supportedSignatureAlgorithmsCert returns the supported algorithms for signatures in certificates.

supportsECDHE returns whether ECDHE key exchanges can be used with this pre-TLS 1.3 client.

verifyServerCertificate parses and verifies the provided chain, setting c.verifiedChains and c.peerCertificates or sending the appropriate alert.

writeRecord writes a TLS record with the given type and payload to the connection and updates the record layer state. ONLY used by REALITY

Accept waits for and returns the next incoming TLS connection. The returned connection is of type *Conn.

CipherSuites returns a list of cipher suites currently implemented by this package, excluding those with security issues, which are returned by [Insec

DialWithDialer connects to the given network address using dialer.Dial and then initiates a TLS handshake, returning the resulting TLS connection. Any

ExporterMasterSecret derives the exporter_master_secret from the master secret and the transcript up to the server Finished.

Force forces crypto/tls to restrict TLS configurations to FIPS-approved settings. By design, this call is impossible to undo (except in tests).

InsecureCipherSuites returns a list of cipher suites currently implemented by this package and which have security issues. Most applications should n

MasterSecret implements the TLS 1.2 extended master secret derivation, as defined in RFC 7627 and allowed by SP 800-135, Revision 1, Section 4.2.2.

NewListener creates a Listener which accepts connections from an inner Listener and wraps each connection with [Server]. The configuration config must

SetReadDeadline sets the read deadline on the underlying connection. A zero value for t means [Conn.Read] will not time out.

X509KeyPair parses a public/private key pair from a pair of PEM encoded data. On successful return, Certificate.Leaf will be populated. Before Go 1.2

certificateRequestInfoFromMsg generates a CertificateRequestInfo from a TLS <= 1.2 CertificateRequest, making an effort to fill in missing information

checkForResumption reports whether we should perform resumption on this connection.

decrypt authenticates and decrypts the record if protection is active at this stage. The returned plaintext might overlap with the input.

Defaults are collected in this file to allow distributions to more easily patch them to apply local policies. var tlsmlkem = godebug.New("tlsmlkem") d

var tlssha1 = godebug.New("tlssha1") defaultSupportedSignatureAlgorithms returns the signature and hash algorithms that the code advertises and suppor

defaultSupportedSignatureAlgorithmsCert returns the signature algorithms that the code advertises as supported for signatures in certificates. We inc

encrypt encrypts payload, adding the appropriate nonce and/or MAC, and appends it to record, which must already contain the record header.

extractPadding returns, in constant time, the length of the padding to remove from the end of payload. It also returns a byte which is equal to 255 if

On the server side, the first two methods are called in order. In the case that the key agreement protocol doesn't use a ServerKeyExchange message, ge

handleRenegotiation processes a HelloRequest handshake message.

hostnameInSNI converts name into an appropriate hostname for SNI. Literal IP addresses and absolute FQDNs are not permitted as SNI values. See RFC 606

illegalClientHelloChange reports whether the two ClientHello messages are different, with the exception of the changes allowed before and after a Hell

maxPayloadSizeForWrite returns the maximum TLS payload size to use for the next application data record. There is the following trade-off: - For late

md5SHA1Hash implements TLS 1.0's hybrid hash function which consists of the concatenation of an MD5 and SHA1 hash.

noEKMBecauseNoEMS is used as a value of ConnectionState.ekm when Extended Master Secret is not negotiated and thus we wish to fail all key-material ex

pHash implements the P_hash function, as defined in RFC 5246, Section 5.

parseECHConfigList parses a draft-ietf-tls-esni-18 ECHConfigList, returning a slice of parsed ECHConfigs, in the same order they were parsed, or an er

Attempt to parse the given private key DER block. OpenSSL 0.9.8 generates PKCS #1 private keys by default, while OpenSSL 1.0.0 generates PKCS #8 keys.

processHelloRetryRequest handles the HRR in hs.serverHello, modifies and resends hs.hello, and reads the new ServerHello into hs.serverHello.

On the client side, the next two methods are called in order. This method may not be called if the server doesn't send a ServerKeyExchange message.

readUint64 decodes a big-endian, 64-bit value into out and advances over it. It reports whether the read was successful.