lsquic_enc_sess.h revision 65728dc5
15392f7a3SLiteSpeed Tech/* Copyright (c) 2017 - 2019 LiteSpeed Technologies Inc. See LICENSE. */ 25392f7a3SLiteSpeed Tech#ifndef LSQUIC_ENC_SESS_H 35392f7a3SLiteSpeed Tech#define LSQUIC_ENC_SESS_H 1 45392f7a3SLiteSpeed Tech 565728dc5SDmitri Tikhonovstruct lsquic_alarmset; 65392f7a3SLiteSpeed Techstruct lsquic_engine_public; 75392f7a3SLiteSpeed Techstruct lsquic_packet_out; 85392f7a3SLiteSpeed Techstruct lsquic_packet_in; 95392f7a3SLiteSpeed Techstruct stream_wrapper; 105392f7a3SLiteSpeed Techstruct ver_neg; 115392f7a3SLiteSpeed Techstruct lsquic_conn; 125392f7a3SLiteSpeed Techstruct transport_params; 135392f7a3SLiteSpeed Techstruct lsquic_cid; 145392f7a3SLiteSpeed Techstruct ssl_stream_method_st; 155392f7a3SLiteSpeed Techstruct ssl_st; 165392f7a3SLiteSpeed Techstruct sockaddr; 175392f7a3SLiteSpeed Techstruct conn_cid_elem; 185392f7a3SLiteSpeed Tech 195392f7a3SLiteSpeed Tech#define DNONC_LENGTH 32 205392f7a3SLiteSpeed Tech#define SRST_LENGTH 16 215392f7a3SLiteSpeed Tech 225392f7a3SLiteSpeed Tech/* From [draft-ietf-quic-tls-14]: 235392f7a3SLiteSpeed Tech * 245392f7a3SLiteSpeed Tech * Data is protected using a number of encryption levels: 255392f7a3SLiteSpeed Tech * 265392f7a3SLiteSpeed Tech * o Plaintext 275392f7a3SLiteSpeed Tech * 285392f7a3SLiteSpeed Tech * o Early Data (0-RTT) Keys 295392f7a3SLiteSpeed Tech * 305392f7a3SLiteSpeed Tech * o Handshake Keys 315392f7a3SLiteSpeed Tech * 325392f7a3SLiteSpeed Tech * o Application Data (1-RTT) Keys 335392f7a3SLiteSpeed Tech */ 345392f7a3SLiteSpeed Tech 355392f7a3SLiteSpeed Tech/* This enum maps to the list above */ 365392f7a3SLiteSpeed Techenum enc_level 375392f7a3SLiteSpeed Tech{ 385392f7a3SLiteSpeed Tech ENC_LEV_CLEAR, 395392f7a3SLiteSpeed Tech ENC_LEV_EARLY, 405392f7a3SLiteSpeed Tech ENC_LEV_INIT, 415392f7a3SLiteSpeed Tech ENC_LEV_FORW, 425392f7a3SLiteSpeed Tech N_ENC_LEVS 435392f7a3SLiteSpeed Tech}; 445392f7a3SLiteSpeed Tech 455392f7a3SLiteSpeed Techenum handshake_error /* TODO: rename this enum */ 465392f7a3SLiteSpeed Tech{ 475392f7a3SLiteSpeed Tech DATA_NOT_ENOUGH = -2, 485392f7a3SLiteSpeed Tech DATA_FORMAT_ERROR = -1, 495392f7a3SLiteSpeed Tech HS_ERROR = -1, 505392f7a3SLiteSpeed Tech DATA_NO_ERROR = 0, 515392f7a3SLiteSpeed Tech HS_SHLO = 0, 525392f7a3SLiteSpeed Tech HS_1RTT = 1, 535392f7a3SLiteSpeed Tech HS_SREJ = 2, 545392f7a3SLiteSpeed Tech HS_DELAYED = 3, 555392f7a3SLiteSpeed Tech HS_PK_OFFLOAD = 4, 565392f7a3SLiteSpeed Tech}; 575392f7a3SLiteSpeed Tech 585392f7a3SLiteSpeed Tech#ifndef LSQUIC_KEEP_ENC_SESS_HISTORY 595392f7a3SLiteSpeed Tech# ifndef NDEBUG 605392f7a3SLiteSpeed Tech# define LSQUIC_KEEP_ENC_SESS_HISTORY 1 615392f7a3SLiteSpeed Tech# else 625392f7a3SLiteSpeed Tech# define LSQUIC_KEEP_ENC_SESS_HISTORY 0 635392f7a3SLiteSpeed Tech# endif 645392f7a3SLiteSpeed Tech#endif 655392f7a3SLiteSpeed Tech 665392f7a3SLiteSpeed Tech#if LSQUIC_KEEP_ENC_SESS_HISTORY 675392f7a3SLiteSpeed Tech#define ESHIST_BITS 7 685392f7a3SLiteSpeed Tech#define ESHIST_MASK ((1 << ESHIST_BITS) - 1) 695392f7a3SLiteSpeed Tech#define ESHIST_STR_SIZE ((1 << ESHIST_BITS) + 1) 705392f7a3SLiteSpeed Tech#endif 715392f7a3SLiteSpeed Tech 725392f7a3SLiteSpeed Techenum enc_packout { ENCPA_OK, ENCPA_NOMEM, ENCPA_BADCRYPT, }; 735392f7a3SLiteSpeed Tech 745392f7a3SLiteSpeed Techenum dec_packin { 755392f7a3SLiteSpeed Tech DECPI_OK, 765392f7a3SLiteSpeed Tech DECPI_NOMEM, 775392f7a3SLiteSpeed Tech DECPI_TOO_SHORT, 785392f7a3SLiteSpeed Tech DECPI_NOT_YET, 795392f7a3SLiteSpeed Tech DECPI_BADCRYPT, 805392f7a3SLiteSpeed Tech DECPI_VIOLATION, 815392f7a3SLiteSpeed Tech}; 825392f7a3SLiteSpeed Tech 835392f7a3SLiteSpeed Techtypedef void enc_session_t; 845392f7a3SLiteSpeed Tech 855392f7a3SLiteSpeed Techstruct enc_session_funcs_common 865392f7a3SLiteSpeed Tech{ 875392f7a3SLiteSpeed Tech /* Global initialization: call once per implementation */ 885392f7a3SLiteSpeed Tech int (*esf_global_init)(int flags); 895392f7a3SLiteSpeed Tech 905392f7a3SLiteSpeed Tech /* Global cleanup: call once per implementation */ 915392f7a3SLiteSpeed Tech void (*esf_global_cleanup) (void); 925392f7a3SLiteSpeed Tech 935392f7a3SLiteSpeed Tech const char * 945392f7a3SLiteSpeed Tech (*esf_cipher) (enc_session_t *); 955392f7a3SLiteSpeed Tech 965392f7a3SLiteSpeed Tech int 975392f7a3SLiteSpeed Tech (*esf_keysize) (enc_session_t *); 985392f7a3SLiteSpeed Tech 995392f7a3SLiteSpeed Tech int 1005392f7a3SLiteSpeed Tech (*esf_alg_keysize) (enc_session_t *); 1015392f7a3SLiteSpeed Tech 1025392f7a3SLiteSpeed Tech const char * 1035392f7a3SLiteSpeed Tech (*esf_get_sni) (enc_session_t *); 1045392f7a3SLiteSpeed Tech 1055392f7a3SLiteSpeed Tech enum enc_packout 1065392f7a3SLiteSpeed Tech (*esf_encrypt_packet) (enc_session_t *, const struct lsquic_engine_public *, 1075392f7a3SLiteSpeed Tech struct lsquic_conn *, struct lsquic_packet_out *); 1085392f7a3SLiteSpeed Tech 1095392f7a3SLiteSpeed Tech enum dec_packin 1105392f7a3SLiteSpeed Tech (*esf_decrypt_packet)(enc_session_t *, struct lsquic_engine_public *, 1115392f7a3SLiteSpeed Tech const struct lsquic_conn *, struct lsquic_packet_in *); 1125392f7a3SLiteSpeed Tech 1135392f7a3SLiteSpeed Tech struct stack_st_X509 * 1145392f7a3SLiteSpeed Tech (*esf_get_server_cert_chain) (enc_session_t *); 1155392f7a3SLiteSpeed Tech 1165392f7a3SLiteSpeed Tech int 1175392f7a3SLiteSpeed Tech (*esf_verify_reset_token) (enc_session_t *, const unsigned char *, size_t); 1185392f7a3SLiteSpeed Tech 1195392f7a3SLiteSpeed Tech int 1205392f7a3SLiteSpeed Tech (*esf_did_zero_rtt_succeed) (enc_session_t *); 1215392f7a3SLiteSpeed Tech 1225392f7a3SLiteSpeed Tech int 1235392f7a3SLiteSpeed Tech (*esf_is_zero_rtt_enabled) (enc_session_t *); 1245392f7a3SLiteSpeed Tech 1255392f7a3SLiteSpeed Tech unsigned 1265392f7a3SLiteSpeed Tech esf_tag_len; 1275392f7a3SLiteSpeed Tech}; 1285392f7a3SLiteSpeed Tech 1295392f7a3SLiteSpeed Techstruct enc_session_funcs_gquic 1305392f7a3SLiteSpeed Tech{ 1315392f7a3SLiteSpeed Tech#if LSQUIC_KEEP_ENC_SESS_HISTORY 1325392f7a3SLiteSpeed Tech /* Grab encryption session history */ 1335392f7a3SLiteSpeed Tech void (*esf_get_hist) (enc_session_t *, 1345392f7a3SLiteSpeed Tech char buf[ESHIST_STR_SIZE]); 1355392f7a3SLiteSpeed Tech#endif 1365392f7a3SLiteSpeed Tech 1375392f7a3SLiteSpeed Tech /* Destroy enc session */ 1385392f7a3SLiteSpeed Tech void (*esf_destroy)(enc_session_t *enc_session); 1395392f7a3SLiteSpeed Tech 1405392f7a3SLiteSpeed Tech /* Return true if handshake has been completed */ 1415392f7a3SLiteSpeed Tech int (*esf_is_hsk_done)(enc_session_t *enc_session); 1425392f7a3SLiteSpeed Tech 1435392f7a3SLiteSpeed Tech /* Get value of setting specified by `tag' */ 1445392f7a3SLiteSpeed Tech int (*esf_get_peer_setting) (enc_session_t *, uint32_t tag, 1455392f7a3SLiteSpeed Tech uint32_t *val); 1465392f7a3SLiteSpeed Tech 1475392f7a3SLiteSpeed Tech /* Get value of peer option (that from COPT array) */ 1485392f7a3SLiteSpeed Tech int (*esf_get_peer_option) (enc_session_t *enc_session, 1495392f7a3SLiteSpeed Tech uint32_t tag); 1505392f7a3SLiteSpeed Tech 1515392f7a3SLiteSpeed Tech /* Create server session */ 1525392f7a3SLiteSpeed Tech enc_session_t * 1535392f7a3SLiteSpeed Tech (*esf_create_server) (lsquic_cid_t cid, const struct lsquic_engine_public *); 1545392f7a3SLiteSpeed Tech 1555392f7a3SLiteSpeed Tech /* out_len should have init value as the max length of out */ 1565392f7a3SLiteSpeed Tech enum handshake_error 1575392f7a3SLiteSpeed Tech (*esf_handle_chlo) (enc_session_t *enc_session, enum lsquic_version, 1585392f7a3SLiteSpeed Tech const uint8_t *in, int in_len, time_t t, 1595392f7a3SLiteSpeed Tech const struct sockaddr *ip_addr, const struct sockaddr *local, 1605392f7a3SLiteSpeed Tech uint8_t *out, size_t *out_len, 1615392f7a3SLiteSpeed Tech uint8_t nonce[DNONC_LENGTH], int *nonce_set); 1625392f7a3SLiteSpeed Tech 1635392f7a3SLiteSpeed Tech void (*esf_hsk_destroy)(void *hsk_ctx); 1645392f7a3SLiteSpeed Tech 1655392f7a3SLiteSpeed Tech#ifndef NDEBUG 1665392f7a3SLiteSpeed Tech /* Need to expose this function for testing */ 1675392f7a3SLiteSpeed Tech int (*esf_determine_diversification_key) (enc_session_t *, 1685392f7a3SLiteSpeed Tech uint8_t *diversification_nonce, int is_client); 1695392f7a3SLiteSpeed Tech#endif 1705392f7a3SLiteSpeed Tech 1715392f7a3SLiteSpeed Tech const char * 1725392f7a3SLiteSpeed Tech (*esf_get_ua) (enc_session_t *); 1735392f7a3SLiteSpeed Tech 1745392f7a3SLiteSpeed Tech int 1755392f7a3SLiteSpeed Tech (*esf_have_key_gt_one) (enc_session_t *enc_session); 1765392f7a3SLiteSpeed Tech 1775392f7a3SLiteSpeed Tech#ifndef NDEBUG 1785392f7a3SLiteSpeed Tech /* Functions that are only relevant in maintest. We may want to get rid 1795392f7a3SLiteSpeed Tech * of them somehow and only use the public API to test. 1805392f7a3SLiteSpeed Tech */ 1815392f7a3SLiteSpeed Tech 1825392f7a3SLiteSpeed Tech uint8_t 1835392f7a3SLiteSpeed Tech (*esf_have_key) (enc_session_t *); 1845392f7a3SLiteSpeed Tech 1855392f7a3SLiteSpeed Tech void 1865392f7a3SLiteSpeed Tech (*esf_set_have_key) (enc_session_t *, uint8_t); 1875392f7a3SLiteSpeed Tech 1885392f7a3SLiteSpeed Tech const unsigned char * 1895392f7a3SLiteSpeed Tech (*esf_get_enc_key_i) (enc_session_t *); 1905392f7a3SLiteSpeed Tech 1915392f7a3SLiteSpeed Tech const unsigned char * 1925392f7a3SLiteSpeed Tech (*esf_get_dec_key_i) (enc_session_t *); 1935392f7a3SLiteSpeed Tech 1945392f7a3SLiteSpeed Tech const unsigned char * 1955392f7a3SLiteSpeed Tech (*esf_get_enc_key_nonce_i) (enc_session_t *); 1965392f7a3SLiteSpeed Tech 1975392f7a3SLiteSpeed Tech const unsigned char * 1985392f7a3SLiteSpeed Tech (*esf_get_dec_key_nonce_i) (enc_session_t *); 1995392f7a3SLiteSpeed Tech 2005392f7a3SLiteSpeed Tech const unsigned char * 2015392f7a3SLiteSpeed Tech (*esf_get_enc_key_nonce_f) (enc_session_t *); 2025392f7a3SLiteSpeed Tech 2035392f7a3SLiteSpeed Tech const unsigned char * 2045392f7a3SLiteSpeed Tech (*esf_get_dec_key_nonce_f) (enc_session_t *); 2055392f7a3SLiteSpeed Tech#endif /* !defined(NDEBUG) */ 2065392f7a3SLiteSpeed Tech 2075392f7a3SLiteSpeed Tech#if LSQUIC_ENABLE_HANDSHAKE_DISABLE 2085392f7a3SLiteSpeed Tech void 2095392f7a3SLiteSpeed Tech (*esf_set_handshake_completed) (enc_session_t *); 2105392f7a3SLiteSpeed Tech#endif 2115392f7a3SLiteSpeed Tech 2125392f7a3SLiteSpeed Tech /* Create client session */ 2135392f7a3SLiteSpeed Tech enc_session_t * 2145392f7a3SLiteSpeed Tech (*esf_create_client) (const char *domain, lsquic_cid_t cid, 2155392f7a3SLiteSpeed Tech const struct lsquic_engine_public *, 2165392f7a3SLiteSpeed Tech const unsigned char *, size_t); 2175392f7a3SLiteSpeed Tech 2185392f7a3SLiteSpeed Tech /* -1 error, 0, OK, response in `buf' */ 2195392f7a3SLiteSpeed Tech int 2205392f7a3SLiteSpeed Tech (*esf_gen_chlo) (enc_session_t *, enum lsquic_version, 2215392f7a3SLiteSpeed Tech uint8_t *buf, size_t *len); 2225392f7a3SLiteSpeed Tech 2235392f7a3SLiteSpeed Tech int 2245392f7a3SLiteSpeed Tech (*esf_handle_chlo_reply) (enc_session_t *, 2255392f7a3SLiteSpeed Tech const uint8_t *data, int len); 2265392f7a3SLiteSpeed Tech 2275392f7a3SLiteSpeed Tech size_t 2285392f7a3SLiteSpeed Tech (*esf_mem_used)(enc_session_t *); 2295392f7a3SLiteSpeed Tech 2305392f7a3SLiteSpeed Tech /* Zero-rtt serialization needs the knowledge of the QUIC version, that's 2315392f7a3SLiteSpeed Tech * why there is a separate method for thus. Plus, we want to be able to 2325392f7a3SLiteSpeed Tech * call it after the "handshake is done" callback is called. 2335392f7a3SLiteSpeed Tech */ 2345392f7a3SLiteSpeed Tech void (*esf_maybe_dispatch_zero_rtt) (enc_session_t *, 2355392f7a3SLiteSpeed Tech struct lsquic_conn *conn, 2365392f7a3SLiteSpeed Tech void (*cb)(struct lsquic_conn *, const unsigned char *, size_t)); 2375392f7a3SLiteSpeed Tech 2385392f7a3SLiteSpeed Tech void (*esf_reset_cid) (enc_session_t *, const lsquic_cid_t *); 2395392f7a3SLiteSpeed Tech}; 2405392f7a3SLiteSpeed Tech 2415392f7a3SLiteSpeed Techenum iquic_handshake_status { 2425392f7a3SLiteSpeed Tech IHS_WANT_READ, 2435392f7a3SLiteSpeed Tech IHS_WANT_WRITE, 2445392f7a3SLiteSpeed Tech IHS_STOP, 2455392f7a3SLiteSpeed Tech}; 2465392f7a3SLiteSpeed Tech 2475392f7a3SLiteSpeed Techstruct crypto_stream_if 2485392f7a3SLiteSpeed Tech{ 2495392f7a3SLiteSpeed Tech ssize_t (*csi_write) (void *stream, const void *buf, size_t len); 2505392f7a3SLiteSpeed Tech int (*csi_flush) (void *stream); 2515392f7a3SLiteSpeed Tech ssize_t (*csi_readf) (void *stream, 2525392f7a3SLiteSpeed Tech size_t (*readf)(void *, const unsigned char *, size_t, int), void *ctx); 2535392f7a3SLiteSpeed Tech int (*csi_wantwrite) (void *stream, int is_want); 2545392f7a3SLiteSpeed Tech int (*csi_wantread) (void *stream, int is_want); 2555392f7a3SLiteSpeed Tech enum enc_level 2565392f7a3SLiteSpeed Tech (*csi_enc_level) (void *stream); 2575392f7a3SLiteSpeed Tech}; 2585392f7a3SLiteSpeed Tech 2595392f7a3SLiteSpeed Techstruct enc_session_funcs_iquic 2605392f7a3SLiteSpeed Tech{ 2615392f7a3SLiteSpeed Tech enc_session_t * 2625392f7a3SLiteSpeed Tech (*esfi_create_client) (const char *domain, struct lsquic_engine_public *, 2635392f7a3SLiteSpeed Tech struct lsquic_conn *, const struct lsquic_cid *, 2645392f7a3SLiteSpeed Tech const struct ver_neg *, void *(crypto_streams)[4], 2655392f7a3SLiteSpeed Tech const struct crypto_stream_if *, 26665728dc5SDmitri Tikhonov const unsigned char *, size_t, 26765728dc5SDmitri Tikhonov struct lsquic_alarmset *); 2685392f7a3SLiteSpeed Tech 2695392f7a3SLiteSpeed Tech void 2705392f7a3SLiteSpeed Tech (*esfi_destroy) (enc_session_t *); 2715392f7a3SLiteSpeed Tech 2725392f7a3SLiteSpeed Tech struct ssl_st * 2735392f7a3SLiteSpeed Tech (*esfi_get_ssl) (enc_session_t *); 2745392f7a3SLiteSpeed Tech 2755392f7a3SLiteSpeed Tech struct transport_params * 2765392f7a3SLiteSpeed Tech (*esfi_get_peer_transport_params) (enc_session_t *); 2775392f7a3SLiteSpeed Tech 2785392f7a3SLiteSpeed Tech int 2795392f7a3SLiteSpeed Tech (*esfi_reset_dcid) (enc_session_t *, const struct lsquic_cid *, 2805392f7a3SLiteSpeed Tech const struct lsquic_cid *); 2815392f7a3SLiteSpeed Tech 2825392f7a3SLiteSpeed Tech int 2835392f7a3SLiteSpeed Tech (*esfi_init_server) (enc_session_t *); 2845392f7a3SLiteSpeed Tech 2855392f7a3SLiteSpeed Tech void 2865392f7a3SLiteSpeed Tech (*esfi_set_conn) (enc_session_t *, struct lsquic_conn *); 2875392f7a3SLiteSpeed Tech 2885392f7a3SLiteSpeed Tech void 2895392f7a3SLiteSpeed Tech (*esfi_set_streams) (enc_session_t *, void *(crypto_streams)[4], 2905392f7a3SLiteSpeed Tech const struct crypto_stream_if *); 2915392f7a3SLiteSpeed Tech 2925392f7a3SLiteSpeed Tech enc_session_t * 2935392f7a3SLiteSpeed Tech (*esfi_create_server) (struct lsquic_engine_public *, struct lsquic_conn *, 2945392f7a3SLiteSpeed Tech const struct lsquic_cid *, 2955392f7a3SLiteSpeed Tech void *(crypto_streams)[4], 2965392f7a3SLiteSpeed Tech const struct crypto_stream_if *, 2975392f7a3SLiteSpeed Tech const struct lsquic_cid *odcid); 2985392f7a3SLiteSpeed Tech 2995392f7a3SLiteSpeed Tech void 3005392f7a3SLiteSpeed Tech (*esfi_shake_stream)(enc_session_t *, struct lsquic_stream *, 3015392f7a3SLiteSpeed Tech const char *); 3025392f7a3SLiteSpeed Tech 3035392f7a3SLiteSpeed Tech void 3045392f7a3SLiteSpeed Tech (*esfi_1rtt_acked)(enc_session_t *); 3055392f7a3SLiteSpeed Tech}; 3065392f7a3SLiteSpeed Tech 3075392f7a3SLiteSpeed Techextern 3085392f7a3SLiteSpeed Tech#ifdef NDEBUG 3095392f7a3SLiteSpeed Techconst 3105392f7a3SLiteSpeed Tech#endif 3115392f7a3SLiteSpeed Techstruct enc_session_funcs_common lsquic_enc_session_common_gquic_1; 3125392f7a3SLiteSpeed Techextern const struct enc_session_funcs_common lsquic_enc_session_common_ietf_v1; 3135392f7a3SLiteSpeed Tech 3145392f7a3SLiteSpeed Techextern 3155392f7a3SLiteSpeed Tech#ifdef NDEBUG 3165392f7a3SLiteSpeed Techconst 3175392f7a3SLiteSpeed Tech#endif 3185392f7a3SLiteSpeed Techstruct enc_session_funcs_gquic lsquic_enc_session_gquic_gquic_1; 3195392f7a3SLiteSpeed Tech 3205392f7a3SLiteSpeed Techextern const struct enc_session_funcs_iquic lsquic_enc_session_iquic_ietf_v1; 3215392f7a3SLiteSpeed Tech 3225392f7a3SLiteSpeed Tech#define select_esf_common_by_ver(ver) ( \ 32392f6e17bSDmitri Tikhonov ver == LSQVER_ID23 ? &lsquic_enc_session_common_ietf_v1 : \ 3245392f7a3SLiteSpeed Tech ver == LSQVER_VERNEG ? &lsquic_enc_session_common_ietf_v1 : \ 3255392f7a3SLiteSpeed Tech &lsquic_enc_session_common_gquic_1 ) 3265392f7a3SLiteSpeed Tech 3275392f7a3SLiteSpeed Tech#define select_esf_gquic_by_ver(ver) ( \ 3285392f7a3SLiteSpeed Tech ver ? &lsquic_enc_session_gquic_gquic_1 : &lsquic_enc_session_gquic_gquic_1) 3295392f7a3SLiteSpeed Tech 3305392f7a3SLiteSpeed Tech#define select_esf_iquic_by_ver(ver) ( \ 3315392f7a3SLiteSpeed Tech ver ? &lsquic_enc_session_iquic_ietf_v1 : &lsquic_enc_session_iquic_ietf_v1) 3325392f7a3SLiteSpeed Tech 3335392f7a3SLiteSpeed Techextern const char *const lsquic_enclev2str[]; 3345392f7a3SLiteSpeed Tech 3355392f7a3SLiteSpeed Techextern const struct lsquic_stream_if lsquic_cry_sm_if; 3365392f7a3SLiteSpeed Tech 3375392f7a3SLiteSpeed Techextern const struct lsquic_stream_if lsquic_mini_cry_sm_if; 3385392f7a3SLiteSpeed Tech 3395392f7a3SLiteSpeed Tech/* RFC 7301, Section 3.2 */ 3405392f7a3SLiteSpeed Tech#define ALERT_NO_APPLICATION_PROTOCOL 120 3415392f7a3SLiteSpeed Tech 3425392f7a3SLiteSpeed Techenum lsquic_version 3435392f7a3SLiteSpeed Techlsquic_zero_rtt_version (const unsigned char *, size_t); 3445392f7a3SLiteSpeed Tech 3455392f7a3SLiteSpeed Tech/* This is seems to be true for all of the ciphers used by IETF QUIC. 3465392f7a3SLiteSpeed Tech * XXX: Perhaps add a check? 3475392f7a3SLiteSpeed Tech */ 3485392f7a3SLiteSpeed Tech#define IQUIC_TAG_LEN 16 3495392f7a3SLiteSpeed Tech 3505392f7a3SLiteSpeed Tech#endif 351