Expand description
TLS 1.3 Cipher Suites and Cryptographic Primitives
Implements all crypto needed for TLS 1.3:
- HMAC-SHA256 (RFC 2104)
- HKDF-SHA256 (RFC 5869)
- X25519 key exchange (RFC 7748)
- ChaCha20-Poly1305 AEAD (RFC 8439)
- AES-128-GCM AEAD (NIST SP 800-38D)
Functions§
- hkdf_
expand - HKDF-Expand: OKM = T(1) || T(2) || … (truncated to length)
- hkdf_
expand_ label - HKDF-Expand-Label (TLS 1.3 specific, RFC 8446 Section 7.1)
- hkdf_
extract - HKDF-Extract: PRK = HMAC-Hash(salt, IKM)
- hmac_
sha256 - HMAC-SHA256 (RFC 2104)
- x25519_
keypair - Generate an X25519 keypair using the kernel’s CSPRNG
- x25519_
shared_ secret - Compute X25519 shared secret: shared = scalar_mult(our_private, their_public)