Use AES-GCM-256 for session ticket protection
diff --git a/include/mbedtls/ssl_ticket.h b/include/mbedtls/ssl_ticket.h
index 42946b1..42842c5 100644
--- a/include/mbedtls/ssl_ticket.h
+++ b/include/mbedtls/ssl_ticket.h
@@ -25,7 +25,7 @@
#define MBEDTLS_SSL_TICKET_H
#include "ssl.h"
-#include "aes.h"
+#include "cipher.h"
#if defined(MBEDTLS_THREADING_C)
#include "threading.h"
@@ -40,10 +40,8 @@
*/
typedef struct
{
- unsigned char key_name[16]; /*!< name to quickly reject bad tickets */
- mbedtls_aes_context enc; /*!< encryption context */
- mbedtls_aes_context dec; /*!< decryption context */
- unsigned char mac_key[16]; /*!< authentication key */
+ unsigned char key_name[4]; /*!< name to quickly reject bad tickets */
+ mbedtls_cipher_context_t cipher;/*!< cipher context */
uint32_t ticket_lifetime; /*!< lifetime of tickets in seconds */