cloudflare / cloudflare/tls-tris

Implementation of request_udpate is missing

Open
#85 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
300
Forks
52
PR merge metrics
No merged PRs in 30d

Description

Draft-22 defines ``Key and IV Update`` mechanism. As per point ``4.6.3``:

```
If the request_update field is set to "update_requested" then the
receiver MUST send a KeyUpdate of its own with request_update set to
"update_not_requested" prior to sending its next application data
record.
```

Which means feature is required in order to be fully complient with TLS 1.3 standard

Contributor guide

Open the contributing guide

Research direction

Search the Go codebase for request_update and existing KeyUpdate handling, then read the TLS 1.3 record-processing path. Done means a received update_requested value causes the receiver to send its own KeyUpdate with update_not_requested before its next application data record, with coverage for that sequence.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.