Skip to content

0.23.45: Ensure handshake "alignment" check covers previously-received messages - #3265

Merged
ctz merged 2 commits into
rel-0.23from
jbp-0.23-hs-aligned-fully-received
Sep 14, 2026
Merged

0.23.45: Ensure handshake "alignment" check covers previously-received messages#3265
ctz merged 2 commits into
rel-0.23from
jbp-0.23-hs-aligned-fully-received

Conversation

@ctz

@ctz ctz commented Sep 13, 2026

Copy link
Copy Markdown
Member

Release notes (and text for pending RUSTSEC)

Bug fix: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level when they followed a key-changing message in the same record. The handshake transcript is still authenticated, so a network-position attacker cannot use this to alter or complete a handshake; the practical effect is that a peer could send handshake messages that should be encrypted in plaintext without rustls rejecting the connection.

This issue is tracked as GHSA-2mjx-qc3c-rqvc. This issue affects rustls versions 0.23.13 through 0.23.44 inclusive.

Note that this is functionally the same bug as GO-2026-4340.

@rustls-benchmarking

rustls-benchmarking Bot commented Sep 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Benchmark results

Instruction counts

Significant differences

⚠️ There are significant instruction count differences

Click to expand
Scenario Baseline Candidate Diff Threshold
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_chacha_server 1397754 1386400 ✅ -11354 (-0.81%) 0.20%
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_chacha_client 3594555 3577364 ✅ -17191 (-0.48%) 0.29%
handshake_session_id_1.2_no_crypto_server 866001 863091 ✅ -2910 (-0.34%) 0.20%
handshake_tickets_1.2_no_crypto_server 1001441 998531 ✅ -2910 (-0.29%) 0.20%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_aes_server 2301870 2295538 ✅ -6332 (-0.28%) 0.20%

Other differences

Click to expand
Scenario Baseline Candidate Diff Threshold
handshake_no_resume_aws_lc_rs_1.2_rsa_aes_server 10463363 10506671 43308 (0.41%) 0.74%
handshake_no_resume_aws_lc_rs_1.3_rsa_aes_server 10973956 10930664 -43292 (-0.39%) 1.09%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_aes_client 8821104 8788751 -32353 (-0.37%) 0.73%
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_aes_server 1384673 1389016 4343 (0.31%) 1.85%
handshake_no_resume_aws_lc_rs_1.3_rsa_chacha_server 10939890 10969603 29713 (0.27%) 1.18%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_chacha_client 42197815 42105902 -91913 (-0.22%) 0.22%
handshake_no_resume_1.2_no_crypto_server 64857 64733 -124 (-0.19%) 0.20%
handshake_tickets_1.2_no_crypto_client 1076703 1074663 -2040 (-0.19%) 0.20%
handshake_session_id_1.2_no_crypto_client 1003954 1002484 -1470 (-0.15%) 0.20%
handshake_session_id_1.3_no_crypto_client 1934053 1931263 -2790 (-0.14%) 0.20%
handshake_tickets_1.3_no_crypto_client 1952533 1949743 -2790 (-0.14%) 0.20%
handshake_tickets_1.3_no_crypto_server 1775783 1773413 -2370 (-0.13%) 0.20%
handshake_session_id_1.3_no_crypto_server 1805900 1803530 -2370 (-0.13%) 0.20%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_chacha_server 38278078 38231302 -46776 (-0.12%) 0.20%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_chacha_client 8788258 8798809 10551 (0.12%) 0.89%
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_aes_client 3575449 3579048 3599 (0.10%) 1.36%
handshake_session_id_aws_lc_rs_1.3_rsa_aes_client 41988066 41946184 -41882 (-0.10%) 0.20%
handshake_no_resume_1.3_no_crypto_server 86851 86769 -82 (-0.09%) 0.20%
handshake_no_resume_1.2_no_crypto_client 86253 86182 -71 (-0.08%) 0.20%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_aes_client 42173364 42207462 34098 (0.08%) 0.24%
handshake_session_id_aws_lc_rs_1.2_rsa_aes_server 3638635 3635725 -2910 (-0.08%) 0.20%
handshake_no_resume_1.3_no_crypto_client 99615 99540 -75 (-0.08%) 0.20%
handshake_session_id_ring_1.2_rsa_aes_server 3972650 3969740 -2910 (-0.07%) 0.20%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_aes_client 42183608 42154396 -29212 (-0.07%) 0.25%
handshake_tickets_ring_1.2_rsa_aes_server 4398782 4395872 -2910 (-0.07%) 0.20%
handshake_tickets_aws_lc_rs_1.3_rsa_aes_client 42176988 42150226 -26762 (-0.06%) 0.23%
handshake_tickets_aws_lc_rs_1.2_rsa_aes_server 4773290 4770380 -2910 (-0.06%) 1.02%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_chacha_client 42131118 42156115 24997 (0.06%) 0.31%
handshake_session_id_aws_lc_rs_1.3_rsa_aes_server 36956285 36934663 -21622 (-0.06%) 0.20%
handshake_no_resume_ring_1.3_ecdsap256_chacha_client 3290914 3292801 1887 (0.06%) 0.21%
handshake_tickets_aws_lc_rs_1.2_rsa_aes_client 4075370 4073330 -2040 (-0.05%) 0.20%
handshake_tickets_ring_1.2_rsa_aes_client 4327872 4325832 -2040 (-0.05%) 0.20%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_aes_server 38299989 38315870 15881 (0.04%) 0.20%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_aes_server 38306433 38290707 -15726 (-0.04%) 0.20%
handshake_session_id_aws_lc_rs_1.2_rsa_aes_client 3758284 3756814 -1470 (-0.04%) 0.20%
handshake_session_id_aws_lc_rs_1.3_rsa_chacha_client 41880837 41864711 -16126 (-0.04%) 0.33%
handshake_tickets_aws_lc_rs_1.3_rsa_aes_server 38297519 38282954 -14565 (-0.04%) 0.20%
handshake_session_id_ring_1.2_rsa_aes_client 4088314 4086844 -1470 (-0.04%) 0.20%
handshake_tickets_aws_lc_rs_1.3_rsa_chacha_client 42114012 42099207 -14805 (-0.04%) 0.28%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_chacha_server 38245988 38257379 11391 (0.03%) 0.20%
handshake_session_id_aws_lc_rs_1.3_rsa_chacha_server 36847452 36838393 -9059 (-0.02%) 0.22%
handshake_session_id_aws_lc_rs_1.3_ecdsap256_aes_server 36957198 36948553 -8645 (-0.02%) 0.20%
handshake_session_id_aws_lc_rs_1.3_ecdsap256_aes_client 41967399 41957817 -9582 (-0.02%) 0.20%
handshake_tickets_aws_lc_rs_1.3_rsa_chacha_server 38231589 38223150 -8439 (-0.02%) 0.21%
handshake_session_id_aws_lc_rs_1.3_ecdsap256_chacha_client 41892979 41899783 6804 (0.02%) 0.23%
handshake_no_resume_ring_1.3_ecdsap256_aes_client 3291710 3291402 -308 (-0.01%) 0.24%
handshake_session_id_ring_1.3_ecdsap384_chacha_client 30062836 30060046 -2790 (-0.01%) 0.20%
handshake_session_id_ring_1.3_ecdsap256_chacha_client 30065430 30062640 -2790 (-0.01%) 0.20%
handshake_session_id_ring_1.3_rsa_chacha_client 30069695 30066905 -2790 (-0.01%) 0.20%
handshake_session_id_ring_1.3_ecdsap384_aes_client 30152146 30149356 -2790 (-0.01%) 0.20%
handshake_session_id_ring_1.3_ecdsap256_aes_client 30154740 30151950 -2790 (-0.01%) 0.20%
handshake_session_id_ring_1.3_rsa_aes_client 30159005 30156215 -2790 (-0.01%) 0.20%
handshake_tickets_ring_1.3_ecdsap384_chacha_client 30314396 30311606 -2790 (-0.01%) 0.20%
handshake_tickets_ring_1.3_ecdsap256_chacha_client 30317738 30314948 -2790 (-0.01%) 0.20%
handshake_tickets_ring_1.3_rsa_chacha_client 30321813 30319023 -2790 (-0.01%) 0.20%
handshake_tickets_ring_1.3_ecdsap384_aes_client 30383666 30380876 -2790 (-0.01%) 0.20%
handshake_tickets_ring_1.3_ecdsap256_aes_client 30387029 30384239 -2790 (-0.01%) 0.20%
handshake_tickets_ring_1.3_rsa_aes_client 30391104 30388314 -2790 (-0.01%) 0.20%
handshake_session_id_ring_1.3_rsa_chacha_server 31243535 31241165 -2370 (-0.01%) 0.20%
handshake_session_id_ring_1.3_ecdsap384_chacha_server 31246630 31244260 -2370 (-0.01%) 0.20%
handshake_session_id_ring_1.3_ecdsap256_chacha_server 31246662 31244292 -2370 (-0.01%) 0.20%
handshake_session_id_ring_1.3_rsa_aes_server 31363505 31361135 -2370 (-0.01%) 0.20%
handshake_session_id_ring_1.3_ecdsap384_aes_server 31366600 31364230 -2370 (-0.01%) 0.20%
handshake_session_id_ring_1.3_ecdsap256_aes_server 31366632 31364262 -2370 (-0.01%) 0.20%
handshake_tickets_ring_1.3_rsa_chacha_server 31702174 31699804 -2370 (-0.01%) 0.20%
handshake_tickets_ring_1.3_ecdsap256_chacha_server 31704677 31702307 -2370 (-0.01%) 0.20%
handshake_tickets_ring_1.3_ecdsap384_chacha_server 31704724 31702354 -2370 (-0.01%) 0.20%
handshake_tickets_ring_1.3_rsa_aes_server 31802554 31800184 -2370 (-0.01%) 0.20%
handshake_tickets_ring_1.3_ecdsap256_aes_server 31805057 31802687 -2370 (-0.01%) 0.20%
handshake_tickets_ring_1.3_ecdsap384_aes_server 31805194 31802824 -2370 (-0.01%) 0.20%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_aes_client 41957723 41954676 -3047 (-0.01%) 0.22%
handshake_no_resume_ring_1.3_ecdsap256_aes_server 1274399 1274311 -88 (-0.01%) 0.20%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_aes_server 36950853 36948415 -2438 (-0.01%) 0.20%
handshake_no_resume_aws_lc_rs_1.3_rsa_chacha_client 2416205 2416052 -153 (-0.01%) 0.20%
handshake_no_resume_aws_lc_rs_1.2_rsa_aes_client 1714429 1714327 -102 (-0.01%) 0.20%
handshake_session_id_aws_lc_rs_1.3_ecdsap256_chacha_server 36862014 36864187 2173 (0.01%) 0.20%
handshake_no_resume_ring_1.3_ecdsap256_chacha_server 1275631 1275559 -72 (-0.01%) 0.20%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_chacha_server 2298243 2298137 -106 (-0.00%) 0.20%
transfer_no_resume_ring_1.2_rsa_aes_client 57667895 57666058 -1837 (-0.00%) 0.20%
transfer_no_resume_ring_1.3_rsa_aes_client 57780129 57778295 -1834 (-0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap256_aes_client 57768665 57766832 -1833 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_rsa_aes_client 57940149 57938312 -1837 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.2_rsa_aes_client 57864880 57863046 -1834 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_aes_client 57930858 57929025 -1833 (-0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap384_aes_client 57770661 57768834 -1827 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_aes_client 57928852 57927022 -1830 (-0.00%) 0.20%
handshake_no_resume_ring_1.3_rsa_aes_client 2319112 2319045 -67 (-0.00%) 0.20%
handshake_no_resume_ring_1.3_rsa_chacha_client 2324818 2324751 -67 (-0.00%) 0.20%
handshake_no_resume_ring_1.2_rsa_aes_client 2228313 2228250 -63 (-0.00%) 0.20%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_chacha_server 36859880 36858875 -1005 (-0.00%) 0.20%
transfer_no_resume_ring_1.3_rsa_chacha_client 92324136 92322303 -1833 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_rsa_chacha_client 92399662 92397828 -1834 (-0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap384_chacha_client 92314666 92312834 -1832 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_chacha_client 92390378 92388545 -1833 (-0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap256_chacha_client 92312670 92310840 -1830 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_chacha_client 92388371 92386542 -1829 (-0.00%) 0.20%
transfer_no_resume_1.2_no_crypto_client 117009573 117007745 -1828 (-0.00%) 0.20%
transfer_no_resume_1.3_no_crypto_client 117044707 117042883 -1824 (-0.00%) 0.20%
handshake_no_resume_ring_1.2_rsa_aes_server 10956488 10956364 -124 (-0.00%) 0.20%
handshake_no_resume_ring_1.3_ecdsap384_aes_server 7201306 7201229 -77 (-0.00%) 0.20%
handshake_no_resume_ring_1.3_ecdsap384_chacha_server 7203310 7203237 -73 (-0.00%) 0.20%
handshake_no_resume_ring_1.3_rsa_aes_server 11077034 11076952 -82 (-0.00%) 0.20%
handshake_no_resume_ring_1.3_rsa_chacha_server 11082845 11082763 -82 (-0.00%) 0.20%
handshake_no_resume_aws_lc_rs_1.3_rsa_aes_client 2409528 2409513 -15 (-0.00%) 0.20%
handshake_no_resume_ring_1.3_ecdsap384_aes_client 34724998 34724925 -73 (-0.00%) 0.20%
handshake_no_resume_ring_1.3_ecdsap384_chacha_client 34726756 34726693 -63 (-0.00%) 0.20%
transfer_no_resume_1.3_no_crypto_server 104926120 104926130 10 (0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap384_aes_server 45969278 45969274 -4 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.2_rsa_aes_server 46113169 46113165 -4 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_rsa_aes_server 46150198 46150194 -4 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_rsa_chacha_server 80330035 80330041 6 (0.00%) 0.20%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_chacha_client 41885954 41885951 -3 (-0.00%) 0.21%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_aes_server 46163074 46163077 3 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_chacha_server 80341001 80340996 -5 (-0.00%) 0.20%
transfer_no_resume_1.2_no_crypto_server 104909923 104909928 5 (0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_aes_server 46147568 46147566 -2 (-0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap256_chacha_server 80220027 80220024 -3 (-0.00%) 0.20%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_chacha_server 80327404 80327407 3 (0.00%) 0.20%
transfer_no_resume_ring_1.2_rsa_aes_server 45864998 45864999 1 (0.00%) 0.20%
transfer_no_resume_ring_1.3_rsa_chacha_server 80211831 80211830 -1 (-0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap384_chacha_server 80215034 80215035 1 (0.00%) 0.20%
transfer_no_resume_ring_1.3_rsa_aes_server 45967994 45967994 0 (0.00%) 0.20%
transfer_no_resume_ring_1.3_ecdsap256_aes_server 45976177 45976177 0 (0.00%) 0.20%

Wall-time

Significant differences

There are no significant wall-time differences

Other differences

Click to expand
Scenario Baseline Candidate Diff Threshold
handshake_session_id_1.3_no_crypto 527.85 µs 535.76 µs 7.91 µs (1.50%) 3.79%
handshake_tickets_1.3_no_crypto 520.03 µs 525.28 µs 5.25 µs (1.01%) 3.78%
handshake_session_id_1.2_no_crypto 282.31 µs 279.79 µs -2.51 µs (-0.89%) 5.60%
handshake_no_resume_1.3_no_crypto 52.49 µs 52.09 µs -0.41 µs (-0.77%) 9.29%
handshake_no_resume_ring_1.3_ecdsap256_aes 426.99 µs 423.78 µs -3.21 µs (-0.75%) 1.79%
handshake_session_id_aws_lc_rs_1.2_rsa_aes 1.51 ms 1.50 ms -0.01 ms (-0.58%) 2.47%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_chacha 6.98 ms 7.02 ms 0.04 ms (0.56%) 1.53%
handshake_tickets_ring_1.2_rsa_aes 1.46 ms 1.45 ms -0.01 ms (-0.52%) 1.10%
handshake_session_id_aws_lc_rs_1.3_ecdsap256_chacha 6.10 ms 6.13 ms 0.03 ms (0.51%) 1.70%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_chacha 6.79 ms 6.82 ms 0.03 ms (0.49%) 1.79%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_chacha 6.29 ms 6.32 ms 0.03 ms (0.48%) 1.55%
handshake_tickets_aws_lc_rs_1.3_ecdsap256_aes 6.30 ms 6.33 ms 0.03 ms (0.47%) 1.92%
handshake_no_resume_ring_1.3_ecdsap256_chacha 423.01 µs 421.04 µs -1.97 µs (-0.47%) 1.43%
handshake_tickets_aws_lc_rs_1.3_rsa_chacha 6.95 ms 6.98 ms 0.03 ms (0.46%) 1.49%
handshake_tickets_aws_lc_rs_1.3_ecdsap384_aes 6.98 ms 7.01 ms 0.03 ms (0.44%) 1.77%
handshake_session_id_ring_1.2_rsa_aes 1.40 ms 1.39 ms -0.01 ms (-0.44%) 1.28%
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_aes 478.76 µs 476.74 µs -2.02 µs (-0.42%) 2.96%
handshake_tickets_aws_lc_rs_1.3_rsa_aes 6.95 ms 6.98 ms 0.03 ms (0.42%) 1.49%
handshake_no_resume_ring_1.3_rsa_aes 915.47 µs 911.75 µs -3.72 µs (-0.41%) 1.00%
handshake_tickets_ring_1.3_ecdsap256_chacha 5.25 ms 5.27 ms 0.02 ms (0.41%) 1.05%
handshake_session_id_aws_lc_rs_1.3_ecdsap384_aes 6.80 ms 6.83 ms 0.03 ms (0.40%) 1.97%
handshake_session_id_aws_lc_rs_1.3_rsa_chacha 6.76 ms 6.79 ms 0.03 ms (0.39%) 1.00%
handshake_session_id_ring_1.3_ecdsap256_chacha 5.20 ms 5.22 ms 0.02 ms (0.37%) 1.08%
transfer_no_resume_1.3_no_crypto 11.81 ms 11.77 ms -0.04 ms (-0.37%) 2.40%
handshake_session_id_ring_1.3_rsa_chacha 5.69 ms 5.71 ms 0.02 ms (0.37%) 1.00%
handshake_no_resume_aws_lc_rs_1.3_ecdsap256_chacha 475.78 µs 474.02 µs -1.76 µs (-0.37%) 2.18%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_aes 1.17 ms 1.16 ms -0.00 ms (-0.36%) 1.00%
handshake_tickets_ring_1.3_ecdsap256_aes 5.28 ms 5.30 ms 0.02 ms (0.36%) 1.00%
handshake_session_id_ring_1.3_rsa_aes 5.71 ms 5.73 ms 0.02 ms (0.35%) 1.10%
handshake_no_resume_aws_lc_rs_1.3_rsa_aes 1.12 ms 1.12 ms -0.00 ms (-0.34%) 2.56%
handshake_tickets_ring_1.3_rsa_chacha 5.74 ms 5.76 ms 0.02 ms (0.34%) 1.04%
handshake_tickets_1.2_no_crypto 301.99 µs 303.01 µs 1.02 µs (0.34%) 4.71%
transfer_no_resume_aws_lc_rs_1.3_rsa_aes 5.07 ms 5.05 ms -0.02 ms (-0.33%) 3.41%
handshake_session_id_aws_lc_rs_1.3_ecdsap256_aes 6.13 ms 6.15 ms 0.02 ms (0.33%) 2.16%
transfer_no_resume_ring_1.2_rsa_aes 5.69 ms 5.67 ms -0.02 ms (-0.33%) 3.33%
handshake_no_resume_ring_1.3_rsa_chacha 916.24 µs 913.27 µs -2.96 µs (-0.32%) 1.00%
handshake_session_id_aws_lc_rs_1.3_rsa_aes 6.78 ms 6.80 ms 0.02 ms (0.32%) 1.35%
handshake_tickets_ring_1.3_rsa_aes 5.77 ms 5.79 ms 0.02 ms (0.30%) 1.04%
handshake_session_id_ring_1.3_ecdsap256_aes 5.22 ms 5.24 ms 0.02 ms (0.30%) 1.04%
handshake_tickets_ring_1.3_ecdsap384_chacha 8.35 ms 8.37 ms 0.02 ms (0.28%) 1.00%
handshake_no_resume_aws_lc_rs_1.2_rsa_aes 1.02 ms 1.01 ms -0.00 ms (-0.28%) 3.07%
handshake_no_resume_ring_1.2_rsa_aes 910.61 µs 908.12 µs -2.49 µs (-0.27%) 1.00%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_aes 4.42 ms 4.41 ms -0.01 ms (-0.27%) 4.91%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_aes 5.11 ms 5.09 ms -0.01 ms (-0.27%) 4.05%
handshake_session_id_ring_1.3_ecdsap384_aes 8.32 ms 8.34 ms 0.02 ms (0.26%) 1.00%
handshake_session_id_ring_1.3_ecdsap384_chacha 8.29 ms 8.31 ms 0.02 ms (0.25%) 1.00%
handshake_no_resume_aws_lc_rs_1.3_rsa_chacha 1.13 ms 1.13 ms -0.00 ms (-0.25%) 1.63%
handshake_no_resume_aws_lc_rs_1.3_ecdsap384_chacha 1.16 ms 1.16 ms -0.00 ms (-0.25%) 1.19%
transfer_no_resume_ring_1.3_rsa_aes 5.76 ms 5.74 ms -0.01 ms (-0.23%) 4.77%
handshake_tickets_ring_1.3_ecdsap384_aes 8.37 ms 8.39 ms 0.02 ms (0.23%) 1.00%
transfer_no_resume_aws_lc_rs_1.2_rsa_aes 4.92 ms 4.91 ms -0.01 ms (-0.11%) 3.43%
handshake_no_resume_ring_1.3_ecdsap384_chacha 3.52 ms 3.52 ms -0.00 ms (-0.11%) 1.00%
transfer_no_resume_aws_lc_rs_1.3_ecdsap256_chacha 12.89 ms 12.87 ms -0.01 ms (-0.11%) 1.52%
transfer_no_resume_aws_lc_rs_1.3_rsa_chacha 13.54 ms 13.52 ms -0.02 ms (-0.11%) 1.83%
handshake_tickets_aws_lc_rs_1.2_rsa_aes 1.65 ms 1.65 ms 0.00 ms (0.11%) 1.93%
transfer_no_resume_1.2_no_crypto 11.61 ms 11.60 ms -0.01 ms (-0.10%) 1.86%
handshake_no_resume_ring_1.3_ecdsap384_aes 3.52 ms 3.52 ms -0.00 ms (-0.08%) 1.00%
transfer_no_resume_ring_1.3_ecdsap256_aes 5.27 ms 5.26 ms -0.00 ms (-0.07%) 5.10%
transfer_no_resume_aws_lc_rs_1.3_ecdsap384_chacha 13.58 ms 13.57 ms -0.01 ms (-0.07%) 1.53%
transfer_no_resume_ring_1.3_ecdsap384_aes 8.37 ms 8.36 ms -0.01 ms (-0.07%) 3.01%
transfer_no_resume_ring_1.3_rsa_chacha 13.30 ms 13.29 ms -0.01 ms (-0.07%) 1.97%
transfer_no_resume_ring_1.3_ecdsap384_chacha 15.91 ms 15.90 ms -0.01 ms (-0.06%) 1.59%
transfer_no_resume_ring_1.3_ecdsap256_chacha 12.81 ms 12.80 ms -0.01 ms (-0.04%) 2.06%
handshake_no_resume_1.2_no_crypto 46.87 µs 46.87 µs 0.00 µs (0.00%) 9.19%

Memory usage

Key:

  • ∑: sum usage for entire benchmark run
  • 🔝: peak usage
  • B: bytes
  • a: allocations

Significant differences

There are no significant memory usage differences

Additional information

Historical results

Checkout details:

@codecov

codecov Bot commented Sep 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.14%. Comparing base (64ad386) to head (a1293d5).

Additional details and impacted files 
@@            Coverage Diff            @@
##           rel-0.23    #3265   +/-   ##
=========================================
  Coverage     95.14%   95.14%           
=========================================
  Files            97       97           
  Lines         21931    21932    +1     
=========================================
+ Hits          20866    20867    +1     
  Misses         1065     1065

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

djc
djc approved these changes Sep 13, 2026
View reviewed changes

@djc djc left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ugh, when/how did we regress it?

Comment thread rustls/tests/api.rs Outdated
Comment thread rustls/tests/api.rs Outdated
ctz added 2 commits September 14, 2026 13:21
@ctz
Handshake "alignment" check covers previously-received messages
8a8c9b3 
Incorporate test case from GHSA-2mjx-qc3c-rqvc POC, plus three more
limited tests.
@ctz
Prepare 0.23.45
a1293d5
@ctz
ctz force-pushed the jbp-0.23-hs-aligned-fully-received branch from 3189b8b to a1293d5 Compare September 14, 2026 12:23
@ctz
ctz added this pull request to the merge queue Sep 14, 2026
Merged via the queue into rel-0.23 with commit 2976d90 Sep 14, 2026
32 checks passed
@ctz
ctz deleted the jbp-0.23-hs-aligned-fully-received branch September 14, 2026 13:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@djc djc djc approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ctz @djc