comparison src/event/ngx_event_quic_protection.h @ 8285:f85749b60e58 quic

Removed memory allocations from encryption code. + ngx_quic_encrypt(): - no longer accepts pool as argument - pkt is 1st arg - payload is passed as pkt->payload - performs encryption to the specified static buffer + ngx_quic_create_long/short_packet() functions: - single buffer for everything, allocated by caller - buffer layout is: [ ad | payload | TAG ] the result is in the beginning of buffer with proper length - nonce is calculated on stack - log is passed explicitly, pkt is 1st arg - no more allocations inside + ngx_quic_create_long_header(): - args changed: no need to pass str_t + added ngx_quic_create_short_header()
author Vladimir Homutov <vl@nginx.com>
date Thu, 26 Mar 2020 12:11:50 +0300
parents ae35ccba7aa6
children ebd5c71b9f02
comparison
equal deleted inserted replaced
8284:2935a11c55b6 8285:f85749b60e58
34 34
35 int ngx_quic_set_encryption_secret(ngx_pool_t *pool, ngx_ssl_conn_t *ssl_conn, 35 int ngx_quic_set_encryption_secret(ngx_pool_t *pool, ngx_ssl_conn_t *ssl_conn,
36 enum ssl_encryption_level_t level, const uint8_t *secret, size_t secret_len, 36 enum ssl_encryption_level_t level, const uint8_t *secret, size_t secret_len,
37 ngx_quic_peer_secrets_t *qsec); 37 ngx_quic_peer_secrets_t *qsec);
38 38
39 ngx_int_t ngx_quic_encrypt(ngx_pool_t *pool, ngx_ssl_conn_t *ssl_conn, 39 ssize_t ngx_quic_encrypt(ngx_quic_header_t *pkt, ngx_ssl_conn_t *ssl_conn,
40 ngx_quic_header_t *pkt, ngx_str_t *payload, ngx_str_t *res); 40 ngx_str_t *res);
41 41
42 ngx_int_t ngx_quic_decrypt(ngx_pool_t *pool, ngx_ssl_conn_t *ssl_conn, 42 ngx_int_t ngx_quic_decrypt(ngx_pool_t *pool, ngx_ssl_conn_t *ssl_conn,
43 ngx_quic_header_t *pkt); 43 ngx_quic_header_t *pkt);
44 44
45 45