Package: crypto/internal/fips140/tls13

package tls13 Import Path crypto/internal/fips140/tls13 (on go.dev) Dependency Relation imports 7 packages, and imported by one package

Involved Source Files cast.go d tls13.go Package tls13 implements the TLS 1.3 Key Schedule as specified in RFC 8446, Section 7.1 and allowed by FIPS 140-3 IG 2.4.B Resolution 7.

Package-Level Type Names (total 4)

/* sort by: alphabet | popularity */

type EarlySecret (struct) Methods (total 4) (*EarlySecret) ClientEarlyTrafficSecret(transcript fips140.Hash) []byte ClientEarlyTrafficSecret derives the client_early_traffic_secret from the early secret and the transcript up to the ClientHello. (*EarlySecret) EarlyExporterMasterSecret(transcript fips140.Hash) *ExporterMasterSecret EarlyExporterMasterSecret derives the exporter_master_secret from the early secret and the transcript up to the ClientHello. (*EarlySecret) HandshakeSecret(sharedSecret []byte) *HandshakeSecret (*EarlySecret) ResumptionBinderKey() []byte As Outputs Of (at least one exported) func NewEarlySecret[H](hash func() H, psk []byte) *EarlySecret

type ExporterMasterSecret (struct) Methods (only one) (*ExporterMasterSecret) Exporter(label string, context []byte, length int) []byte As Outputs Of (at least 2) func (*EarlySecret).EarlyExporterMasterSecret(transcript fips140.Hash) *ExporterMasterSecret func (*MasterSecret).ExporterMasterSecret(transcript fips140.Hash) *ExporterMasterSecret As Inputs Of (at least one exported) func TestingOnlyExporterSecret(s *ExporterMasterSecret) []byte

type HandshakeSecret (struct) Methods (total 3) (*HandshakeSecret) ClientHandshakeTrafficSecret(transcript fips140.Hash) []byte ClientHandshakeTrafficSecret derives the client_handshake_traffic_secret from the handshake secret and the transcript up to the ServerHello. (*HandshakeSecret) MasterSecret() *MasterSecret (*HandshakeSecret) ServerHandshakeTrafficSecret(transcript fips140.Hash) []byte ServerHandshakeTrafficSecret derives the server_handshake_traffic_secret from the handshake secret and the transcript up to the ServerHello. As Outputs Of (at least one exported) func (*EarlySecret).HandshakeSecret(sharedSecret []byte) *HandshakeSecret

type MasterSecret (struct) Methods (total 4) (*MasterSecret) ClientApplicationTrafficSecret(transcript fips140.Hash) []byte ClientApplicationTrafficSecret derives the client_application_traffic_secret_0 from the master secret and the transcript up to the server Finished. (*MasterSecret) ExporterMasterSecret(transcript fips140.Hash) *ExporterMasterSecret ExporterMasterSecret derives the exporter_master_secret from the master secret and the transcript up to the server Finished. (*MasterSecret) ResumptionMasterSecret(transcript fips140.Hash) []byte ResumptionMasterSecret derives the resumption_master_secret from the master secret and the transcript up to the client Finished. (*MasterSecret) ServerApplicationTrafficSecret(transcript fips140.Hash) []byte ServerApplicationTrafficSecret derives the server_application_traffic_secret_0 from the master secret and the transcript up to the server Finished. As Outputs Of (at least one exported) func (*HandshakeSecret).MasterSecret() *MasterSecret

Package-Level Functions (total 3)

func ExpandLabel[H](hash func() H, secret []byte, label string, context []byte, length int) []byte Type Parameters: H: fips140.Hash ExpandLabel implements HKDF-Expand-Label from RFC 8446, Section 7.1.

func NewEarlySecret[H](hash func() H, psk []byte) *EarlySecret Type Parameters: H: fips140.Hash

func TestingOnlyExporterSecret(s *ExporterMasterSecret) []byte