tls10MAC implements the TLS 1.0 MAC function. RFC 2246, Section 6.2.3.

Client returns a new TLS client side connection using conn as the underlying transport. The config cannot be nil: users must set either ServerName or

ClientApplicationTrafficSecret derives the client_application_traffic_secret_0 from the master secret and the transcript up to the server Finished.

ClientEarlyTrafficSecret derives the client_early_traffic_secret from the early secret and the transcript up to the ClientHello.

ClientHandshakeTrafficSecret derives the client_handshake_traffic_secret from the handshake secret and the transcript up to the ServerHello.

Dial connects to the given network address and initiates a TLS handshake, returning the resulting TLS connection. The returned [Conn], if any, will a

Get searches for a ClientSessionState associated with the given key. On return, ok is true if one was found.

PRF implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5 and allowed by SP 800-135, Revision 1, Section 4.2.2.

Read reads data from the connection. As Read calls [Conn.Handshake], in order to prevent indefinite blocking a deadline must be set for both Read and

ResumptionMasterSecret derives the resumption_master_secret from the master secret and the transcript up to the client Finished.

You MUST call `DetectPostHandshakeRecordsLens(config)` in advance manually if you don't use REALITY's listener, e.g., Xray-core's RAW transport.

ServerApplicationTrafficSecret derives the server_application_traffic_secret_0 from the master secret and the transcript up to the server Finished.

ServerHandshakeTrafficSecret derives the server_handshake_traffic_secret from the handshake secret and the transcript up to the ServerHello.

SetWriteDeadline sets the write deadline on the underlying connection. A zero value for t means [Conn.Write] will not time out. After a [Conn.Write] h

SupportsCertificate returns nil if the provided certificate is supported by the client that sent the ClientHello. Otherwise, it returns an error descr

VerifyHostname checks that the peer certificate chain is valid for connecting to host. If so, it returns nil; if not, it returns an error describing t

addBytesWithLength appends a sequence of bytes to the cryptobyte.Builder. If the length of the sequence is not the value specified, it produces an err

addUint64 appends a big-endian, 64-bit value to the cryptobyte.Builder.

changeCipherSpec changes the encryption and MAC states to the ones previously passed to prepareCipherSpec.

checkALPN ensure that the server's choice of ALPN protocol is compatible with the protocols that we advertised in the ClientHello.

var tlsmaxrsasize = godebug.New("tlsmaxrsasize")

checkServerHelloOrHRR does validity checks that apply to both ServerHello and HelloRetryRequest messages. It sets hs.suite.

clientSum returns the contents of the verify_data member of a client's Finished message.

ekmFromMasterSecret generates exported keying material as defined in RFC 5705.

explicitNonceLen returns the number of bytes of explicit nonce or IV included in each record. Explicit nonces are present only in CBC modes after TLS

explicitNonceLen returns the number of bytes of explicit nonce included in each record. This is eight for older AEADs and zero for modern ones.

exportKeyingMaterial implements RFC5705 exporters for TLS 1.3 according to RFC 8446, Section 7.5.

extMasterFromPreMasterSecret generates the extended master secret from the pre-master secret. See RFC 7627.

getCertificate returns the best certificate for the given ClientHelloInfo, defaulting to the first element of c.Certificates.

handlePostHandshakeMessage processes a handshake message arrived after the handshake is complete. Up to TLS 1.2, it indicates the start of a renegotia

Does the handshake, either a full one or resumes old session. Requires hs.c, hs.hello, hs.serverHello, and, optionally, hs.session to be set.

hashForClientCertificate returns the handshake messages so far, pre-hashed if necessary, suitable for signing by a TLS client certificate.

hashForServerKeyExchange hashes the given slices and returns their digest using the given hash function (for TLS 1.2) or using a default based on the

initLegacySessionTicketKeyRLocked ensures the legacy SessionTicketKey field is randomized if empty, and that sessionTicketKeys is populated from it ot

isAESGCMPreferred returns whether we have hardware support for AES-GCM, and the first known cipher in the peer's preference list is an AES-GCM cipher,

keysFromMasterSecret generates the connection keys from the master secret, given the lengths of the MAC key, cipher key and IV, as defined in RFC 2246

leaf returns the parsed leaf certificate, either from c.Leaf or by parsing the corresponding c.Certificate[0].

marshalWithoutBinders returns the ClientHello through the PreSharedKeyExtension.identities field, according to RFC 8446, Section 4.2.11.2. Note that m

masterFromPreMasterSecret generates the master secret from the pre-master secret. See RFC 5246, Section 8.1.

mutualCipherSuite returns a cipherSuite given a list of supported ciphersuites and the id requested by the peer.

negotiateALPN picks a shared ALPN protocol that both sides support in server preference order. If ALPN is not configured or the peer doesn't support i

This file contains the functions necessary to compute the TLS 1.3 key schedule. See RFC 8446, Section 7. nextTrafficSecret generates the next traffic

originalBytes should return the original bytes that were passed to unmarshal to create the message. If the message was not produced by unmarshal, it s

pHash implements the P_hash function, as defined in RFC 4346, Section 5.

prf12 implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5.

processCertsFromClient takes a chain of client certificates either from a certificateMsg message or a certificateMsgTLS13 message and verifies them.

readClientHello reads a ClientHello message and selects the protocol version.

readFromUntil reads from r into c.rawInput until c.rawInput contains at least n bytes or else returns an error.

readHandshakeBytes reads handshake data until c.hand contains at least n bytes.

sendDummyChangeCipherSpec sends a ChangeCipherSpec record for compatibility with middleboxes that didn't implement TLS correctly. See RFC 8446, Append

sendDummyChangeCipherSpec sends a ChangeCipherSpec record for compatibility with middleboxes that didn't implement TLS correctly. See RFC 8446, Append

serverSum returns the contents of the verify_data member of a server's Finished message.

sha1Hash calculates a SHA1 hash over the given byte slices.

var tlsrsakex = godebug.New("tlsrsakex") var tls3des = godebug.New("tls3des")