tree 148b44566dbd6031470c97d0e3f902479185182f
parent 5b236be374bff03aeb73c1c2f4052413518a6440
author dschinazi <dschinazi@google.com> 1566263104 -0700
committer Copybara-Service <copybara-worker@google.com> 1566263362 -0700

Generate stateless reset tokens by hashing instead of XOR.

This will allow us to support connection ID lengths greater than 24 which is required per latest IETF draft on version negotiation (QUICv1 requires the connection ID length to be <= 20 but if we receive a packet of an unknown version with connection ID lengths of up to 255 we need to properly send a version negotiation packet in response). Protected by quic_use_hashed_stateless_reset_tokens.

gfe-relnote: change stateless reset token generation, protected by disabled gfe2_restart_flag_quic_use_hashed_stateless_reset_tokens
PiperOrigin-RevId: 264287305
Change-Id: I921a1137fc1ceaa3a799ec486e0609d051feadc4