onLoadSessionReturn is intended to be invoked upon returning from the `conn.loadSession` function. It serves as a validation step for the correctness

overridePskExt allows the user of utls to customize the psk extension.

overridePskExt allows the user of utls to customize the session ticket extension.

pHash implements the P_hash function, as defined in RFC 5246, Section 5.

Attempt to parse the given private key DER block. OpenSSL 0.9.8 generates PKCS #1 private keys by default, while OpenSSL 1.0.0 generates PKCS #8 keys.

peekError does a read with a short timeout to check if the next read would cause an error, for example if there is an alert waiting on the wire.

processHelloRetryRequest handles the HRR in hs.serverHello, modifies and resends hs.hello, and reads the new ServerHello into hs.serverHello.

On the client side, the next two methods are called in order. This method may not be called if the server doesn't send a ServerKeyExchange message.

readUint64 decodes a big-endian, 64-bit value into out and advances over it. It reports whether the read was successful.

to be called in (*clientHandshakeStateTLS13).handshake(), after hs.readServerFinished() and before hs.sendClientCertificate()

shouldLoadSession determines the appropriate action to take when it is time to load the session for the clientHello. There are several possible scenar

shouldLoadSessionWriteBinders checks if `conn.loadSession` should proceed to write binders and marshal the client hello. If the utls implementation is

signatureSchemesForCertificate returns the list of supported SignatureSchemes for a given certificate, based on the public key and the protocol versio

syncSessionExts synchronizes the sessionController with the session-related extensions from the extension list after applying client hello specs. - I

func kyberGoToCircl(kyberKey *mlkem768.DecapsulationKey, ecdhKey *ecdh.PrivateKey) (kem.PrivateKey, error) { return hybrid.Kyber768X25519().Unmarshal

utlsAboutToLoadSession updates the loadSessionTracker to `UtlsAboutToCall` to signal the initiation of a session loading operation, provided that the

Extending (*Conn).connectionStateLocked()

Extending (*Conn).readHandshake() to support more customized handshake messages.

This function is called by (*clientHandshakeStateTLS13).readServerCertificate() to retrieve the certificate out of a message read by (*Conn).readHands

validDNSName is a rather rudimentary check for the validity of a DNS name. This is used to check if the public_name in a ECHConfig is valid when we ar

AppendWithLen append i in the QUIC varint format with the desired length.

https://github.com/google/boringssl/blob/7d7554b6b3c79e707e25521e61e066ce2b996e4c/ssl/t1_lib.c#L2803

BuildHandshakeStateWithoutSession is the same as BuildHandshakeState, but does not set the session. This is only useful when you want to inspect the C

Builder reports the name of the builder running this test (for example, "linux-amd64" or "windows-386-gce"). If the test is not running on the build i

Ciphersuite negotiated for the session

CleanCmdEnv will fill cmd.Env with the environment, excluding certain variables that could modify the behavior of the Go tools such as GODEBUG and GOT

Close closes the connection and stops any in-progress handshake.

Close closes the connection and stops any in-progress handshake.

ConnectionState returns basic TLS details about the connection.

ConnectionState returns basic TLS details about the connection.

Context returns the context of the handshake that is in progress. This context is a child of the context passed to HandshakeContext, if any, and is ca

DecryptTicket decrypts a ticket encrypted by [Config.EncryptTicket]. It can be used as a [Config.UnwrapSession] implementation. If the ticket can't b

Dial attempts to establish connection to given address using different HelloIDs. If a working HelloID is found, it is used again for subsequent Dials.

EnableWeakCiphers allows utls connections to continue in some cases, when weak cipher was chosen. This provides better compatibility with servers on t

EncryptTicket encrypts a ticket with the [Config]'s configured (or default) session ticket keys. It can be used as a [Config.WrapSession] implementati