Re: [quicwg/base-drafts] Add an appendix containing test vectors for "Initial". (#1573)

[Masaori Koshiba <[e-mail]>]

I tried @ekr's test vector on the list and this test vector. My code passed with ekr's test vector, but failed with this test vector.
I got below values. ("initial secret" is same, but others are not same)
```
initial secret : a572b0245af1eddf5c61c6e3f7f9304ca66bfb4caaf76567d5cb8dd1dc4e820b

client in secret: 9f536457f32a1e0ae864bcb3caf1235110630e1d1fb33835bd054170f99bf7dc
key: f2928f2614ad6c20b9bd008e9c89631c
iv: ab950b0198637978cf44aab9
pn: 68c3f64e2d6634412b8e3294628d76f1

server in secret: b087dcd7478dda8a858fbf3d605c888586c0a3a9875423ad4f114f0ba38e5a2e
key: f56817d0fc595cfc0a2b0bcfb18735ec
iv: 3205035a3c937c902ee4f4d6
pn: a313c86d1373ecbccb3294b14974226c
```

I doubt that there is a bug around `HKDF-Expand-Label` implementation. Because the "info" parameter of `HKDF-Expand` is changed in draft-13. If understand correctly, it's `HkdfLabel` (defined in TLS 1.3) and it has `context<0..255>` field. Without the context field, I got exact same values of this test vector.

QUIC draft-12
```
struct {
    uint16 length = Length;
    opaque label<6..255> = "QUIC " + Label;
} QhkdfExpandInfo;
```

TLS 1.3 (QUIC draft-13)
```
struct {
    uint16 length = Length;
    opaque label<7..255> = "tls13 " + Label;
    opaque context<0..255> = Context;
} HkdfLabel;
```

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/1573#issuecomment-406478811