masterFromPreMasterSecret generates the master secret from the pre-master secret. See http://tools.ietf.org/html/rfc5246#section-8.1

newBlock allocates a new block, from hc's free list if possible.

pHash implements the P_hash function, as defined in RFC 4346, section 5.

processCertsFromClient takes a chain of client certificates either from a Certificates message or from a sessionState and verifies them. It returns th

readClientFinished13 is called during the server handshake (when no early data it available) or after reading all early data. It discards early data i

readClientHello reads a ClientHello message from the client and decides whether we will perform session resumption.

Run with multiple crypto configs to test the logic for computing TLS record overheads.

serverInit is run under c.serverInitOnce to do initialization of c. If c was returned by a GetConfigForClient callback then the argument should be the

setParallel calls t.Parallel once. If you call it twice, it would panic.

verifyHandshakeSignature verifies a signature against pre-hashed handshake contents.

c.out.Mutex <= L.

writeKeyLog logs client random and master secret if logging was enabled by setting c.KeyLogWriter.

DialWithDialer connects to the given network address using dialer.Dial and then initiates a TLS handshake, returning the resulting TLS connection. Any

changeCipherSpec changes the encryption and MAC states to the ones previously passed to prepareCipherSpec.

c.out.Mutex <= L; c.handshakeMutex <= L.

clientSum returns the contents of the verify_data member of a client's Finished message.

DH key agreement. ks stores public key, secretKey stores private key used for ephemeral key agreement. Function returns shared secret in case of succe

explicitIVLen returns the number of bytes used by the explicit nonce that is included in the record. This is eight for older AEADs and zero for modern

extractPadding returns, in constant time, the length of the padding to remove from the end of payload. It also returns a byte which is equal to 255 if

generateKeyShare generates keypair. Private key is returned as first argument, public key is returned in keyShare.data. keyshare.curveID stores ID of

getCertificate returns the best certificate for the given ClientHelloInfo, defaulting to the first element of c.Certificates.

Depending on role returns pair of key variant to be used by local and remote process.

getSupportedVersions returns the protocol versions that are supported by the current configuration.

hashForClientCertificate returns a digest over the handshake messages so far, suitable for signing by a TLS client certificate.

hashForServerKeyExchange hashes the given slices and returns their digest using the given hash function.

incSeq increments the sequence number.

mutualProtocol finds the mutual Next Protocol Negotiation or ALPN protocol given list of possible protocols and a list of the preference order. The fi

pickVersion returns the protocol version to use given the advertised versions of the peer using the Supported Versions extension.

prf12 implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, section 5.

processCertsFromServer takes a chain of server certificates from a Certificate message and verifies them.

readFromUntil reads from r into b until b contains at least n bytes or else returns an error.

reserve makes sure that block contains a capacity of at least n bytes.

serverSum returns the contents of the verify_data member of a server's Finished message.

setCipherSuite sets a cipherSuite with the given id as the serverHandshakeState suite if that cipher suite is acceptable to use. It returns a bool ind

sha1Hash calculates a SHA1 hash over the given byte slices.

signAlgosCertList helper function returns either list of signature algorithms in case signature_algorithms_cert extension should be marshalled or nil

signatureFromSignatureScheme maps a signature algorithm to the underlying signature method (without hash function).

Split a premaster secret in two as specified in RFC 4346, section 5.

supportedSigAlgorithmsCert iterates over schemes and filters out those algorithms which are not supported for certificate verification.

ticketKeyFromBytes converts from the external representation of a session ticket key to a ticketKey. Externally, session ticket keys are 32 random byt

unmarshalDelegatedCredential decodes a DelegatedCredential structure.

Function used for unmarshalling signature_algorithms or signature_algorithms_cert extensions only (for more details, see TLS 1.3 draft 28, 4.2.3) In c

ConfirmHandshake waits for the handshake to reach a point at which the connection is certainly not replayed. That is, after receiving the Client Finis

NewListener creates a Listener which accepts connections from an inner Listener and wraps each connection with Server. The configuration config must b

RemoteAddr returns the remote network address.

Unseal returns a session ticket contents. The ticket can't be safely assumed to have been generated by Seal. If unable to unseal the ticket, the conne