@deftypefun {int} {gnutls_prf_early} (gnutls_session_t @var{session}, size_t @var{label_size}, const char * @var{label}, size_t @var{context_size}, const char * @var{context}, size_t @var{outsize}, char * @var{out})

@var{session}: is a @code{gnutls_session_t}  type.

@var{label_size}: length of the  @code{label} variable.

@var{label}: label used in PRF computation, typically a short string.

@var{context_size}: length of the  @code{extra} variable.

@var{context}: optional extra data to seed the PRF with.

@var{outsize}: size of pre-allocated output buffer to hold the output.

@var{out}: pre-allocated buffer to hold the generated data.

This function is similar to @code{gnutls_prf_rfc5705()} , but only works in

TLS 1.3 or later to export early keying material.

Note that the keying material is only available after the

ClientHello message is processed and before the application traffic

keys are established.  Therefore this function shall be called in a

handshake hook function for @code{GNUTLS_HANDSHAKE_CLIENT_HELLO} .

The  @code{label} variable usually contains a string denoting the purpose

for the generated data.

The  @code{context} variable can be used to add more data to the seed, after

the random variables.  It can be used to make sure the

generated output is strongly connected to some additional data

(e.g., a string used in user authentication).

The output is placed in  @code{out} , which must be pre-allocated.

Note that, to provide the RFC5705 context, the  @code{context} variable

must be non-null.

@strong{Returns:} @code{GNUTLS_E_SUCCESS}  on success, or an error code.

@strong{Since:} 3.6.8

@end deftypefun