tree c9c8d0e4842a5ba75f559422ded68b323be7cdc1
parent c94060c6417468bd0c5fd091f3a3aa4217bbb4bd
author Hanno Becker <hanno.becker@arm.com> 1616413339 +0000
committer Hanno Becker <hanno.becker@arm.com> 1627876369 +0100

Fix AEAD additional data computation for TLS 1.3

The AEAD additional data (AAD) is computed differently in TLS 1.3
compared to TLS 1.2, but this change hasn't yet been reflected in
the codee, rendering the current implementation of

```
   mbedtls_ssl_{encrypt,decrypt}_buf()
```

not standard compliant.

This commit fixes this by adjusting the AAD extraction function
ssl_extract_add_data_from_record() and its call-sites.

Please see the documentation of the code for an explanation
of how the AAD has changed from TLS 1.2 to TLS 1.3.

Signed-off-by: Hanno Becker <hanno.becker@arm.com>