Comparison of TLS implementations

From Wikipedia, the free encyclopedia
(Redirected from Secure Transport)

Page Module:Message box/ambox.css has no content.

Page Module:Message box/ambox.css has no content.

Template:Short description Script error: No such module "about". Lua error in package.lua at line 80: module 'Module:Hatnote list' not found.

The Transport Layer Security (TLS) protocol provides the ability to secure communications across or inside networks. This comparison of TLS implementations compares several of the most notable libraries. There are several TLS implementations which are free software and open source.

All comparison categories use the stable version of each implementation listed in the overview section. The comparison is limited to features that directly relate to the TLS protocol.

Overview

Template:Sort-under

Implementation Developed by Open source Software license Copyright holder Written in Latest stable version, release date Origin
Botan Jack Lloyd Yes Simplified BSD License Jack Lloyd C++ Template:LSR US (Vermont)
BoringSSL Google Yes OpenSSL-SSLeay dual-license, ISC license Eric Young, Tim Hudson, Sun, OpenSSL project, Google, and others C, C++, Go, assembly No stable releases[1] Australia/EU[citation needed]
Bouncy Castle The Legion of the Bouncy Castle Inc. Yes MIT License Legion of the Bouncy Castle Inc. Java, C# Template:Multiple releases Australia
BSAFE Dell, formerly RSA Security No Proprietary Dell Java, C, assembly SSL-J Template:Latest stable software release/BSAFE SSL-J

Micro Edition Suite Template:Latest stable software release/BSAFE Micro Edition Suite

Australia
cryptlib Peter Gutmann Yes Sleepycat License and commercial license Peter Gutmann C Template:LSR NZ
GnuTLS GnuTLS project Yes LGPL-2.1-or-later Free Software Foundation C Template:Wikidata Template:Wikidata EU (Greece and Sweden)
Java Secure Socket Extension (JSSE) Oracle Yes GNU GPLv2 and commercial license Oracle Java

Template:LSR
Template:LSR
Template:LSR
Template:LSR
Template:LSR
Template:LSR

US
LibreSSL OpenBSD Project Yes Apache-1.0, BSD-4-Clause, ISC, and public domain Eric Young, Tim Hudson, Sun, OpenSSL project, OpenBSD Project, and others C, assembly Template:Wikidata Template:Wikidata Canada
MatrixSSL[2] PeerSec Networks Yes GNU GPLv2+ and commercial license PeerSec Networks C Template:LSR US
Mbed TLS (previously PolarSSL) Arm Yes Apache License 2.0, GNU GPLv2+ and commercial license Arm Holdings C Template:Latest stable software release/Mbed TLS EU (Netherlands)
Network Security Services (NSS) Mozilla, AOL, Red Hat, Sun, Oracle, Google and others Yes MPL 2.0 NSS contributors C, assembly Template:Multiple releases US
OpenSSL OpenSSL project Yes Apache-2.0[a] Eric Young, Tim Hudson, Sun, OpenSSL project, and others C, assembly Template:Wikidata Template:Wikidata Australia/EU
Rustls Joe Birr-Pixton, Dirkjan Ochtman, Daniel McCarney, Josh Aas, and open source contributors Yes Apache-2.0, MIT License and ISC Open source contributors Rust Template:Latest stable software release/Rustls United Kingdom
s2n Amazon Yes Apache License 2.0, GNU GPLv2+ and commercial license Amazon.com, Inc. C Continuous US
Schannel Microsoft No Proprietary Microsoft Corporation Windows 11, 2021-10-05 US
Secure Transport Apple Inc. Yes APSL 2.0 Apple Inc. 57337.20.44 (OS X 10.11.2), 2015-12-08 US
wolfSSL (previously CyaSSL) wolfSSL[3] Yes GNU GPLv3+ and commercial license wolfSSL Inc.[4] C, assembly Template:LSR US
Erlang/OTP SSL application Ericsson Yes Apache License 2.0 Ericsson Erlang OTP-21, 2018-06-19 Sweden
Implementation Developed by Open source Software license Copyright owner Written in Latest stable version, release date Origin

Page Template:Reflist/styles.css has no content.

  1. ^ Apache-2.0 for OpenSSL 3.0 and later releases. OpenSSL-SSLeay dual-license for any release before OpenSSL 3.0.

TLS/SSL protocol version support

Several versions of the TLS protocol exist. SSL 2.0 is a deprecated[5] protocol version with significant weaknesses. SSL 3.0 (1996) and TLS 1.0 (1999) are successors with two weaknesses in CBC-padding that were explained in 2001 by Serge Vaudenay.[6] TLS 1.1 (2006) fixed only one of the problems, by switching to random initialization vectors (IV) for CBC block ciphers, whereas the more problematic use of mac-pad-encrypt instead of the secure pad-mac-encrypt was addressed with RFC 7366.[7] A workaround for SSL 3.0 and TLS 1.0, roughly equivalent to random IVs from TLS 1.1, was widely adopted by many implementations in late 2011.[8] In 2014, the POODLE vulnerability of SSL 3.0 was discovered, which takes advantage of the known vulnerabilities in CBC, and an insecure fallback negotiation used in browsers.[9]

TLS 1.2 (2008) introduced a means to identify the hash used for digital signatures. While permitting the use of stronger hash functions for digital signatures in the future (rsa,sha256/sha384/sha512) over the SSL 3.0 conservative choice (rsa,sha1+md5), the TLS 1.2 protocol change inadvertently and substantially weakened the default digital signatures and provides (rsa,sha1) and even (rsa,md5).[10]

Datagram Transport Layer Security (DTLS or Datagram TLS) 1.0 is a modification of TLS 1.1 for a packet-oriented transport layer, where packet loss and packet reordering have to be tolerated. The revision DTLS 1.2 based on TLS 1.2 was published in January 2012.[11]

TLS 1.3 (2018) specified in RFC 8446 includes major optimizations and security improvements. QUIC (2021) specified in RFC 9000 and DTLS 1.3 (2022) specified in RFC 9147 builds on TLS 1.3. The publishing of TLS 1.3 and DTLS 1.3 obsoleted TLS 1.2 and DTLS 1.2.

Note that there are known vulnerabilities in SSL 2.0 and SSL 3.0. In 2021, IETF published RFC 8996 also forbidding negotiation of TLS 1.0, TLS 1.1, and DTLS 1.0 due to known vulnerabilities. NIST SP 800-52 requires support of TLS 1.3 by January 2024. Support of TLS 1.3 means that two compliant nodes will never negotiate TLS 1.2.

Implementation SSL 2.0 (insecure)[12] SSL 3.0 (insecure)[13] TLS 1.0 (deprecated)[14] TLS 1.1 (deprecated)[15] TLS 1.2[16] TLS 1.3 DTLS 1.0 (deprecated)[17] DTLS 1.2[11] DTLS 1.3
Botan No No[18] No No Yes Yes No Yes No
BoringSSL Yes Yes Yes Yes Yes Yes No
Bouncy Castle No No Yes Yes Yes Yes Yes Yes No
BSAFE SSL-J[19] No Disabled by default No[a] No[a] Yes Yes No No No
cryptlib No No Yes Yes Yes Yes No No No
GnuTLS No[b] Disabled by default[20] Yes Yes Yes Yes[21] Yes Yes No
JSSE No[b] Disabled by default[22] Disabled by default[23] Disabled by default[23] Yes Yes Yes Yes No
LibreSSL No[24] No[25] Yes Yes Yes Yes Yes Yes[26] No
MatrixSSL No Disabled by default at compile time[27] Yes Yes Yes Yes Yes Yes No
Mbed TLS No No[28] No[28] No[28] Yes Yes
(experimental) 		Yes[29] Yes[29] No
NSS No[c] Disabled by default[30] Yes Yes[31] Yes[32] Yes[33] Yes[31] Yes[34] No
OpenSSL No[35] Disabled by default Yes Yes[36] Yes[36] Yes Yes Yes[37] No
Rustls No[38] No[38] No[38] No[38] Yes[38] Yes[38] No No No
s2n[39] No Disabled by default Yes Yes Yes Yes No No No
Schannel XP, 2003[40] Disabled by default in MSIE 7 Enabled by default Enabled by default in MSIE 7 No No No No No No
Schannel Vista[41] Disabled by default Enabled by default Yes No No No No No No
Schannel 2008[41] Disabled by default Enabled by default Yes Disabled by default (KB4019276) Disabled by default (KB4019276) No No No No
Schannel 7, 2008R2[42] Disabled by default Disabled by default in MSIE 11 Yes Enabled by default in MSIE 11 Enabled by default in MSIE 11 No Yes[43] No[43] No
Schannel 8, 2012[42] Disabled by default Enabled by default Yes Disabled by default Disabled by default No Yes No No
Schannel 8.1, 2012R2, 10 RTM & v1511[42] Disabled by default Disabled by default in MSIE 11 Yes Yes Yes No Yes No No
Schannel 10 v1607 / 2016[44] No Disabled by default Yes Yes Yes No Yes Yes No
Schannel 11 / 2022[45] No Disabled by default Yes Yes Yes Yes Yes Yes No
Secure Transport

OS X 10.2–10.7, iOS 1–4

Yes Yes Yes No No No No No
Secure Transport OS X 10.8–10.10, iOS 5–8 No[d] Yes Yes Yes[d] Yes[d] Yes[d] No No
Secure Transport OS X 10.11, iOS 9 No No[d] Yes Yes Yes Yes Unknown No
Secure Transport OS X 10.13, iOS 11 No No[d] Yes Yes Yes Yes
(draft version)[46] 		Yes Unknown No
wolfSSL No Disabled by default[47] Disabled by default[48] Yes Yes Yes Yes Yes Yes
Erlang/OTP SSL application[49] No [e] No [f] Disabled by default [e] Disabled by default [e] Yes Partially [g] Disabled by default [e] Yes No
Implementation SSL 2.0 (insecure)[12] SSL 3.0 (insecure)[13] TLS 1.0 (deprecated)[14] TLS 1.1 (deprecated)[15] TLS 1.2[16] TLS 1.3 DTLS 1.0 (deprecated)[17] DTLS 1.2[11] DTLS 1.3

Page Template:Reflist/styles.css has no content.

  1. ^ a b As of SSL-J 7.0, support for TLS 1.0 and 1.1 has been removed
  2. ^ a b SSL 2.0 client hello is supported for backward compatibility reasons even though SSL 2.0 is not supported.
  3. ^ Server-side implementation of the SSL/TLS protocol still supports processing of received v2-compatible client hello messages.Page Module:Citation/CS1/styles.css has no content."NSS 3.24 release notes". Mozilla Developer Network. Mozilla. Archived from the original on 2016-08-26. Retrieved 2016-06-19.
  4. ^ a b c d e f Secure Transport: SSL 2.0 was discontinued in OS X 10.8. SSL 3.0 was discontinued in OS X 10.11 and iOS 9.TLS 1.1, 1.2 and DTLS are available on iOS 5.0 and later, and OS X 10.9 and later.Page Module:Citation/CS1/styles.css has no content."Technical Note TN2287: iOS 5 and TLS 1.2 Interoperability Issues". iOS Developer Library. Apple Inc. Retrieved 2012-05-03.
  5. ^ a b c d Since OTP 22
  6. ^ Since OTP 23
  7. ^ Page Module:Citation/CS1/styles.css has no content."Erlang OTP SSL application TLS 1.3 compliance table".

NSA Suite B Cryptography

Required components for NSA Suite B Cryptography (RFC 6460) are:

Per CNSSP-15, the 256-bit elliptic curve (specified in FIPS 186-2), SHA-256, and AES with 128-bit keys are sufficient for protecting classified information up to the Secret level, while the 384-bit elliptic curve (specified in FIPS 186-2), SHA-384, and AES with 256-bit keys are necessary for the protection of Top Secret information.

Implementation TLS 1.2 Suite B
Botan Yes
Bouncy Castle Yes
BSAFE Yes[19]
cryptlib Yes
GnuTLS Yes
JSSE Yes[50]
LibreSSL Yes
MatrixSSL Yes
Mbed TLS Yes
NSS No[51]
OpenSSL Yes[37]
Rustls Yes[38]
S2n
Schannel Yes[52]
Secure Transport No
wolfSSL Yes
Implementation TLS 1.2 Suite B

Certifications

Note that certain certifications have received serious negative criticism from people who are actually involved in them.[53]

Implementation FIPS 140-1, FIPS 140-2[54] FIPS 140-3
Level 1 Level 2[disputed – discuss] Level 1
Botan[55]
Bouncy Castle BC-FJA 2.0.0 (#4743)
BC-FJA 2.1.0 (#4943)
BC-FNA 1.0.2 (#4416
BSAFE SSL-J[56] Crypto-J 6.0 (1785, 1786)
Crypto-J 6.1 / 6.1.1.0.1 (2057, 2058)
Crypto-J 6.2 / 6.2.1.1 (2468, 2469)
Crypto-J 6.2.4 (3172, 3184)
Crypto-J 6.2.5 (#3819, #3820)
Crypto-J 6.3 (#4696, #4697) 		Crypto-J 7.0 (4892)
cryptlib[57]
GnuTLS[58] Red Hat Enterprise Linux GnuTLS Cryptographic Module (#2780)
JSSE
LibreSSL[24] no support
MatrixSSL[59] SafeZone FIPS Cryptographic Module: 1.1 (#2389)
Mbed TLS[60]
NSS[61] Network Security Services: 3.2.2 (#247)
Network Security Services Cryptographic Module: 3.11.4 (#815), 3.12.4 (#1278), 3.12.9.1 (#1837) 		Netscape Security Module: 1 (#7[notes 1]), 1.01 (#47[notes 2])
Network Security Services: 3.2.2 (#248[notes 3])
Network Security Services Cryptographic Module: 3.11.4 (#814[notes 4]), 3.12.4 (#1279, #1280[notes 5])
OpenSSL[62] OpenSSL FIPS Object Module: 1.0 (#624), 1.1.1 (#733), 1.1.2 (#918), 1.2, 1.2.1, 1.2.2, 1.2.3 or 1.2.4 (#1051)
2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7 or 2.0.8 (#1747)
Rustls aws-lc FIPS module[63] (#4759)
Schannel[64] Cryptographic modules in Windows NT 4.0, 95, 95, 2000, XP, Server 2003, CE 5, CE 6, Mobile 6.x, Vista, Server 2008, 7, Server 2008 R2, 8, Server 2012, RT, Surface, Phone 8
See details on Microsoft FIPS 140 Validated Cryptographic Modules
Secure Transport Apple FIPS Cryptographic Module: 1.0 (OS X 10.6, #1514), 1.1 (OS X 10.7, #1701)
Apple OS X CoreCrypto Module; CoreCrypto Kernel Module: 3.0 (OS X 10.8, #1964, #1956), 4.0 (OS X 10.9, #2015, #2016)
Apple iOS CoreCrypto Module; CoreCrypto Kernel Module: 3.0 (iOS 6, #1963, #1944), 4.0 (iOS 7, #2020, #2021)
wolfSSL[65] wolfCrypt FIPS Module: 4.0 (#3389)
See details on NIST certificate for validated Operating Environments
wolfCrypt FIPS Module: 3.6.0 (#2425)
See details on NIST certificate for validated Operating Environments 		wolfCrypt FIPS Module (#4178)
See details on NIST certificate
Implementation Level 1 Level 2 Level 1
FIPS 140-1, FIPS 140-2 FIPS 140-3

Page Template:Reflist/styles.css has no content.

  1. ^ with Sun SPARC 5 w/ Sun Solaris v 2.4SE (ITSEC-rated)
  2. ^ with Sun Ultra-5 w/ Sun Trusted Solaris version 2.5.1 (ITSEC-rated)
  3. ^ with Solaris v8.0 with AdminSuite 3.0.1 as specified in UK IT SEC CC Report No. P148 EAL4 on a SUN SPARC Ultra-1
  4. ^ with these platforms; Red Hat Enterprise Linux Version 4 Update 1 AS on IBM xSeries 336 with Intel Xeon CPU, Trusted Solaris 8 4/01 on Sun Blade 2500 Workstation with UltraSPARC IIIi CPU
  5. ^ with these platforms; Red Hat Enterprise Linux v5 running on an IBM System x3550, Red Hat Enterprise Linux v5 running on an HP ProLiant DL145, Sun Solaris 10 5/08 running on a Sun SunBlade 2000 workstation, Sun Solaris 10 5/08 running on a Sun W2100z workstation

Key exchange algorithms (certificate-only)

This section lists the certificate verification functionality available in the various implementations.

Implementation RSA[16] RSA-EXPORT (insecure)[16] DHE-RSA (forward secrecy)[16] DHE-DSS (forward secrecy)[16] ECDH-ECDSA[66] ECDHE-ECDSA (forward secrecy)[66] ECDH-RSA[66] ECDHE-RSA (forward secrecy)[66] GOST R 34.10-94, 34.10-2001[67]
Botan Disabled by default No Yes Disabled by default No Yes No Yes No
BSAFE Yes No Yes Yes Yes Yes Yes Yes No
cryptlib Yes No Yes Yes Yes Yes No Yes No
GnuTLS Yes No Yes Disabled by default[20] No Yes No Yes No
JSSE Yes Disabled by default Yes Yes Yes Yes Yes Yes No
LibreSSL Yes No[24] Yes Yes No Yes No Yes Yes[68]
MatrixSSL Yes No Yes No Yes Yes Yes Yes No
Mbed TLS Yes No Yes No Yes Yes Yes Yes No
NSS Yes Disabled by default Yes[69] Yes Yes Yes Yes Yes No[70][71]
OpenSSL Yes No[35] Yes Disabled by default[35] No Yes No Yes Yes[72]
Rustls No No No No No Yes[38] No Yes[38] No
Schannel XP/2003 Yes Yes No XP: Max 1024 bits
2003: 1024 bits only 		No No No No No[73]
Schannel Vista/2008 Yes Disabled by default No 1024 bits by default[74] No Yes No except AES_GCM No[73]
Schannel 8/2012 Yes Disabled by default AES_GCM only[75][76][77] 1024 bits by default[74] No Yes No except AES_GCM No[73]
Schannel 7/2008R2, 8.1/2012R2 Yes Disabled by default Yes 2048 bits by default[74] No Yes No except AES_GCM No[73]
Schannel 10 Yes Disabled by default Yes 2048 bits by default[74] No Yes No Yes No[73]
Secure Transport OS X 10.6 Yes Yes except AES_GCM Yes Yes except AES_GCM yes except AES_GCM No
Secure Transport OS X 10.8-10.10 Yes No except AES_GCM No Yes except AES_GCM Yes except AES_GCM No
Secure Transport OS X 10.11 Yes No Yes No No Yes No Yes No
wolfSSL Yes No Yes No Yes Yes Yes Yes No
Erlang/OTP SSL application Yes No Yes Yes Yes Yes Yes Yes No
Implementation RSA[16] RSA-EXPORT (insecure)[16] DHE-RSA (forward secrecy)[16] DHE-DSS (forward secrecy)[16] ECDH-ECDSA[66] ECDHE-ECDSA (forward secrecy)[66] ECDH-RSA[66] ECDHE-RSA (forward secrecy)[66] GOST R 34.10-94, 34.10-2001[67]

Key exchange algorithms (alternative key-exchanges)

Implementation SRP[78] SRP-DSS[78] SRP-RSA[78] PSK-RSA[79] PSK[79] DHE-PSK (forward secrecy)[79] ECDHE-PSK (forward secrecy)[80] KRB5[81] DH-ANON[16] (insecure) ECDH-ANON[66] (insecure)
Botan No No No No Yes No Yes No No No
BSAFE SSL-J No No No No Yes[82] No No No Disabled by default Disabled by default
cryptlib No No No No Yes Yes No No No No
GnuTLS Yes Yes Yes Yes Yes Yes Yes No Disabled by default Disabled by default
JSSE No No No No No No No No Disabled by default Disabled by default
LibreSSL No[83] No[83] No[83] No No No No No Yes Yes
MatrixSSL No No No Yes Yes Yes No No Disabled by default No
Mbed TLS No No No Yes Yes Yes Yes No No No
NSS No[84] No[84] No[84] No[85] No[85] No[85] No[85] No Client side only, disabled by default[86] Disabled by default[87]
OpenSSL Yes Yes Yes Yes Yes Yes Yes Yes[88] Disabled by default[89] Disabled by default[89]
Rustls No No No No No No No No No No
Schannel No No No No No No No Yes No No
Secure Transport No No No No No No No Unknown Yes Yes
wolfSSL Yes Yes Yes Yes Yes Yes Yes[90] Yes No No
Erlang/OTP SSL application Disabled by default Disabled by default Disabled by default Disabled by default Disabled by default Disabled by default No No Disabled by default Disabled by default
Implementation SRP[78] SRP-DSS[78] SRP-RSA[78] PSK-RSA[79] PSK[79] DHE-PSK (forward secrecy)[79] ECDHE-PSK (forward secrecy)[80] KRB5[81] DH-ANON[16] (insecure) ECDH-ANON[66] (insecure)

Certificate verification methods

Implementation Application-defined PKIX path validation[91] CRL[92] OCSP[93] DANE (DNSSEC)[94][95] CT[96]
Botan Yes Yes Yes Yes No Unknown
Bouncy Castle Yes Yes Yes Yes Yes Unknown
BSAFE Yes Yes Yes Yes No Unknown
cryptlib Yes Yes Yes Yes No Unknown
GnuTLS Yes Yes Yes Yes Yes Unknown
JSSE Yes Yes Yes Yes No No
LibreSSL Yes Yes Yes Yes No Unknown
MatrixSSL Yes Yes Yes Yes[97] No Unknown
Mbed TLS Yes Yes Yes No[98] No Unknown
NSS Yes Yes Yes Yes No[99] Unknown
OpenSSL Yes Yes Yes Yes Yes Yes
Rustls Yes Yes Yes No No No
s2n No [100] Unknown [101] Unknown [102]
Schannel Unknown Yes Yes[103] Yes[103] No Unknown
Secure Transport Yes Yes Yes Yes No Unknown
wolfSSL Yes Yes Yes Yes No Unknown
Erlang/OTP SSL application Yes Yes Yes No No Unknown
Implementation Application-defined PKIX path validation CRL OCSP DANE (DNSSEC) CT

Encryption algorithms

Implementation Block cipher with mode of operation Stream cipher None
AES GCM
[104] 		AES CCM
[105] 		AES CBC Camellia GCM
[106] 		Camellia CBC
[107][106] 		ARIA GCM
[108] 		ARIA CBC
[108] 		SEED CBC
[109] 		3DES EDE CBC
(insecure)[110] 		GOST 28147-89 CNT
(proposed)
[67][n 1] 		ChaCha20-Poly1305
[111] 		Null
(insecure)
[n 2]
Botan Yes Yes Yes Yes Yes No No Disabled by default Disabled by default No Yes[112] Not implemented
BoringSSL Yes No Yes No No No No No Yes No Yes
BSAFE SSL-J Yes Yes Yes No No No No No Disabled by default No No Disabled by default
cryptlib Yes No Yes No No No No No Yes No No Not implemented
GnuTLS Yes Yes[20] Yes Yes Yes No No No Disabled by default[113] No Yes[114] Disabled by default
JSSE Yes No Yes No No No No No Disabled by default[115] No Yes
(JDK 12+)[116] 		Disabled by default
LibreSSL Yes[24] No Yes No Yes[68] No No No[24] Yes Yes[68] Yes[24] Disabled by default
MatrixSSL Yes No Yes No No No No Yes Disabled by default No Yes[117] Disabled by default
Mbed TLS Yes Yes [118] Yes Yes Yes Yes[119] Yes[119] No No[28] No Yes[120] Disabled by default at compile time
NSS Yes[121] No Yes No[122][n 3] Yes[123] No No Yes[124] Yes No[70][71] Yes[125] Disabled by default
OpenSSL Yes[126] Disabled by default[35] Yes No Disabled by default[35] Disabled by default[127] No Disabled by default[35] Disabled by default[35] Yes[72] Yes[35] Disabled by default
Rustls Yes[38] No No No No No No No No No Yes[38] Not implemented
Schannel XP/2003 No No 2003 only[128] No No No No No Yes No[73] No Disabled by default
Schannel Vista/2008, 2008R2, 2012 No No Yes No No No No No Yes No[73] No Disabled by default
Schannel 7, 8, 8.1/2012R2 Yes except ECDHE_RSA
[75][76] 		No Yes No No No No No Yes No[73] No Disabled by default
Schannel 10[129] Yes No Yes No No No No No Yes No[73] No Disabled by default
Secure Transport OS X 10.6 - 10.10 No No Yes No No No No No Yes No No Disabled by default
Secure Transport OS X 10.11 Yes No Yes No No No No No Yes No No Disabled by default
wolfSSL Yes Yes Yes No No No No No Yes No Yes Disabled by default
Erlang/OTP SSL application Yes No Yes No No No No No Disabled by default No Experimental Disable by default
Implementation Block cipher with mode of operation Stream cipher None
AES GCM
[104] 		AES CCM
[105] 		AES CBC Camellia GCM
[106] 		Camellia CBC
[107][106] 		ARIA GCM
[108] 		ARIA CBC
[108] 		SEED CBC
[109] 		3DES EDE CBC
(insecure)[110] 		GOST 28147-89 CNT
(proposed)
[67][n 1] 		ChaCha20-Poly1305
[111] 		Null
(insecure)
[n 2]
Notes

Page Template:Reflist/styles.css has no content.

  1. ^ a b This algorithm is not defined yet as TLS cipher suites in RFCs, is proposed in drafts.
  2. ^ a b authentication only, no encryption
  3. ^ This algorithm is implemented in an NSS fork used by Pale Moon.

Obsolete algorithms

Implementation Block cipher with mode of operation Stream cipher
IDEA CBC
[n 1](insecure)[131] 		DES CBC
(insecure)
[n 1] 		DES-40 CBC
(EXPORT, insecure)
[n 2] 		RC2-40 CBC
(EXPORT, insecure)
[n 2] 		RC4-128
(insecure)
[n 3] 		RC4-40
(EXPORT, insecure)
[n 4][n 2]
Botan No No No No No[132] No
BoringSSL No No No No Disabled by default at compile time No
BSAFE SSL-J No Disabled by default Disabled by default No Disabled by default Disabled by default
cryptlib No Disabled by default at compile time No No Disabled by default at compile time No
GnuTLS No No No No Disabled by default[20] No
JSSE No Disabled by default Disabled by default No Disabled by default Disabled by default [133]
LibreSSL Yes Yes No[24] No[24] Yes No[24]
MatrixSSL Yes No No No Disabled by default No
Mbed TLS No Disabled by default at compile time No No Disabled by default at compile time[29] No
NSS Yes Disabled by default Disabled by default Disabled by default Lowest priority[134][135] Disabled by default
OpenSSL Disabled by default[35] Disabled by default No[35] No[35] Disabled by default No[35]
Rustls No No No No No No
Schannel XP/2003 No Yes Yes Yes Yes Yes
Schannel Vista/2008 No Disabled by default Disabled by default Disabled by default Yes Disabled by default
Schannel 7/2008R2 No Disabled by default Disabled by default Disabled by default Lowest priority
will be disabled soon[136] 		Disabled by default
Schannel 8/2012 No Disabled by default Disabled by default Disabled by default Only as fallback Disabled by default
Schannel 8.1/2012R2 No Disabled by default Disabled by default Disabled by default Disabled by default[136] Disabled by default
Schannel 10[129] No Disabled by default Disabled by default Disabled by default Disabled by default[136] Disabled by default
Secure Transport OS X 10.6 Yes Yes Yes Yes Yes Yes
Secure Transport OS X 10.7 Yes Unknown Unknown Unknown Yes Unknown
Secure Transport OS X 10.8-10.9 Yes Disabled by default Disabled by default Disabled by default Yes Disabled by default
Secure Transport OS X 10.10-10.11 Yes Disabled by default Disabled by default Disabled by default Lowest priority Disabled by default
Secure Transport macOS 10.12 Yes Disabled by default Disabled by default Disabled by default Disabled by default Disabled by default
wolfSSL Disabled by default[137] No No No Disabled by default No
Erlang/OTP SSL application no Disabled by default no no Disabled by default no
Implementation Block cipher with mode of operation Stream cipher
IDEA CBC
[n 1](insecure)[131] 		DES CBC
(insecure)
[n 1] 		DES-40 CBC
(EXPORT, insecure)
[n 2] 		RC2-40 CBC
(EXPORT, insecure)
[n 2] 		RC4-128
(insecure)
[n 3] 		RC4-40
(EXPORT, insecure)
[n 4][n 2]
Notes

Page Template:Reflist/styles.css has no content.

  1. ^ a b c d IDEA and DES have been removed from TLS 1.2.[130]
  2. ^ a b c d e f 40 bits strength of cipher suites were designed to operate at reduced key lengths in order to comply with US regulations about the export of cryptographic software containing certain strong encryption algorithms (see Export of cryptography from the United States). These weak suites are forbidden in TLS 1.1 and later.
  3. ^ a b The RC4 attacks weaken or break RC4 used in SSL/TLS. Use of RC4 is prohibited by RFC 7465.
  4. ^ a b The RC4 attacks weaken or break RC4 used in SSL/TLS.

Supported elliptic curves

This section lists the supported elliptic curves by each implementation.

Defined curves in RFC 8446 (for TLS 1.3) and RFC 8422, 7027 (for TLS 1.2 and earlier)

applicable TLS version TLS 1.3 and earlier TLS 1.2 and earlier
Implementation secp256r1
prime256v1
NIST P-256
(0x0017,[138] 23[139]) 		secp384r1
NIST P-384
(0x0018,[138] 24[139]) 		secp521r1
NIST P-521
(0x0019,[138] 25[139]) 		X25519
(0x001D,[138] 29[139]) 		X448
(0x001E,[138] 30[139]) 		brainpoolP256r1
(26)[140] 		brainpoolP384r1
(27)[140] 		brainpoolP512r1
(28)[140]
Botan Yes Yes Yes Yes[112] No Yes[141] Yes[141] Yes[141]
BoringSSL Yes Yes Yes (disabled by default) Yes No No No No
BSAFE Yes Yes Yes No No No No No
GnuTLS Yes Yes Yes Yes[142] Yes[143] No No No
JSSE Yes Yes Yes Yes
x25519: JDK 13+[144]
Ed25519:JDK 15+[145] 		Yes
x448: JDK 13+[144]
Ed448: JDK 15+[145] 		No No No
LibreSSL Yes Yes Yes Yes[146] No Yes[24] Yes[24] Yes[24]
MatrixSSL Yes Yes Yes TLS 1.3 only[147] No Yes Yes Yes
Mbed TLS Yes Yes Yes Primitive only[148] Primitive only[149] Yes[150] Yes[150] Yes[150]
NSS Yes Yes Yes Yes[151] No[152][153] No[154] No[154] No[154]
OpenSSL Yes Yes Yes Yes[155][156] Yes[157][158] Yes[37] Yes[37] Yes[37]
Rustls Yes Yes Yes[159][a] Yes No No No No
Schannel Vista/2008, 7/2008R2, 8/2012, 8.1/2012R2, 10 Yes Yes Yes No No No No No
Secure Transport Yes Yes Yes No No No No No
wolfSSL Yes Yes Yes Yes[160] Yes[161] Yes Yes Yes
Erlang/OTP SSL application Yes Yes Yes No No Yes Yes Yes
Implementation secp256r1
prime256v1
NIST P-256
(0x0017, 23) 		secp384r1
NIST P-384
(0x0018, 24) 		secp521r1
NIST P-521
(0x0019, 25) 		X25519
(0x001D, 29) 		X448
(0x001E, 30) 		brainpoolP256r1
(26) 		brainpoolP384r1
(27) 		brainpoolP512r1
(28)

Deprecated curves in RFC 8422

Implementation sect163k1
NIST K-163
(1)[66] 		sect163r1
(2)[66] 		sect163r2
NIST B-163
(3)[66] 		sect193r1
(4)[66] 		sect193r2
(5)[66] 		sect233k1
NIST K-233
(6)[66] 		sect233r1
NIST B-233
(7)[66] 		sect239k1
(8)[66] 		sect283k1
NIST K-283
(9)[66] 		sect283r1
NIST B-283
(10)[66] 		sect409k1
NIST K-409
(11)[66] 		sect409r1
NIST B-409
(12)[66] 		sect571k1
NIST K-571
(13)[66] 		sect571r1
NIST B-571
(14)[66]
Botan No No No No No No No No No No No No No No
BoringSSL No No No No No No No No No No No No No No
BSAFE Yes No Yes No No Yes Yes No Yes Yes Yes Yes Yes Yes
GnuTLS No No No No No No No No No No No No No No
JSSE Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c]
LibreSSL Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes
MatrixSSL No No No No No No No No No No No No No No
Mbed TLS No No No No No No No No No No No No No No
NSS Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes
OpenSSL Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes
Rustls No No No No No No No No No No No No No No
Schannel Vista/2008, 7/2008R2, 8/2012, 8.1/2012R2, 10 No No No No No No No No No No No No No No
Secure Transport No No No No No No No No No No No No No No
wolfSSL No No No No No No No No No No No No No No
Erlang/OTP SSL application Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes
Implementation sect163k1
NIST K-163
(1) 		sect163r1
(2) 		sect163r2
NIST B-163
(3) 		sect193r1
(4) 		sect193r2
(5) 		sect233k1
NIST K-233
(6) 		sect233r1
NIST B-233
(7) 		sect239k1
(8) 		sect283k1
NIST K-283
(9) 		sect283r1
NIST B-283
(10) 		sect409k1
NIST K-409
(11) 		sect409r1
NIST B-409
(12) 		sect571k1
NIST K-571
(13) 		sect571r1
NIST B-571
(14)
Implementation secp160k1
(15)[66] 		secp160r1
(16)[66] 		secp160r2
(17)[66] 		secp192k1
(18)[66] 		secp192r1
prime192v1
NIST P-192
(19)[66] 		secp224k1
(20)[66] 		secp224r1
NIST P-244
(21)[66] 		secp256k1
(22)[66] 		arbitrary prime curves
(0xFF01)[66][164] 		arbitrary char2 curves
(0xFF02)[66][164]
Botan No No No No No No No No No No
BoringSSL No No No No No No Yes No No No
BSAFE No No No No Yes No Yes No No No
GnuTLS No No No No Yes No Yes No No No
JSSE Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] Notes[b][c] No No
LibreSSL Yes Yes Yes Yes Yes Yes Yes Yes No No
MatrixSSL No No No No Yes No Yes No No No
Mbed TLS No No No Yes Yes Yes Yes Yes No No
NSS Yes Yes Yes Yes Yes Yes Yes Yes No No
OpenSSL Yes Yes Yes Yes Yes Yes Yes Yes No No
Rustls No No No No No No No No No No
Schannel Vista/2008, 7/2008R2, 8/2012, 8.1/2012R2, 10 No No No No No No No No No No
Secure Transport No No No No Yes No No No No No
wolfSSL Yes Yes Yes Yes Yes Yes Yes Yes No No
Erlang/OTP SSL application Yes Yes Yes Yes Yes Yes Yes Yes No No
Implementation secp160k1
(15) 		secp160r1
(16) 		secp160r2
(17) 		secp192k1
(18) 		secp192r1
prime192v1
NIST P-192
(19) 		secp224k1
(20) 		secp224r1
NIST P-244
(21) 		secp256k1
(22) 		arbitrary prime curves
(0xFF01) 		arbitrary char2 curves
(0xFF02)
Notes

Page Template:Reflist/styles.css has no content.

  1. ^ Not supported for ECDHE key exchange, as per rustls::crypto::aws_lc_rs::kx_group.
  2. ^ a b c d e f g h i j k l m n o p q r s t u v These elliptic curves were "Disabled by Default" in current JDK families as part of JDK-8236730.[162]
  3. ^ a b c d e f g h i j k l m n o p q r s t u v These elliptic curves were subsequently removed in JDK 16+ as part of JDK-8252601.[163]

Data integrity

Implementation HMAC-MD5 HMAC-SHA1 HMAC-SHA256/384 AEAD GOST 28147-89 IMIT
[67] 		GOST R 34.11-94
[67]
Botan Template:No Y Yes Yes Yes Template:No Y Template:No Y
BSAFE Template:Yes N Yes Yes Yes Template:No Y Template:No Y
cryptlib Template:Yes N Yes Yes Yes Template:No Y Template:No Y
GnuTLS Template:Yes N Yes Yes Yes Template:No Y Template:No Y
JSSE Disabled by Default Yes Yes Yes Template:No Y Template:No Y
LibreSSL Template:Yes N Yes Yes Yes Yes
[68] 		Yes
[68]
MatrixSSL Template:Yes N Yes Yes Yes Template:No Y Template:No Y
Mbed TLS Template:Yes N Yes Yes Yes Template:No Y Template:No Y
NSS Template:Yes N Yes Yes Yes Template:No Y
[70][71] 		Template:No Y
[70][71]
OpenSSL Template:Yes N Yes Yes Yes Yes
[72] 		Yes
[72]
Rustls Template:No Y Template:No Y Template:No Y Yes Template:No Y Template:No Y
Schannel XP/2003, Vista/2008 Template:Yes N Yes XP SP3, 2003 SP2 via hotfix
[165] 		No Template:No Y
[73] 		Template:No Y
[73]
Schannel 7/2008R2, 8/2012, 8.1/2012R2 Template:Yes N Yes Yes except ECDHE_RSA
[75][76][77] 		Template:No Y
[73] 		Template:No Y
[73]
Schannel 10 Template:Yes N Yes Yes Yes
[129] 		Template:No Y
[73] 		Template:No Y
[73]
Secure Transport Template:Yes N Yes Yes Yes Template:No Y Template:No Y
wolfSSL Disabled by Default Yes Yes Yes Template:No Y Template:No Y
Erlang/OTP SSL application Template:Yes N Yes Yes Yes Template:No Y Template:No Y
Implementation HMAC-MD5 HMAC-SHA1 HMAC-SHA256/384 AEAD GOST 28147-89 IMIT GOST R 34.11-94

Compression

Note the CRIME security exploit takes advantage of TLS compression, so conservative implementations do not enable compression at the TLS level. HTTP compression is unrelated and unaffected by this exploit, but is exploited by the related BREACH attack.

Implementation DEFLATE[166]
(insecure)
Botan No
BSAFE[19] No
cryptlib No
GnuTLS Disabled by default
JSSE No
LibreSSL No[24]
MatrixSSL Disabled by default
Mbed TLS Disabled by default
NSS Disabled by default
OpenSSL Disabled by default
Rustls No
Schannel No
Secure Transport No
wolfSSL Disabled by default
Erlang/OTP SSL application No
Implementation DEFLATE

Extensions

In this section the extensions each implementation supports are listed. Note that the Secure Renegotiation extension is critical for HTTPS client security [citation needed]. TLS clients not implementing it are vulnerable to attacks, irrespective of whether the client implements TLS renegotiation.

Implementation Secure Renegotiation
[167] 		Server Name Indication
[168] 		ALPN
[169] 		Certificate Status Request
[168] 		OpenPGP
[170] 		Supplemental Data
[171] 		Session Ticket
[172] 		Keying Material Exporter
[173] 		Maximum Fragment Length
[168] 		Encrypt-then-MAC
[7] 		TLS Fallback SCSV
[174] 		Extended Master Secret
[175] 		ClientHello Padding
[176] 		Raw Public Keys
[177]
Botan Yes Yes Yes[178] No No No Yes Yes Yes Yes Yes[179] Yes[180] No Unknown
BSAFE SSL-J Yes Yes No Yes No No No No Yes No No Yes No No
cryptlib Yes Yes No No No Yes No No No[181] Yes Yes Yes No Unknown
GnuTLS Yes Yes Yes[182] Yes No[183] Yes Yes Yes Yes Yes[20] Yes[184] Yes[20] Yes[185] Yes[186]
JSSE Yes Yes[50] Yes[50] Yes No No Yes No Yes No No Yes No No
LibreSSL Yes Yes Yes[187] Yes No No? Yes Yes? No No Server side only[188] No Yes No
MatrixSSL Yes Yes Yes[189] Yes[117] No No Yes No Yes No Yes[117] Yes[117] No Unknown
Mbed TLS Yes Yes Yes[190] No No No Yes No Yes Yes[191] Yes[191] Yes[191] No No
NSS Yes Yes Yes[192] Yes No[193] No Yes Yes No No[194] Yes[195] Yes[196] Yes[192] Unknown
OpenSSL Yes Yes Yes[37] Yes No No? Yes Yes Yes Yes Yes[197] Yes[35] Yes[198] Yes[199]
Rustls Yes Yes Yes Yes No No Yes Yes No No No [200] Yes No Unknown
Schannel XP/2003 No No No No No Yes No No No No No No No Unknown
Schannel Vista/2008 Yes Yes No No No Yes No No No No No Yes[201] No Unknown
Schannel 7/2008R2 Yes Yes No Yes No Yes No No No No No Yes[201] No Unknown
Schannel 8/2012 Yes Yes No Yes No Yes Client side only[202] No No No No Yes[201] No Unknown
Schannel 8.1/2012R2, 10 Yes Yes Yes Yes No Yes Yes[202] No No No No Yes[201] No Unknown
Secure Transport Yes Yes Unknown No No Yes No No No No No No No Unknown
wolfSSL Yes Yes Yes[137] Yes No No Yes No Yes Yes[203] No Yes No Yes[204]
Erlang/OTP SSL application Yes Yes Yes No No No No No No No Yes No No Unknown
Implementation Secure Renegotiation Server Name Indication ALPN Certificate Status Request OpenPGP Supplemental Data Session Ticket Keying Material Exporter Maximum Fragment Length Encrypt-then-MAC TLS Fallback SCSV Extended Master Secret ClientHello Padding Raw Public Keys

Assisted cryptography

This section lists the known ability of an implementation to take advantage of CPU instruction sets that optimize encryption, or utilize system specific devices that allow access to underlying cryptographic hardware for acceleration or for data separation.

Implementation PKCS #11 device Intel AES-NI VIA PadLock ARMv8-A Intel SHA NXP CAAM TPM 2.0 NXP SE050 Microchip ATECC STMicro STSAFE Maxim MAXQ
Botan Yes[205] Yes No Yes No Yes[206] No No No No
BSAFE SSL-J [a][b] Yes Yes No Yes Yes No No[209] No No No No
cryptlib Yes Yes Yes No Yes No No No No
Crypto++ Yes Yes No No No No
GnuTLS Yes Yes Yes Yes[210] Yes No[211] No No No No
JSSE Yes Yes[212] No No No No No No No
LibreSSL No Yes Yes No No No No No
MatrixSSL Yes Yes No Yes No No No No No
Mbed TLS Yes Yes[213] Yes No No Partial[214] Yes[215] No No
NSS Yes[216] Yes[217] No[218] No No No No No No
OpenSSL Yes[219][220][221] Yes Yes Yes[222] Yes Partial Partial[223][224] Partial[214] No Partial[225] No
Rustls Yes Yes Yes No No No No
Schannel No Yes No No No No No No No
Secure Transport No Yes[226][227] No Yes No No No No No
wolfSSL Yes Yes No Yes Yes Yes[228] Yes[229][230] Yes[231] Yes[232] Yes[233] Yes[234]
Implementation PKCS #11 device Intel AES-NI VIA PadLock ARMv8-A Intel SHA NXP CAAM TPM 2.0 NXP SE050 Microchip ATECC STMicro STSAFE Maxim MAXQ

Page Template:Reflist/styles.css has no content.

  1. ^ Pure Java implementations relies on JVM processor optimization capabilities, such as OpenJDK support for AES-NI[207]
  2. ^ BSAFE SSL-J can be configured to run in native mode, using BSAFE Crypto-C Micro Edition to benefit from processor optimization.[208]

System-specific backends

This section lists the ability of an implementation to take advantage of the available operating system specific backends, or even the backends provided by another implementation.

Implementation /dev/crypto af_alg Windows CSP CommonCrypto OpenSSL engine
Botan No No No No Partial
BSAFE No No No No No
cryptlib Yes No No No No
GnuTLS Yes Yes No No No
JSSE No No Yes No No
LibreSSL No No No No No[235]
MatrixSSL No No No Yes Yes
Mbed TLS No No No No No
NSS No No No No No
OpenSSL Yes Yes No No Yes
Rustls No Yes [236] No No No
Schannel No No Yes No No
Secure Transport No No No Yes No
wolfSSL Yes Yes Partial No Yes[237]
Erlang/OTP SSL application No No No No Yes
Implementation /dev/crypto af_alg Windows CSP CommonCrypto OpenSSL engine

Cryptographic module/token support

Implementation TPM support Hardware token support Objects identified via
Botan Partial[180] PKCS #11
BSAFE SSL-J No No
cryptlib Yes PKCS #11 User-defined label
GnuTLS Yes PKCS #11 RFC 7512 PKCS #11 URLs[238]
JSSE No PKCS11 Java Cryptography Architecture,
Java Cryptography Extension
LibreSSL Yes PKCS #11 (via 3rd party module) Custom method
MatrixSSL No PKCS #11
Mbed TLS No PKCS #11 (via libpkcs11-helper) or standard hooks Custom method
NSS No PKCS #11
OpenSSL Yes PKCS #11 (via 3rd party module)[239] RFC 7512 PKCS #11 URLs[238]
Rustls No Microsoft CryptoAPI [240] Custom method
Schannel No Microsoft CryptoAPI UUID, User-defined label
Secure Transport
wolfSSL Yes PKCS #11
Implementation TPM support Hardware token support Objects identified via

Code dependencies

Implementation Dependencies Optional dependencies
Botan C++20 SQLite
zlib (compression)
bzip2 (compression)
liblzma (compression)
boost
trousers (TPM)
GnuTLS libc
nettle
gmp 		zlib (compression)
p11-kit (PKCS #11)
trousers (TPM)
libunbound (DANE)
JSSE Java
MatrixSSL none zlib (compression)
MatrixSSL-open libc or newlib
Mbed TLS libc libpkcs11-helper (PKCS #11)
zlib (compression)
NSS libc
libnspr4
libsoftokn3
libplc4
libplds4 		zlib (compression)
Rustls rust Page Template:Mono/styles.css has no content.core library rust Page Template:Mono/styles.css has no content.std library
zlib-rs (compression)
brotli (compression)
ring (cryptography)
aws-lc-rs (cryptography)
OpenSSL libc zlib (compression)
brotli (compression)
zstd (compression)
wolfSSL None libc
zlib (compression)
Erlang/OTP SSL application libcrypto (from OpenSSL), Erlang/OTP and its public_key, crypto and asn1 applications Erlang/OTP -inets (http fetching of CRLs)
Implementation Dependencies Optional dependencies

Development environment

Implementation Namespace Build tools API manual Crypto back-end OpenSSL compatibility Layer[<span title="Script error: No such module "decodeEncode".">clarification needed]
Botan Botan::TLS Makefile Sphinx Included (pluggable) No
Bouncy Castle org.bouncycastle Java Development Environment Programmers reference manual (PDF) Included (pluggable) No
BSAFE SSL-J com.rsa.asn1[a]

com.rsa.certj[b]
com.rsa.jcp[c]
com.rsa.jsafe[d]
com.rsa.ssl[e]
com.rsa.jsse[f]

Java class loader Javadoc, Developer's guide (HTML) Included No
cryptlib crypt* makefile, MSVC project workspaces Programmers reference manual (PDF), architecture design manual (PDF) Included (monolithic) No
GnuTLS gnutls_* Autoconf, automake, libtool Manual and API reference (HTML, PDF) External, libnettle Yes (limited)
JSSE javax.net.ssl

sun.security.ssl

Makefile API Reference (HTML) +

JSSE Reference Guide

Java Cryptography Architecture,
Java Cryptography Extension 		No
MatrixSSL matrixSsl_*

ps*

Makefile, MSVC project workspaces, Xcode projects for OS X and iOS API Reference (PDF), Integration Guide Included (pluggable) Yes (Subset: SSL_read, SSL_write, etc.)
Mbed TLS mbedtls_ssl_*

mbedtls_sha1_*
mbedtls_md5_*
mbedtls_x509*
...

Makefile, CMake, MSVC project workspaces, yotta API Reference + High Level and Module Level Documentation (HTML) Included (monolithic) No
NSS CERT_*

SEC_*
SECKEY_*
NSS_*
PK11_*
SSL_*
...

Makefile Manual (HTML) Included, PKCS#11 based[241] Yes (separate package called nss_compat_ossl[242])
OpenSSL SSL_*

SHA1_*
MD5_*
EVP_*
...

Makefile Man pages Included (monolithic) Template:Screen reader-only
Rustls rustls:: cargo API reference and design manual ring, aws-lc-rs included. Pluggable with OpenSSL, BoringSSL, Microsoft SymCrypt, wolfCrypt, Mbed TLS, Graviola, and RustCrypto.[243][244] Yes[245] (subset)
wolfSSL wolfSSL_*

CyaSSL_*
SSL_*

Autoconf, automake, libtool, MSVC project workspaces, XCode projects, CodeWarrior projects, MPLAB X projects, Keil, IAR, Clang, GCC, e2Studio Manual and API Reference (HTML, PDF) Included (monolithic) Yes (about 60% of API)
Implementation Namespace Build tools API manual Crypto back-end OpenSSL compatibility layer
  1. ^
    ASN.1 manipulation classes
  2. ^
    Cert-J proprietary API
  3. ^
    Certificate Path manipulation classes
  4. ^
    Crypto-J proprietary API, JCE, CMS and PKI
    5. API
  5. ^
    SSLJ proprietary API
  6. ^
    JSSE API

Portability concerns

Implementation Platform requirements Network requirements Thread safety Random seed Able to cross-compile No OS (bare metal) Supported operating systems
Botan C++11 None Thread-safe Platform-dependent Yes Windows, Linux, macOS, Android, iOS, FreeBSD, OpenBSD, Solaris, AIX, HP-UX, QNX, BeOS, IncludeOS
BSAFE SSL-J Java Java SE network components Thread-safe Depends on java.security.SecureRandom Yes No FreeBSD, Linux, macOS, Microsoft Windows, Android, AIX, Solaris
cryptlib C89 POSIX send() and recv(). API to supply your own replacement Thread-safe Platform-dependent, including hardware sources Yes Yes AMX, BeOS, ChorusOS, DOS, eCos, FreeRTOS/OpenRTOS, uItron, MVS, OS/2, Palm OS, QNX Neutrino, RTEMS, Tandem NonStop, ThreadX, uC/OS II, Unix (AIX, FreeBSD, HPUX, Linux, macOS, Solaris, etc.), VDK, VM/CMS, VxWorks, Win16, Win32, Win64, WinCE/PocketPC/etc, XMK
GnuTLS C89 POSIX send() and recv(). API to supply your own replacement. Thread-safe, needs custom mutex hooks if neither POSIX nor Windows threads are available. Platform dependent Yes No Generally any POSIX platforms or Windows, commonly tested platforms include Linux, Win32/64, macOS, Solaris, OpenWRT, FreeBSD, NetBSD, OpenBSD.
JSSE Java Java SE network components Thread-safe Depends on java.security.SecureRandom Yes Java based, platform-independent
MatrixSSL C89 None Thread-safe Platform dependent Yes Yes All
Mbed TLS C89 POSIX read() and write(). API to supply your own replacement. Threading layer available (POSIX or own hooks) Random seed set through entropy pool Yes Yes Known to work on: Win32/64, Linux, macOS, Solaris, FreeBSD, NetBSD, OpenBSD, OpenWRT, iPhone (iOS), Xbox, Android, eCos, SeggerOS, RISC OS
NSS C89, NSPR[246] NSPR[246] PR_Send() and PR_Recv(). API to supply your own replacement. Thread-safe Platform dependent[247] Yes (but cumbersome) No AIX, Android, FreeBSD, NetBSD, OpenBSD, BeOS, HP-UX, IRIX, Linux, macOS, OS/2, Solaris, OpenVMS, Amiga DE, Windows, WinCE, Sony PlayStation
Rustls Rust (programming language) None Thread-safe Platform dependent Yes Yes All supported by Rust (programming language)
OpenSSL C89 None Thread-safe Platform dependent Yes No Unix-like, DOS (with djgpp), Windows, OpenVMS, NetWare, eCos
wolfSSL C89 POSIX send() and recv(). API to supply your own replacement. Thread-safe Random seed set through wolfCrypt Yes Yes Win32/64, Linux, macOS, Solaris, ThreadX, VxWorks, FreeBSD, NetBSD, OpenBSD, embedded Linux, Yocto Project, OpenEmbedded, WinCE, Haiku, OpenWRT, iPhone (iOS), Android, Nintendo Wii and GameCube through DevKitPro, QNX, MontaVista, NonStop, TRON/ITRON/μITRON, eCos, Micrium μC/OS-III, FreeRTOS, SafeRTOS, NXP/Freescale MQX, Nucleus, TinyOS, HP/UX, AIX, ARC MQX, Keil RTX, TI-RTOS, uTasker, embOS, INtime, Mbed, uT-Kernel, RIOT, CMSIS-RTOS, FROSTED, Green Hills INTEGRITY, TOPPERS, PetaLinux, Apache mynewt
Implementation Platform requirements Network requirements Thread safety Random seed Able to cross-compile No OS (bare metal) Supported operating systems

See also

  • SCTP — with DTLS support
  • DCCP — with DTLS support
  • SRTP — with DTLS support (DTLS-SRTP) and Secure Real-Time Transport Control Protocol (SRTCP)

References

Page Template:Reflist/styles.css has no content.

  1. ^ Page Module:Citation/CS1/styles.css has no content."BoringSSL README.md". boringssl.googlesource.com. Retrieved 2025-11-11.
  2. ^ The features listed are for the closed source version
  3. ^ Page Module:Citation/CS1/styles.css has no content."wolfSSL product description". Retrieved 2016-05-03.
  4. ^ Page Module:Citation/CS1/styles.css has no content."wolfSSL Embedded SSL/TLS". Retrieved 2016-05-03.
  5. ^ Script error: No such module "template wrapper".
  6. ^ Page Module:Citation/CS1/styles.css has no content.Vaudenay, Serge (2001). "CBC-Padding: Security Flaws in SSL, IPsec, WTLS,..." (PDF).
  7. ^ a b Script error: No such module "template wrapper".
  8. ^ Page Module:Citation/CS1/styles.css has no content."Rizzo/Duong BEAST Countermeasures". Archived from the original on 2016-03-11.
  9. ^ Page Module:Citation/CS1/styles.css has no content.Möller, Bodo; Duong, Thai; Kotowicz, Krzysztof (September 2014). "This POODLE Bites: Exploiting The SSL 3.0 Fallback" (PDF). Archived from the original (PDF) on 15 October 2014. Retrieved 15 October 2014.
  10. ^ Script error: No such module "template wrapper".
  11. ^ a b c Script error: No such module "template wrapper".
  12. ^ a b Script error: No such module "template wrapper".
  13. ^ a b Script error: No such module "template wrapper".
  14. ^ a b Script error: No such module "template wrapper".
  15. ^ a b Script error: No such module "template wrapper".
  16. ^ a b c d e f g h i j k l Script error: No such module "template wrapper".
  17. ^ a b Script error: No such module "template wrapper".
  18. ^ Page Module:Citation/CS1/styles.css has no content."Version 1.11.13, 2015-01-11 — Botan". 2015-01-11. Archived from the original on 2015-01-09. Retrieved 2015-01-16.
  19. ^ a b c Page Module:Citation/CS1/styles.css has no content."RSA BSAFE Technical Specification Comparison Tables" (PDF). Archived from the original (PDF) on 2015-09-24. Retrieved 2015-01-09.
  20. ^ a b c d e f Page Module:Citation/CS1/styles.css has no content."[gnutls-devel] GnuTLS 3.4.0 released". 2015-04-08. Retrieved 2015-04-16.
  21. ^ Page Module:Citation/CS1/styles.css has no content."[gnutls-devel] GnuTLS 3.6.3". 2018-07-16. Retrieved 2018-09-16.
  22. ^ Page Module:Citation/CS1/styles.css has no content."Java SE Development Kit 8, Update 31 Release Notes". Retrieved 2024-01-14.
  23. ^ a b Page Module:Citation/CS1/styles.css has no content."Release Note: Disable TLS 1.0 and 1.1". Retrieved 2024-01-14.
  24. ^ a b c d e f g h i j k l m Page Module:Citation/CS1/styles.css has no content."OpenBSD 5.6 Released". 2014-11-01. Retrieved 2015-01-20.
  25. ^ Page Module:Citation/CS1/styles.css has no content."LibreSSL 2.3.0 Released". 2015-09-23. Retrieved 2015-09-24.
  26. ^ Page Module:Citation/CS1/styles.css has no content."LibreSSL 3.3.3 Released". 2021-05-04. Retrieved 2021-05-04.
  27. ^ Page Module:Citation/CS1/styles.css has no content."MatrixSSL - News". Archived from the original on 2015-02-14. Retrieved 2014-11-09.
  28. ^ a b c d Page Module:Citation/CS1/styles.css has no content."Mbed TLS 3.0.0 branch released". GitHub. 2021-07-07. Retrieved 2021-08-13.
  29. ^ a b c Page Module:Citation/CS1/styles.css has no content."mbed TLS 2.0.0 released". 2015-07-10. Retrieved 2015-07-14.
  30. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.19 release notes". Mozilla Developer Network. Mozilla. Archived from the original on 2015-06-05. Retrieved 2015-05-06.
  31. ^ a b Page Module:Citation/CS1/styles.css has no content."NSS 3.14 release notes". Mozilla Developer Network. Mozilla. Archived from the original on 2013-01-17. Retrieved 2012-10-27.
  32. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.15.1 release notes". Mozilla Developer Network. Mozilla. Retrieved 2013-08-10.
  33. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.39 release notes". Mozilla Developer Network. Mozilla. 2018-08-31. Archived from the original on 2021-12-07. Retrieved 2018-09-15.
  34. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.16.2 release notes". Mozilla Developer Network. Mozilla. 2014-06-30. Archived from the original on 2021-12-07. Retrieved 2014-06-30.
  35. ^ a b c d e f g h i j k l m Page Module:Citation/CS1/styles.css has no content."OpenSSL 1.1.0 Series Release Notes". www.openssl.org. Archived from the original on 2018-03-17. Retrieved 2016-09-03.
  36. ^ a b Page Module:Citation/CS1/styles.css has no content."Major changes between OpenSSL 1.0.0h and OpenSSL 1.0.1 [14 Mar 2012]". 2012-03-14. Archived from the original on December 5, 2014. Retrieved 2015-01-20.
  37. ^ a b c d e f Page Module:Citation/CS1/styles.css has no content."Major changes between OpenSSL 1.0.1l and OpenSSL 1.0.2 [22 Jan 2015]". Archived from the original on September 4, 2014. Retrieved 2015-01-22.
  38. ^ a b c d e f g h i j k Page Module:Citation/CS1/styles.css has no content."rustls implemented and unimplemented features documentation". Retrieved 2024-08-28.
  39. ^ Page Module:Citation/CS1/styles.css has no content."S2N Readme". GitHub. 2019-12-21.
  40. ^ Page Module:Citation/CS1/styles.css has no content."TLS Cipher Suites (Windows)". msdn.microsoft.com. 14 July 2023.
  41. ^ a b Page Module:Citation/CS1/styles.css has no content."TLS Cipher Suites in Windows Vista (Windows)". msdn.microsoft.com. 25 October 2021.
  42. ^ a b c Page Module:Citation/CS1/styles.css has no content."Cipher Suites in TLS/SSL (Schannel SSP) (Windows)". msdn.microsoft.com. 14 July 2023.
  43. ^ a b Page Module:Citation/CS1/styles.css has no content."An update is available that adds support for DTLS in Windows 7 SP1 and Windows Server 2008 R2 SP1". Microsoft. Retrieved 13 November 2012.
  44. ^ Page Module:Citation/CS1/styles.css has no content."Protocols in TLS/SSL (Schannel SSP)". Microsoft. 2022-05-25. Retrieved 2023-11-18.
  45. ^ Page Module:Citation/CS1/styles.css has no content."Protocols in TLS/SSL (Schannel SSP)". 25 May 2022. Retrieved 6 November 2022.
  46. ^ Page Module:Citation/CS1/styles.css has no content."@badger: the 1.3 stuff is apparently in iOS 11 and macOS 10.13". 2018-03-09. Retrieved 2018-03-09.
  47. ^ Page Module:Citation/CS1/styles.css has no content."[wolfssl] wolfSSL 3.6.6 Released". 2015-08-20. Retrieved 2015-08-24.
  48. ^ Page Module:Citation/CS1/styles.css has no content."[wolfssl] wolfSSL 3.13.0 Released". 2017-12-21. Retrieved 2022-01-17.
  49. ^ Page Module:Citation/CS1/styles.css has no content."Erlang -- Standards Compliance".
  50. ^ a b c Page Module:Citation/CS1/styles.css has no content."Security Enhancements in JDK 8". docs.oracle.com.
  51. ^ Page Module:Citation/CS1/styles.css has no content."Bug 663320 - (NSA-Suite-B-TLS) Implement RFC6460 (NSA Suite B profile for TLS)". Mozilla. Retrieved 2014-05-19.
  52. ^ Page Module:Citation/CS1/styles.css has no content."Introducing Compliance to Suite B Cryptography". 18 September 2012.
  53. ^ Page Module:Citation/CS1/styles.css has no content."Speeds and Feeds › Secure or Compliant, Pick One". Archived from the original on December 27, 2013.
  54. ^ Page Module:Citation/CS1/styles.css has no content."Search - Cryptographic Module Validation Program - CSRC". csrc.nist.gov. Archived from the original on 2014-12-26. Retrieved 2014-03-18.
  55. ^ Page Module:Citation/CS1/styles.css has no content.""Is botan FIPS 140 certified?" Frequently Asked Questions — Botan". Archived from the original on 2014-11-29. Retrieved 2014-11-16.
  56. ^ Page Module:Citation/CS1/styles.css has no content."Search - Cryptographic Module Validation Program - CSRC". csrc.nist.gov. 11 October 2016.
  57. ^ Page Module:Citation/CS1/styles.css has no content."cryptlib". 11 October 2013. Archived from the original on 11 October 2013.
  58. ^ Page Module:Citation/CS1/styles.css has no content."B.5 Certification". GnuTLS 3.7.7. Retrieved 26 September 2022.
  59. ^ Page Module:Citation/CS1/styles.css has no content."Matrix SSL Toolkit" (PDF).
  60. ^ Page Module:Citation/CS1/styles.css has no content."Is mbed TLS FIPS certified? - Mbed TLS documentation". Mbed TLS documentation.
  61. ^ Page Module:Citation/CS1/styles.css has no content."FIPS Validation - MozillaWiki". wiki.mozilla.org.
  62. ^ Page Module:Citation/CS1/styles.css has no content."OpenSSL and FIPS 140-2". Archived from the original on 2013-05-28. Retrieved 2014-11-15.
  63. ^ Page Module:Citation/CS1/styles.css has no content."rustls FIPS documentation". Retrieved 2024-08-28.
  64. ^ Page Module:Citation/CS1/styles.css has no content."Microsoft FIPS 140 Validated Cryptographic Modules".
  65. ^ Page Module:Citation/CS1/styles.css has no content."wolfCrypt FIPS 140-2 Information - wolfSSL Embedded SSL/TLS Library".
  66. ^ a b c d e f g h i j k l m n o p q r s t u v w x y z aa ab ac ad ae af ag ah Script error: No such module "template wrapper".
  67. ^ a b c d e Page Module:Citation/CS1/styles.css has no content."LibreSSL 2.1.2 released". 2014-12-09. Retrieved 2015-01-20.
  68. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.20 release notes". Mozilla. 2015-08-19. Archived from the original on 2021-12-07. Retrieved 2015-08-20.
  69. ^ a b c d Page Module:Citation/CS1/styles.css has no content.Mozilla.org. "Bug 518787 - Add GOST crypto algorithm support in NSS". Retrieved 2014-07-01.
  70. ^ a b c d Page Module:Citation/CS1/styles.css has no content.Mozilla.org. "Bug 608725 - Add Russian GOST cryptoalgorithms to NSS and Thunderbird". Retrieved 2014-07-01.
  71. ^ a b c d Page Module:Citation/CS1/styles.css has no content."OpenSSL: CVS Web Interface". Retrieved 2014-11-12.{{cite web}}: CS1 maint: deprecated archival service (link)
  72. ^ a b c d e f g h i j k l m n o Extensions to support GOST in Schannel might be available.[citation needed]
  73. ^ a b c d Page Module:Citation/CS1/styles.css has no content."Microsoft Security Advisory 3174644". 14 October 2022.
  74. ^ a b c Page Module:Citation/CS1/styles.css has no content."Microsoft Security Bulletin MS14-066 - Critical (Section Update FAQ)". Microsoft. November 11, 2014. Retrieved 11 November 2014.
  75. ^ a b c Page Module:Citation/CS1/styles.css has no content.Thomlinson, Matt (November 11, 2014). "Hundreds of Millions of Microsoft Customers Now Benefit from Best-in-Class Encryption". Microsoft Security. Retrieved 11 November 2014.
  76. ^ a b Page Module:Citation/CS1/styles.css has no content."Update adds new TLS cipher suites and changes cipher suite priorities in Windows 8.1 and Windows Server 2012 R2". support.microsoft.com.
  77. ^ a b c d e f Script error: No such module "template wrapper".
  78. ^ a b c d e f Script error: No such module "template wrapper".
  79. ^ a b Script error: No such module "template wrapper".
  80. ^ a b Script error: No such module "template wrapper".
  81. ^ Page Module:Citation/CS1/styles.css has no content."RSA BSAFE SSL-J 6.2.4 Release Notes". 2018-09-05. Archived from the original on 2018-09-10.
  82. ^ a b c Page Module:Citation/CS1/styles.css has no content."LibreSSL 2.0.4 released". Retrieved 2014-08-04.
  83. ^ a b c Page Module:Citation/CS1/styles.css has no content."Bug 405155 - add support for TLS-SRP, rfc5054". Mozilla. Retrieved 2014-01-25.
  84. ^ a b c d Page Module:Citation/CS1/styles.css has no content."Bug 306435 - Mozilla browsers should support the new IETF TLS-PSK protocol to help reduce phishing". Mozilla. Retrieved 2014-01-25.
  85. ^ Page Module:Citation/CS1/styles.css has no content."Bug 1170510 - Implement NSS server side support for DH_anon". Mozilla. Retrieved 2015-06-03.
  86. ^ Page Module:Citation/CS1/styles.css has no content."Bug 236245 - Update ECC/TLS to conform to RFC 4492". Mozilla. Retrieved 2014-06-09.
  87. ^ Page Module:Citation/CS1/styles.css has no content."Changes between 0.9.6h and 0.9.7 [31 Dec 2002]". Retrieved 2016-01-29.
  88. ^ a b Page Module:Citation/CS1/styles.css has no content."Changes between 0.9.8n and 1.0.0 [29 Mar 2010]". Retrieved 2016-01-29.
  89. ^ Page Module:Citation/CS1/styles.css has no content."wolfSSL (Formerly CyaSSL) Release 3.9.0 (03/18/2016)". 2016-03-18. Retrieved 2016-04-05.
  90. ^ Script error: No such module "template wrapper".
  91. ^ Script error: No such module "template wrapper".
  92. ^ Script error: No such module "template wrapper".
  93. ^ Script error: No such module "template wrapper".
  94. ^ Script error: No such module "template wrapper".
  95. ^ Script error: No such module "template wrapper".
  96. ^ Page Module:Citation/CS1/styles.css has no content."MatrixSSL 3.8.3". Archived from the original on 2017-01-19. Retrieved 2017-01-18.
  97. ^ Page Module:Citation/CS1/styles.css has no content."mbed TLS 2.0 defaults implement best practices". Retrieved 2017-01-18.
  98. ^ Page Module:Citation/CS1/styles.css has no content."Bug 672600 - Use DNSSEC/DANE chain stapled into TLS handshake in certificate chain validation". Mozilla. Retrieved 2014-06-18.
  99. ^ Page Module:Citation/CS1/styles.css has no content."CRL Validation · Issue #3499 · aws/s2n-tls". GitHub. Retrieved 2022-11-01.
  100. ^ Page Module:Citation/CS1/styles.css has no content."OCSP digest support for SHA-256 · Issue #2854 · aws/s2n-tls · GitHub". GitHub. Retrieved 2022-11-01.
  101. ^ Page Module:Citation/CS1/styles.css has no content."[RFC 6962] s2n Client can Validate Signed Certificate Timestamp TLS Extension · Issue #457 · aws/s2n-tls · GitHub". GitHub. Retrieved 2022-11-01.
  102. ^ a b Page Module:Citation/CS1/styles.css has no content."How Certificate Revocation Works". Microsoft TechNet. Microsoft. March 16, 2012. Retrieved July 10, 2013.
  103. ^ a b
    • Script error: No such module "template wrapper".
    • Script error: No such module "template wrapper".
  104. ^ a b RFC 6655, RFC 7251
  105. ^ a b c d Script error: No such module "template wrapper".
  106. ^ a b Script error: No such module "template wrapper".
  107. ^ a b c d Script error: No such module "template wrapper".
  108. ^ a b Script error: No such module "template wrapper".
  109. ^ a b Page Module:Citation/CS1/styles.css has no content."Sweet32: Birthday attacks on 64-bit block ciphers in TLS and OpenVPN". sweet32.info.
  110. ^ a b Script error: No such module "template wrapper".
  111. ^ a b Page Module:Citation/CS1/styles.css has no content."Version 1.11.12, 2015-01-02 — Botan". 2015-01-02. Retrieved 2015-01-09.
  112. ^ Page Module:Citation/CS1/styles.css has no content."gnutls 3.6.0". 2017-09-21. Retrieved 2018-01-07.
  113. ^ Page Module:Citation/CS1/styles.css has no content."gnutls 3.4.12". 2016-05-20. Archived from the original on 2016-10-13. Retrieved 2016-05-29.
  114. ^ Page Module:Citation/CS1/styles.css has no content."Java SE DevelopmentK Kit 10 - 10.0.1 Release Notes". 2018-04-17. Retrieved 2024-01-14.
  115. ^ Page Module:Citation/CS1/styles.css has no content."JDK 12 Release Notes". Retrieved 2024-01-14.
  116. ^ a b c d Page Module:Citation/CS1/styles.css has no content."Changes in 3.8.3". GitHub. Retrieved 2016-06-19.[permanent dead link]
  117. ^ Page Module:Citation/CS1/styles.css has no content."PolarSSL 1.3.8 release notes". Archived from the original on 2014-07-14.
  118. ^ a b Page Module:Citation/CS1/styles.css has no content."Mbed TLS 2.11.0, 2.7.4 and 2.1.13 released". Retrieved 2018-08-30.
  119. ^ Page Module:Citation/CS1/styles.css has no content."Mbed TLS 2.12.0, 2.7.5 and 2.1.14 released". Retrieved 2018-08-30.
  120. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.25 release notes". Mozilla Developer Network. Mozilla. Archived from the original on 2021-12-07. Retrieved 2016-07-01.
  121. ^ Page Module:Citation/CS1/styles.css has no content."Bug 940119 - libssl does not support any TLS_ECDHE_*_CAMELLIA_*_GCM cipher suites". Mozilla. Retrieved 2013-11-19.
  122. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.12 is released". Retrieved 2013-11-19.
  123. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.12.3 Release Notes". Mozilla Developer Network. Mozilla. Archived from the original on 2023-04-02. Retrieved 2023-04-01.
  124. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.23 release notes". Mozilla Developer Network. Mozilla. Archived from the original on 2021-04-14. Retrieved 2016-03-09.
  125. ^ Page Module:Citation/CS1/styles.css has no content."openssl/CHANGES at OpenSSL_1_0_1-stable · openssl/openssl". GitHub. Retrieved 2015-01-20.
  126. ^ Page Module:Citation/CS1/styles.css has no content."OpenSSL 1.1.1 Series Release Notes". www.openssl.org. Archived from the original on 2024-01-16.
  127. ^ Page Module:Citation/CS1/styles.css has no content."Cipher Suites in TLS/SSL (Schannel SSP) - Win32 apps". docs.microsoft.com. 14 July 2023.
  128. ^ a b c Page Module:Citation/CS1/styles.css has no content."Qualys SSL Labs - Projects / User Agent Capabilities: IE 11 / Win 10 Preview". dev.ssllabs.com. Archived from the original on 2023-07-14.
  129. ^ RFC 5469
  130. ^ a b Page Module:Citation/CS1/styles.css has no content."Sweet32: Birthday attacks on 64-bit block ciphers in TLS and OpenVPN".
  131. ^ Page Module:Citation/CS1/styles.css has no content."Version 1.11.15, 2015-03-08 — Botan". 2015-03-08. Retrieved 2015-03-11.
  132. ^ Page Module:Citation/CS1/styles.css has no content."Java Cryptography Architecture Oracle Providers Documentation". docs.oracle.com.
  133. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.15.3 release notes". Mozilla Developer Network. Mozilla. Archived from the original on 2014-06-05. Retrieved 2014-07-13.
  134. ^ Page Module:Citation/CS1/styles.css has no content."MFSA 2013-103: Miscellaneous Network Security Services (NSS) vulnerabilities". Mozilla. Retrieved 2014-07-13.
  135. ^ a b c Page Module:Citation/CS1/styles.css has no content."RC4 is now disabled in Microsoft Edge and Internet Explorer 11 - Microsoft Edge Dev BlogMicrosoft Edge Dev Blog". blogs.windows.com. 2016-08-09.
  136. ^ a b Page Module:Citation/CS1/styles.css has no content."wolfSSL (Formerly CyaSSL) Release 3.7.0 (10/26/2015)". 2015-10-26. Retrieved 2015-11-19.
  137. ^ a b c d e RFC 8446
  138. ^ a b c d e RFC 8422
  139. ^ a b c RFC 7027
  140. ^ a b c Page Module:Citation/CS1/styles.css has no content."Version 1.11.5, 2013-11-10 — Botan". 2013-11-10. Retrieved 2015-01-23.
  141. ^ Page Module:Citation/CS1/styles.css has no content."An overview of the new features in GnuTLS 3.5.0". 2016-05-02. Retrieved 2016-12-09.
  142. ^ Page Module:Citation/CS1/styles.css has no content."gnutls 3.6.12". 2020-02-01. Retrieved 2021-08-31.
  143. ^ a b Page Module:Citation/CS1/styles.css has no content."JDK 13 Early-Access Release Notes". Archived from the original on 2020-04-01. Retrieved 2019-06-20.
  144. ^ a b Page Module:Citation/CS1/styles.css has no content."JEP 339: Edwards-Curve Digital Signature Algorithm (EdDSA)". Retrieved 2024-01-14.
  145. ^ Page Module:Citation/CS1/styles.css has no content."LibreSSL 2.5.1 release notes". OpenBSD. 2017-01-31. Retrieved 2017-02-23.
  146. ^ Page Module:Citation/CS1/styles.css has no content."MatrixSSL 4.0 changelog". GitHub. Retrieved 2018-09-18.
  147. ^ Page Module:Citation/CS1/styles.css has no content."PolarSSL 1.3.3 released". 2013-12-31. Archived from the original on 2014-01-07. Retrieved 2015-01-23.
  148. ^ Page Module:Citation/CS1/styles.css has no content."Mbed TLS 2.9.0, 2.7.3 and 2.1.12 released". Retrieved 2018-08-30.
  149. ^ a b c Page Module:Citation/CS1/styles.css has no content."PolarSSL 1.3.1 released". 2013-10-15. Archived from the original on 2015-01-23. Retrieved 2015-01-23.
  150. ^ Page Module:Citation/CS1/styles.css has no content."Bug 957105 - Add support for curve25519 Key Exchange and UMAC MAC support for TLS". Mozilla. Retrieved 2017-02-23.
  151. ^ Page Module:Citation/CS1/styles.css has no content."Bug 1305243 - Support for X448". Mozilla. Retrieved 2022-08-04.
  152. ^ Page Module:Citation/CS1/styles.css has no content."Bug 1597057 - Curve448 or named Ed448-Goldilocks support needed (both X448 key exchange and Ed448 signature algorithm )". Mozilla. Retrieved 2022-08-04.
  153. ^ a b c Page Module:Citation/CS1/styles.css has no content."Bug 943639 - Support for Brainpool ECC Curve (rfc5639)". Mozilla. Retrieved 2014-01-25.
  154. ^ Page Module:Citation/CS1/styles.css has no content."OpenSSL 1.1.0x Release Notes". 25 August 2016. Archived from the original on 18 May 2018. Retrieved 18 May 2018.
  155. ^ Page Module:Citation/CS1/styles.css has no content."OpenSSL GitHub Issue #487 Tracker". GitHub. 2 December 2015. Retrieved 18 May 2018.
  156. ^ Page Module:Citation/CS1/styles.css has no content."OpenSSL CHANGES". 1 May 2018. Archived from the original on 18 May 2018. Retrieved 18 May 2018.
  157. ^ Page Module:Citation/CS1/styles.css has no content."OpenSSL GitHub Issue #5049 Tracker". GitHub. 9 January 2018. Retrieved 18 May 2018.
  158. ^ Page Module:Citation/CS1/styles.css has no content."RusTLS Changelog". github.com. 12 September 2024. pp. 0.14.0. Retrieved 9 March 2026. When using aws-lc-rs as the crypto provider, NIST P-521 signatures are now supported.
  159. ^ Page Module:Citation/CS1/styles.css has no content."wolfSSL (Formerly CyaSSL) Release 3.4.6 (03/30/2015)". 2015-03-30. Retrieved 2015-11-19.
  160. ^ Page Module:Citation/CS1/styles.css has no content."wolfSSL Release 4.4.0 (04/22/2020)". 2020-04-22. Retrieved 2022-10-18.
  161. ^ Page Module:Citation/CS1/styles.css has no content."Release Note: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default". JDK Bug System (JBS). Retrieved 25 December 2024.
  162. ^ Page Module:Citation/CS1/styles.css has no content."Release Note: Removal of Legacy Elliptic Curves". JDK Bug System (JBS). Retrieved 25 December 2024.
  163. ^ a b Negotiation of arbitrary curves has been shown to be insecure for certain curve sizes Page Module:Citation/CS1/styles.css has no content.Mavrogiannopoulos, Nikos and Vercautern, Frederik and Velichkov, Vesselin and Preneel, Bart (2012). "A cross-protocol attack on the TLS protocol" (PDF). Proceedings of the 2012 ACM conference on Computer and communications security. Association for Computing Machinery. pp. 62–72. doi:10.1145/2382196.2382206. ISBN 978-1-4503-1651-4.{{cite conference}}: CS1 maint: multiple names: authors list (link)
  164. ^ Page Module:Citation/CS1/styles.css has no content."SHA2 and Windows". Retrieved 2024-12-25.
  165. ^ RFC 3749
  166. ^ RFC 5746
  167. ^ a b c RFC 6066
  168. ^ RFC 7301
  169. ^ RFC 6091
  170. ^ RFC 4680
  171. ^ Script error: No such module "template wrapper".
  172. ^ Script error: No such module "template wrapper".
  173. ^ Script error: No such module "template wrapper".
  174. ^ RFC 7627
  175. ^ RFC 7685
  176. ^ RFC 7250
  177. ^ Page Module:Citation/CS1/styles.css has no content."Version 1.11.16, 2015-03-29 — Botan". 2016-03-29. Retrieved 2016-09-08.
  178. ^ Page Module:Citation/CS1/styles.css has no content."Version 1.11.10, 2014-12-10 — Botan". 2014-12-10. Retrieved 2014-12-14.
  179. ^ a b Page Module:Citation/CS1/styles.css has no content."Version 1.11.26, 2016-01-04 — Botan". 2016-01-04. Retrieved 2016-02-25.
  180. ^ Present, but disabled by default due to lack of use by any implementation.
  181. ^ Page Module:Citation/CS1/styles.css has no content."gnutls 3.2.0". Archived from the original on 2016-01-31. Retrieved 2015-01-26.
  182. ^ Page Module:Citation/CS1/styles.css has no content.Mavrogiannopoulos, Nikos (August 21, 2017). "[gnutls-help] GnuTLS 3.6.0 released".
  183. ^ Page Module:Citation/CS1/styles.css has no content."gnutls 3.4.4". Archived from the original on 2017-07-17. Retrieved 2015-08-25.
  184. ^ Page Module:Citation/CS1/styles.css has no content."%DUMBFW priority keyword". Retrieved 2017-04-30.
  185. ^ Page Module:Citation/CS1/styles.css has no content."gnutls 3.6.6". 2019-01-25. Retrieved 2019-09-01.
  186. ^ Page Module:Citation/CS1/styles.css has no content."LibreSSL 2.1.3 released". 2015-01-22. Retrieved 2015-01-22.
  187. ^ Page Module:Citation/CS1/styles.css has no content."LibreSSL 2.1.4 released". 2015-03-04. Retrieved 2015-03-04.
  188. ^ Page Module:Citation/CS1/styles.css has no content."MatrixSSL - News". 2014-12-04. Archived from the original on 2015-02-14. Retrieved 2015-01-26.
  189. ^ Page Module:Citation/CS1/styles.css has no content."Download overview - PolarSSL". 2014-04-11. Archived from the original on 2015-02-09. Retrieved 2015-01-26.
  190. ^ a b c Page Module:Citation/CS1/styles.css has no content."mbed TLS 1.3.10 released". 2015-02-08. Archived from the original on 2015-02-09. Retrieved 2015-02-09.
  191. ^ a b Page Module:Citation/CS1/styles.css has no content."NSS 3.15.5 release notes". Mozilla Developer Network. Mozilla. Retrieved 2015-01-26.{{cite web}}: CS1 maint: deprecated archival service (link)
  192. ^ Page Module:Citation/CS1/styles.css has no content."Bug 961416 - Support RFC6091 - Using OpenPGP Keys for Transport Layer Security Authentication (TLS1.2)". Mozilla. Retrieved 2014-06-18.
  193. ^ Page Module:Citation/CS1/styles.css has no content."Bug 972145 - Implement the encrypt-then-MAC TLS extension". Mozilla. Retrieved 2014-11-06.
  194. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.17.1 release notes". Archived from the original on 2019-04-19. Retrieved 2014-10-17.
  195. ^ Page Module:Citation/CS1/styles.css has no content."NSS 3.21 release notes". Archived from the original on 2021-12-07. Retrieved 2015-11-14.
  196. ^ Page Module:Citation/CS1/styles.css has no content."OpenSSL Security Advisory [15 Oct 2014]". 2014-10-15.
  197. ^ Page Module:Citation/CS1/styles.css has no content."Major changes between OpenSSL 1.0.1f and OpenSSL 1.0.1g [7 Apr 2014]". 2014-04-07. Archived from the original on 2015-01-20. Retrieved 2015-02-10.
  198. ^ Page Module:Citation/CS1/styles.css has no content."OpenSSL Announces Final Release of OpenSSL 3.2.0". 2023-11-23. Retrieved 2024-10-11.
  199. ^ rustls does not implement earlier versions that would warrant protection against insecure downgrade
  200. ^ a b c d Page Module:Citation/CS1/styles.css has no content."Microsoft Security Bulletin MS15-121". March 2023. Retrieved 2024-04-28.
  201. ^ a b Page Module:Citation/CS1/styles.css has no content."What's New in TLS/SSL (Schannel SSP)". 31 August 2016. Retrieved 2024-04-28.
  202. ^ Page Module:Citation/CS1/styles.css has no content."wolfSSL Version 4.2.0 is Now Available!". 22 October 2019. Retrieved 2021-08-13.
  203. ^ Page Module:Citation/CS1/styles.css has no content."wolfSSL supports Raw Public Keys". August 2023. Retrieved 2024-10-25.
  204. ^ Page Module:Citation/CS1/styles.css has no content."Version 1.11.31, 2015-08-30 — Botan". 2016-08-30. Retrieved 2016-09-08.
  205. ^ Page Module:Citation/CS1/styles.css has no content."Trusted Platform Module (TPM) — Botan".
  206. ^ Page Module:Citation/CS1/styles.css has no content."JEP 164: Leverage CPU Instructions for AES Cryptography". openjdk.org.
  207. ^ Page Module:Citation/CS1/styles.css has no content."RSA SecurID PASSCODE Request". sso.rsasecurity.com.
  208. ^ Page Module:Citation/CS1/styles.css has no content."Comparison of BSAFE TLS libraries: Micro Edition Suite vs SSL-J | Dell Malaysia".
  209. ^ Page Module:Citation/CS1/styles.css has no content.Mavrogiannopoulos, Nikos (October 9, 2016). "[gnutls-devel] gnutls 3.5.5".
  210. ^ Page Module:Citation/CS1/styles.css has no content."Trusted Platform Module (GnuTLS 3.8.4)".
  211. ^ Page Module:Citation/CS1/styles.css has no content."Java SSL provider with AES-NI support". stackoverflow.com.
  212. ^ Page Module:Citation/CS1/styles.css has no content."PolarSSL 1.3.3 released". 2013-12-31. Archived from the original on 2014-01-07. Retrieved 2014-01-07. We've incorporated support for AES-NI in our AES and GCM modules.
  213. ^ a b Page Module:Citation/CS1/styles.css has no content."NXP/Plug-and-trust". GitHub.
  214. ^ Page Module:Citation/CS1/styles.css has no content."ARMmbed/Mbed-os-atecc608a". GitHub.
  215. ^ Normally NSS's libssl performs all operations via the PKCS#11 interface, either to hardware or software tokens
  216. ^ Page Module:Citation/CS1/styles.css has no content."Bug 706024 - AES-NI enhancements to NSS on Sandy Bridge systems". Retrieved 2013-09-28.
  217. ^ Page Module:Citation/CS1/styles.css has no content."Bug 479744 - RFE : VIA Padlock ACE support (hardware RNG, AES, SHA1 and SHA256)". Retrieved 2014-04-11.
  218. ^ Page Module:Citation/CS1/styles.css has no content."Подключаем Рутокен ЭЦП к OpenSSL" (in русский). 16 December 2011.
  219. ^ Page Module:Citation/CS1/styles.css has no content."Поддержка Рутокен ЭЦП в OpenSSL (Страница 1) — Рутокен и Open Source — Форум Рутокен" (in русский).
  220. ^ Page Module:Citation/CS1/styles.css has no content."OpenSSL ГОСТ" (in русский). Archived from the original on 2018-06-23.
  221. ^ Page Module:Citation/CS1/styles.css has no content."git.openssl.org Git - openssl.git/commitdiff". git.openssl.org.
  222. ^ Page Module:Citation/CS1/styles.css has no content."Tpm2-software/Tpm2-openssl". GitHub.
  223. ^ Page Module:Citation/CS1/styles.css has no content."Provider - OpenSSL Documentation".
  224. ^ Page Module:Citation/CS1/styles.css has no content."STSW-STSA110-SSL - STSAFE-A integration within OpenSSL security stack". STMicroelectronics.
  225. ^ SecECKey.c on GitHub
  226. ^ Page Module:Citation/CS1/styles.css has no content."Crypto Officer Role Guide for FIPS 140-2 Compliance OS X Mountain Lion v10.8" (PDF). Apple Inc. 2013.
  227. ^ Page Module:Citation/CS1/styles.css has no content."CAAM support in wolfSSL". 10 March 2020.
  228. ^ Page Module:Citation/CS1/styles.css has no content."wolfTPM Portable TPM 2.0 Library".
  229. ^ Page Module:Citation/CS1/styles.css has no content."Announcing wolfSSL TPM support for the Espressif ESP32". 20 June 2024.
  230. ^ Page Module:Citation/CS1/styles.css has no content."WolfSSL SSL/TLS Support for NXP SE050 – wolfSSL". 22 February 2024.
  231. ^ Page Module:Citation/CS1/styles.css has no content."WolfSSL support for the ATECC608 Crypto Coprocessor – wolfSSL". 13 October 2021.
  232. ^ Page Module:Citation/CS1/styles.css has no content."WolfSSL support for STSAFE-A100 crypto coprocessor – wolfSSL". 20 September 2018.
  233. ^ Page Module:Citation/CS1/styles.css has no content."Support for MAXQ1065 in wolfSSL – wolfSSL". 29 November 2022.
  234. ^ Page Module:Citation/CS1/styles.css has no content."LibreSSL 2.2.1 Released". 2015-07-08. Retrieved 2016-01-30.
  235. ^ Page Module:Citation/CS1/styles.css has no content."ktls integration for rustls". GitHub. Retrieved 2024-08-29.
  236. ^ Page Module:Citation/CS1/styles.css has no content."wolfProvider". 2021-11-10. Retrieved 2022-01-17.
  237. ^ a b Script error: No such module "template wrapper".
  238. ^ Page Module:Citation/CS1/styles.css has no content."libp11: PKCS#11 wrapper library". 19 January 2018 – via GitHub.
  239. ^ Page Module:Citation/CS1/styles.css has no content."Windows CNG bridge for rustls". GitHub. Retrieved 2024-08-29.
  240. ^ On the fly replaceable/augmentable.
  241. ^ Page Module:Citation/CS1/styles.css has no content."Nss compat ossl - Fedora Project Wiki". fedoraproject.org.
  242. ^ Page Module:Citation/CS1/styles.css has no content."Struct CryptoProvider". docs.rs/rustls. Retrieved 9 March 2026.
  243. ^ Page Module:Citation/CS1/styles.css has no content."rustls". crates.io. 24 February 2026. Retrieved 10 March 2026.
  244. ^ Page Module:Citation/CS1/styles.css has no content."rustls-openssl compatibility layer". GitHub. Retrieved 2024-08-29.
  245. ^ a b Page Module:Citation/CS1/styles.css has no content."NSPR". Mozilla Developer Network.
  246. ^ For Unix/Linux it uses /dev/urandom if available, for Windows it uses CAPI. For other platforms it gets data from clock, and tries to open system files. NSS has a set of platform dependent functions it uses to determine randomness.

Lua error in package.lua at line 80: module 'Module:Navbox/configuration' not found.

Retrieved from "https://cosmopedia.co/index.php?title=Comparison_of_TLS_implementations&oldid=9146127"