1
- tlslite-ng is a pure python implementation of SSLv3.0, TLS 1.0, TLS 1.1 and
2
- TLS 1.2 protocols.
1
+ tlslite-ng is a pure python implementation of SSLv3.0, TLS 1.0, TLS 1.1,
2
+ TLS 1.2 and TLS 1.3 protocols.
3
3
4
4
It can use pycrypto, m2crypto and gmp for acceleration of cryptographic
5
5
operations but is not dependant upon them.
@@ -13,14 +13,16 @@ Functionality implemented include:
13
13
GCM or Poly1305 authenticator
14
14
- RSA, DHE_RSA and ECDHE_RSA key exchange
15
15
- full set of signature hashes (md5, sha1, sha224, sha256, sha384, sha512,
16
- rsa_pss_sha256, rsa_pss_sha384 and rsa_pss_sha512 ) for ServerKeyExchange
17
- and CertfificateVerify in TLS v1.2
16
+ rsa_pss_rsae_sha256, rsa_pss_rsae_sha384 and rsa_pss_rsae_sha512 ) for
17
+ ServerKeyExchange and CertfificateVerify
18
18
- secp256r1, secp384r1, secp521r1, secp256k1, secp224r1 and secp192r1 curves
19
19
for ECDHE_RSA key exchange (support for last two depends on the version
20
20
of ecdsa library used)
21
21
- x25519 and x448 curves for ECDHE_RSA key exchage (RFC 7748. RFC 4492bis)
22
22
- anonymous DHE key exchange
23
23
- anonymous ECDH key exchange
24
+ - PSK key exchange in TLS 1.3
25
+ - session ticket based resumption in TLS 1.3
24
26
- NULL encryption ciphersuites
25
27
- FALLBACK_SCSV (RFC 7507)
26
28
- encrypt-then-MAC mode of operation for CBC ciphersuites (RFC 7366)
0 commit comments