22 static const unsigned char label_prefix[] = { 0x74, 0x6C, 0x73, 0x31, 0x33, 0x20, 0x00 };
32  * |fatal| is set. Returns 1 on success  0 on failure.
51         return 0;  in tls13_hkdf_expand()
64         return 0;  in tls13_hkdf_expand()
67     if ((ret = EVP_MD_get_size(md)) <= 0) {  in tls13_hkdf_expand()
73         return 0;  in tls13_hkdf_expand()
79                                             (char *)mdname, 0);  in tls13_hkdf_expand()
93     ret = EVP_KDF_derive(kctx, out, outlen, params) <= 0;  in tls13_hkdf_expand()
96     if (ret != 0) {  in tls13_hkdf_expand()
103     return ret == 0;  in tls13_hkdf_expand()
108  * success  0 on failure.
114   static const unsigned char keylabel[] ={ 0x6B, 0x65, 0x79, 0x00 };  in tls13_derive_key()
120                              NULL, 0, key, keylen, 1);  in tls13_derive_key()
125  * success  0 on failure.
131   static const unsigned char ivlabel[] = { 0x69, 0x76, 0x00 };  in tls13_derive_iv()
137                              NULL, 0, iv, ivlen, 1);  in tls13_derive_iv()
145 …static const unsigned char finishedlabel[] = { 0x66, 0x69, 0x6E, 0x69, 0x73, 0x68, 0x65, 0x64, 0x0…  in tls13_derive_finishedkey()
151                              sizeof(finishedlabel) - 1, NULL, 0, fin, finlen, 1);  in tls13_derive_finishedkey()
157  * pointed to by |outsecret|. Returns 1 on success  0 on failure.
174     static const char derived_secret_label[] = { 0x64, 0x65, 0x72, 0x69, 0x76, 0x65, 0x64, 0x00 };  in tls13_generate_secret()
184         return 0;  in tls13_generate_secret()
189     if (!ossl_assert(mdleni >= 0)) {  in tls13_generate_secret()
192         return 0;  in tls13_generate_secret()
198                                             (char *)mdname, 0);  in tls13_generate_secret()
214     ret = EVP_KDF_derive(kctx, outsecret, mdlen, params) <= 0;  in tls13_generate_secret()
216     if (ret != 0)  in tls13_generate_secret()
220     return ret == 0;  in tls13_generate_secret()
226  * generated. Returns 1 on success  0 on failure.
239  * secret and store its length in |*secret_size|. Returns 1 on success  0 on
250     return tls13_generate_secret(s, md, prev, NULL, 0, out);  in tls13_generate_master_secret()
255  * 0 on error.
265     size_t len = 0, hashlen;  in tls13_final_finish_mac()
269         return 0;  in tls13_final_finish_mac()
275                                                 0);  in tls13_final_finish_mac()
310  * for initialising the cipher and hash. Returns 1 on success or 0 on failure.
319                             0)) {  in tls13_setup_key_block()
322         return 0;  in tls13_setup_key_block()
347     if (!ossl_assert(hashleni >= 0)) {  in derive_secret_key_and_iv()
349         return 0;  in derive_secret_key_and_iv()
356         return 0;  in derive_secret_key_and_iv()
374             return 0;  in derive_secret_key_and_iv()
382         taglen = 0;  in derive_secret_key_and_iv()
388         return 0;  in derive_secret_key_and_iv()
391     if (EVP_CipherInit_ex(ciph_ctx, ciph, NULL, NULL, NULL, sending) <= 0  in derive_secret_key_and_iv()
392         || EVP_CIPHER_CTX_ctrl(ciph_ctx, EVP_CTRL_AEAD_SET_IVLEN, ivlen, NULL) <= 0  in derive_secret_key_and_iv()
393         || (taglen != 0 && EVP_CIPHER_CTX_ctrl(ciph_ctx, EVP_CTRL_AEAD_SET_TAG,  in derive_secret_key_and_iv()
394                                                 taglen, NULL) <= 0)  in derive_secret_key_and_iv()
395         || EVP_CipherInit_ex(ciph_ctx, NULL, NULL, key, NULL, -1) <= 0) {  in derive_secret_key_and_iv()
397         return 0;  in derive_secret_key_and_iv()
406 …r client_early_traffic[]       = {0x63, 0x20, 0x65, 0x20,       /*traffic*/0x74, 0x72, 0x61, 0x66,…  in tls13_change_cipher_state()
407 …r client_handshake_traffic[]   = {0x63, 0x20, 0x68, 0x73, 0x20, /*traffic*/0x74, 0x72, 0x61, 0x66,…  in tls13_change_cipher_state()
408 …r client_application_traffic[] = {0x63, 0x20, 0x61, 0x70, 0x20, /*traffic*/0x74, 0x72, 0x61, 0x66,…  in tls13_change_cipher_state()
409 …r server_handshake_traffic[]   = {0x73, 0x20, 0x68, 0x73, 0x20, /*traffic*/0x74, 0x72, 0x61, 0x66,…  in tls13_change_cipher_state()
410 …r server_application_traffic[] = {0x73, 0x20, 0x61, 0x70, 0x20, /*traffic*/0x74, 0x72, 0x61, 0x66,…  in tls13_change_cipher_state()
411 …r exporter_master_secret[] = {0x65, 0x78, 0x70, 0x20,                    /* master*/  0x6D, 0x61, …  in tls13_change_cipher_state()
412 … resumption_master_secret[] = {0x72, 0x65, 0x73, 0x20,                  /* master*/  0x6D, 0x61, 0…  in tls13_change_cipher_state()
413 …arly_exporter_master_secret[] = {0x65, 0x20, 0x65, 0x78, 0x70, 0x20,  /* master*/  0x6D, 0x61, 0x7…  in tls13_change_cipher_state()
433     size_t finsecretlen = 0;  in tls13_change_cipher_state()
435     size_t labellen, hashlen = 0;  in tls13_change_cipher_state()
436     int ret = 0;  in tls13_change_cipher_state()
491             if (handlen <= 0) {  in tls13_change_cipher_state()
497                     && s->max_early_data > 0  in tls13_change_cipher_state()
498                     && s->session->ext.max_early_data == 0) {  in tls13_change_cipher_state()
501                  * actually do it but max_early_data in s->session is 0 then we  in tls13_change_cipher_state()
697             || (s->options & SSL_OP_ENABLE_KTLS) == 0)  in tls13_change_cipher_state()
724         if (BIO_flush(bio) <= 0)  in tls13_change_cipher_state()
735                                which & SSL3_CC_WRITE, iv, key, NULL, 0))  in tls13_change_cipher_state()
748     if ((which & SSL3_CC_EARLY) != 0) {  in tls13_change_cipher_state()
760 …st unsigned char application_traffic[] = { 0x74, 0x72 ,0x61 ,0x66 ,0x66 ,0x69 ,0x63 ,0x20 ,0x75 ,0…  in tls13_update_key()
771     int ret = 0, l;  in tls13_update_key()
773     if ((l = EVP_MD_get_size(md)) <= 0) {  in tls13_update_key()
775         return 0;  in tls13_update_key()
837 …static const unsigned char exporterlabel[] = {0x65, 0x78, 0x70, 0x6F, 0x72, 0x74, 0x65, 0x72, 0x00…  in tls13_export_keying_material()
845     int ret = 0;  in tls13_export_keying_material()
851         contextlen = 0;  in tls13_export_keying_material()
853     if (EVP_DigestInit_ex(ctx, md, NULL) <= 0  in tls13_export_keying_material()
854             || EVP_DigestUpdate(ctx, context, contextlen) <= 0  in tls13_export_keying_material()
855             || EVP_DigestFinal_ex(ctx, hash, &hashsize) <= 0  in tls13_export_keying_material()
856             || EVP_DigestInit_ex(ctx, md, NULL) <= 0  in tls13_export_keying_material()
857             || EVP_DigestFinal_ex(ctx, data, &datalen) <= 0  in tls13_export_keying_material()
860                                   data, datalen, exportsecret, hashsize, 0)  in tls13_export_keying_material()
863                                   out, olen, 0))  in tls13_export_keying_material()
878 …static const unsigned char exporterlabel[] = {0x65, 0x78, 0x70, 0x6F, 0x72, 0x74, 0x65, 0x72, 0x00…  in tls13_export_keying_material_early()
887     int ret = 0;  in tls13_export_keying_material_early()
893     if (!s->server && s->max_early_data > 0  in tls13_export_keying_material_early()
894             && s->session->ext.max_early_data == 0)  in tls13_export_keying_material_early()
917             || EVP_DigestInit_ex(ctx, md, NULL) <= 0  in tls13_export_keying_material_early()
918             || EVP_DigestUpdate(ctx, context, contextlen) <= 0  in tls13_export_keying_material_early()
919             || EVP_DigestFinal_ex(ctx, hash, &hashsize) <= 0  in tls13_export_keying_material_early()
920             || EVP_DigestInit_ex(ctx, md, NULL) <= 0  in tls13_export_keying_material_early()
921             || EVP_DigestFinal_ex(ctx, data, &datalen) <= 0  in tls13_export_keying_material_early()
924                                   data, datalen, exportsecret, hashsize, 0)  in tls13_export_keying_material_early()
927                                   out, olen, 0))  in tls13_export_keying_material_early()