tree 25ecadc5eae1975272c303cada020d7213b2bfb9
parent 11be7d500143b3eebac1641ae892d24ba36f2626
author Hubert Chao <hchao@chromium.org> 1778601129 +0000
committer boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1778602234 -0700

Server Padding Extension

Add support for a Server Padding Extension. This extension lets clients
request an additional amount of padding from servers, that servers can
opt into sending back as zeroed out bytes. The maximum number of bytes
that a server will send back is 16k.

Servers can opt to not send any padding. The client will be able to tell
if the server sent back the requested amount of padding, and will throw
an error if padding is sent but not of the requested amount.

This extension is only supported for TLS 1.3 connections.

This extension is temporary, and may be removed at any time.

Change-Id: I52713dfbca24dd2e2763be0e88aa424d1c417cd3
Bug: 509499093
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/94527
Reviewed-by: David Benjamin <davidben@google.com>
Presubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com>
Commit-Queue: Adam Langley <agl@google.com>