tls13

Limited subset of TLS Protocol Version 1.3 from RFC 8446 in pure V language for learning purposes.

Status

[!Warning]

Implementing TLS 1.3 is a hard and full of cullprits that you should aware. Its does not finished yet and no recommended for production use, Its intended only for learning purposes.

Basic of messages parsing, handshake processing, decryption/encryption record, key scheduling almost has been implemented. With strict and limited configuration of openssl s_server command for local testing below, It can perform full TLS 1.3 handshake phase and send application data

[!Note] This module depends on some of v modules availables at this github repository. Install its before to run some test.

Its only supports limited subset of TLS 1.3 standard (maybe get updated in time)

Client only (server maybe in plan)
Strict limited to only 1.3 version of standard (no plan for support for older version)
Only support TLS_CHACHA20_POLY1305_SHA256 ciphersuite
Only support ed25519 for SignatureScheme extensions
Only support x25519 NamedGroup for Elliptic Curve Groups (ECDHE) key exchange
support for server_name extension
support key_share extension only through x25519 NamedGroup
Doesn't support HelloRetryRequest message
Doesn't support verify server Certificate, only parse it (currently, we have no armor for this)
And many others stuff does not supported yet thats can bring to panic (error)

File layout description

├── alert.v                    -> Basic handling and parsing TLS 1.3 Alert message
├── ciphersuite.v              -> Basic ciphersuite handling, packing and unpacking
├── ciphersuite_test.v
├── extension.v                -> Support for TLS 1.3 Extensions, some of them lives in separates files
├── extension_test.v
├── handshake.v                -> Core TLS 1.3 Handshake message handling, from packing and unpacking, validation, and general use cases
├── handshake_test.v
├── hkdf.v                     -> Hmac Key Derivation Function, used for key derivation and traffic calculation
├── keys.v                      
├── keyschedule.v              -> Key update scheduling for secret derivation and traffic keys calculation
├── keyschedule_test.v
├── keyshare.v                 -> key_share extension handling
├── keyshare_test.v
├── psk.v                      -> preshared key support (not usable currently)
├── record.v                   -> Contains fundamental TLS 1.3 record structure, basic parsing and unpacking, small utility to help serialization
├── record_test.v
├── recordlayer.v              -> High level record layer, handle encryption decryption, fragmentation (not yet ready)
├── servername.v               -> server_name extension support
├── servername_test.v
├── session.v                  -> Core TLS 1.3 client capable performing handshake and related task, write record to the wire, read record from wire.
├── session_handshaker.v       -> Core how the session performing TLS 1.3 handshake process
├── signaturescheme.v          -> signature_scheme extension support
├── signaturescheme_test.v
├── state.v                    -> Session state handling
├── supportedgroups.v          -> supported_groups extension support
├── supportedgroups_test.v
├── supportedversions.v        -> supported_versions extension support
├── supportedversions_test.v
├── transcripter.v             -> Message hash tool for hash transcripting of the handshake messages
└── version.v                  -> basic version structure represent TLS 1.3 version

Testing

Testing with local openssl server

Create self signed certificate for openssl

openssl req -new -newkey ed25519 -keyout privkey.pem -nodes -out pubcert.csr
openssl req -verify -in pubcert.csr -text -noout
openssl req -x509 -days 365 -in pubcert.csr -key privkey.pem -out pubcert.pem

Test server

$openssl s_server -accept 8443 -tls1_3 -state -tlsextdebug -debug -msg -cert pubcert.pem -key privkey.pem

Test client

$openssl s_client -connect localhost:8443

Run test main.v

$v run main.v