| <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta name="generator" content="rustdoc"><meta name="description" content="This section documents rustls itself: what protocol features are and are not implemented."><meta name="keywords" content="rust, rustlang, rust-lang, _04_features"><title>rustls::manual::_04_features - Rust</title><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../SourceSerif4-Regular.ttf.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../FiraSans-Regular.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../FiraSans-Medium.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../SourceCodePro-Regular.ttf.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../SourceSerif4-Bold.ttf.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../SourceCodePro-Semibold.ttf.woff2"><link rel="stylesheet" href="../../../normalize.css"><link rel="stylesheet" href="../../../rustdoc.css" id="mainThemeStyle"><link rel="stylesheet" href="../../../ayu.css" disabled><link rel="stylesheet" href="../../../dark.css" disabled><link rel="stylesheet" href="../../../light.css" id="themeStyle"><script id="default-settings" ></script><script src="../../../storage.js"></script><script defer src="../../../main.js"></script><noscript><link rel="stylesheet" href="../../../noscript.css"></noscript><link rel="alternate icon" type="image/png" href="../../../favicon-16x16.png"><link rel="alternate icon" type="image/png" href="../../../favicon-32x32.png"><link rel="icon" type="image/svg+xml" href="../../../favicon.svg"></head><body class="rustdoc mod"><!--[if lte IE 11]><div class="warning">This old browser is unsupported and will most likely display funky things.</div><![endif]--><nav class="mobile-topbar"><button class="sidebar-menu-toggle">☰</button><a class="sidebar-logo" href="../../../rustls/index.html"><div class="logo-container"><img class="rust-logo" src="../../../rust-logo.svg" alt="logo"></div></a><h2></h2></nav><nav class="sidebar"><a class="sidebar-logo" href="../../../rustls/index.html"><div class="logo-container"><img class="rust-logo" src="../../../rust-logo.svg" alt="logo"></div></a><h2 class="location"><a href="#">Module _04_features</a></h2><div class="sidebar-elems"></div></nav><main><div class="width-limiter"><nav class="sub"><form class="search-form"><div class="search-container"><span></span><input class="search-input" name="search" autocomplete="off" spellcheck="false" placeholder="Click or press ‘S’ to search, ‘?’ for more options…" type="search"><div id="help-button" title="help" tabindex="-1"><a href="../../../help.html">?</a></div><div id="settings-menu" tabindex="-1"><a href="../../../settings.html" title="settings"><img width="22" height="22" alt="Change settings" src="../../../wheel.svg"></a></div></div></form></nav><section id="main-content" class="content"><div class="main-heading"><h1 class="fqn">Module <a href="../../index.html">rustls</a>::<wbr><a href="../index.html">manual</a>::<wbr><a class="mod" href="#">_04_features</a><button id="copy-path" onclick="copy_path(this)" title="Copy item path to clipboard"><img src="../../../clipboard.svg" width="19" height="18" alt="Copy item path"></button></h1><span class="out-of-band"><a class="srclink" href="../../../src/rustls/manual/features.rs.html#1-50">source</a> · <a id="toggle-all-docs" href="javascript:void(0)" title="collapse all docs">[<span class="inner">−</span>]</a></span></div><details class="rustdoc-toggle top-doc" open><summary class="hideme"><span>Expand description</span></summary><div class="docblock"><p>This section documents rustls itself: what protocol features are and are not implemented.</p> |
| <h3 id="current-features"><a href="#current-features">Current features</a></h3> |
| <ul> |
| <li>TLS1.2 and TLS1.3.</li> |
| <li>ECDSA, Ed25519 or RSA server authentication by clients.</li> |
| <li>ECDSA, Ed25519 or RSA server authentication by servers.</li> |
| <li>Forward secrecy using ECDHE; with curve25519, nistp256 or nistp384 curves.</li> |
| <li>AES128-GCM and AES256-GCM bulk encryption, with safe nonces.</li> |
| <li>ChaCha20-Poly1305 bulk encryption (<a href="https://tools.ietf.org/html/rfc7905">RFC7905</a>).</li> |
| <li>ALPN support.</li> |
| <li>SNI support.</li> |
| <li>Tunable MTU to make TLS messages match size of underlying transport.</li> |
| <li>Optional use of vectored IO to minimise system calls.</li> |
| <li>TLS1.2 session resumption.</li> |
| <li>TLS1.2 resumption via tickets (RFC5077).</li> |
| <li>TLS1.3 resumption via tickets or session storage.</li> |
| <li>TLS1.3 0-RTT data for clients.</li> |
| <li>Client authentication by clients.</li> |
| <li>Client authentication by servers.</li> |
| <li>Extended master secret support (RFC7627).</li> |
| <li>Exporters (RFC5705).</li> |
| <li>OCSP stapling by servers.</li> |
| <li>SCT stapling by servers.</li> |
| <li>SCT verification by clients.</li> |
| </ul> |
| <h3 id="possible-future-features"><a href="#possible-future-features">Possible future features</a></h3> |
| <ul> |
| <li>PSK support.</li> |
| <li>OCSP verification by clients.</li> |
| <li>Certificate pinning.</li> |
| </ul> |
| <h3 id="non-features"><a href="#non-features">Non-features</a></h3> |
| <p>For reasons explained in the other sections of this manual, rustls does not |
| and will not support:</p> |
| <ul> |
| <li>SSL1, SSL2, SSL3, TLS1 or TLS1.1.</li> |
| <li>RC4.</li> |
| <li>DES or triple DES.</li> |
| <li>EXPORT ciphersuites.</li> |
| <li>MAC-then-encrypt ciphersuites.</li> |
| <li>Ciphersuites without forward secrecy.</li> |
| <li>Renegotiation.</li> |
| <li>Kerberos.</li> |
| <li>Compression.</li> |
| <li>Discrete-log Diffie-Hellman.</li> |
| <li>Automatic protocol version downgrade.</li> |
| </ul> |
| </div></details></section></div></main><div id="rustdoc-vars" data-root-path="../../../" data-current-crate="rustls" data-themes="ayu,dark,light" data-resource-suffix="" data-rustdoc-version="1.66.0-nightly (5c8bff74b 2022-10-21)" ></div></body></html> |
