Files
google-apis-rs/rustls/manual/_04_features/index.html
2024-03-05 21:06:01 +01:00

49 lines
6.1 KiB
HTML
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta name="generator" content="rustdoc"><meta name="description" content="This section documents rustls itself: what protocol features are and are not implemented."><title>rustls::manual::_04_features - Rust</title><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../static.files/SourceSerif4-Regular-46f98efaafac5295.ttf.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../static.files/FiraSans-Regular-018c141bf0843ffd.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../static.files/FiraSans-Medium-8f9a781e4970d388.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../static.files/SourceCodePro-Regular-562dcc5011b6de7d.ttf.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../static.files/SourceCodePro-Semibold-d899c5a5c4aeb14a.ttf.woff2"><link rel="stylesheet" href="../../../static.files/normalize-76eba96aa4d2e634.css"><link rel="stylesheet" href="../../../static.files/rustdoc-ac92e1bbe349e143.css"><meta name="rustdoc-vars" data-root-path="../../../" data-static-root-path="../../../static.files/" data-current-crate="rustls" data-themes="" data-resource-suffix="" data-rustdoc-version="1.76.0 (07dca489a 2024-02-04)" data-channel="1.76.0" data-search-js="search-2b6ce74ff89ae146.js" data-settings-js="settings-4313503d2e1961c2.js" ><script src="../../../static.files/storage-f2adc0d6ca4d09fb.js"></script><script defer src="../sidebar-items.js"></script><script defer src="../../../static.files/main-305769736d49e732.js"></script><noscript><link rel="stylesheet" href="../../../static.files/noscript-feafe1bb7466e4bd.css"></noscript><link rel="alternate icon" type="image/png" href="../../../static.files/favicon-16x16-8b506e7a72182f1c.png"><link rel="alternate icon" type="image/png" href="../../../static.files/favicon-32x32-422f7d1d52889060.png"><link rel="icon" type="image/svg+xml" href="../../../static.files/favicon-2c020d218678b618.svg"></head><body class="rustdoc mod"><!--[if lte IE 11]><div class="warning">This old browser is unsupported and will most likely display funky things.</div><![endif]--><nav class="mobile-topbar"><button class="sidebar-menu-toggle">&#9776;</button></nav><nav class="sidebar"><div class="sidebar-crate"><h2><a href="../../../rustls/index.html">rustls</a><span class="version">0.21.7</span></h2></div><h2 class="location"><a href="#">Module _04_features</a></h2><div class="sidebar-elems"><h2><a href="../index.html">In rustls::manual</a></h2></div></nav><div class="sidebar-resizer"></div>
<main><div class="width-limiter"><nav class="sub"><form class="search-form"><span></span><div id="sidebar-button" tabindex="-1"><a href="../../../rustls/all.html" title="show sidebar"></a></div><input class="search-input" name="search" aria-label="Run search in the documentation" autocomplete="off" spellcheck="false" placeholder="Click or press S to search, ? for more options…" type="search"><div id="help-button" tabindex="-1"><a href="../../../help.html" title="help">?</a></div><div id="settings-menu" tabindex="-1"><a href="../../../settings.html" title="settings"><img width="22" height="22" alt="Change settings" src="../../../static.files/wheel-7b819b6101059cd0.svg"></a></div></form></nav><section id="main-content" class="content"><div class="main-heading"><h1>Module <a href="../../index.html">rustls</a>::<wbr><a href="../index.html">manual</a>::<wbr><a class="mod" href="#">_04_features</a><button id="copy-path" title="Copy item path to clipboard"><img src="../../../static.files/clipboard-7571035ce49a181d.svg" width="19" height="18" alt="Copy item path"></button></h1><span class="out-of-band"><a class="src" href="../../../src/rustls/manual/features.rs.html#1-50">source</a> · <button id="toggle-all-docs" title="collapse all docs">[<span>&#x2212;</span>]</button></span></div><details class="toggle top-doc" open><summary class="hideme"><span>Expand description</span></summary><div class="docblock"><p>This section documents rustls itself: what protocol features are and are not implemented.</p>
<h3 id="current-features"><a href="#current-features">Current features</a></h3>
<ul>
<li>TLS1.2 and TLS1.3.</li>
<li>ECDSA, Ed25519 or RSA server authentication by clients.</li>
<li>ECDSA, Ed25519 or RSA server authentication by servers.</li>
<li>Forward secrecy using ECDHE; with curve25519, nistp256 or nistp384 curves.</li>
<li>AES128-GCM and AES256-GCM bulk encryption, with safe nonces.</li>
<li>ChaCha20-Poly1305 bulk encryption (<a href="https://tools.ietf.org/html/rfc7905">RFC7905</a>).</li>
<li>ALPN support.</li>
<li>SNI support.</li>
<li>Tunable MTU to make TLS messages match size of underlying transport.</li>
<li>Optional use of vectored IO to minimise system calls.</li>
<li>TLS1.2 session resumption.</li>
<li>TLS1.2 resumption via tickets (RFC5077).</li>
<li>TLS1.3 resumption via tickets or session storage.</li>
<li>TLS1.3 0-RTT data for clients.</li>
<li>Client authentication by clients.</li>
<li>Client authentication by servers.</li>
<li>Extended master secret support (RFC7627).</li>
<li>Exporters (RFC5705).</li>
<li>OCSP stapling by servers.</li>
<li>SCT stapling by servers.</li>
<li>SCT verification by clients.</li>
</ul>
<h3 id="possible-future-features"><a href="#possible-future-features">Possible future features</a></h3>
<ul>
<li>PSK support.</li>
<li>OCSP verification by clients.</li>
<li>Certificate pinning.</li>
</ul>
<h3 id="non-features"><a href="#non-features">Non-features</a></h3>
<p>For reasons explained in the other sections of this manual, rustls does not
and will not support:</p>
<ul>
<li>SSL1, SSL2, SSL3, TLS1 or TLS1.1.</li>
<li>RC4.</li>
<li>DES or triple DES.</li>
<li>EXPORT ciphersuites.</li>
<li>MAC-then-encrypt ciphersuites.</li>
<li>Ciphersuites without forward secrecy.</li>
<li>Renegotiation.</li>
<li>Kerberos.</li>
<li>Compression.</li>
<li>Discrete-log Diffie-Hellman.</li>
<li>Automatic protocol version downgrade.</li>
</ul>
</div></details></section></div></main></body></html>