@@ -5,16 +5,26 @@ It can use pycrypto, m2crypto and gmp for acceleration of cryptographic
55operations but is not dependant upon them.
66
77Functionality implemented include:
8- - RC4, 3DES-CBC, AES-CBC and AES-GCM ciphers
9- - MD5, SHA1, SHA256 and SHA384 HMACs as well as AEAD mode of operation
10- - RSA and DHE_RSA key exchange
8+ - all above mentioned protocols, including support for client certificates
9+ (RFC 6101, RFC 2246, RFC 4346, RFC 5246)
10+ - RC4, 3DES-CBC, AES-CBC, AES-GCM and ChaCha20 ciphers (RFC 5246, RFC 6347,
11+ RFC 4492, RFC 5288, RFC 5289, RFC 7539)
12+ - MD5, SHA1, SHA256 and SHA384 HMACs as well as AEAD mode of operation in GCM
13+ or Poly1305 authenticator
14+ - RSA, DHE_RSA and ECDHE_RSA key exchange
15+ - full set of signature hashes (md5, sha1, sha224, sha256, sha384 and sha512)
16+ for ServerKeyExchange and CertfificateVerify in TLS v1.2
17+ - secp256r1, secp384r1, secp521r1, secp256k1, secp224r1 and secp192r1 curves
18+ for ECDHE_RSA key exchange (support for last two depends on the version
19+ of ecdsa library used)
1120 - anonymous DHE key exchange
21+ - anonymous ECDH key exchange in client
1222 - NULL encryption ciphersuites
13- - FALLBACK_SCSV
14- - encrypt-then-MAC mode of operation for CBC ciphersuites
23+ - FALLBACK_SCSV (RFC 7507)
24+ - encrypt-then-MAC mode of operation for CBC ciphersuites (RFC 7366)
1525 - client certificates
1626 - TACK certificate pinning
17- - SRP_SHA_RSA ciphersuites
27+ - SRP_SHA_RSA and SRP_SHA ciphersuites (RFC 5054)
1828
1929tlslite-ng aims to be a drop-in replacement for tlslite while providing more
2030comprehensive set of features and more secure defautls.
0 commit comments