)]}'
{
  "commit": "9077d45852e82db96e282e45cae09af21b3f6d60",
  "tree": "96a3425cc87b432d634a49955e554a82f0a7eaea",
  "parents": [
    "7655629db0b015066ee3bb18b90162503c745f8b"
  ],
  "author": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Mon Sep 14 22:12:00 2026 +0100"
  },
  "committer": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Mon Sep 14 22:22:21 2026 +0100"
  },
  "message": "[tls] Allow for scheduled traffic phase changes\n\nThere are several point within the TLS version 1.3 handshake sequence\nat which a handshake message handler needs to transition one or both\nciphers to a new traffic phase, but the new cipher keys cannot be\ncalculated by the key schedule until the triggering handshake message\nhas been added to the transcript digest.\n\nHandshake messages are added to the transcript digest only after the\nmessage handler returns, to accommodate the fact that the transcript\ndigest algorithm cannot be known until the initial ServerHello has\nbeen processed.\n\nAllow a new traffic phase to be recorded in the cipher specification,\nwhich will be activated after the handshake message handlers have\nreturned.\n\nChanging traffic phase requires changing the cipher in use, and so is\npermitted only for the last handshake message in a handshake record.\n\nSigned-off-by: Michael Brown \u003cmcb30@ipxe.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "e3f4b4455c1c6d230844ea08336355ce039c646d",
      "old_mode": 33188,
      "old_path": "src/include/ipxe/tls.h",
      "new_id": "930deaef63bbd4b94773103d1305c5b489265baf",
      "new_mode": 33188,
      "new_path": "src/include/ipxe/tls.h"
    },
    {
      "type": "modify",
      "old_id": "f4df75862b5d03b7509e3a4d8bfbd34c52fabe43",
      "old_mode": 33188,
      "old_path": "src/net/tls.c",
      "new_id": "10d44405985327e1b17bcb1f0af4febe14327017",
      "new_mode": 33188,
      "new_path": "src/net/tls.c"
    }
  ]
}