utls/testdata/Server-TLSv13-RSA-RSAPSS
Filippo Valsorda 65b9e15fc2 crypto/tls: reduce session ticket linkability
Ever since session ticket key rotation was introduced in CL 9072, we've
been including a prefix in every ticket to identify what key it's
encrypted with. It's a small privacy gain, but the cost of trial
decryptions is also small, especially since the first key is probably
the most frequently used.

Also reissue tickets on every resumption so that the next connection
can't be linked to all the previous ones. Again the privacy gain is
small but the performance cost is small and it comes with a reduction in
complexity.

For #60105

Change-Id: I852f297162d2b79a3d9bf61f6171e8ce94b2537a
Reviewed-on: https://go-review.googlesource.com/c/go/+/496817
Reviewed-by: Damien Neil <dneil@google.com>
Reviewed-by: Matthew Dempsky <mdempsky@google.com>
Run-TryBot: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
2023-05-24 23:56:24 +00:00

96 lines
7.2 KiB
Text

>>> Flow 1 (client to server)
00000000 16 03 01 00 b2 01 00 00 ae 03 03 5e 26 a7 5d 55 |...........^&.]U|
00000010 3f f7 12 49 ea 19 a6 36 80 a4 5e 48 ce 93 ba 19 |?..I...6..^H....|
00000020 1d 09 aa 53 1c 3d 2c ca 2b e8 b4 20 a9 49 a3 4f |...S.=,.+.. .I.O|
00000030 e8 65 1a e6 44 49 4d ed 5d 60 53 0e 7c 11 01 19 |.e..DIM.]`S.|...|
00000040 62 ef 47 10 13 b0 1a 02 2e 26 d6 03 00 04 13 03 |b.G......&......|
00000050 00 ff 01 00 00 61 00 0b 00 04 03 00 01 02 00 0a |.....a..........|
00000060 00 0c 00 0a 00 1d 00 17 00 1e 00 19 00 18 00 16 |................|
00000070 00 00 00 17 00 00 00 0d 00 06 00 04 08 06 08 04 |................|
00000080 00 2b 00 03 02 03 04 00 2d 00 02 01 01 00 33 00 |.+......-.....3.|
00000090 26 00 24 00 1d 00 20 ff 7f 2b 87 7b 2c df 44 26 |&.$... ..+.{,.D&|
000000a0 04 b0 2a a4 b2 17 c1 d2 36 50 95 a7 b4 9d 2e c3 |..*.....6P......|
000000b0 e8 6d f7 40 77 6a 6a |.m.@wjj|
>>> Flow 2 (server to client)
00000000 16 03 03 00 7a 02 00 00 76 03 03 00 00 00 00 00 |....z...v.......|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
00000020 00 00 00 00 00 00 00 00 00 00 00 20 a9 49 a3 4f |........... .I.O|
00000030 e8 65 1a e6 44 49 4d ed 5d 60 53 0e 7c 11 01 19 |.e..DIM.]`S.|...|
00000040 62 ef 47 10 13 b0 1a 02 2e 26 d6 03 13 03 00 00 |b.G......&......|
00000050 2e 00 2b 00 02 03 04 00 33 00 24 00 1d 00 20 2f |..+.....3.$... /|
00000060 e5 7d a3 47 cd 62 43 15 28 da ac 5f bb 29 07 30 |.}.G.bC.(.._.).0|
00000070 ff f6 84 af c4 cf c2 ed 90 99 5f 58 cb 3b 74 14 |.........._X.;t.|
00000080 03 03 00 01 01 17 03 03 00 17 5c ad 71 71 c7 04 |..........\.qq..|
00000090 a3 a0 cb 1e 20 0f 17 74 63 9a d3 09 fc bd 3e 4b |.... ..tc.....>K|
000000a0 ca 17 03 03 02 6d ef 2f 4d 74 69 dd 6f df 52 16 |.....m./Mti.o.R.|
000000b0 21 ec ef 74 66 2c 4d 38 08 8d 69 c6 a8 92 12 2a |!..tf,M8..i....*|
000000c0 3c ac 75 bc 97 0b d6 34 9c 41 ec 9a 4a 9c 27 e2 |<.u....4.A..J.'.|
000000d0 78 ff cd 11 f2 62 ec a9 1c 6f d4 c4 38 94 8a 6b |x....b...o..8..k|
000000e0 42 c0 d4 16 2d 9b 57 2d 83 5f 13 39 02 b6 27 ed |B...-.W-._.9..'.|
000000f0 12 38 04 ca b5 1c 72 8d cc 88 27 68 d6 ea 84 07 |.8....r...'h....|
00000100 5d de 4a c3 52 07 ca c5 6a ef b4 70 4e eb b6 8c |].J.R...j..pN...|
00000110 d6 46 7f f9 76 11 30 17 20 02 07 16 a2 5b 77 ad |.F..v.0. ....[w.|
00000120 a5 d5 73 a2 41 b5 1d c5 fa a8 4e b7 b8 36 b8 cc |..s.A.....N..6..|
00000130 48 a6 84 36 64 49 41 fa 07 ee 32 4a 21 d9 ef a2 |H..6dIA...2J!...|
00000140 c9 34 33 ae 76 2a c8 ac 45 fc 4d 3b e2 4a 2e 8e |.43.v*..E.M;.J..|
00000150 16 10 20 05 80 35 c0 30 c7 4c 5f 34 ba f7 9d ef |.. ..5.0.L_4....|
00000160 0c 8e bf 57 67 89 44 ba a8 3e 94 17 09 0f b3 41 |...Wg.D..>.....A|
00000170 54 c8 17 06 a4 4f 13 50 bb 45 7d db 73 3d 0e 63 |T....O.P.E}.s=.c|
00000180 5c 5f 3f 9d c9 07 75 c0 10 cf 45 25 5a f7 4c f7 |\_?...u...E%Z.L.|
00000190 66 5a 62 fc 4c fd b0 54 f3 b9 d5 00 ba e3 d8 2a |fZb.L..T.......*|
000001a0 70 00 9c 67 93 64 5b 45 9a b9 bc 6d c5 45 af fe |p..g.d[E...m.E..|
000001b0 4f 99 fa 7f 07 0b 79 93 bf 6b 95 a9 c5 b3 ca 6e |O.....y..k.....n|
000001c0 f6 88 37 7c 24 c1 0d 40 e3 be 07 7f a2 37 67 51 |..7|$..@.....7gQ|
000001d0 6e b0 ab 2e 33 9d 24 45 66 9e bb c7 90 70 17 1a |n...3.$Ef....p..|
000001e0 f6 e3 8d d7 68 47 83 d7 83 b4 e0 67 25 c1 e3 c8 |....hG.....g%...|
000001f0 55 ec 21 08 cc 2e 42 7e 02 30 77 5c 2b 82 f9 3e |U.!...B~.0w\+..>|
00000200 b6 ce 71 ba f6 d4 67 0f 79 9f 8b e4 b9 21 94 33 |..q...g.y....!.3|
00000210 b7 68 e4 2a 48 d0 65 cf f2 e0 3e 99 91 29 d7 87 |.h.*H.e...>..)..|
00000220 1a 03 e2 69 50 2b cb 10 84 14 11 2a f8 e5 79 eb |...iP+.....*..y.|
00000230 97 97 ec af 48 73 bd c9 cf ec d4 b3 8a 93 30 b9 |....Hs........0.|
00000240 e5 6c e9 72 e9 d7 20 85 9d 1a aa 24 64 e1 79 70 |.l.r.. ....$d.yp|
00000250 f3 61 5d 04 f0 bc 36 b3 a1 6a 9f 94 60 5c 3f af |.a]...6..j..`\?.|
00000260 d6 5e f6 db 93 10 d4 56 bf 2e 3e 73 3a cd af 8d |.^.....V..>s:...|
00000270 fc 5e b0 d4 7c fc 21 2d d5 fe 8d b5 8a f0 82 5d |.^..|.!-.......]|
00000280 5c 13 43 9b a2 83 d0 d4 09 3d 8a 06 4a 58 22 c2 |\.C......=..JX".|
00000290 82 b5 d2 b7 72 86 4c 62 58 fb d4 58 99 2b 98 c8 |....r.LbX..X.+..|
000002a0 1f 84 4c 16 16 08 3b cd f3 bb 63 20 f5 31 52 01 |..L...;...c .1R.|
000002b0 b7 06 27 6f 2c 51 d2 5a 3d be db 40 c1 db 90 35 |..'o,Q.Z=..@...5|
000002c0 fe 67 f0 48 d1 3d e8 9f d3 c5 e2 3c 3b f9 d5 9e |.g.H.=.....<;...|
000002d0 c2 f5 5e 69 15 48 b2 eb 06 97 43 e3 ea 5e 2c 26 |..^i.H....C..^,&|
000002e0 18 d9 3c a1 7f fd ba a8 51 88 46 3d 51 0b aa c8 |..<.....Q.F=Q...|
000002f0 72 ab ce f6 00 81 1e 88 fb 6e 91 0f b8 fe 05 80 |r........n......|
00000300 4a fe 6f 24 d4 16 35 bf ed ab 40 77 e9 78 7e 6e |J.o$..5...@w.x~n|
00000310 f0 b7 b9 17 03 03 00 99 8a 60 02 4a 1a b7 2e c9 |.........`.J....|
00000320 dd ed b4 78 a0 8a 86 3d d4 1d 89 00 fa 7b 08 d3 |...x...=.....{..|
00000330 ec d1 6b fe 07 15 6e db a3 81 19 b2 7c 64 29 bb |..k...n.....|d).|
00000340 04 46 f6 1b b7 12 05 bb fa 4a 0e 92 5c b7 4f 70 |.F.......J..\.Op|
00000350 e2 5d 08 35 20 62 e8 16 b1 f8 be eb 10 8d 1e 57 |.].5 b.........W|
00000360 b4 60 c8 3d 2b a0 b5 86 09 76 15 eb 76 77 31 40 |.`.=+....v..vw1@|
00000370 45 18 6b ca 90 8b ff 25 95 86 3d 7b 93 2b a8 ea |E.k....%..={.+..|
00000380 8c 3f 6d b9 c4 ab 58 d6 66 7b 08 22 7a 26 6a 41 |.?m...X.f{."z&jA|
00000390 e1 54 96 e1 db 68 a0 e4 7c 2d ce 10 c3 92 53 bf |.T...h..|-....S.|
000003a0 84 b8 3b d6 e2 6b a0 37 b7 bf af 7e a6 82 d2 90 |..;..k.7...~....|
000003b0 5e 17 03 03 00 35 51 f5 7a 0c ba 36 36 36 b5 8f |^....5Q.z..666..|
000003c0 98 20 0a fa cd 0b 5a b6 0f cd 8f 67 c9 82 2a 03 |. ....Z....g..*.|
000003d0 8c c0 74 29 43 d9 58 a7 b8 13 2d 75 9c 7c 14 bb |..t)C.X...-u.|..|
000003e0 f0 6a bc a2 16 1b 82 d9 0e f5 a5 17 03 03 00 83 |.j..............|
000003f0 91 83 67 26 71 a5 98 49 79 0a bb 1d a2 e6 0e b1 |..g&q..Iy.......|
00000400 30 2b c4 6e 97 a9 93 74 97 85 51 65 67 43 f0 04 |0+.n...t..QegC..|
00000410 6f cc b1 9c 02 ff 4b 52 ce 36 07 bb 42 b9 e6 4b |o.....KR.6..B..K|
00000420 75 3a 79 bd 3c 50 7d 86 d2 13 ff fe a4 7b e4 6b |u:y.<P}......{.k|
00000430 09 6a a7 08 d1 43 0c 2e 96 a9 28 46 43 27 8c f9 |.j...C....(FC'..|
00000440 1d 4d 96 48 51 0a 86 8f bd 03 49 46 9f 35 1b a7 |.M.HQ.....IF.5..|
00000450 01 17 46 5e 66 32 80 c0 7d ec 62 9c 91 6f 74 ef |..F^f2..}.b..ot.|
00000460 fa 14 b8 50 15 dc 97 0c d9 dd be 48 ce 51 bc 5c |...P.......H.Q.\|
00000470 3b 62 4b |;bK|
>>> Flow 3 (client to server)
00000000 14 03 03 00 01 01 17 03 03 00 35 5c 22 e9 04 21 |..........5\"..!|
00000010 29 23 9d 73 16 c1 f5 a6 40 bb 1b ee 0e ae 09 5b |)#.s....@......[|
00000020 01 f6 3d cb 5b c8 d3 76 2b 0c f7 6c 29 dc 86 e1 |..=.[..v+..l)...|
00000030 96 f0 75 30 34 1f e3 07 7f 96 70 a7 3c b3 cd 2b |..u04.....p.<..+|
>>> Flow 4 (server to client)
00000000 17 03 03 00 1e 6c f1 ac 2c 31 8d cb 72 9d 00 88 |.....l..,1..r...|
00000010 6b 54 23 07 a4 83 07 fa 68 12 fe 70 55 fc 86 a9 |kT#.....h..pU...|
00000020 8d e1 65 17 03 03 00 13 93 b2 83 3b 16 dc 3a 38 |..e........;..:8|
00000030 40 bf 6b 8e 17 d6 17 2b eb 9c f5 |@.k....+...|