newCert returns a x509.Certificate parsed from der. If there is already a copy of the certificate in the cache, a reference to the existing certificat

readUint24LengthPrefixed acts like s.ReadUint24LengthPrefixed, but targets a []byte instead of a cryptobyte.String.

Start starts the client or server handshake protocol. It may produce connection events, which may be read with [QUICConn.NextEvent]. Start must be ca

cloneHash uses the encoding.BinaryMarshaler and encoding.BinaryUnmarshaler interfaces implemented by standard library hashes to clone the state of in

Conn.vers is sometimes left to zero which is unacceptable to uTLS' SetTLSVers https://github.com/refraction-networking/utls/blob/f7e7360167ed2903ef128

finishedHash generates the Finished verify_data or PskBinderEntry according to RFC 8446, Section 4.4.4. See sections 4.4 and 4.2.11.2 for the baseKey

hostnameInSNI converts name into an appropriate hostname for SNI. Literal IP addresses and absolute FQDNs are not permitted as SNI values. See RFC 606

sendAlertLocked sends a TLS alert message.

ticketKeyFromBytes converts from the external representation of a session ticket key to a ticketKey. Externally, session ticket keys are 32 random byt

CipherSuiteName returns the standard name for the passed cipher suite ID (e.g. "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"), or a fallback representatio

Context returns the context of the handshake that is in progress. This context is a child of the context passed to HandshakeContext, if any, and is ca

HandleData handles handshake bytes received from the peer. It may produce connection events, which may be read with [QUICConn.NextEvent].

MarshalClientHelloNoECH marshals ClientHello as if there was no ECH extension present.

ParseSessionState parses a [SessionState] encoded by [SessionState.Bytes].

SetReadDeadline sets the read deadline on the underlying connection. A zero value for t means [Conn.Read] will not time out.

VerifyHostname checks that the peer certificate chain is valid for connecting to host. If so, it returns nil; if not, it returns an error describing t

discardHandshakeBuffer is called when there is no more need to buffer the entirety of the handshake messages.

testFatal is a hack to prevent the compiler from complaining that there is a call to t.Fatal from a non-test goroutine

BoringGREASEECH returns a GREASE scheme BoringSSL uses by default.

ClientEarlyTrafficSecret derives the client_early_traffic_secret from the early secret and the transcript up to the ClientHello.

Int63 is equivalent to math/read.Int63.

Len implements TLSExtension.

Marshal allows external code to convert a ClientHello object back into raw bytes.

64-bit sequence number

SetDeadline sets the read and write deadlines associated with the connection. A zero value for t means [Conn.Read] and [Conn.Write] will not time out.

SetSessionTicketKeys updates the session ticket keys for a server. The first key will be used when creating new tickets, while all keys can be used f

SetWriteDeadline sets the write deadline on the underlying connection. A zero value for t means [Conn.Write] will not time out. After a [Conn.Write] h

changeCipherSpec changes the encryption and MAC states to the ones previously passed to prepareCipherSpec.

[uTLS section begins] var tlsrsakex = godebug.New("tlsrsakex") var tls3des = godebug.New("tls3des") [uTLS section ends]

Does the handshake, either a full one or resumes old session. Requires hs.c, hs.hello, hs.serverHello, and, optionally, hs.session to be set.

incSeq increments the sequence number.

keysFromMasterSecret generates the connection keys from the master secret, given the lengths of the MAC key, cipher key and IV, as defined in RFC 2246

mutualCipherSuite returns a cipherSuite given a list of supported ciphersuites and the id requested by the peer.

parseECHConfigList parses a draft-ietf-tls-esni-18 ECHConfigList, returning a slice of parsed ECHConfigs, in the same order they were parsed, or an er

quicWaitForSignal notifies the QUICConn that handshake progress is blocked, and waits for a signal that the handshake should proceed. The handshake m

Run with multiple crypto configs to test the logic for computing TLS record overheads.

selectCipherSuite returns the first TLS 1.0–1.2 cipher suite from ids which is also in supportedIDs and passes the ok filter.

sessionState returns a partially filled-out [SessionState] with information from the current connection.

signedMessage returns the pre-hashed (if necessary) message to be signed by certificate keys in TLS 1.3. See RFC 8446, Section 4.4.3.

sliceForAppend extends the input slice by n bytes. head is the full extended slice, while tail is the appended part. If the original slice has suffici

var tls10server = godebug.New("tls10server") // [UTLS] unsupported

unsupportedCertificateError returns a helpful error for certificates with an unsupported private key.

verifyHandshakeSignature verifies a signature against pre-hashed (if required) handshake contents.

writeChangeCipherRecord writes a ChangeCipherSpec message to the connection and updates the record layer state.

CipherSuites returns a list of cipher suites currently implemented by this package, excluding those with security issues, which are returned by [Insec

ClientApplicationTrafficSecret derives the client_application_traffic_secret_0 from the master secret and the transcript up to the server Finished.

ClientHandshakeTrafficSecret derives the client_handshake_traffic_secret from the handshake secret and the transcript up to the ServerHello.

CloseWrite shuts down the writing side of the connection. It should only be called once the handshake has completed and does not call CloseWrite on th

DialContext connects to the given network address and initiates a TLS handshake, returning the resulting TLS connection. The provided Context must be

ExtensionFromID returns a TLSExtension for the given extension ID.