 3d 8a |g.%?.....b.4..=.|
00000110 24 de 35 fd bc 48 cd 80 99 7c ff 08 3e 76 e8 4c |$.5..H...|..>v.L|
00000120 26 3b 36 4d b1 06 57 3d b0 e3 45 79 bd 50 9d 12 |&;6M..W=..Ey.P..|
00000130 3e 69 43 12 07 b7 72 ad d1 96 bc 7c cf a3 98 73 |>iC...r....|...s|
00000140 b0 1a 9e 70 2c 05 2b 5e 5e 63 4b 93 e5 c9 16 f3 |...p,.+^^cK.....|
00000150 a0 f5 10 63 96 10 5b 78 74 35 d9 8d f0 b2 8a ae |...c..[xt5......|
00000160 4c 43 2e a6 ec b6 94 a1 6f 92 6d 91 cb 16 68 d9 |LC......o.m...h.|
00000170 83 44 75 d3 24 46 31 0c 78 a5 79 6e cd 62 15 35 |.Du.$F1.x.yn.b.5|
00000180 48 b4 f0 de 9c cf a1 79 a1 e0 c3 88 3b ea 5f 00 |H......y....;._.|
00000190 8f 59 16 a1 70 43 74 e6 19 fd 9c 43 c4 e5 f2 c1 |.Y..pCt....C....|
000001a0 1b 97 98 8e d5 43 c1 d1 4e 31 b0 a6 ae 45 25 66 |.....C..N1...E%f|
000001b0 4c 3a a6 3a 5a 9d 7d 65 dc 69 68 bb 83 21 01 7f |L:.:Z.}e.ih..!..|
000001c0 77 2d 9c e3 9f bd 00 2f f5 e2 01 f1 b4 4d b5 16 |w-...../.....M..|
000001d0 22 14 91 7a 82 21 c9 8c cb 0e e7 2d 34 69 ee 31 |"..z.!.....-4i.1|
000001e0 8a fd cb 03 96 00 95 14 41 cf 97 41 86 15 83 02 |........A..A....|
000001f0 6f c3 39 ff 6d 14 9e 67 a2 1c 8b 11 36 5a 30 99 |o.9.m..g....6Z0.|
00000200 10 88 da 51 e8 29 e4 0c f5 44 7d e2 cb 31 2d 74 |...Q.)...D}..1-t|
00000210 17 0d 3b e6 09 0d e3 7e 71 48 84 5d 13 ae 74 5d |..;....~qH.]..t]|
00000220 fa 3f 7b 66 73 dd 27 24 8a 9b 4f 3d 50 be 15 1c |.?{fs.'$..O=P...|
00000230 e7 71 9c 80 9d f3 8d 1f d2 d3 66 3d 3a 2e 86 7a |.q........f=:..z|
00000240 16 ff eb 39 52 df 16 fa d0 c1 d8 8a 4d 2a 03 da |...9R.......M*..|
00000250 98 9f c6 71 5b 07 5b 9f b8 ea f6 a3 5d b0 06 94 |...q[.[.....]...|
00000260 35 94 e6 9c 29 23 9d 9c 1c a6 15 0e 11 f4 0b 0d |5...)#..........|
00000270 b6 c9 a5 c5 94 df 18 6d 62 7a 47 54 87 7e a6 7e |.......mbzGT.~.~|
00000280 18 82 39 53 b3 c5 95 23 7a ce a9 62 dd 71 51 17 |..9S...#z..b.qQ.|
00000290 4e e5 3c 45 05 64 23 c4 26 35 d8 37 cb 2f 08 7d |N.<E.d#.&5.7./.}|
000002a0 5a 0b a9 cb 75 3d 7a 40 97 d9 d4 6a 54 ae 03 92 |Z...u=z@...jT...|
000002b0 21 53 df 06 ed 1f c2 49 04 a6 63 6f c8 53 aa f0 |!S.....I..co.S..|
000002c0 76 c1 d0 da 17 44 54 5e 05 9f e9 68 25 32 47 fb |v....DT^...h%2G.|
000002d0 5b d6 f3 31 e2 88 25 d4 b8 b0 f7 86 69 98 87 f1 |[..1..%.....i...|
000002e0 37 26 41 e5 52 1c 74 92 b3 05 db 0b 81 95 b5 19 |7&A.R.t.........|
000002f0 2e b2 2c 36 73 bc c7 5c 5d 48 37 22 33 cb 1f 46 |..,6s..\]H7"3..F|
00000300 6d cd 61 09 8f e6 c5 2a 18 d1 5e 3e 15 54 29 21 |m.a....*..^>.T)!|
00000310 ce 49 f4 17 03 03 00 99 ef a9 b8 74 91 ea be 90 |.I.........t....|
00000320 0d 55 6f d3 e5 6b 7b 19 bb 1c cc c2 6d 0a 49 85 |.Uo..k{.....m.I.|
00000330 f0 30 12 6e 05 88 7c d0 80 a4 39 82 f7 24 8a 0b |.0.n..|...9..$..|
00000340 89 84 a1 89 3a ab bb 79 01 6a a1 48 ef 22 15 a7 |....:..y.j.H."..|
00000350 43 e7 96 76 85 23 59 d2 27 ea 89 45 e1 76 06 52 |C..v.#Y.'..E.v.R|
00000360 6d eb b6 89 76 be 3f 2d 4c 8f 75 a1 69 fa 52 47 |m...v.?-L.u.i.RG|
00000370 ee 9a a7 c1 40 bd fb 76 69 da 73 55 d6 5a 4c 36 |....@..vi.sU.ZL6|
00000380 61 ee bc b3 d5 b3 23 17 1c da 79 83 00 d6 1e 57 |a.....#...y....W|
00000390 09 24 85 97 85 58 d6 5d 61 60 ae 3b 85 0e 28 dc |.$...X.]a`.;..(.|
000003a0 08 1a ea 49 11 47 b9 8a d1 7e 47 20 48 64 ad cc |...I.G...~G Hd..|
000003b0 2e 17 03 03 00 35 c6 76 14 a6 a0 7d 5d 0c 03 4b |.....5.v...}]..K|
000003c0 2f 65 c0 55 ab aa ab 61 10 2f 0f 25 44 2b 76 9c |/e.U...a./.%D+v.|
000003d0 73 6b 8b 19 d8 2a 3e 1c 4d 96 1b 5f bd 80 af b2 |sk...*>.M.._....|
000003e0 4a aa 3c 3c 65 ab 5a ca 2d 1d 65 17 03 03 00 83 |J.<<e.Z.-.e.....|
000003f0 0a f6 d8 a3 67 b3 27 62 f5 64 c3 43 bd 08 f8 af |....g.'b.d.C....|
00000400 d1 56 ce 25 8b 3f d9 6b 54 9c 4e 5e 8c 06 24 95 |.V.%.?.kT.N^..$.|
00000410 a0 49 e2 25 d2 b8 7f a0 59 06 04 26 19 16 ad 3b |.I.%....Y..&...;|
00000420 30 82 0f c3 84 bf 70 78 58 4c 76 f7 91 0e f2 1a |0.....pxXLv.....|
00000430 88 10 4e b3 c9 26 b5 7b ab 1a 72 c6 1a 2a b0 65 |..N..&.{..r..*.e|
00000440 92 86 c4 84 5b e7 ab 3c 7e b4 0d 67 0c 53 d9 1d |....[..<~..g.S..|
00000450 81 47 e3 f9 11 09 26 4a 67 ff 1a 55 5b f8 93 e0 |.G....&Jg..U[...|
00000460 e1 52 2f e5 c3 3c 73 98 6e 98 25 d8 d7 f4 2a 6e |.R/..<s.n.%...*n|
00000470 f7 e8 6e |..n|
>>> Flow 3 (client to server)
00000000 14 03 03 00 01 01 17 03 03 00 35 9b 1d 48 76 dc |..........5..Hv.|
00000010 64 a6 c8 3e f9 f4 2c fa cb e4 a6 f5 37 c5 77 d0 |d..>..,.....7.w.|
00000020 02 ad e9 89 94 64 d2 6a b8 d4 f0 f7 ac 83 bb f1 |.....d.j........|
00000030 15 06 b2 db 33 db 2b 80 58 c0 90 c1 59 25 0d 08 |....3.+.X...Y%..|
>>> Flow 4 (server to client)
00000000 17 03 03 00 1e bc 18 62 dd 27 ff a7 68 a0 a5 43 |.......b.'..h..C|
00000010 09 6d 07 35 df 92 1d 79 0b fb 23 c6 30 0e e4 03 |.m.5...y..#.0...|
00000020 86 22 af 17 03 03 00 13 c8 90 55 e0 65 61 c9 22 |."........U.ea."|
00000030 60 62 5a 1a f9 bd ed 85 ab 5c e0 |`bZ......\.|