boringssl/ssl/test/runner
David Benjamin 1bf2337fe1 Reject compressed ECDH coordinates in TLS.
We don't advertise compressed coordinates (and point format negotiation
was deprecated in TLS 1.3), so reject them. Both Internet Explorer and
Firefox appear to reject them already.

Later I hope to add an easier to use ECDH API that acts on bytes, not
EC_POINT. This clears the way for that API to only accept uncompressed
coordinates. Compressed coordinates never got deployed over NIST curves,
for better or worse. At this point, there is no sense in changing that
as new protocols should use curve25519.

Change-Id: Id2f1be791ddcf155d596f4eb0b79351766c5cdab
Reviewed-on: https://boringssl-review.googlesource.com/26024
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
Reviewed-by: Adam Langley <agl@google.com>
2018-02-15 01:42:54 +00:00
..
curve25519 Sync vendored copies of Go poly1305 and curve25519. 2017-03-30 20:04:23 +00:00
ed25519 Support Ed25519 keys in BoGo. 2017-04-05 23:21:30 +00:00
poly1305 Sync vendored copies of Go poly1305 and curve25519. 2017-03-30 20:04:23 +00:00
alert.go
cert.pem
chacha20_poly1305_test.go
chacha20_poly1305.go
channel_id_key.pem
cipher_suites.go Remove RC4 remnants in runner. 2017-11-01 16:45:36 +00:00
common.go Reject compressed ECDH coordinates in TLS. 2018-02-15 01:42:54 +00:00
conn.go Remove draft22 and experiment2. 2018-01-31 18:07:53 +00:00
deterministic.go
dtls.go Test DTLS record/packet packing more aggressively. 2017-10-13 17:32:55 +00:00
ecdsa_p224_cert.pem Support P-224 certificates as a server. 2017-02-27 21:27:39 +00:00
ecdsa_p224_key.pem Support P-224 certificates as a server. 2017-02-27 21:27:39 +00:00
ecdsa_p256_cert.pem
ecdsa_p256_key.pem
ecdsa_p384_cert.pem
ecdsa_p384_key.pem
ecdsa_p521_cert.pem
ecdsa_p521_key.pem
ed25519_cert.pem Support Ed25519 in TLS. 2017-04-06 15:30:17 +00:00
ed25519_key.pem Support Ed25519 in TLS. 2017-04-06 15:30:17 +00:00
fuzzer_mode.json Fix fuzzer mode suppressions. 2018-01-31 22:57:51 +00:00
handshake_client.go Reject compressed ECDH coordinates in TLS. 2018-02-15 01:42:54 +00:00
handshake_messages.go Remove draft22 and experiment2. 2018-01-31 18:07:53 +00:00
handshake_server.go Reject compressed ECDH coordinates in TLS. 2018-02-15 01:42:54 +00:00
hkdf_test.go
hkdf.go
key_agreement.go Reject compressed ECDH coordinates in TLS. 2018-02-15 01:42:54 +00:00
key.pem
packet_adapter.go
prf.go Remove draft22 and experiment2. 2018-01-31 18:07:53 +00:00
recordingconn.go Add DTLS fuzzers. 2017-09-07 22:26:50 +00:00
rsa_1024_cert.pem
rsa_1024_key.pem
rsa_chain_cert.pem
rsa_chain_key.pem
runner_test.go
runner.go Reject compressed ECDH coordinates in TLS. 2018-02-15 01:42:54 +00:00
shim_ticket.go
sign.go Support Ed25519 in TLS. 2017-04-06 15:30:17 +00:00
test_output.go
ticket.go Add Data-less Zero-RTT support. 2017-03-25 21:00:18 +00:00
tls.go Support Ed25519 keys in BoGo. 2017-04-05 23:21:30 +00:00