diff options
| author | Peter Dettman <peter.dettman@bouncycastle.org> | 2023-03-23 23:20:28 +0700 |
|---|---|---|
| committer | Peter Dettman <peter.dettman@bouncycastle.org> | 2023-04-13 17:16:19 +0700 |
| commit | 3e7fa55a8dfe954d3be4412b745c7b318e764640 (patch) | |
| tree | ec61c269640aff38ba266bfc4631d14f12358c5b /crypto/src/tls/DtlsRecordLayer.cs | |
| parent | RFC 9146: TlsBlockCipher support for connection ID (diff) | |
| download | BouncyCastle.NET-ed25519-3e7fa55a8dfe954d3be4412b745c7b318e764640.tar.xz | |
RFC 9146: DtlsEpoch tracks record header lengths
- accounts for whether connection ID is in use for read/write.
Diffstat (limited to 'crypto/src/tls/DtlsRecordLayer.cs')
| -rw-r--r-- | crypto/src/tls/DtlsRecordLayer.cs | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/crypto/src/tls/DtlsRecordLayer.cs b/crypto/src/tls/DtlsRecordLayer.cs index 3cf04b8ac..5d8c217b0 100644 --- a/crypto/src/tls/DtlsRecordLayer.cs +++ b/crypto/src/tls/DtlsRecordLayer.cs @@ -122,7 +122,8 @@ namespace Org.BouncyCastle.Tls this.m_inHandshake = true; - this.m_currentEpoch = new DtlsEpoch(0, TlsNullNullCipher.Instance); + this.m_currentEpoch = new DtlsEpoch(0, TlsNullNullCipher.Instance, RECORD_HEADER_LENGTH, + RECORD_HEADER_LENGTH); this.m_pendingEpoch = null; this.m_readEpoch = m_currentEpoch; this.m_writeEpoch = m_currentEpoch; @@ -175,8 +176,13 @@ namespace Org.BouncyCastle.Tls * lifetime." */ + var securityParameters = m_context.SecurityParameters; + int recordHeaderLengthRead = RECORD_HEADER_LENGTH + (securityParameters.ConnectionIDPeer?.Length ?? 0); + int recordHeaderLengthWrite = RECORD_HEADER_LENGTH + (securityParameters.ConnectionIDLocal?.Length ?? 0); + // TODO Check for overflow - this.m_pendingEpoch = new DtlsEpoch(m_writeEpoch.Epoch + 1, pendingCipher); + this.m_pendingEpoch = new DtlsEpoch(m_writeEpoch.Epoch + 1, pendingCipher, recordHeaderLengthRead, + recordHeaderLengthWrite); } internal virtual void HandshakeSuccessful(DtlsHandshakeRetransmit retransmit) |