Skip to content
  • Yawning Angel's avatar
    Support more than one KeyShare extension correctly · 243c0bf6
    Yawning Angel authored
    This is sufficient to make `HelloFirefox_Auto` handshake with Azure.
    
    Notes:
     * Some of the curves that get added support have vartime
       implementations that may be insecure.  Full support for P384
       and P521 are thus feature-gated behind `EnableVartimeGroups()`.
       This does not change the outward appearance of the handshake.
     * `HelloGolang` no longer looks even vaguely close to `crypto/tls`
       due to additional groups being offered in the `key_share`
       extension.  The test has been left broken intentionally.
     * Test data has been regenerated due to the `ClientHello` changing.
    243c0bf6