Miroslav Lichvar b8b166044f nts: don't include compliant-128gcm record for other AEADs ...

If the client included the NTS-KE record requesting compliant key
exporter context for AES-128-GCM-SIV, but the server doesn't select this
AEAD algorithm (it's not supported by the crypto library or it is
disabled by the ntsaeads directive), don't include the NTS-KE record in
the response. It's not relevant to the other AEAD algorithms.

2024-10-08 12:11:05 +02:00

29 KiB

Raw Blame History

View Raw