GetRetryIntegrityTag calculates the integrity tag on a Retry packet.

NewCryptoSetupClient creates a new crypto setup for the client.

NewCryptoSetupServer creates a new crypto setup for the server.

NewInitialAEAD creates a new AEAD for Initial encryption / decryption.

NewTokenGenerator initializes a new TokenGenerator.

EventDiscard0RTTKeys signals that the Handshake keys were discarded.

EventHandshakeComplete signals that the TLS handshake was completed.

EventNoEvent signals that there are no new handshake events.

EventReceivedReadKeys signals that new decryption keys are available.

EventReceivedTransportParameters contains the transport parameters sent by the peer.

EventRestoredTransportParameters contains the transport parameters restored from the session ticket.

EventWriteHandshakeData contains new CRYPTO data to send at the Handshake encryption level.

EventWriteInitialData contains new CRYPTO data to send at the Initial encryption level.

ErrDecryptionFailed is returned when the AEAD fails to open the packet.

ErrKeysDropped is returned when an opener or a sealer is requested for an encryption level, but the corresponding keys have already been dropped.

ErrKeysNotYetAvailable is returned when an opener or a sealer is requested for an encryption level, but the corresponding opener has not yet been initialized This can happen when packets arrive out of order.

FirstKeyUpdateInterval is the maximum number of packets we send or receive before initiating the first key update.

KeyUpdateInterval is the maximum number of packets we send or receive before initiating a key update.

Event is a handshake event.

A Token is derived from the client address and can be used to verify the ownership of this address.

A TokenGenerator generates tokens.

CryptoSetup handles the handshake and protecting / unprotecting packets.

LongHeaderOpener opens a long header packet.

LongHeaderSealer seals a long header packet.

ShortHeaderOpener opens a short header packet.

ShortHeaderSealer seals a short header packet.

EventKind is the kind of handshake event.

TokenProtectorKey is the key used to encrypt both Retry and session resumption tokens.