go:generate stringer -linecomment -type=SignatureScheme,CurveID,ClientAuthType -output=common_string.go SignatureScheme identifies a signature algorit

TLS record types.

CurveID is the type of a TLS identifier for a key exchange mechanism. See https://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-param

An AlertError is a TLS alert. When using a QUIC transport, QUICConn methods will return an error which wraps AlertError rather than sending a TLS ale

ClientAuthType declares the policy the server will follow for TLS Client Authentication.

QUICEncryptionLevel represents a QUIC encryption level used to transmit handshake messages.

A finishedHash calculates the hash of a set of handshake messages suitable for including in a Finished message.

The marshalingFunction type is an adapter to allow the use of ordinary functions as cryptobyte.MarshalingValue.

A Certificate is a chain of one or more certificates, leaf first.

CertificateRequestInfo contains information from a server's CertificateRequest message, which is used to demand a certificate and proof of control fro

CertificateVerificationError is returned when certificate verification fails during the handshake.

CipherSuite is a TLS cipher suite. Note that most functions in this package accept and expose cipher suite IDs instead of this type.

ClientHelloInfo contains information from a ClientHello message in order to guide application logic in the GetCertificate and GetConfigForClient callb

ClientSessionCache is a cache of ClientSessionState objects that can be used by a client to resume a TLS session with a given server. ClientSessionCac

ClientSessionState contains the state needed by a client to resume a previous TLS session.

A Config structure is used to configure a TLS client or server. After one has been passed to a TLS function it must not be modified. A Config may be r

A Conn represents a secured connection. It implements the net.Conn interface.

ConnectionState records basic TLS details about the connection.

Dialer dials TLS connections given a configuration and a Dialer for the underlying connection.

ECHRejectionError is the error type returned when ECH is rejected by a remote server. If the server offered a ECHConfigList to use for retries, the Re

EncryptedClientHelloKey holds a private key that is associated with a specific ECH config known to a client.

A QUICConfig configures a [QUICConn].

A QUICConn represents a connection which uses a QUIC implementation as the underlying transport as described in RFC 9001. Methods of QUICConn are not

A QUICEvent is an event occurring on a QUIC connection. The type of event is specified by the Kind field. The contents of the other fields are kind-s

A QUICEventKind is a type of operation on a QUIC connection.

RecordHeaderError is returned when a TLS record header is invalid.

RenegotiationSupport enumerates the different levels of support for TLS renegotiation. TLS renegotiation is the act of performing subsequent handshake

A SessionState is a resumable session.

atLeastReader reads from R, stopping with EOF once at least N bytes have been read. It is different from an io.LimitedReader in that it doesn't cut sh

cbcMode is an interface for block ciphers using cipher block chaining.

A cipherSuite is a TLS 1.0–1.2 cipher suite, and defines the key exchange mechanism, as well as the cipher+MAC pair or the AEAD.

A cipherSuiteTLS13 defines only the pair of the AEAD algorithm and hash algorithm to be used with HKDF. See RFC 8446, Appendix B.4.

cthWrapper wraps any hash.Hash that implements ConstantTimeSum, and replaces with that all calls to Sum. It's used to obtain a ConstantTimeSum-based H

dhKEM implements the KEM specified in RFC 9180, Section 4.1.

ecdheKeyAgreement implements a TLS key agreement where the server generates an ephemeral EC public/private key pair and signs it. The pre-master secre

A halfConn represents one direction of the record layer connection, either sending or receiving.

A keyAgreement implements the client and server side of a TLS 1.0–1.2 key agreement protocol by generating and processing key exchange messages.

TLS 1.3 Key Share. See RFC 8446, Section 4.2.8.

A listener implements a network listener (net.Listener) for TLS connections.

lruSessionCache is a ClientSessionCache implementation that uses an LRU caching strategy.

prefixNonceAEAD wraps an AEAD and prefixes a fixed portion of the nonce to each call.

TLS 1.3 PSK Identity. Can be a Session Ticket, or a reference to a saved session. See RFC 8446, Section 4.2.11.

rsaKeyAgreement implements the standard TLS key agreement where the client encrypts the pre-master secret to the server's public key.

serverHandshakeState contains details of a server handshake in progress. It's discarded once the handshake has completed.