wired/keyset_8h_source.html

#ifndef KEYS_KEYSET_H

#define KEYS_KEYSET_H


#include "common/platform/sys/syscall.h"

#include "tls/handshake/core/tls/initial.h"


#define LEVEL_INITIAL 0

#define LEVEL_HANDSHAKE 1

#define LEVEL_ONERTT 2

#define KEYSET_LEVELS 3


typedef struct {

  initial_keys keys[KEYSET_LEVELS];

  int          installed[KEYSET_LEVELS];

} keyset;


void keyset_init(keyset* state);


int keyset_install(keyset* state, int level, const initial_keys* keys);


int keyset_for_level(const keyset* state, int level, const initial_keys** out);


#endif

initial.h
RFC 9001 5.2: Initial packet protection keys derived from the client's Destination Connection ID.

keyset_for_level
int keyset_for_level(const keyset *state, int level, const initial_keys **out)
Fetch keys for level into *out.

KEYSET_LEVELS
#define KEYSET_LEVELS
number of protection levels
Definition keyset.h:17

keyset_init
void keyset_init(keyset *state)
Clear all levels to not-installed.

keyset_install
int keyset_install(keyset *state, int level, const initial_keys *keys)
Install keys at level (0/1/2).

initial_keys
One direction's packet protection keys (RFC 9001 5.1/5.2).
Definition initial.h:28

keyset
Per-protection-level key store: one AES-128-GCM key set per level plus an installed flag.
Definition keyset.h:23

keyset::installed
int installed[KEYSET_LEVELS]
1 once keys[level] is valid
Definition keyset.h:25

keyset::keys
initial_keys keys[KEYSET_LEVELS]
key/iv/hp per level
Definition keyset.h:24

syscall.h
Linux direct syscalls.