tls

Feb 11, 2025

Changes in this version

type ClientHelloInfo

+ Extensions []uint16

type Config

+ EncryptedClientHelloKeys []EncryptedClientHelloKey

type CurveID

+ const X25519MLKEM768

+ type EncryptedClientHelloKey struct

+ Config []byte

+ PrivateKey []byte

+ SendAsRetry bool

Aug 13, 2024

Changes in this version

type Config

+ EncryptedClientHelloConfigList []byte

+ EncryptedClientHelloRejectionVerify func(ConnectionState) error

type ConnectionState

+ ECHAccepted bool

+ type ECHRejectionError struct

+ RetryConfigList []byte

+ func (e *ECHRejectionError) Error() string

type QUICConfig

+ EnableSessionEvents bool

type QUICConn

+ func (q *QUICConn) StoreSession(session *SessionState) error

type QUICEvent

+ SessionState *SessionState

type QUICEventKind

+ const QUICResumeSession

+ const QUICStoreSession

type QUICSessionTicketOptions

+ Extra [][]byte

Aug 8, 2023 GO-2023-2044 +1 more

  GO-2023-2044: Panic when processing post-handshake message on QUIC connections in crypto/tls

  GO-2023-2045: Memory exhaustion in QUIC connection handling in crypto/tls

Changes in this version

+ const QUICEncryptionLevelApplication

+ const QUICEncryptionLevelEarly

+ const QUICEncryptionLevelHandshake

+ const QUICEncryptionLevelInitial

+ func VersionName(version uint16) string

+ type AlertError uint8

+ func (e AlertError) Error() string

type ClientSessionState

+ func NewResumptionState(ticket []byte, state *SessionState) (*ClientSessionState, error)

+ func (cs *ClientSessionState) ResumptionState() (ticket []byte, state *SessionState, err error)

type Config

+ UnwrapSession func(identity []byte, cs ConnectionState) (*SessionState, error)

+ WrapSession func(ConnectionState, *SessionState) ([]byte, error)

+ func (c *Config) DecryptTicket(identity []byte, cs ConnectionState) (*SessionState, error)

+ func (c *Config) EncryptTicket(cs ConnectionState, ss *SessionState) ([]byte, error)

+ type QUICConfig struct

+ TLSConfig *Config

+ type QUICConn struct

+ func QUICClient(config *QUICConfig) *QUICConn

+ func QUICServer(config *QUICConfig) *QUICConn

+ func (q *QUICConn) Close() error

+ func (q *QUICConn) ConnectionState() ConnectionState

+ func (q *QUICConn) HandleData(level QUICEncryptionLevel, data []byte) error

+ func (q *QUICConn) NextEvent() QUICEvent

+ func (q *QUICConn) SendSessionTicket(opts QUICSessionTicketOptions) error

+ func (q *QUICConn) SetTransportParameters(params []byte)

+ func (q *QUICConn) Start(ctx context.Context) error

+ type QUICEncryptionLevel int

+ func (l QUICEncryptionLevel) String() string

+ type QUICEvent struct

+ Data []byte

+ Kind QUICEventKind

+ Level QUICEncryptionLevel

+ Suite uint16

+ type QUICEventKind int

+ const QUICHandshakeDone

+ const QUICNoEvent

+ const QUICRejectedEarlyData

+ const QUICSetReadSecret

+ const QUICSetWriteSecret

+ const QUICTransportParameters

+ const QUICTransportParametersRequired

+ const QUICWriteData

+ type QUICSessionTicketOptions struct

+ EarlyData bool

+ type SessionState struct

+ EarlyData bool

+ Extra [][]byte

+ func ParseSessionState(data []byte) (*SessionState, error)

+ func (s *SessionState) Bytes() ([]byte, error)

Aug 2, 2023 GO-2023-2044 +1 more

  GO-2023-2044: Panic when processing post-handshake message on QUIC connections in crypto/tls

  GO-2023-2045: Memory exhaustion in QUIC connection handling in crypto/tls

Jul 14, 2023 GO-2023-1987 +2 more

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2044: Panic when processing post-handshake message on QUIC connections in crypto/tls

  GO-2023-2045: Memory exhaustion in QUIC connection handling in crypto/tls

Jun 21, 2023 GO-2023-1987 +2 more

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2044: Panic when processing post-handshake message on QUIC connections in crypto/tls

  GO-2023-2045: Memory exhaustion in QUIC connection handling in crypto/tls

Jun 16, 2023 GO-2023-1987 +2 more

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2044: Panic when processing post-handshake message on QUIC connections in crypto/tls

  GO-2023-2045: Memory exhaustion in QUIC connection handling in crypto/tls

Jul 11, 2023 GO-2023-1987

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

Jun 6, 2023 GO-2023-1987

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

May 2, 2023 GO-2023-1987

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

Apr 4, 2023 GO-2023-1987

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

Mar 7, 2023 GO-2023-1987

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

Feb 14, 2023 GO-2023-1987

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

Feb 1, 2023 GO-2023-1570 +1 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

Changes in this version

+ type CertificateVerificationError struct

+ Err error

+ UnverifiedCertificates []*x509.Certificate

+ func (e *CertificateVerificationError) Error() string

+ func (e *CertificateVerificationError) Unwrap() error

Jan 12, 2023 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 4, 2023 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 7, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 6, 2023 GO-2023-2375

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 1, 2023 GO-2023-2375

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 11, 2023 GO-2023-1987 +1 more

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 6, 2023 GO-2023-1987 +1 more

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 2, 2023 GO-2023-1987 +1 more

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 4, 2023 GO-2023-1987 +1 more

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 7, 2023 GO-2023-1987 +1 more

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 14, 2023 GO-2023-1987 +1 more

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 10, 2023 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 6, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 1, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 4, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 6, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 2, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 12, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 6, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 9, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 10, 2023 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 6, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 1, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 4, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 6, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 1, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 12, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 1, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 10, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 12, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 15, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

type Conn

+ func (c *Conn) NetConn() net.Conn

Feb 16, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 31, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 14, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 1, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 12, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 1, 2022 GO-2023-1570 +2 more

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 10, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 12, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 3, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 9, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 6, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 9, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 2, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 4, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 7, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 9, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 16, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

type CertificateRequestInfo

+ func (c *CertificateRequestInfo) Context() context.Context

type ClientHelloInfo

+ func (c *ClientHelloInfo) Context() context.Context

type Conn

+ func (c *Conn) HandshakeContext(ctx context.Context) error

Aug 2, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 13, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 10, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 3, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 9, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 6, 2022 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 9, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 2, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 4, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 7, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 9, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 4, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 12, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 3, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 6, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 1, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 11, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 10, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 16, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 27, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 17, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 4, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 12, 2021 GO-2022-0531 +3 more

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 3, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 6, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 1, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 11, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 10, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 4, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 19, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 3, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 12, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 5, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 14, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 9, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 1, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 11, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

type ClientAuthType

+ func (i ClientAuthType) String() string

type Config

+ VerifyConnection func(ConnectionState) error

type CurveID

+ func (i CurveID) String() string

+ type Dialer struct

+ Config *Config

+ NetDialer *net.Dialer

+ func (d *Dialer) Dial(network, addr string) (net.Conn, error)

+ func (d *Dialer) DialContext(ctx context.Context, network, addr string) (net.Conn, error)

type SignatureScheme

+ func (i SignatureScheme) String() string

Aug 7, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 24, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 10, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 4, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 19, 2021 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 3, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 12, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 5, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 14, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 9, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 1, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 6, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 16, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 14, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 1, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 14, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 8, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 19, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 25, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

+ const TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

+ const TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

+ func CipherSuiteName(id uint16) string

type Certificate

+ SupportedSignatureAlgorithms []SignatureScheme

type CertificateRequestInfo

+ Version uint16

+ func (cri *CertificateRequestInfo) SupportsCertificate(c *Certificate) error

+ type CipherSuite struct

+ ID uint16

+ Insecure bool

+ Name string

+ SupportedVersions []uint16

+ func CipherSuites() []*CipherSuite

+ func InsecureCipherSuites() []*CipherSuite

type ClientHelloInfo

+ func (chi *ClientHelloInfo) SupportsCertificate(c *Certificate) error

Feb 5, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 17, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 6, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 16, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 14, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 1, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 14, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 8, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 19, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 12, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 27, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 9, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 4, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 31, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 17, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 17, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 25, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 3, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

type SignatureScheme

+ const Ed25519

Aug 29, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 21, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 26, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 12, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 27, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 9, 2020 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 4, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 31, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 17, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 17, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 25, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 15, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 13, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 8, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 11, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 6, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 11, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 8, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 5, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 14, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 25, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

+ const TLS_AES_128_GCM_SHA256

+ const TLS_AES_256_GCM_SHA384

+ const TLS_CHACHA20_POLY1305_SHA256

+ const VersionTLS13

type RecordHeaderError

+ Conn net.Conn

Feb 11, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 10, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 18, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 13, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 8, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 11, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 6, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 11, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 8, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 5, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 14, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 23, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 14, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 13, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 2, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 1, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 24, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

type ConnectionState

+ func (cs *ConnectionState) ExportKeyingMaterial(label string, context []byte, length int) ([]byte, error)

Aug 22, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 13, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 3, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 19, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 26, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 23, 2019 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 14, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 13, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 2, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 24, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 6, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 30, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 29, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 16, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

type SignatureScheme

+ const ECDSAWithSHA1

Feb 7, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 25, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 11, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 7, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 6, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 30, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 29, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 7, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 22, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 25, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 4, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 24, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 7, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 24, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 26, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 14, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 7, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 23, 2018 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 25, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 25, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 20, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 4, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 24, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 23, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 7, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 16, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

+ const TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

+ const TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305

+ const TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

+ const TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305

+ const TLS_RSA_WITH_AES_128_CBC_SHA256

+ type CertificateRequestInfo struct

+ AcceptableCAs [][]byte

+ SignatureSchemes []SignatureScheme

type ClientHelloInfo

+ Conn net.Conn

+ SignatureSchemes []SignatureScheme

+ SupportedProtos []string

+ SupportedVersions []uint16

type Config

+ GetClientCertificate func(*CertificateRequestInfo) (*Certificate, error)

+ GetConfigForClient func(*ClientHelloInfo) (*Config, error)

+ KeyLogWriter io.Writer

+ VerifyPeerCertificate func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error

+ func (c *Config) Clone() *Config

type Conn

+ func (c *Conn) CloseWrite() error

type CurveID

+ const X25519

+ type SignatureScheme uint16

+ const ECDSAWithP256AndSHA256

+ const ECDSAWithP384AndSHA384

+ const ECDSAWithP521AndSHA512

+ const PKCS1WithSHA1

+ const PKCS1WithSHA256

+ const PKCS1WithSHA384

+ const PKCS1WithSHA512

+ const PSSWithSHA256

+ const PSSWithSHA384

+ const PSSWithSHA512

Jan 26, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 19, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 10, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 15, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 1, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 23, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 26, 2017 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 1, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 19, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 17, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 7, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 15, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

type Config

+ DynamicRecordSizingDisabled bool

+ Renegotiation RenegotiationSupport

+ type RenegotiationSupport int

+ const RenegotiateFreelyAsClient

+ const RenegotiateNever

+ const RenegotiateOnceAsClient

Aug 8, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 2, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 2, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 21, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 18, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 8, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 16, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 2, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 1, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 18, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 19, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 11, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 17, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

+ const TLS_RSA_WITH_AES_128_GCM_SHA256

+ const TLS_RSA_WITH_AES_256_GCM_SHA384

+ type RecordHeaderError struct

+ Msg string

+ RecordHeader [5]byte

+ func (e RecordHeaderError) Error() string

Feb 3, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 28, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 13, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 17, 2015 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 11, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 13, 2016 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 3, 2015 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 9, 2015 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 19, 2015 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

+ const TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

+ const TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

type Certificate

+ SignedCertificateTimestamps [][]byte

type Config

+ func (c *Config) SetSessionTicketKeys(keys [][32]byte)

type ConnectionState

+ OCSPResponse []byte

+ SignedCertificateTimestamps [][]byte

Aug 6, 2015 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 29, 2015 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 17, 2015 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jul 7, 2015 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 23, 2015 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Feb 18, 2015 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jan 15, 2015 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Dec 11, 2014 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

+ const TLS_FALLBACK_SCSV

+ type ClientHelloInfo struct

+ CipherSuites []uint16

+ ServerName string

+ SupportedCurves []CurveID

+ SupportedPoints []uint8

type Config

+ GetCertificate func(clientHello *ClientHelloInfo) (*Certificate, error)

type ConnectionState

+ TLSUnique []byte

Dec 2, 2014 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 17, 2014 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 30, 2014 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 1, 2014 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 25, 2014 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 13, 2014 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 19, 2014 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

+ type ClientSessionCache interface

+ Get func(sessionKey string) (session *ClientSessionState, ok bool)

+ Put func(sessionKey string, cs *ClientSessionState)

+ func NewLRUClientSessionCache(capacity int) ClientSessionCache

+ type ClientSessionState struct

type Config

+ ClientSessionCache ClientSessionCache

+ CurvePreferences []CurveID

type Conn

+ func DialWithDialer(dialer *net.Dialer, network, addr string, config *Config) (*Conn, error)

type ConnectionState

+ Version uint16

+ type CurveID uint16

+ const CurveP256

+ const CurveP384

+ const CurveP521

Jun 13, 2014 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 2, 2014 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 21, 2014 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 22, 2014 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 5, 2014 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 3, 2014 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 28, 2013 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

+ const TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

+ const TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

+ const TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

+ const TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

+ const TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

+ const VersionSSL30

+ const VersionTLS10

+ const VersionTLS11

+ const VersionTLS12

type Config

+ MaxVersion uint16

+ MinVersion uint16

Nov 18, 2013 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 13, 2013 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Nov 1, 2013 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Oct 18, 2013 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Aug 13, 2013 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 13, 2013 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 13, 2013 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

+ const TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

+ const TLS_RSA_WITH_AES_256_CBC_SHA

type Config

+ PreferServerCipherSuites bool

+ SessionTicketKey [32]byte

+ SessionTicketsDisabled bool

type ConnectionState

+ DidResume bool

May 8, 2013 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

May 7, 2013 GO-2021-0154 +5 more

  GO-2021-0154: Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Sep 21, 2012 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Jun 14, 2012 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Apr 26, 2012 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Mar 28, 2012 GO-2021-0243 +4 more

  GO-2021-0243: Panic on certain certificates in crypto/tls

  GO-2022-0531: Session tickets lack random ticket_age_add in crypto/tls

  GO-2023-1570: Panic on large handshake records in crypto/tls

  GO-2023-1987: Large RSA keys can cause high CPU usage in crypto/tls

  GO-2023-2375: Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

Changes in this version

+ const TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

+ const TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

+ const TLS_ECDHE_RSA_WITH_RC4_128_SHA

+ const TLS_RSA_WITH_3DES_EDE_CBC_SHA

+ const TLS_RSA_WITH_AES_128_CBC_SHA

+ const TLS_RSA_WITH_RC4_128_SHA

+ func Listen(network, laddr string, config *Config) (net.Listener, error)

+ func NewListener(inner net.Listener, config *Config) net.Listener

+ type Certificate struct

+ Certificate [][]byte

+ Leaf *x509.Certificate

+ OCSPStaple []byte

+ PrivateKey crypto.PrivateKey

+ func LoadX509KeyPair(certFile, keyFile string) (cert Certificate, err error)

+ func X509KeyPair(certPEMBlock, keyPEMBlock []byte) (cert Certificate, err error)

+ type ClientAuthType int

+ const NoClientCert

+ const RequestClientCert

+ const RequireAndVerifyClientCert

+ const RequireAnyClientCert

+ const VerifyClientCertIfGiven

+ type Config struct

+ Certificates []Certificate

+ CipherSuites []uint16

+ ClientAuth ClientAuthType

+ ClientCAs *x509.CertPool

+ InsecureSkipVerify bool

+ NameToCertificate map[string]*Certificate

+ NextProtos []string

+ Rand io.Reader

+ RootCAs *x509.CertPool

+ ServerName string

+ Time func() time.Time

+ func (c *Config) BuildNameToCertificate()

+ type Conn struct

+ func Client(conn net.Conn, config *Config) *Conn

+ func Dial(network, addr string, config *Config) (*Conn, error)

+ func Server(conn net.Conn, config *Config) *Conn

+ func (c *Conn) Close() error

+ func (c *Conn) ConnectionState() ConnectionState

+ func (c *Conn) Handshake() error

+ func (c *Conn) LocalAddr() net.Addr

+ func (c *Conn) OCSPResponse() []byte

+ func (c *Conn) Read(b []byte) (n int, err error)

+ func (c *Conn) RemoteAddr() net.Addr

+ func (c *Conn) SetDeadline(t time.Time) error

+ func (c *Conn) SetReadDeadline(t time.Time) error

+ func (c *Conn) SetWriteDeadline(t time.Time) error

+ func (c *Conn) VerifyHostname(host string) error

+ func (c *Conn) Write(b []byte) (int, error)

+ type ConnectionState struct

+ CipherSuite uint16

+ HandshakeComplete bool

+ NegotiatedProtocol string

+ NegotiatedProtocolIsMutual bool

+ PeerCertificates []*x509.Certificate

+ ServerName string

+ VerifiedChains [][]*x509.Certificate