sendAlert sends a TLS alert message.

Write writes data to the connection. As Write calls Handshake, in order to prevent indefinite blocking a deadline must be set for both Read and Write

writeRecord writes a TLS record with the given type and payload to the connection and updates the record layer state.

readHandshake reads the next handshake message from the record layer.

deriveSecret implements Derive-Secret from RFC 8446, Section 7.1.

readUint16LengthPrefixed acts like s.ReadUint16LengthPrefixed, but targets a []byte instead of a cryptobyte.String.

readUint8LengthPrefixed acts like s.ReadUint8LengthPrefixed, but targets a []byte instead of a cryptobyte.String.

typeAndHashFromSignatureScheme returns the corresponding signature type and crypto.Hash for a given TLS SignatureScheme.

expandLabel implements HKDF-Expand-Label from RFC 8446, Section 7.1.

extract implements HKDF-Extract with the cipher suite hash.

finishedHash generates the Finished verify_data or PskBinderEntry according to RFC 8446, Section 4.4.4. See sections 4.4 and 4.2.11.2 for the baseKey

Put adds the ClientSessionState to the cache with the given key. It might get called multiple times in a connection if a TLS 1.3 server provides more

selectSignatureScheme picks a SignatureScheme from the peer's preference list that works with the selected certificate. It's only called for protocol

Close closes the connection.

discardHandshakeBuffer is called when there is no more need to buffer the entirety of the handshake messages.

incSeq increments the sequence number.

readUint24LengthPrefixed acts like s.ReadUint24LengthPrefixed, but targets a []byte instead of a cryptobyte.String.

sendAlert sends a TLS alert message.

writeRecordLocked writes a TLS record with the given type and payload to the connection and updates the record layer state.

64-bit sequence number

legacyTypeAndHashFromPublicKey returns the fixed signature type and crypto.Hash for a given public key used with TLS 1.0 and 1.1, before the introduct

marshalWithoutBinders returns the ClientHello through the PreSharedKeyExtension.identities field, according to RFC 8446, Section 4.2.11.2. Note that m

prepareCipherSpec sets the encryption and MAC states that a subsequent changeCipherSpec will use.

processCertsFromClient takes a chain of client certificates either from a Certificates message or from a sessionState and verifies them. It returns th

selectCipherSuite returns the first TLS 1.0–1.2 cipher suite from ids which is also in supportedIDs and passes the ok filter.

signedMessage returns the pre-hashed (if necessary) message to be signed by certificate keys in TLS 1.3. See RFC 8446, Section 4.4.3.

sliceForAppend extends the input slice by n bytes. head is the full extended slice, while tail is the appended part. If the original slice has suffici

unsupportedCertificateError returns a helpful error for certificates with an unsupported private key.

verifyHandshakeSignature verifies a signature against pre-hashed (if required) handshake contents.

Read reads data from the connection. As Read calls Handshake, in order to prevent indefinite blocking a deadline must be set for both Read and Write

mutualCipherSuite returns a cipherSuite given a list of supported ciphersuites and the id requested by the peer.

mutualVersion returns the protocol version to use given the advertised versions of the peer. Priority is given to the peer preference order.

pHash implements the P_hash function, as defined in RFC 4346, Section 5.

readRecordOrCCS reads one or more TLS records from the connection and updates the record layer state. Some invariants: - c.in must be locked - c.input

requiresClientCert reports whether the ClientAuthType requires a client certificate to be provided.

retryReadRecord recurs into readRecordOrCCS to drop a non-advancing record, like a warning alert, empty application_data, or a change_cipher_spec in T

ticketKeyFromBytes converts from the external representation of a session ticket key to a ticketKey. Externally, session ticket keys are 32 random byt

tls10MAC implements the TLS 1.0 MAC function. RFC 2246, Section 6.2.3.

DialContext connects to the given network address and initiates a TLS handshake, returning the resulting TLS connection. The provided Context must be

Get searches for a ClientSessionState associated with the given key. On return, ok is true if one was found.

Handshake runs the client or server handshake protocol if it has not yet been run. Most uses of this package need not call Handshake explicitly: the

HandshakeContext runs the client or server handshake protocol if it has not yet been run. The provided Context must be non-nil. If the context is can

RemoteAddr returns the remote network address.

SetWriteDeadline sets the write deadline on the underlying connection. A zero value for t means Write will not time out. After a Write has timed out,

SupportsCertificate returns nil if the provided certificate is supported by the client that sent the ClientHello. Otherwise, it returns an error descr

VerifyHostname checks that the peer certificate chain is valid for connecting to host. If so, it returns nil; if not, it returns an error describing t

addBytesWithLength appends a sequence of bytes to the cryptobyte.Builder. If the length of the sequence is not the value specified, it produces an err

addUint64 appends a big-endian, 64-bit value to the cryptobyte.Builder.

aesgcmPreferred returns whether the first known cipher in the preference list is an AES-GCM cipher, implying the peer has hardware support for it.

changeCipherSpec changes the encryption and MAC states to the ones previously passed to prepareCipherSpec.

checkALPN ensure that the server's choice of ALPN protocol is compatible with the protocols that we advertised in the Client Hello.

checkServerHelloOrHRR does validity checks that apply to both ServerHello and HelloRetryRequest messages. It sets hs.suite.

clientSessionCacheKey returns a key used to cache sessionTickets that could be used to resume previously negotiated TLS sessions with a server.

clientSum returns the contents of the verify_data member of a client's Finished message.