On 30 August 2010 18:37, Mikko Rasa tdb@tdb.fi wrote:
ctx->trailer_bytes = pgnutls_mac_get_key_size(pgnutls_mac_get(ctx->session));
...
- stream_sizes->cbHeader = 5;
- stream_sizes->cbTrailer = mac_size + 256; /* Max 255 bytes padding + 1 for padding size */
- stream_sizes->cbHeader = ctx->header_bytes;
- stream_sizes->cbTrailer = ctx->trailer_bytes;
Does this imply TLS record padding should be disabled? I imagine an encrypted message may not fit in the application provided buffers otherwise.