MakeConnWithCompleteHandshake allows to forge both server and client side TLS connections. Major Hack Alert.

MustHaveGoBuild checks that the current system can build programs with ``go build'' and then run them with os.StartProcess or exec.Command. If not, Mu

NewPRNGSeed creates a new PRNG seed using crypto/rand.Read.

PRF implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5 and allowed by SP 800-135, Revision 1, Section 4.2.2.

SetClientRandom sets client random explicitly. BuildHandshakeFirst() must be called before SetClientRandom. r must to be 32 bytes long.

SetSessionState sets the session ticket, which may be preshared or fake. If session is nil, the body of session ticket extension will be unset, but th

Uint8to16 converts a slice of uint8 to a slice of uint16. e.g. []uint8{0x00, 0x01, 0x00, 0x02} -> []uint16{0x0001, 0x0002}

VersionName returns the name for the provided TLS version number (e.g. "TLS 1.3"), or a fallback representation of the value if the version is not imp

Write writes the extension data as a byte slice, up to len(b) bytes from b. It returns the number of bytes written (0 <= n <= len(b)) and any error en

Copy-pasted from tls.Conn in its entirety. But c.Handshake() is now utls' one, not tls. Write writes data to the connection.

addBytesWithLength appends a sequence of bytes to the cryptobyte.Builder. If the length of the sequence is not the value specified, it produces an err

addUint64 appends a big-endian, 64-bit value to the cryptobyte.Builder.

aesgcmPreferred returns whether the first known cipher in the preference list is an AES-GCM cipher, implying the peer has hardware support for it.

checkALPN ensure that the server's choice of ALPN protocol is compatible with the protocols that we advertised in the ClientHello.

checkForResumption reports whether we should perform resumption on this connection.

var tlsmaxrsasize = godebug.New("tlsmaxrsasize") // [uTLS] unused

checkOpenSSLVersion ensures that the version of OpenSSL looks reasonable before updating the test data.

checkServerHelloOrHRR does validity checks that apply to both ServerHello and HelloRetryRequest messages. It sets hs.suite.

cipherLen returns the length of a ciphertext corresponding to a message of length mLen.

clientSum returns the contents of the verify_data member of a client's Finished message.

connFromCommand starts the reference server process, connects to it and returns a recordingConn for the connection. The stdin return value is an opens

explicitNonceLen returns the number of bytes of explicit nonce or IV included in each record. Explicit nonces are present only in CBC modes after TLS

explicitNonceLen returns the number of bytes of explicit nonce included in each record. This is eight for older AEADs and zero for modern ones.

exportKeyingMaterial implements RFC5705 exporters for TLS 1.3 according to RFC 8446, Section 7.5.

extMasterFromPreMasterSecret generates the extended master secret from the pre-master secret. See RFC 7627.

extractPadding returns, in constant time, the length of the padding to remove from the end of payload. It also returns a byte which is equal to 255 if

hashForClientCertificate returns the handshake messages so far, pre-hashed if necessary, suitable for signing by a TLS client certificate.

hashForServerKeyExchange hashes the given slices and returns their digest using the given hash function (for TLS 1.2) or using a default based on the

initLegacySessionTicketKeyRLocked ensures the legacy SessionTicketKey field is randomized if empty, and that sessionTicketKeys is populated from it ot

leaf returns the parsed leaf certificate, either from c.Leaf or by parsing the corresponding c.Certificate[0].

negotiateALPN picks a shared ALPN protocol that both sides support in server preference order. If ALPN is not configured or the peer doesn't support i

newPRNG generates a seed and creates a PRNG with that seed.

This file contains the functions necessary to compute the TLS 1.3 key schedule. See RFC 8446, Section 7. nextTrafficSecret generates the next traffic

originalBytes should return the original bytes that were passed to unmarshal to create the message. If the message was not produced by unmarshal, it s

pHash implements the P_hash function, as defined in RFC 4346, Section 5.

prf12 implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5.