DtlsTicketKeyManager.ticketAad

private ubyte[] ticketAad(uint lifetimeSeconds, size_t maxEarlyData, ushort cipherSuite) static @safe pure nothrow

Builds the additional authenticated data binding a ticket's cleartext metadata to its ciphertext.

The metadata travels in the clear inside DtlsEncryptedTicket; authenticating it prevents an attacker from altering the lifetime, early-data limit or cipher suite of an issued ticket.

Parameters

lifetimeSecondsTicket lifetime hint.
maxEarlyDataMaximum early data size.
cipherSuiteNegotiated cipher suite ID.

Returns

14 bytes of big-endian metadata.