signatureSchemesForCertificate returns the list of supported SignatureSchemes for a given certificate, based on the public key and the protocol versio

Split a premaster secret in two as specified in RFC 4346, Section 5.

trafficKey generates traffic keys according to RFC 8446, Section 7.3.

updateBinders updates the m.pskBinders field. The supplied binders must have the same length as the current m.pskBinders.

validDNSName is a rather rudimentary check for the validity of a DNS name. This is used to check if the public_name in a ECHConfig is valid when we ar

BuildNameToCertificate parses c.Certificates and builds c.NameToCertificate from the CommonName and SubjectAlternateName fields of each of the leaf ce

CipherSuiteName returns the standard name for the passed cipher suite ID (e.g. "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"), or a fallback representatio

Close closes the connection and stops any in-progress handshake.

CloseWrite shuts down the writing side of the connection. It should only be called once the handshake has completed and does not call CloseWrite on th

ConnectionState returns basic TLS details about the connection.

ConnectionState returns basic TLS details about the connection.

Context returns the context of the handshake that is in progress. This context is a child of the context passed to HandshakeContext, if any, and is ca

Context returns the context of the handshake that is in progress. This context is a child of the context passed to HandshakeContext, if any, and is ca

DecryptTicket decrypts a ticket encrypted by [Config.EncryptTicket]. It can be used as a [Config.UnwrapSession] implementation. If the ticket can't b

Dial connects to the given network address using net.Dial and then initiates a TLS handshake, returning the resulting TLS connection. Dial interprets

EarlyExporterMasterSecret derives the exporter_master_secret from the early secret and the transcript up to the ClientHello.

EncryptTicket encrypts a ticket with the [Config]'s configured (or default) session ticket keys. It can be used as a [Config.WrapSession] implementati

ExportKeyingMaterial returns length bytes of exported key material in a new slice as defined in RFC 5705. If context is nil, it is not used as part of

Get returns the [ClientSessionState] value associated with a given key. It returns (nil, false) if no value is found.

HandleData handles handshake bytes received from the peer. It may produce connection events, which may be read with [QUICConn.NextEvent].

Listen creates a TLS listener accepting connections on the given network address using net.Listen. The configuration config must be non-nil and must i

LoadX509KeyPair reads and parses a public/private key pair from a pair of files. The files must contain PEM encoded data. The certificate file may con

NetConn returns the underlying connection that is wrapped by c. Note that writing to or reading from this connection directly will corrupt the TLS ses

NewLRUClientSessionCache returns a [ClientSessionCache] with the given capacity that uses an LRU strategy. If capacity is < 1, a default capacity is u

NewResumptionState returns a state value that can be returned by [ClientSessionCache.Get] to resume a previous session. state needs to be returned by

NextEvent returns the next event occurring on the connection. It returns an event with a Kind of [QUICNoEvent] when no events are available.

OCSPResponse returns the stapled OCSP response from the TLS server, if any. (Only valid for client connections.)

Put adds the provided (sessionKey, cs) pair to the cache. If cs is nil, the entry corresponding to sessionKey is removed from the cache instead.

QUICClient returns a new TLS client side connection using QUICTransport as the underlying transport. The config cannot be nil. The config's MinVersio

QUICServer returns a new TLS server side connection using QUICTransport as the underlying transport. The config cannot be nil. The config's MinVersio

ResumptionState returns the session ticket sent by the server (also known as the session's identity) and the state necessary to resume this session.

SendSessionTicket sends a session ticket to the client. It produces connection events, which may be read with [QUICConn.NextEvent]. Currently, it can

SetDeadline sets the read and write deadlines associated with the connection. A zero value for t means [Conn.Read] and [Conn.Write] will not time out.

SetSessionTicketKeys updates the session ticket keys for a server. The first key will be used when creating new tickets, while all keys can be used f

SetTransportParameters sets the transport parameters to send to the peer. Server connections may delay setting the transport parameters until after r

Start starts the client or server handshake protocol. It may produce connection events, which may be read with [QUICConn.NextEvent]. Start must be ca

StoreSession stores a session previously received in a QUICStoreSession event in the ClientSessionCache. The application may process additional events

SupportsCertificate returns nil if the provided certificate is supported by the server that sent the CertificateRequest. Otherwise, it returns an erro

VersionName returns the name for the provided TLS version number (e.g. "TLS 1.3"), or a fallback representation of the value if the version is not imp

Write writes data to the connection. As Write calls [Conn.Handshake], in order to prevent indefinite blocking a deadline must be set for both [Conn.R

aeadAESGCMTLS13 should be an internal detail, but widely used packages access it using linkname. Notable members of the hall of shame include: - githu