go:generate stringer -type=SignatureScheme,CurveID,ClientAuthType -output=common_string.go SignatureScheme identifies a signature algorithm supported

TLS record types.

CurveID is the type of a TLS identifier for an elliptic curve. See https://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-parameters-8

ClientAuthType declares the policy the server will follow for TLS Client Authentication.

The marshalingFunction type is an adapter to allow the use of ordinary functions as cryptobyte.MarshalingValue.

A Certificate is a chain of one or more certificates, leaf first.

CertificateRequestInfo contains information from a server's CertificateRequest message, which is used to demand a certificate and proof of control fro

CipherSuite is a TLS cipher suite. Note that most functions in this package accept and expose cipher suite IDs instead of this type.

ClientHelloInfo contains information from a ClientHello message in order to guide application logic in the GetCertificate and GetConfigForClient callb

ClientSessionCache is a cache of ClientSessionState objects that can be used by a client to resume a TLS session with a given server. ClientSessionCac

ClientSessionState contains the state needed by clients to resume TLS sessions.

A Config structure is used to configure a TLS client or server. After one has been passed to a TLS function it must not be modified. A Config may be r

A Conn represents a secured connection. It implements the net.Conn interface.

ConnectionState records basic TLS details about the connection.

Dialer dials TLS connections given a configuration and a Dialer for the underlying connection.

RecordHeaderError is returned when a TLS record header is invalid.

RenegotiationSupport enumerates the different levels of support for TLS renegotiation. TLS renegotiation is the act of performing subsequent handshake

atLeastReader reads from R, stopping with EOF once at least N bytes have been read. It is different from an io.LimitedReader in that it doesn't cut sh

cbcMode is an interface for block ciphers using cipher block chaining.

A cipherSuite is a TLS 1.0–1.2 cipher suite, and defines the key exchange mechanism, as well as the cipher+MAC pair or the AEAD.

A cipherSuiteTLS13 defines only the pair of the AEAD algorithm and hash algorithm to be used with HKDF. See RFC 8446, Appendix B.4.

cthWrapper wraps any hash.Hash that implements ConstantTimeSum, and replaces with that all calls to Sum. It's used to obtain a ConstantTimeSum-based H

ecdheKeyAgreement implements a TLS key agreement where the server generates an ephemeral EC public/private key pair and signs it. The pre-master secre

ecdheParameters implements Diffie-Hellman with either NIST curves or X25519, according to RFC 8446, Section 4.2.8.2.

A finishedHash calculates the hash of a set of handshake messages suitable for including in a Finished message.

A halfConn represents one direction of the record layer connection, either sending or receiving.

a keyAgreement implements the client and server side of a TLS key agreement protocol by generating and processing key exchange messages.

TLS 1.3 Key Share. See RFC 8446, Section 4.2.8.

A listener implements a network listener (net.Listener) for TLS connections.

lruSessionCache is a ClientSessionCache implementation that uses an LRU caching strategy.

prefixNonceAEAD wraps an AEAD and prefixes a fixed portion of the nonce to each call.

TLS 1.3 PSK Identity. Can be a Session Ticket, or a reference to a saved session. See RFC 8446, Section 4.2.11.

rsaKeyAgreement implements the standard TLS key agreement where the client encrypts the pre-master secret to the server's public key.

serverHandshakeState contains details of a server handshake in progress. It's discarded once the handshake has completed.

sessionState contains the information that is serialized into a session ticket in order to later resume a connection.

sessionStateTLS13 is the content of a TLS 1.3 session ticket. Its first version (revision = 0) doesn't carry any of the information needed for 0-RTT v

ticketKey is the internal representation of a session ticket key.

xoredNonceAEAD wraps an AEAD by XORing in a fixed pattern to the nonce before each call.