DTLS 1.3 reliable handshake (RFC 9147 sections 5.8 and 7), part 2 of 4 for #1468; closes #1487 - #2440

Open

mondain wants to merge 8 commits into

mondain:dtls13/2-reliable-handshake

Commits on Sep 15, 2026

Add the DTLS 1.3 ack content type (RFC 9147 7.1), relates to github #1468.
mondain
committed
5e8aadb
Add DTLS 1.3 record number encryption mask primitive for AES and ChaCha20 (RFC 9147 4.2.3), relates to github #1468.
mondain
committed
92a868c
Add DTLS 1.3 record protection to TlsAEADCipher via a new TlsDTLS13Cipher interface, relates to github #1468.
mondain
committed
db62603
Add DTLS 1.3 unified header codec and sequence number reconstruction (RFC 9147 4.2.2), relates to github #1468.
mondain
committed
dda1d91
Add DTLS 1.3 record layer send/receive paths and epoch switching (RFC 9147 4), relates to github #1468.
mondain
committed
d5a8bd2
Use the "dtls13" HKDF-Expand-Label prefix for the DTLS 1.3 key schedule (RFC 9147 section 5.9) instead of TLS 1.3's "tls13 ", so DTLS 1.3 traffic keys, record number keys, Finished keys and exporte…

JonathanLennox
authored and
mondain
committed
405626e
Add the DTLS 1.3 reliable handshake and pack handshake flights into datagrams
mondain
committed
5643cc6

Commits on Sep 20, 2026

Refuse to send a DTLS handshake message whose message_seq would wrap the uint16, relates to github #1468.
mondain
committed
97c5666