[crypto] Use tlskey_traffic() to ratchet traffic secrets For the HKDF-based key schedule, we currently ratchet the traffic secret based on a repeated call to tlskey_cipher(): generating a cipher key for application traffic will also implicitly consume the current generation of the traffic secret and replace it with the next generation. Switch to instead ratcheting the traffic secret based on a repeated call to tlskey_traffic(). This is a more natural home for the functionality: the traffic secret is updated explicitly rather than implicitly. It also fits more naturally into the structure used by the TLS protocol code, which currently allows received or transmitted messages to explicitly schedule a change of traffic secret. Signed-off-by: Michael Brown <mcb30@ipxe.org>
iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as:
boot from a web server via HTTP or HTTPS,
boot from an iSCSI, FCoE, or AoE SAN,
control the boot process with a script,
You can use iPXE to replace the existing PXE ROM on your network card, or you can chainload into iPXE to obtain the features of iPXE without the hassle of reflashing.
iPXE is free, open-source software licensed under the GNU GPL (with some portions under GPL-compatible licences).
You can download the rolling release binaries (built from the latest commit), or use the most recent stable release.
For full documentation, visit the iPXE website.