)]}'
{
  "commit": "ca65bff67c7bfeb84531be8044ca874db2294c01",
  "tree": "5bd11098fb02e689506597c90ee3e0f1a8a22b64",
  "parents": [
    "c31fb79cfe35f8b14731bb2598d091b2e1394577"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Fri Apr 02 22:38:15 2021 -0400"
  },
  "committer": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Thu Apr 08 17:15:22 2021 +0000"
  },
  "message": "runner: Construct finishedHash earlier.\n\nWe currently construct finishedHash fairly late, after we\u0027ve resolved\nHelloRetryRequest. As a result, we need to defer some of the transcript\noperations across a large chunk of code.\n\nThis is a remnant of earlier iterations of TLS 1.3, when\nHelloRetryRequest didn\u0027t tell us the cipher suite yet. Now the cipher\nsuite is known earlier and we can construct the finishedHash object\nimmediately. In doing so, move HRR handling inside doTLS13Handshake().\n\nThis keeps more of TLS 1.3 bits together and allows us to maintain the\nHRR bits of the handshake closer to the rest of HRR processing. This\nwill be useful for ECH which complicates this part of the process with\nan inner and outer ClientHello. Finally, this adds a missing check that\nthe HRR and SH cipher suites match.\n\nChange-Id: Iec149eb5c648973325b190f8a0622c9196bf3a29\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/46630\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d36870106517108cfe4f2f104b12f7a8b7a0c0a8",
      "old_mode": 33188,
      "old_path": "ssl/test/runner/handshake_client.go",
      "new_id": "962737a260bcfddce5c61070740c4e04051d1709",
      "new_mode": 33188,
      "new_path": "ssl/test/runner/handshake_client.go"
    }
  ]
}
