DeriveAESKeys derives the AES keys and creates a matching AES-GCM AEAD instance.

DeriveQuicCryptoAESKeys derives the client and server keys and creates a matching AES-GCM AEAD instance.

HashCert calculates the FNV1a hash of a certificate.

NewAEADAESGCM creates a AEAD using AES-GCM.

NewAEADAESGCM12 creates a AEAD using AES-GCM with 12 bytes tag size AES-GCM support is a bit hacky, since the go stdlib does not support 12 byte tag size, and couples the cipher and aes packages closely.

NewCertChain loads the key and cert from files.

NewCertManager creates a new CertManager.

NewCurve25519KEX creates a new KeyExchange using Curve25519, see https://cr.yp.to/ecdh.html.

NewNullAEAD creates a NullAEAD.

NewStkSource creates a source for source address tokens.

An AEAD implements QUIC's authenticated encryption and associated data.

A CertChain holds a certificate and a private key.

CertManager manages the certificates sent by the server.

KeyExchange manages the exchange of keys.

MintController is an interface that bundles all methods needed to interact with mint.

StkSource is used to create and verify source address tokens.