Class TlsKeyLogLabel

java.lang.Object
org.bouncycastle.tls.keylog.TlsKeyLogLabel
public abstract class TlsKeyLogLabel extends Object
The RFC 9850 labels a TlsKeyLog can be handed by this implementation.

RFC 9850 sec. 2.3 additionally defines ECH_SECRET and ECH_CONFIG for Encrypted ClientHello. Bouncy Castle does not implement ECH, so those labels are not defined here; they belong with the code that would emit them.

  • Field Details

    • CLIENT_RANDOM

      public static final String CLIENT_RANDOM
      The TLS 1.2-and-earlier master secret (RFC 9850 sec. 2.2), 48 bytes.
      See Also:

    • CLIENT_EARLY_TRAFFIC_SECRET

      public static final String CLIENT_EARLY_TRAFFIC_SECRET
      The TLS 1.3 client early traffic secret protecting early data (RFC 9850 sec. 2.1).
      See Also:

    • EARLY_EXPORTER_SECRET

      public static final String EARLY_EXPORTER_SECRET
      The TLS 1.3 early exporter master secret (RFC 9850 sec. 2.1).
      See Also:

    • CLIENT_HANDSHAKE_TRAFFIC_SECRET

      public static final String CLIENT_HANDSHAKE_TRAFFIC_SECRET
      The TLS 1.3 client handshake traffic secret (RFC 9850 sec. 2.1).
      See Also:

    • SERVER_HANDSHAKE_TRAFFIC_SECRET

      public static final String SERVER_HANDSHAKE_TRAFFIC_SECRET
      The TLS 1.3 server handshake traffic secret (RFC 9850 sec. 2.1).
      See Also:

    • CLIENT_TRAFFIC_SECRET_0

      public static final String CLIENT_TRAFFIC_SECRET_0
      The TLS 1.3 client application traffic secret, before any KeyUpdate (RFC 9850 sec. 2.1).
      See Also:

    • SERVER_TRAFFIC_SECRET_0

      public static final String SERVER_TRAFFIC_SECRET_0
      The TLS 1.3 server application traffic secret, before any KeyUpdate (RFC 9850 sec. 2.1).
      See Also:

    • EXPORTER_SECRET

      public static final String EXPORTER_SECRET
      The TLS 1.3 exporter master secret (RFC 9850 sec. 2.1).
      See Also:

  • Constructor Details

    • TlsKeyLogLabel

      public TlsKeyLogLabel()