Commit Graph

Select branches

Hide Pull Requests

ClientHelloReadErr

bad-conn

delay

fingerprint-probe

main

remove-circl

underlying-rst

update

#1

#10

#11

#11

#12

#13

#14

#15

#16

#17

#18

#19

#2

#20

#21

#22

#23

#24

#25

#26

#27

#28

#29

#3

#30

#31

#32

#33

#34

#35

#36

#37

#37

#38

#39

#4

#40

#40

#5

#6

#7

#8

#9

Mono Color

• b6a28bda36 crypto/internal/mlkem768: add EncapsulationKey type Change-Id: I3feacb044caa15ac9bbfc11f5d90bebf8a505510 Reviewed-on: https://go-review.googlesource.com/c/go/+/621980 Auto-Submit: Filippo Valsorda <filippo@golang.org> Reviewed-by: Roland Shoemaker <roland@golang.org> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Daniel McCarney <daniel@binaryparadox.net> Reviewed-by: Russ Cox <rsc@golang.org> yuhan6665 2025-05-04 17:04:23 -04:00
• e449f03f32 crypto/internal/mlkem768: make Decapsulate a method This will make it easier to support multiple sizes if needed. yuhan6665 2025-05-04 17:01:30 -04:00
• 4db1386622 crypto/internal/fips/tls13: implement TLS 1.3 KDF The new implementation encodes the key schedule into the type system, which is actually nicer than what we had before. yuhan6665 2025-05-04 14:17:23 -04:00
• 320c4a6448 crypto/internal/fips/aes/gcm: add GCMForTLS12 and GCMForTLS13 For #69536 yuhan6665 2025-05-04 09:32:40 -04:00
• 83229a4565 crypto/internal/fips/aes: move GCM to its own package For #69536 yuhan6665 2025-05-03 12:55:49 -04:00
• e26ae23054 Update dependencies yuhan6665 2024-08-25 12:32:05 -04:00
• d468813b23 crypto/tls: fix typo in quicError yuhan6665 2024-08-25 12:26:50 -04:00
• b9a81d6b52 crypto/tls: align FIPS-only mode with BoringSSL policy yuhan6665 2024-08-25 12:25:24 -04:00
• ba70d1d948 crypto/tls: expose extensions presented by client to GetCertificate yuhan6665 2024-08-25 12:16:20 -04:00
• 1c613789ca crypto/tls: apply QUIC session event flag to QUICResumeSession events yuhan6665 2024-08-25 11:19:24 -04:00
• c7274fa497 net/http: check GetConfigForClient in server.ServeTLS yuhan6665 2024-08-25 11:13:34 -04:00
• 357fef581a all: document legacy //go:linkname for final round of modules yuhan6665 2024-08-25 11:11:44 -04:00
• 9dd5b0970c crypto/tls: add linkname comments dropped from CL 587220 yuhan6665 2024-08-25 11:08:05 -04:00
• 7f458161d5 crypto/tls: add ech client support yuhan6665 2024-08-25 11:04:56 -04:00
• 186f953bfd all: document legacy //go:linkname for modules with ≥200 dependents yuhan6665 2024-08-18 23:33:32 -04:00
• f5616ed2fe all: document legacy //go:linkname for modules with ≥5,000 dependents yuhan6665 2024-08-18 23:28:52 -04:00
• 0eb1df22cf crypto/tls: allow 256KiB certificate messages yuhan6665 2024-08-18 23:25:25 -04:00
• b6a62e9ae9 crypto/tls: populate Leaf in X509KeyPair yuhan6665 2024-08-18 23:17:00 -04:00
• 7d7296b089 crypto/tls: reorder client_hello extensions yuhan6665 2024-08-18 23:02:34 -04:00
• e27f1d3a30 crypto/tls: move defaults into defaults.go yuhan6665 2024-08-18 22:58:04 -04:00
• 194e345d4a crypto/tls: disable 3-DES by default yuhan6665 2024-08-18 22:46:19 -04:00
• 7daa6c8547 crypto/tls: remove typeNextProtocol yuhan6665 2024-08-18 22:38:07 -04:00
• 46ce351564 crypto/tls: improved 0-RTT QUIC API yuhan6665 2024-08-18 22:36:58 -04:00
• 45c15646d3 crypto/tls: implement X25519Kyber768Draft00 yuhan6665 2024-08-18 22:21:13 -04:00
• 8be2b3051b crypto/tls: clarify group selection logic yuhan6665 2024-08-18 21:04:28 -04:00
• 194e5a43dc all: add push linknames to allow legacy pull linknames yuhan6665 2024-08-18 20:17:15 -04:00
• 7a94067d41 crypto/tls: don't cache marshal'd bytes yuhan6665 2024-08-18 20:09:22 -04:00
• b54592c7d6 crypto/tls,regexp: remove always-nil error results yuhan6665 2024-08-18 19:48:08 -04:00
• 109710f63d all: fix a large number of comments yuhan6665 2024-08-18 19:41:38 -04:00
• daf883503b crypto/tls: mark RSA KEX cipher suites insecure yuhan6665 2024-08-18 19:28:09 -04:00
• 39ef54a545 crypto/tls: check and record godebugs more granularly yuhan6665 2024-08-18 19:24:16 -04:00
• 6cc8eff703 crypto/tls: check client's supported versions when using QUIC yuhan6665 2024-08-18 18:59:44 -04:00
• 4abbcfc426 crypto/tls: disable ExportKeyingMaterial without EMS yuhan6665 2024-08-18 18:55:40 -04:00
• 90b3d86d6a crypto/tls: remove RSA KEX ciphers from the default list yuhan6665 2024-08-18 18:37:35 -04:00
• f34f366b70 crypto/tls: change default minimum version to 1.2 yuhan6665 2024-08-18 18:30:35 -04:00
• 48f0b2d5ed Call underlying.CloseWrite() once io.Copy() returned (#7) RPRXandFangliding 2024-07-12 05:55:06 +00:00
• ecc4401070 Add Star Chart 风扇滑翔翼 2023-02-26 12:45:13 +08:00
• de7a8e5061 do not crash if clientHello is nil mmmray 2024-04-29 18:28:50 +02:00
• eed01aa642 add log for forwarded requests when auth failed mmmray 2024-04-29 16:52:27 +02:00
• de1173cf2b Update dependencies and readme yuhan6665 2023-11-12 12:10:59 -05:00
• 933c289fd1 crypto: add available godoc link yuhan6665 2023-10-16 21:25:40 -04:00
• 140543d63d all: use the indefinite article an in comments yuhan6665 2023-10-16 21:17:30 -04:00
• f2a3b26319 crypto/tls: QUIC: fix panics when processing post-handshake messages yuhan6665 2023-10-16 21:16:36 -04:00
• 3b9afbf98f crypto/tls: add GODEBUG to control max RSA key size (set to default) yuhan6665 2023-10-16 21:14:07 -04:00
• 6fd44f977d crypto/tls: change SendSessionTicket to take an options struct yuhan6665 2023-10-14 09:59:00 -04:00
• 979284f821 crypto/tls: restrict RSA keys in certificates to <= 8192 bits yuhan6665 2023-10-14 09:56:35 -04:00
• f598d63db2 crypto/tls: make SessionState.Extra a slice of byte slices yuhan6665 2023-10-14 09:53:46 -04:00
• cab35d601f crypto/tls: fix cipher suite check when doing 0-RTT resumption yuhan6665 2023-10-14 09:44:03 -04:00
• 7e0808395e crypto/tls: avoid referencing potentially unused symbols in init yuhan6665 2023-10-14 09:42:25 -04:00
• edf00b752d crypto/tls: advertise correct ciphers in TLS 1.3 only mode yuhan6665 2023-10-14 09:41:04 -04:00
• 84d465d671 crypto/tls: don't reverify but check certificate expiration on resumption yuhan6665 2023-10-14 09:37:11 -04:00
• f8cbf5ad3a crypto/tls: add VersionName yuhan6665 2023-10-14 09:17:19 -04:00
• 14202975e0 crypto/tls: implement Extended Master Secret yuhan6665 2023-10-14 09:15:54 -04:00
• aa68126eeb crypto/tls: add QUIC 0-RTT APIs yuhan6665 2023-10-14 08:55:34 -04:00
• e6eabfc665 crypto/tls: add SessionState.Extra yuhan6665 2023-10-14 08:11:15 -04:00
• 600acbbb6b crypto/tls: add WrapSession and UnwrapSession yuhan6665 2023-10-14 08:04:22 -04:00
• a10c90ae93 crypto/tls: add ClientSessionState.ResumptionState and NewResumptionState yuhan6665 2023-10-14 07:49:12 -04:00
• b417836544 crypto/tls: use SessionState on the client side yuhan6665 2023-10-14 07:44:44 -04:00
• 5320b1b20a crypto/tls: add SessionState and use it on the server side yuhan6665 2023-10-14 07:00:31 -04:00
• 695d127f77 crypto/tls: reduce session ticket linkability yuhan6665 2023-10-14 06:39:56 -04:00
• 8bde0136fd crypto/tls: support QUIC as a transport yuhan6665 2023-10-14 05:30:46 -04:00
• 9a462df048 crypto/tls: enforce 1.3 record version semantics yuhan6665 2023-10-14 03:58:07 -04:00
• 66bea8caa4 crypto/tls: remove unused nonAESGCMAEADCiphers variable yuhan6665 2023-10-14 03:56:02 -04:00
• 0d5175f6b4 crypto/tls: fix PSK binder calculation yuhan6665 2023-10-14 03:27:56 -04:00
• 72846deba9 all: fix misuses of "a" vs "an" yuhan6665 2023-10-14 03:24:41 -04:00
• 275ea81328 crypto/tls: replace all usages of BytesOrPanic yuhan6665 2023-10-14 02:58:08 -04:00
• dad79ae803 all: fix problematic comments yuhan6665 2023-10-09 19:57:30 -04:00
• b9bfba03b7 crypto/tls: improve client auth failure alerts yuhan6665 2023-10-09 19:56:29 -04:00
• d3f9ac0cd1 Fix compile errors yuhan6665 2023-10-09 13:22:57 -04:00
• 870716f6af Sync upstream Go 1.20 RPRX 2023-02-03 02:25:10 +08:00
• da6c695a34 Add English translation yuhan6665andRPRX 2023-02-19 02:09:54 -05:00
• e426190d57 Allow fragmented REALITY Client Hello & Simplify logic RPRX 2023-08-28 17:12:59 +00:00
• e07c3b04b9 REALITY protocol: Add ChaCha20-Poly1305 auth mode (#4) HellojackandRPRX 2023-06-13 15:58:28 +08:00
• 176a94313e REALITY protocol: Set the fourth byte as reserved RPRX 2023-03-31 22:31:27 +00:00
• d3d37610da Allow Client Hello with other data attached & Simplify logic RPRX 2023-03-31 19:11:18 +00:00
• 442d33ede9 Do not show ciphertext SessionID or full AuthKey RPRX 2023-03-20 15:37:27 +00:00
• 0d0713b108 Replace bytes.Clone() with append() RPRX 2023-03-09 12:52:56 +00:00
• a7ae8b57f1 Apply target's time-out to hs.readClientFinished() RPRX 2023-03-09 20:51:17 +08:00
• 6288e760a9 Reuse buf (though io.CopyBuffer() is not likely to actually use it) RPRX 2023-03-08 15:19:09 +00:00
• dc9a7cef8e crypto/tls: set const maxUselessRecords to 32 (the same with OpenSSL) RPRX 2023-03-07 15:20:57 +00:00
• 15efa424b2 crypto/tls: reject change_cipher_spec record after handshake in TLS 1.3 RPRX 2023-03-07 15:19:08 +00:00
• 6f8fa90c03 Generate template signedCert in advance RPRX 2023-03-06 07:23:16 +00:00
• f90825ddae Fix config clone (#3) 世界 2023-02-28 19:51:37 +08:00
• 524506d975 Add defer recover() to avoid potential panics RPRX 2023-02-27 19:29:02 +00:00
• 9e83b0bee1 Make Accept() available RPRX 2023-02-27 15:02:28 +00:00
• f34b4d1743 Use underlying for io.Copy() only RPRX 2023-02-26 07:26:56 +00:00
• 14f5d5380b Add DialContext (#1) 世界andRPRX 2023-02-26 14:43:27 +08:00
• 8f76c23ba6 Add example RPRX 2023-02-19 12:35:07 +00:00
• 085bdf2104 Refine the logic after Read(buf) RPRX 2023-02-17 10:27:04 +00:00
• e814936a3d Use for i, t := range types instead RPRX 2023-02-10 13:50:08 +08:00
• 5a9e6c0cc2 Show hs.c.conn == underlying instead RPRX 2023-02-09 21:39:09 +08:00
• 02fa0dd5f6 Combine check and its for RPRX 2023-02-09 19:57:16 +08:00
• 5e6719eaf3 REALITY is REALITY now RPRX 2023-02-09 11:59:09 +08:00
• fb7fc93023 Prepare for REALITY protocol RPRX 2023-01-29 14:32:27 +00:00
• c3c05667a5 Package tls in Go 1.19.5 RPRX 2023-01-29 14:31:01 +00:00