DTLS 1.3 client and server handshakes (RFC 9147), part 3 of 4 for #1468 by mondain · Pull Request #2441 · bcgit/bc-java

Add the DTLS 1.3 ack content type (RFC 9147 7.1), relates to github #1468.

mondain

committed

5e8aadb

Add DTLS 1.3 record number encryption mask primitive for AES and ChaCha20 (RFC 9147 4.2.3), relates to github #1468.

mondain

committed

92a868c

Add DTLS 1.3 record protection to TlsAEADCipher via a new TlsDTLS13Cipher interface, relates to github #1468.

mondain

committed

db62603

Add DTLS 1.3 unified header codec and sequence number reconstruction (RFC 9147 4.2.2), relates to github #1468.

mondain

committed

dda1d91

Add DTLS 1.3 record layer send/receive paths and epoch switching (RFC 9147 4), relates to github #1468.

mondain

committed

d5a8bd2

Use the "dtls13" HKDF-Expand-Label prefix for the DTLS 1.3 key schedule (RFC 9147 section 5.9) instead of TLS 1.3's "tls13 ", so DTLS 1.3 traffic keys, record number keys, Finished keys and exporte…

JonathanLennox

authored and

mondain

committed

405626e

Add the DTLS 1.3 reliable handshake and pack handshake flights into datagrams

mondain

committed

5643cc6

Offer DTLS 1.3 from the DTLS client, relates to github #1468.

mondain

committed

7c9e771

Complete the client half of a DTLS 1.3 handshake, relates to github #1468.

mondain

committed

a46bc93

Hash DTLS 1.3 handshake transcripts without the DTLS message header, relates to github #1468.

mondain

committed

57c8d20

Fail loudly if a DTLS handshake transcript is read while undecided, relates to github #1468.

mondain

committed

ca35039

Complete the server half of a DTLS 1.3 handshake, relates to github #1468.

mondain

committed

9408d20

Retain the DTLS 1.3 handshake epoch after the handshake completes, relates to github #1468.

mondain

committed

f9ddbff

Add an end-to-end DTLS 1.3 handshake test, relates to github #1468.

mondain

committed

f415e49

Bound the DTLS 1.3 epochs retained after the handshake, relates to github #1468.

mondain

committed

8c3899d

Answer only a retransmission of the peer's final flight with an ACK, relates to github #1468.

mondain

committed

c8ed172

Test the DTLS 1.3 retransmitted-ACK path with a reordered final flight, relates to github #1468.

mondain

committed

af96b84

Re-arm the DTLS 1.3 retained-epoch application data test, relates to github #1468.

mondain

committed

b440ece

Add the DTLS 1.3 HelloRetryRequest and its cookie, relates to github #1468.

mondain

committed

3d00eff

Refuse a DTLS 1.2 HelloVerifyRequest on a DTLS 1.3 handshake, relates to github #1468.

mondain

committed

74b9e36

Support DTLS 1.3 client authentication during the handshake, relates to github #1468.

mondain

committed

58122ec

Cover the DTLS 1.3 exporter, use_srtp and version fallback, relates to github #1468.

mondain

committed

f53fca4

Restore the DTLS 1.3 no-CertificateRequest and authenticated-flight coverage, relates to github #1468.

mondain

committed

f15ff71

Drop the DTLS 1.3 authenticated flight deterministically and prove its retransmission, relates to github #1468.

mondain

committed

696b934

Gate the DTLS secure renegotiation notification on the selected version, relates to github #1468.

mondain

committed

db273e0

Assert the HelloRetryRequest synthetic transcript bytes directly, relates to github #1468.

mondain

committed

d92f674

Derive the retained handshake epoch and document the DTLS 1.3 epoch retention, relates to github #1468.

mondain

committed

a7d4c99

Refuse to negotiate DTLS 1.3 behind a HelloVerifyRequest front end, relates to github #1468.

mondain

committed

f22a101

Leave generate13EncryptedExtensions without an unused state parameter, relates to github #1468.

mondain

committed

e2098c6

Assert the server's own refusal and the second ClientHello's message_seq, relates to github #1468.

mondain

committed

49d7433

Navigation Menu

DTLS 1.3 client and server handshakes (RFC 9147), part 3 of 4 for #1468 - #2441

DTLS 1.3 client and server handshakes (RFC 9147), part 3 of 4 for #1468#2441
mondain wants to merge 30 commits into
bcgit:mainfrom
mondain:dtls13/3-client-server

Commits on Sep 15, 2026

Add the DTLS 1.3 ack content type (RFC 9147 7.1), relates to github #1468.

Add DTLS 1.3 record number encryption mask primitive for AES and ChaCha20 (RFC 9147 4.2.3), relates to github #1468.

Add DTLS 1.3 record protection to TlsAEADCipher via a new TlsDTLS13Cipher interface, relates to github #1468.

Add DTLS 1.3 unified header codec and sequence number reconstruction (RFC 9147 4.2.2), relates to github #1468.

Add DTLS 1.3 record layer send/receive paths and epoch switching (RFC 9147 4), relates to github #1468.

Use the "dtls13" HKDF-Expand-Label prefix for the DTLS 1.3 key schedule (RFC 9147 section 5.9) instead of TLS 1.3's "tls13 ", so DTLS 1.3 traffic keys, record number keys, Finished keys and exporte…

Add the DTLS 1.3 reliable handshake and pack handshake flights into datagrams

Offer DTLS 1.3 from the DTLS client, relates to github #1468.

Complete the client half of a DTLS 1.3 handshake, relates to github #1468.

Hash DTLS 1.3 handshake transcripts without the DTLS message header, relates to github #1468.

Fail loudly if a DTLS handshake transcript is read while undecided, relates to github #1468.

Complete the server half of a DTLS 1.3 handshake, relates to github #1468.

Retain the DTLS 1.3 handshake epoch after the handshake completes, relates to github #1468.

Add an end-to-end DTLS 1.3 handshake test, relates to github #1468.

Bound the DTLS 1.3 epochs retained after the handshake, relates to github #1468.

Answer only a retransmission of the peer's final flight with an ACK, relates to github #1468.

Test the DTLS 1.3 retransmitted-ACK path with a reordered final flight, relates to github #1468.

Re-arm the DTLS 1.3 retained-epoch application data test, relates to github #1468.

Add the DTLS 1.3 HelloRetryRequest and its cookie, relates to github #1468.

Refuse a DTLS 1.2 HelloVerifyRequest on a DTLS 1.3 handshake, relates to github #1468.

Support DTLS 1.3 client authentication during the handshake, relates to github #1468.

Cover the DTLS 1.3 exporter, use_srtp and version fallback, relates to github #1468.

Restore the DTLS 1.3 no-CertificateRequest and authenticated-flight coverage, relates to github #1468.

Drop the DTLS 1.3 authenticated flight deterministically and prove its retransmission, relates to github #1468.

Gate the DTLS secure renegotiation notification on the selected version, relates to github #1468.

Assert the HelloRetryRequest synthetic transcript bytes directly, relates to github #1468.

Derive the retained handshake epoch and document the DTLS 1.3 epoch retention, relates to github #1468.

Refuse to negotiate DTLS 1.3 behind a HelloVerifyRequest front end, relates to github #1468.

Leave generate13EncryptedExtensions without an unused state parameter, relates to github #1468.

Assert the server's own refusal and the second ClientHello's message_seq, relates to github #1468.