CurveID is the type of a TLS identifier for a key exchange mechanism. See https://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-param

go:generate stringer -linecomment -type=SignatureScheme,CurveID,ClientAuthType -output=common_string.go SignatureScheme identifies a signature algorit

TLS record types.

An AlertError is a TLS alert. When using a QUIC transport, QUICConn methods will return an error which wraps AlertError rather than sending a TLS ale

A ByteCount in QUIC

https://tools.ietf.org/html/draft-ietf-tls-certificate-compression-04

ClientAuthType declares the policy the server will follow for TLS Client Authentication.

QUICEncryptionLevel represents a QUIC encryption level used to transmit handshake messages.

A finishedHash calculates the hash of a set of handshake messages suitable for including in a Finished message.

The marshalingFunction type is an adapter to allow the use of ordinary functions as cryptobyte.MarshalingValue.

ALPNExtension implements application_layer_protocol_negotiation (16)

ApplicationSettingsExtension embeds applicationSettingsExtension to implement the TLS ALPS extension on codepoint 17513

ApplicationSettingsExtensionNew embeds applicationSettingsExtension to implement the TLS ALPS extension on codepoint 17613 More information can be fou

A Certificate is a chain of one or more certificates, leaf first.

CertificateRequestInfo contains information from a server's CertificateRequest message, which is used to demand a certificate and proof of control fro

type EcdheParameters interface { ecdheParameters }

CertificateVerificationError is returned when certificate verification fails during the handshake.

CipherSuite is a TLS cipher suite. Note that most functions in this package accept and expose cipher suite IDs instead of this type.

ClientHelloInfo contains information from a ClientHello message in order to guide application logic in the GetCertificate and GetConfigForClient callb

ClientSessionCache is a cache of ClientSessionState objects that can be used by a client to resume a TLS session with a given server. ClientSessionCac

ClientSessionState contains the state needed by a client to resume a previous TLS session.

A Config structure is used to configure a TLS client or server. After one has been passed to a TLS function it must not be modified. A Config may be r

A Conn represents a secured connection. It implements the net.Conn interface.

ConnectionState records basic TLS details about the connection.

CookieExtension implements cookie (44). MUST NOT be part of initial ClientHello

Dialer dials TLS connections given a configuration and a Dialer for the underlying connection.

ECHRejectionError is the error type returned when ECH is rejected by a remote server. If the server offered a ECHConfigList to use for retries, the Re

EncryptedClientHelloKey holds a private key that is associated with a specific ECH config known to a client.

ExtendedMasterSecretExtension implements extended_master_secret (23) Was named as ExtendedMasterSecretExtension, renamed due to crypto/tls implemente

* FAKE EXTENSIONS */

https://datatracker.ietf.org/doc/html/draft-ietf-tls-subcerts-15#section-4.1.1

FakePreSharedKeyExtension is an extension used to set the PSK extension in the ClientHello. It does not compute binders based on ClientHello, but use

FakeRecordSizeLimitExtension implements record_size_limit (28) but with no support.

https://tools.ietf.org/html/rfc8472#section-2

Fingerprinter is a struct largely for holding options for the FingerprintClientHello func

A FinishedHash calculates the hash of a set of handshake messages suitable for including in a Finished message.

GenericExtension allows to include in ClientHello arbitrary unsupported extensions. It is not defined in TLS RFCs nor by IANA. If a server echoes this

RFC 9180

Deprecated: Use KeySharePrivateKeys instead. This type is no longer used. Will be removed in the future.

TLS 1.3 Key Share. See RFC 8446, Section 4.2.8.

KeyShareExtension implements key_share (51) and is for TLS 1.3 only.

Deprecated: Use KeySharePrivateKeys instead. This type is not used and will be removed in the future. KeySharesParameters serves as a in-memory storag

Tracking the state of calling conn.loadSession

NPNExtension implements next_protocol_negotiation (Not IANA assigned)

PRNGSeed is a PRNG seed.

PSKKeyExchangeModesExtension implements psk_key_exchange_modes (45).

The PacketType is the Long Header Type

The lifecycle of a PreSharedKeyExtension: Creation Phase: - The extension is created. Write Phase: - [writeToUConn() called]: > - During this phas

TLS 1.3 PSK Identity. Can be a Session Ticket, or a reference to a saved session. See RFC 8446, Section 4.2.11.

A CipherSuite is a specific combination of key agreement, cipher and MAC function. All cipher suites currently assume RSA key agreement.

ClientHandshakeState includes both TLS 1.3-only and TLS 1.2-only states, only one of them will be used, depending on negotiated version. ClientHandsh