wired_server Struct Reference

Server-side handshake orchestrator state, initialized by wired_server_init. More...

#include <server.h>

Data Fields
i64	fd
	UDP socket; <0 until a socket is opened.
sockaddr	peer
	the client's UDP address (set by pump)
sdrv	sdrv
	server-side TLS handshake driver
keysched	sched
	RFC 8446 7.1 order-driven key schedule.
keyset	keys
	per-protection-level QUIC key sets
srvfin_state	fin
	client-Finished verification state
crecv	crecv
	CRYPTO stream reassembly buffer.
int	phase
	WIRED_SERVER_HS_*.
int	hs_done_sent
	HANDSHAKE_DONE emitted (at most once).
u8	server_priv [32]
	RFC 7748 x25519 private (owns the ECDHE).
u8	tr [WIRED_SERVER_TRANSCRIPT_MAX]
	raw handshake transcript bytes
usz	tr_len
	bytes through the latest folded message
usz	tr_through_sh
	transcript length through ServerHello
usz	tr_through_flight
	transcript length through server Finished
usz	tr_through_client_fin
	RFC 8446 4.6.1/7.1: transcript length through the verified client Finished – ClientHello..client Finished, exactly what resumption_master_secret is derived over.
u8	client_random [32]
	ClientHello.random (RFC 8446 4.1.2), recorded by wired_server_recv_initial for keylog lines.
const char *	keylog_path
	NSS key log file path, or 0 to disable.
kuswitch_state	ku
	RFC 9001 6: CLIENT_AP (peer-driven, recv-side) 1-RTT key generations.
u8	ku_secret [TLS_HASH_MAX]
	current generation's client_ap secret, needed to derive the next generation
kuswitch_state	ku_send
	RFC 9001 6.2: SERVER_AP (send-side) generations, kept in lockstep with ku so a confirmed peer update also advances what this endpoint seals with.
u8	ku_send_secret [TLS_HASH_MAX]
	current generation's server_ap secret
int	ku_seeded
	1 once ku/ku_send hold real generation-0 keys
u64	ku_send_count
	RFC 9001 6.6: 1-RTT packets sealed under ku_send's current generation; reset on every rotation, drives the confidentiality-limit Key Update.
u64	ku_auth_fail
	RFC 9001 6.6: received 1-RTT packets that failed to open under any retained generation, toward the AEAD integrity limit.

Detailed Description

Server-side handshake orchestrator state, initialized by wired_server_init.

Field Documentation

tr_through_client_fin

usz wired_server::tr_through_client_fin

RFC 8446 4.6.1/7.1: transcript length through the verified client Finished – ClientHello..client Finished, exactly what resumption_master_secret is derived over.

0 until WIRED_SERVER_HS_CONFIRMED.

---

The documentation for this struct was generated from the following file:

• tls/handshake/roles/server/server.h