sysadmin/ipxe
1
0
Fork 0
mirror of https://github.com/ipxe/ipxe synced 2026-10-07 15:05:42 +03:00
Code Issues Packages Projects Releases Wiki Activity

[tls] Allow for scheduled traffic phase changes

Browse Source 
There are several point within the TLS version 1.3 handshake sequence
at which a handshake message handler needs to transition one or both
ciphers to a new traffic phase, but the new cipher keys cannot be
calculated by the key schedule until the triggering handshake message
has been added to the transcript digest.

Handshake messages are added to the transcript digest only after the
message handler returns, to accommodate the fact that the transcript
digest algorithm cannot be known until the initial ServerHello has
been processed.

Allow a new traffic phase to be recorded in the cipher specification,
which will be activated after the handshake message handlers have
returned.

Changing traffic phase requires changing the cipher in use, and so is
permitted only for the last handshake message in a handshake record.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
This commit is contained in:
Michael Brown
2026-09-14 22:22:21 +01:00
parent 7655629db0
commit 9077d45852
2 changed files with 48 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/include/ipxe/tls.h
+2
View File
@@ -328,6 +328,8 @@ struct tls_cipherspec {
const struct tls_endpoint *writer;
/** Secure pipe */
struct secure_pipe *pipe;
/** Pending traffic phase change */
const struct tls_phase *pending;
/** Sequence number */
uint64_t seq;
src/net/tls.c
+46 -7
View File
@@ -210,6 +210,10 @@ FILE_SECBOOT ( PERMITTED );
#define EINFO_EPROTO_VERSION \
__einfo_uniqify ( EINFO_EPROTO, 0x01, \
"Illegal protocol version upgrade" )
#define EPROTO_CIPHER_CHANGE __einfo_error ( EINFO_EPROTO_CIPHER_CHANGE )
#define EINFO_EPROTO_CIPHER_CHANGE \
__einfo_uniqify ( EINFO_EPROTO, 0x02, \
"Illegal cipher change mid-record" )
/** List of TLS session */
static LIST_HEAD ( tls_sessions );
@@ -860,6 +864,33 @@ static int tls_change_cipher ( struct tls_connection *tls,
return rc;
}
/**
* Apply pending traffic phase change (if any)
*
* @v tls TLS connection
* @v cipherspec TLS cipher specification
* @ret rc Return status code
*/
static int tls_pending_cipher ( struct tls_connection *tls,
struct tls_cipherspec *cipherspec ) {
const struct tls_phase *pending;
int rc;
/* Do nothing if no change is pending */
pending = cipherspec->pending;
if ( ! pending )
return 0;
/* Change cipher */
if ( ( rc = tls_change_cipher ( tls, cipherspec, pending ) ) != 0 )
return rc;
/* Clear pending change */
cipherspec->pending = NULL;
return 0;
}
/******************************************************************************
*
* Signature and hash algorithms
@@ -2421,7 +2452,6 @@ static int tls_new_change_cipher ( struct tls_connection *tls,
uint8_t spec;
} __attribute__ (( packed )) *change_cipher = iobuf->data;
size_t len = iob_len ( iobuf );
int rc;
/* Sanity check */
if ( ( sizeof ( *change_cipher ) != len ) ||
@@ -2432,12 +2462,9 @@ static int tls_new_change_cipher ( struct tls_connection *tls,
}
iob_pull ( iobuf, sizeof ( *change_cipher ) );
/* Change receive cipher spec, if applicable */
if ( ( ! tls_version ( tls, TLS_VERSION_TLS_1_3 ) ) &&
( ( rc = tls_change_cipher ( tls, &tls->rx.cipherspec,
&tls_application ) ) != 0 ) ) {
return rc;
}
/* Schedule change to application traffic keys, if applicable */
if ( ! tls_version ( tls, TLS_VERSION_TLS_1_3 ) )
tls->rx.cipherspec.pending = &tls_application;
return 0;
}
@@ -3323,6 +3350,12 @@ static int tls_new_handshake ( struct tls_connection *tls,
size_t payload_len;
size_t record_len;
/* Fail if receive cipher has changed mid-record */
if ( tls->rx.cipherspec.pending ) {
DBGC ( tls, "TLS %p cipher change mid-record\n", tls );
return -EPROTO_CIPHER_CHANGE;
}
/* Parse header */
if ( sizeof ( *handshake ) > remaining ) {
/* Leave remaining fragment unconsumed */
@@ -4137,6 +4170,12 @@ static int tls_new_ciphertext ( struct tls_connection *tls,
if ( ( rc = tls_new_record ( tls, type, rx_data ) ) != 0 )
return rc;
/* Handle any pending traffic phase changes */
if ( ( rc = tls_pending_cipher ( tls, &tls->tx.cipherspec ) ) != 0 )
return rc;
if ( ( rc = tls_pending_cipher ( tls, &tls->rx.cipherspec ) ) != 0 )
return rc;
return 0;
}