tree 35d7125bbcb2046e7809568ae41c8ed1bf32db5d
parent 6c9758fa9a35b8996a82a0867127af41ca82bcb0
author David Benjamin <davidben@google.com> 1621361872 -0400
committer David Benjamin <davidben@google.com> 1623277865 +0000

Move key_share computation out of ClientHello callbacks.

Like the early_data CL, this does shift a bit of logic that was
previously hidden away in the callbacks. For key_share, this is probably
a good move independent of ECH. The logic around HRR, etc., was a little
messy.

Bug: 275
Change-Id: Iafbcebdf66ce1f7957d798a98ee6b996fff24639
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/47986
Reviewed-by: Adam Langley <agl@google.com>