Uses of Record Class
io.github.mahmoudimus.quic.Secrets

Packages that use Secrets

Package	Description
io.github.mahmoudimus.quic.crypto	QUIC packet protection (RFC 9001 section 5): AEAD payload keys, header protection keys, Initial keys per version, key updates and the Retry integrity tag.
io.github.mahmoudimus.quic.tls	A TLS 1.3 handshake (RFC 8446) for QUIC (RFC 9001), client and server, ported from rustls with quinn's session interface.

Uses of Secrets in io.github.mahmoudimus.quic.crypto

Methods in io.github.mahmoudimus.quic.crypto that return Secrets

Modifier and Type	Method	Description
static Secrets	Keys.initialSecrets(QuicVersion version, ConnectionId clientDestinationId)	The Initial secrets for a client's first Destination Connection ID (RFC 9001 section 5.2): HKDF-Extract with the version's salt, then the "client in" and "server in" labels.
static Secrets	Keys.nextSecrets(Secrets secrets, QuicVersion version)	The secrets after a key update: each secret expanded with the version's "quic ku" label to the hash length (RFC 9001 section 6.1).

Methods in io.github.mahmoudimus.quic.crypto with parameters of type Secrets

Modifier and Type	Method	Description
static Keys	Keys.fromSecrets(Secrets secrets, boolean isServer)	QUIC version 1 keys from the traffic secrets the TLS handshake produced.
static Keys	Keys.fromSecrets(Secrets secrets, boolean isServer, QuicVersion version)	Keys from the traffic secrets the TLS handshake produced.
static Secrets	Keys.nextSecrets(Secrets secrets, QuicVersion version)	The secrets after a key update: each secret expanded with the version's "quic ku" label to the hash length (RFC 9001 section 6.1).
Keys	Keys.update(Secrets nextSecrets, boolean isServer, QuicVersion version)	The keys of the next key phase: new packet keys from the next secrets, with these header keys, which a key update does not change (RFC 9001 section 6).

Uses of Secrets in io.github.mahmoudimus.quic.tls

Methods in io.github.mahmoudimus.quic.tls that return Secrets

Modifier and Type	Method	Description
Secrets	TlsSession.nextOneRttSecrets()	Derives the next generation of 1-RTT secrets for a key update (RFC 9001 section 6): HKDF-Expand-Label(secret, "quic ku", "", Hash.length) on both traffic secrets, with the suite's hash.
Secrets	TlsSession.nextSecrets()	Takes the next newly available secrets, in the order they became available.