utls/testdata/Server-TLSv13-P256
Filippo Valsorda 65b9e15fc2 crypto/tls: reduce session ticket linkability
Ever since session ticket key rotation was introduced in CL 9072, we've
been including a prefix in every ticket to identify what key it's
encrypted with. It's a small privacy gain, but the cost of trial
decryptions is also small, especially since the first key is probably
the most frequently used.

Also reissue tickets on every resumption so that the next connection
can't be linked to all the previous ones. Again the privacy gain is
small but the performance cost is small and it comes with a reduction in
complexity.

For #60105

Change-Id: I852f297162d2b79a3d9bf61f6171e8ce94b2537a
Reviewed-on: https://go-review.googlesource.com/c/go/+/496817
Reviewed-by: Damien Neil <dneil@google.com>
Reviewed-by: Matthew Dempsky <mdempsky@google.com>
Run-TryBot: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-05-24 23:56:24 +00:00

101 lines
7.6 KiB
Text

>>> Flow 1 (client to server)
00000000 16 03 01 00 e3 01 00 00 df 03 03 0e 04 06 43 06 |..............C.|
00000010 a4 b9 e5 86 c2 bb 7a d6 75 c4 bf 7c 8f 8a ba 87 |......z.u..|....|
00000020 72 b9 b8 6d 55 80 ce 9c 37 24 8b 20 7e 96 80 79 |r..mU...7$. ~..y|
00000030 4f d2 98 63 06 1a 19 2f 95 f9 12 0b 08 35 9a 8f |O..c.../.....5..|
00000040 f1 33 6b 25 d4 76 c8 c7 66 6a eb 79 00 04 13 03 |.3k%.v..fj.y....|
00000050 00 ff 01 00 00 92 00 0b 00 04 03 00 01 02 00 0a |................|
00000060 00 04 00 02 00 17 00 16 00 00 00 17 00 00 00 0d |................|
00000070 00 1e 00 1c 04 03 05 03 06 03 08 07 08 08 08 09 |................|
00000080 08 0a 08 0b 08 04 08 05 08 06 04 01 05 01 06 01 |................|
00000090 00 2b 00 03 02 03 04 00 2d 00 02 01 01 00 33 00 |.+......-.....3.|
000000a0 47 00 45 00 17 00 41 04 36 15 75 5c 22 c8 0f 64 |G.E...A.6.u\"..d|
000000b0 b6 cb 72 ae 3f 9b 2f bf c5 ac 0b f3 b4 b4 ce 37 |..r.?./........7|
000000c0 de cf d4 b3 21 8f ac bd 12 5b ea e3 0d fd 21 30 |....!....[....!0|
000000d0 85 ea 81 c7 57 9c 9a 64 67 3f c3 89 a2 0b 90 3a |....W..dg?.....:|
000000e0 68 72 80 a0 09 6c f3 a9 |hr...l..|
>>> Flow 2 (server to client)
00000000 16 03 03 00 9b 02 00 00 97 03 03 00 00 00 00 00 |................|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
00000020 00 00 00 00 00 00 00 00 00 00 00 20 7e 96 80 79 |........... ~..y|
00000030 4f d2 98 63 06 1a 19 2f 95 f9 12 0b 08 35 9a 8f |O..c.../.....5..|
00000040 f1 33 6b 25 d4 76 c8 c7 66 6a eb 79 13 03 00 00 |.3k%.v..fj.y....|
00000050 4f 00 2b 00 02 03 04 00 33 00 45 00 17 00 41 04 |O.+.....3.E...A.|
00000060 1e 18 37 ef 0d 19 51 88 35 75 71 b5 e5 54 5b 12 |..7...Q.5uq..T[.|
00000070 2e 8f 09 67 fd a7 24 20 3e b2 56 1c ce 97 28 5e |...g..$ >.V...(^|
00000080 f8 2b 2d 4f 9e f1 07 9f 6c 4b 5b 83 56 e2 32 42 |.+-O....lK[.V.2B|
00000090 e9 58 b6 d7 49 a6 b5 68 1a 41 03 56 6b dc 5a 89 |.X..I..h.A.Vk.Z.|
000000a0 14 03 03 00 01 01 17 03 03 00 17 57 c8 67 ef 2e |...........W.g..|
000000b0 e2 ba 53 0a 1b f6 d5 eb d1 a7 e2 cb dd 28 ff d5 |..S..........(..|
000000c0 f5 3f 17 03 03 02 6d b3 7f 44 fa f3 78 bf c7 98 |.?....m..D..x...|
000000d0 e5 a0 e2 4b d5 60 98 63 7b 77 2f bd b5 8a 84 79 |...K.`.c{w/....y|
000000e0 13 59 d1 f5 13 ea 25 6e 72 65 34 0f ff 92 a8 94 |.Y....%nre4.....|
000000f0 cb d3 f7 b6 2a 54 87 19 94 ad f1 ab 70 4c 5d 62 |....*T......pL]b|
00000100 41 fc f5 90 7a b5 f7 e3 0c e8 0e 1c e7 35 6b 40 |A...z........5k@|
00000110 ca 34 f5 29 d7 da 8b c2 93 88 3d b8 26 be 09 46 |.4.)......=.&..F|
00000120 ec 2f 8c c3 9c 83 26 83 b5 56 da c4 65 58 40 0d |./....&..V..eX@.|
00000130 29 d4 b4 bf 2e 0c ba d0 95 b4 b0 88 9a 13 e2 e3 |)...............|
00000140 db d8 03 78 03 00 07 67 46 2c e5 7b b1 6e df d0 |...x...gF,.{.n..|
00000150 f3 d9 5b db b5 31 80 86 31 83 c8 4a 1b 90 fb 4f |..[..1..1..J...O|
00000160 7a 7a c7 ac 20 e6 a6 f7 3c c3 da be fd 3b 37 1f |zz.. ...<....;7.|
00000170 17 9f 23 b5 a4 36 11 52 09 fe 8a 65 cc 27 0f 68 |..#..6.R...e.'.h|
00000180 67 50 27 0f 56 d6 7f 14 48 39 73 c4 85 84 ab b4 |gP'.V...H9s.....|
00000190 b4 71 b9 b8 ab e5 f8 b9 57 28 70 ca b0 f1 55 77 |.q......W(p...Uw|
000001a0 0e 86 12 01 2a 19 45 56 46 6f 57 f4 10 90 a2 1a |....*.EVFoW.....|
000001b0 3c b1 4e 77 c8 0a e9 e5 27 f7 86 68 e4 1f 9a d0 |<.Nw....'..h....|
000001c0 68 92 7d d0 b6 0b 04 cd 60 59 7e 88 ca 98 a4 c8 |h.}.....`Y~.....|
000001d0 a0 e9 c2 d0 e3 2e 91 bb d1 c6 b0 c4 31 6b c0 b9 |............1k..|
000001e0 bf fc 1a 85 68 98 2e 18 75 9d c3 52 55 c9 bf d4 |....h...u..RU...|
000001f0 c6 2d 70 3a ef 53 9e 99 33 07 4e cc a8 34 8a 42 |.-p:.S..3.N..4.B|
00000200 75 69 fa 99 1b 32 a8 dd 6f b3 17 fb 72 7f a0 f5 |ui...2..o...r...|
00000210 ae b8 65 06 7f 1f 31 8b 03 99 fd bd fc 5f 24 db |..e...1......_$.|
00000220 7c 1e b1 a0 b6 ed 85 9c b6 07 9a 3b 34 e8 b8 dc ||..........;4...|
00000230 62 67 e0 17 59 4f b6 68 12 59 64 1a 63 c5 ca d7 |bg..YO.h.Yd.c...|
00000240 54 41 e5 c2 f8 0e c7 47 0a 3d 2a 65 fd cd e2 fe |TA.....G.=*e....|
00000250 55 a7 e4 80 2c 75 34 95 1e 33 cd 9c 9c a7 26 55 |U...,u4..3....&U|
00000260 3b 60 d4 4a 05 e6 84 91 86 09 a7 a0 e1 8a 3f dc |;`.J..........?.|
00000270 43 ec 99 bd 3b 0b 41 d2 02 61 3b cc a2 69 81 5c |C...;.A..a;..i.\|
00000280 6f 96 aa ea f3 80 e0 67 76 2c 5e 82 12 fd a2 80 |o......gv,^.....|
00000290 91 f9 7e 8c b8 f5 5b b7 cb 59 0f 95 dc 20 51 b7 |..~...[..Y... Q.|
000002a0 78 62 2e 48 5a 4a 3f 3a e9 43 42 f9 58 dd b0 eb |xb.HZJ?:.CB.X...|
000002b0 99 05 10 39 66 83 96 a7 5d 22 5d 56 01 9f 18 9a |...9f...]"]V....|
000002c0 19 e3 b5 28 2f 58 56 dc 64 b9 7e f5 14 cb 2e 56 |...(/XV.d.~....V|
000002d0 95 4b b0 4b ff 7a 79 f7 75 57 a9 63 b5 db 98 84 |.K.K.zy.uW.c....|
000002e0 2b d8 b0 3b 61 89 0c 66 5d ad b7 be c6 b3 1d ee |+..;a..f].......|
000002f0 cf c1 1d 85 a1 ec d1 34 26 30 c1 49 68 ce 81 06 |.......4&0.Ih...|
00000300 47 ea 2b 31 c3 35 e5 75 41 50 9d a9 46 b8 30 f9 |G.+1.5.uAP..F.0.|
00000310 bf a9 82 e9 05 71 4a 2b 1f f3 0f f1 2a 90 92 5e |.....qJ+....*..^|
00000320 75 f3 1e 0f 4a 98 39 15 23 c9 c5 35 94 2b b8 ce |u...J.9.#..5.+..|
00000330 8f b9 5b 0c 17 03 03 00 99 76 cc ea df cb 6f 53 |..[......v....oS|
00000340 4f 37 f9 06 6b ac 22 ec 47 b0 83 98 3c 20 f8 85 |O7..k.".G...< ..|
00000350 85 69 de a8 67 bb 58 26 03 cc 6d f8 20 14 1e cc |.i..g.X&..m. ...|
00000360 85 87 8d 5b 32 8d 84 4c 4f 34 4b 5b be f6 88 18 |...[2..LO4K[....|
00000370 3a fa 60 16 eb 39 3c f3 0d 3f 6d 79 30 75 89 d8 |:.`..9<..?my0u..|
00000380 1a 38 e5 2a 9d 15 50 4b 8b 43 01 a1 fc 82 94 7e |.8.*..PK.C.....~|
00000390 1a 6f 42 9a 23 93 ec 94 0d f7 aa df 3e f9 9b 82 |.oB.#.......>...|
000003a0 5a 7d 0d fd 6c e7 92 7f 46 55 36 f6 11 fa 03 89 |Z}..l...FU6.....|
000003b0 8e 6c 1e 8e b7 45 4c 45 18 32 4d 31 f8 00 77 a0 |.l...ELE.2M1..w.|
000003c0 75 2b c9 a0 e1 6d e4 ad 16 db 6b 8e de 7c f1 bf |u+...m....k..|..|
000003d0 21 b7 17 03 03 00 35 f0 fe ed cb 96 51 d4 0b 57 |!.....5.....Q..W|
000003e0 39 53 dd 0e 9b 15 43 69 ad 5e f5 bb bf 00 a4 f5 |9S....Ci.^......|
000003f0 23 9c 33 6b 30 ce 13 13 ac 43 69 c7 2b 60 e3 5a |#.3k0....Ci.+`.Z|
00000400 52 a8 c2 28 26 aa 48 41 3f c3 7c 46 17 03 03 00 |R..(&.HA?.|F....|
00000410 83 3f 89 fe 65 3a 81 7e 7e 1f 23 76 8e 63 6a db |.?..e:.~~.#v.cj.|
00000420 ae b9 33 c6 32 f0 75 bd de cf 97 68 b8 f2 a0 5d |..3.2.u....h...]|
00000430 9a 29 41 9d 4e 2f 4b 58 8e f9 8a 98 75 1c 95 67 |.)A.N/KX....u..g|
00000440 46 4e f6 4c 6d e2 56 86 13 e5 eb 87 36 c9 52 90 |FN.Lm.V.....6.R.|
00000450 11 e5 09 9f bb 57 4e 80 0b ef 21 7f 60 8f bd d6 |.....WN...!.`...|
00000460 35 9b 1a cc d2 3e 32 0f 6c e5 97 4d 5f be 95 fc |5....>2.l..M_...|
00000470 63 a4 55 07 9d d1 ca 3b 72 03 d3 a1 3a 7c f7 39 |c.U....;r...:|.9|
00000480 a7 87 09 6e c1 92 95 44 2a 5b 27 56 46 47 8f 4f |...n...D*['VFG.O|
00000490 8f b6 58 df |..X.|
>>> Flow 3 (client to server)
00000000 14 03 03 00 01 01 17 03 03 00 35 7e b9 91 2d d5 |..........5~..-.|
00000010 aa 2a 8b c0 47 8f d0 2d 8b 5c cf 8b 8a 47 ab fe |.*..G..-.\...G..|
00000020 c3 76 22 5d 14 ef 05 22 4f bf 60 7a 1d 82 72 b3 |.v"]..."O.`z..r.|
00000030 d7 73 9f b2 f4 da 2b 56 64 08 6d 55 37 ed 6d 2e |.s....+Vd.mU7.m.|
>>> Flow 4 (server to client)
00000000 17 03 03 00 1e 7e 9c 6d 68 2d f5 37 73 08 06 67 |.....~.mh-.7s..g|
00000010 db 10 7b 41 fc 86 7f b0 75 f4 d9 0c 1b 4a 3d ca |..{A....u....J=.|
00000020 d5 e2 30 17 03 03 00 13 f3 a0 0e bd 16 07 10 dc |..0.............|
00000030 91 be 0e b4 07 a3 df d3 f4 21 26 |.........!&|