diff options
| author | Michael Brown | 2022-11-07 19:11:36 +0100 |
|---|---|---|
| committer | Michael Brown | 2022-11-08 15:09:18 +0100 |
| commit | c453b4c284dbedb5de0663f6b30878b425a7a3e8 (patch) | |
| tree | 3edacf954d8f3d899d5d666fc6b1c4ba71cbcb9a /src/include | |
| parent | [tls] Abstract out concept of a TLS authentication header (diff) | |
| download | ipxe-c453b4c284dbedb5de0663f6b30878b425a7a3e8.tar.gz ipxe-c453b4c284dbedb5de0663f6b30878b425a7a3e8.tar.xz ipxe-c453b4c284dbedb5de0663f6b30878b425a7a3e8.zip | |
[tls] Add MAC length as a cipher suite parameter
TLS stream and block ciphers use a MAC with a length equal to the
output length of the digest algorithm in use. For AEAD ciphers there
is no MAC, with the equivalent functionality provided by the cipher
algorithm's authentication tag.
Allow for the existence of AEAD cipher suites by making the MAC length
a parameter of the cipher suite.
Assume that the MAC key length is equal to the MAC length, since this
is true for all currently supported cipher suites.
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/include')
| -rw-r--r-- | src/include/ipxe/tls.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/include/ipxe/tls.h b/src/include/ipxe/tls.h index be192b7ef..8796fe931 100644 --- a/src/include/ipxe/tls.h +++ b/src/include/ipxe/tls.h @@ -185,6 +185,8 @@ struct tls_cipher_suite { uint8_t fixed_iv_len; /** Record initialisation vector length */ uint8_t record_iv_len; + /** MAC length */ + uint8_t mac_len; }; /** TLS cipher suite table */ |