Skip to content

Commit 5b3c7b6

Browse files
committed
list TLS 1.3 features in README files
1 parent 69fc79f commit 5b3c7b6

File tree

2 files changed

+13
-6
lines changed

2 files changed

+13
-6
lines changed

README

+6-4
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
1-
tlslite-ng is a pure python implementation of SSLv3.0, TLS 1.0, TLS 1.1 and
2-
TLS 1.2 protocols.
1+
tlslite-ng is a pure python implementation of SSLv3.0, TLS 1.0, TLS 1.1,
2+
TLS 1.2 and TLS 1.3 protocols.
33

44
It can use pycrypto, m2crypto and gmp for acceleration of cryptographic
55
operations but is not dependant upon them.
@@ -13,14 +13,16 @@ Functionality implemented include:
1313
GCM or Poly1305 authenticator
1414
- RSA, DHE_RSA and ECDHE_RSA key exchange
1515
- full set of signature hashes (md5, sha1, sha224, sha256, sha384, sha512,
16-
rsa_pss_sha256, rsa_pss_sha384 and rsa_pss_sha512) for ServerKeyExchange
17-
and CertfificateVerify in TLS v1.2
16+
rsa_pss_rsae_sha256, rsa_pss_rsae_sha384 and rsa_pss_rsae_sha512) for
17+
ServerKeyExchange and CertfificateVerify
1818
- secp256r1, secp384r1, secp521r1, secp256k1, secp224r1 and secp192r1 curves
1919
for ECDHE_RSA key exchange (support for last two depends on the version
2020
of ecdsa library used)
2121
- x25519 and x448 curves for ECDHE_RSA key exchage (RFC 7748. RFC 4492bis)
2222
- anonymous DHE key exchange
2323
- anonymous ECDH key exchange
24+
- PSK key exchange in TLS 1.3
25+
- session ticket based resumption in TLS 1.3
2426
- NULL encryption ciphersuites
2527
- FALLBACK_SCSV (RFC 7507)
2628
- encrypt-then-MAC mode of operation for CBC ciphersuites (RFC 7366)

README.md

+7-2
Original file line numberDiff line numberDiff line change
@@ -47,8 +47,9 @@ tlslite-ng aims to be a drop in replacement for the original TLS Lite.
4747

4848
Implemented features of TLS include:
4949

50-
* SSLv3, TLSv1.0, TLSv1.1 and TLSv1.2
51-
* ciphersuites with DHE, ADH, ECDHE, AECDH, RSA and SRP key exchange together
50+
* SSLv3, TLSv1.0, TLSv1.1, TLSv1.2 and TLSv1.3
51+
* ciphersuites with DHE, ADH, ECDHE, AECDH, RSA, SRP, PSK and PSK-(EC)DHE
52+
key exchange together
5253
with AES (including GCM variant), 3DES, RC4 and ChaCha20 (both the official
5354
standard and the IETF draft) symmetric ciphers and NULL encryption.
5455
* Secure Renegotiation
@@ -58,6 +59,10 @@ Implemented features of TLS include:
5859
* padding extension
5960
* keying material exporter
6061
* RSA-PSS signatures in TLSv1.2, RSA-PSS in certificates (TLSv1.3 extension)
62+
* ticket based session resumption in TLS 1.3
63+
* 1-RTT handshake, Hello Retry Request, middlebox compatibility mode and
64+
cookie extension
65+
(TLS 1.3)
6166
* X25519 and X448 ECDHE key exchange
6267
* (experimental) TACK extension
6368

0 commit comments

Comments
 (0)