| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_QUIC_CRYPTO_CRYPTO_PROTOCOL_H_ | 5 #ifndef NET_QUIC_CRYPTO_CRYPTO_PROTOCOL_H_ |
| 6 #define NET_QUIC_CRYPTO_CRYPTO_PROTOCOL_H_ | 6 #define NET_QUIC_CRYPTO_CRYPTO_PROTOCOL_H_ |
| 7 | 7 |
| 8 #include <stddef.h> | 8 #include <stddef.h> |
| 9 #include <stdint.h> | 9 #include <stdint.h> |
| 10 | 10 |
| (...skipping 216 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 227 TAG('C', 'S', 'C', 'T'); // Signed cert timestamp (RFC6962) of leaf cert. | 227 TAG('C', 'S', 'C', 'T'); // Signed cert timestamp (RFC6962) of leaf cert. |
| 228 | 228 |
| 229 #undef TAG | 229 #undef TAG |
| 230 | 230 |
| 231 const size_t kMaxEntries = 128; // Max number of entries in a message. | 231 const size_t kMaxEntries = 128; // Max number of entries in a message. |
| 232 | 232 |
| 233 const size_t kNonceSize = 32; // Size in bytes of the connection nonce. | 233 const size_t kNonceSize = 32; // Size in bytes of the connection nonce. |
| 234 | 234 |
| 235 const size_t kOrbitSize = 8; // Number of bytes in an orbit value. | 235 const size_t kOrbitSize = 8; // Number of bytes in an orbit value. |
| 236 | 236 |
| 237 // kProofSignatureLabel is prepended to server configs before signing to avoid | |
| 238 // any cross-protocol attacks on the signature. | |
| 239 // TODO(rch): Remove this when QUIC_VERSION_30 is removed. | |
| 240 const char kProofSignatureLabelOld[] = "QUIC server config signature"; | |
| 241 | |
| 242 // kProofSignatureLabel is prepended to the CHLO hash and server configs before | 237 // kProofSignatureLabel is prepended to the CHLO hash and server configs before |
| 243 // signing to avoid any cross-protocol attacks on the signature. | 238 // signing to avoid any cross-protocol attacks on the signature. |
| 244 const char kProofSignatureLabel[] = "QUIC CHLO and server config signature"; | 239 const char kProofSignatureLabel[] = "QUIC CHLO and server config signature"; |
| 245 | 240 |
| 246 // kClientHelloMinimumSize is the minimum size of a client hello. Client hellos | 241 // kClientHelloMinimumSize is the minimum size of a client hello. Client hellos |
| 247 // will have PAD tags added in order to ensure this minimum is met and client | 242 // will have PAD tags added in order to ensure this minimum is met and client |
| 248 // hellos smaller than this will be an error. This minimum size reduces the | 243 // hellos smaller than this will be an error. This minimum size reduces the |
| 249 // amplification factor of any mirror DoS attack. | 244 // amplification factor of any mirror DoS attack. |
| 250 // | 245 // |
| 251 // A client may pad an inchoate client hello to a size larger than | 246 // A client may pad an inchoate client hello to a size larger than |
| 252 // kClientHelloMinimumSize to make it more likely to receive a complete | 247 // kClientHelloMinimumSize to make it more likely to receive a complete |
| 253 // rejection message. | 248 // rejection message. |
| 254 const size_t kClientHelloMinimumSize = 1024; | 249 const size_t kClientHelloMinimumSize = 1024; |
| 255 | 250 |
| 256 } // namespace net | 251 } // namespace net |
| 257 | 252 |
| 258 #endif // NET_QUIC_CRYPTO_CRYPTO_PROTOCOL_H_ | 253 #endif // NET_QUIC_CRYPTO_CRYPTO_PROTOCOL_H_ |
| OLD | NEW |