From 822d6817e7aeb2993ad50cec374fb23aa6f70c02 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?P=C3=A9ter=20Dimitrov?= <peterdmv@erlang.org>
Date: Wed, 21 Nov 2018 11:03:12 +0100
Subject: ssl: Update HKDF-Expand-Label function

Change-Id: I08dbfb38b198ef24798a85d8bcf498d697123fad
---
 lib/ssl/src/tls_v1.erl | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

(limited to 'lib/ssl')

diff --git a/lib/ssl/src/tls_v1.erl b/lib/ssl/src/tls_v1.erl
index 83dd7585dd..6bb001d814 100644
--- a/lib/ssl/src/tls_v1.erl
+++ b/lib/ssl/src/tls_v1.erl
@@ -71,11 +71,14 @@ hkdf_expand_label(Secret, Label0, Context, Length, Algo) ->
     %%     opaque label<7..255> = "tls13 " + Label;
     %%     opaque context<0..255> = Context;
     %% } HkdfLabel;
-    Content = << <<"tls13">>/binary, Label0/binary, Context/binary>>,
+    Label1 = << <<"tls13 ">>/binary, Label0/binary>>,
+    LLen = size(Label1),
+    Label = <<?BYTE(LLen), Label1>>,
+    Content = <<Label/binary, Context/binary>>,
     Len = size(Content),
     HkdfLabel = <<?UINT16(Len), Content/binary>>,
     hkdf_expand(Secret, HkdfLabel, Length, Algo).
-    
+
 -spec hkdf_extract(MacAlg::ssl_cipher_format:hash(), Salt::binary(), 
                    KeyingMaterial::binary()) -> PseudoRandKey::binary().
 
-- 
cgit v1.2.3