commit b11c3097a57ce51d2ab1eb87c4c77ad6d1b1cf6b
author Hanno Becker <hanno.becker@arm.com> Mon Aug 10 17:00:19 2020 +0100
committer Hanno Becker <hanno.becker@arm.com> Tue Sep 08 10:28:29 2020 +0100
tree f9787409e098d1366dbdba018556183192a51c38
parent 2d2c3eb687b90a788c04a037550bac905bbaf326

Update state of TLS 1.3 functionality in architecture document

Signed-off-by: Hanno Becker <hanno.becker@arm.com>

docs/architecture/tls13-experimental.md

diff --git a/docs/architecture/tls13-experimental.md b/docs/architecture/tls13-experimental.md
index bcf3e34..3db16e0 100644
--- a/docs/architecture/tls13-experimental.md
+++ b/docs/architecture/tls13-experimental.md
@@ -38,3 +38,12 @@
 - The HKDF key derivation function on which the TLS 1.3 key schedule is based,
   is already present as an independent module controlled by `MBEDTLS_HKDF_C`
   independently of the development of the TLS 1.3 prototype.
+
+- The TLS 1.3-specific HKDF-based key derivation functions (see RFC 8446):
+  * HKDF-Expand-Label
+  * Derive-Secret
+  - Secret evolution
+  * The traffic {Key,IV} generation from secret
+  Those functions are implemented in `library/ssl_tls13_keys.c` and
+  tested in `test_suite_ssl` using test vectors from RFC 8448 and
+  https://tls13.ulfheim.net/.