GnuTLS Length Hiding patch.

- Remove random padding; use minimal padding with legacy interface
- With new interface, use LH when possible, that is in CBC mode or with the new padding extension
- Rename priority to "NEW_PADDING"
- gnutls-cli: add command line switch --ranges using LH when possible.
- Update documentation

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1 files changed, 10 insertions, 3 deletions

diff --git a/src/cli.c b/src/cli.c
index 142c8831d2..deacb6b418 100644
--- a/src/cli.c
+++ b/src/cli.c
@@ -68,7 +68,7 @@
 #define MAX_BUF 4096
 
 /* global stuff here */
-int resume, starttls, insecure, rehandshake, udp, mtu;
+int resume, starttls, insecure, ranges, rehandshake, udp, mtu;
 const char *hostname = NULL;
 const char *service = NULL;
 int record_max_size;
@@ -1030,8 +1030,14 @@ after_handshake:
                   bytes++;
                 }
             }
-
-          ret = socket_send (&hd, buffer, bytes);
+          if (ranges && gnutls_range_can_use_length_hiding(hd.session)) {
+			  gnutls_range_st range;
+			  range.low = 0;
+			  range.high = MAX_BUF;
+			  ret = socket_send_range (&hd, buffer, bytes, &range);
+          } else {
+        	  ret = socket_send(&hd, buffer, bytes);
+          }
 
           if (ret > 0)
             {
@@ -1129,6 +1135,7 @@ const char* rest = NULL;
   resume = HAVE_OPT(RESUME);
   rehandshake = HAVE_OPT(REHANDSHAKE);
   insecure = HAVE_OPT(INSECURE);
+  ranges   = HAVE_OPT(RANGES);
 
   udp = HAVE_OPT(UDP);
   mtu = OPT_VALUE_MTU;