PatchBuiltHello is called once the hello message is fully applied and marshaled. Its purpose is to update the binders of PSK (Pre-Shared Key) identiti

Intn is equivalent to math/read.Perm.

QUICClient returns a new TLS client side connection using QUICTransport as the underlying transport. The config cannot be nil. The config's MinVersio

QUICServer returns a new TLS server side connection using QUICTransport as the underlying transport. The config cannot be nil. The config's MinVersio

RawClientHello returns a ClientHelloSpec which is based on the ClientHello raw bytes that is passed in as the raw argument. It was renamed from Finge

Read reads random bytes from the PRNG stream into b. Read conforms to io.Reader and always returns len(p), nil.

Read implements TLSExtension.

ReadCipherSuites is a helper function to construct a list of cipher suites from a []byte into []uint16. example: []byte{0x13, 0x01, 0x13, 0x02, 0x13,

ReadCompressionMethods is a helper function to construct a list of compression methods from a []byte into []uint8.

ReadTLSExtensions is a helper function to construct a list of TLS extensions from a byte slice into []TLSExtension.

RemoveSNIExtension removes SNI from the list of extensions sent in ClientHello It returns an error when used with HelloGolang ClientHelloID

ResumptionState returns the session ticket sent by the server (also known as the session's identity) and the state necessary to resume this session.

SendSessionTicket sends a session ticket to the client. It produces connection events, which may be read with [QUICConn.NextEvent]. Currently, it can

SetSessionTicket sets the session ticket extension. If extension is nil, this will be a no-op.

SetTLSVers sets min and max TLS version in all appropriate places. Function will use first non-zero version parsed in following order: 1. Provided min

StoreSession stores a session previously received in a QUICStoreSession event in the ClientSessionCache. The application may process additional events

UTLSIdToSpec converts a ClientHelloID to a corresponding ClientHelloSpec. Exported internal function utlsIdToSpec per request.

UnmarshalJSON unmarshals the JSON-encoded data into the extension.

Write writes data to the connection. As Write calls [Conn.Handshake], in order to prevent indefinite blocking a deadline must be set for both [Conn.R

Write implements TLSExtensionWriter.

certificateRequestInfoFromMsg generates a CertificateRequestInfo from a TLS <= 1.2 CertificateRequest, making an effort to fill in missing information

clientHandshakeWithOneState checks that exactly one expected state is set (1.2 or 1.3) and performs client TLS handshake with that state

connFromCommand starts opens a listening socket and starts the reference client to connect to it. It returns a recordingConn that wraps the resulting

called by (*clientHandshakeStateTLS13).utlsReadServerCertificate() when UtlsCompressCertExtension is used

decrypt authenticates and decrypts the record if protection is active at this stage. The returned plaintext might overlap with the input.

Defaults are collected in this file to allow distributions to more easily patch them to apply local policies. var tlsmlkem = godebug.New("tlsmlkem") [

[uTLS SECTION BEGIN]

encrypt encrypts payload, adding the appropriate nonce and/or MAC, and appends it to record, which must already contain the record header.

[uTLS] SECTION END

evict removes a cacheEntry from the cache.

finalCheck performs a comprehensive check on the updated state to ensure the correctness of the changes. If the checks pass successfully, the sessionC

On the server side, the first two methods are called in order. In the case that the key agreement protocol doesn't use a ServerKeyExchange message, ge

handlePostHandshakeMessage processes a handshake message arrived after the handshake is complete. Up to TLS 1.2, it indicates the start of a renegotia

handleRenegotiation processes a HelloRequest handshake message.

handleRenegotiation processes a HelloRequest handshake message.

http2isBadCipher is copied from net/http. TODO: if it ends up exposed somewhere, use that instead.

illegalClientHelloChange reports whether the two ClientHello messages are different, with the exception of the changes allowed before and after a Hell

alias init initializes the GREASEEncryptedClientHelloExtension with random values if they are not set. Based on cloudflare/go's echGenerateGreaseExt(

initPSK initializes the PSK extension using a valid session. The PSK extension should not be initialized previously, and the parameters must not be ni

initSessionTicketExt initializes the ticket and sets the state to `TicketInitialized`.

kyberDecapsulate implements decapsulation according to Kyber Round 3.

change to 1 or 2 to exercise localServer/localPipe handling of mismatches

maxPayloadSizeForWrite returns the maximum TLS payload size to use for the next application data record. There is the following trade-off: - For late

md5SHA1Hash implements TLS 1.0's hybrid hash function which consists of the concatenation of an MD5 and SHA1 hash.

newPRNGWithSaltedSeed initializes a new PRNG using a seed derived from an existing seed and a salt with NewSaltedSeed.

newSaltedPRNGSeed creates a new seed derived from an existing seed and a salt. A HKDF is applied to the seed and salt. newSaltedPRNGSeed is intended

newSessionController constructs a new SessionController

noEKMBecauseNoEMS is used as a value of ConnectionState.ekm when Extended Master Secret is not negotiated and thus we wish to fail all key-material ex

onEnterLoadSessionCheck is intended to be invoked upon entering the `conn.loadSession` function. It is designed to ensure the correctness of the utls