Comparison of TLS implementations: Difference between revisions

Revision as of 13:05, 18 March 2025

Latest revision as of 00:44, 4 August 2025

(10 intermediate revisions by 4 users not shown)

Line 169:

| wolfSSL<ref name="wolfsslproduct">{{cite web | url=https://www.wolfssl.com/wolfSSL/Products-wolfssl.html | title=wolfSSL product description | accessdate=2016-05-03}}</ref>

| {{yes}}

| {{free|[[GNU General Public License#Version 23|GNU GPLv2GPLv3]]+}} and commercial license

| wolfSSL Inc.<ref name="wolfsslcompany">{{cite web | url=https://www.wolfssl.com | title=wolfSSL Embedded SSL/TLS | accessdate=2016-05-03}}</ref>

| [[C (programming language)|C]], [[Assembly language|assembly]]

Line 220:

! [[Datagram Transport Layer Security|DTLS 1.0]] (deprecated)<ref name="auto3">{{cite IETF|rfc=4347}}</ref>

! [[Datagram Transport Layer Security|DTLS 1.2]]<ref name="RFC 6347" />

! [[Datagram Transport Layer Security|DTLS 1.3]]

|-

| [[Botan (programming library)|Botan]]

Line 230 ⟶ 231:

| {{yes|No}}

| {{yes}}

| {{no}}

|-

| [[BoringSSL]]

Line 240 ⟶ 242:

| {{okay|Yes}}

| {{yes}}

| {{no}}

|-

|[[Bouncy Castle (cryptography)|Bouncy Castle]]

Line 247 ⟶ 250:

| {{okay|Yes}}

| {{yes}}

| {{Yes}}

| {{Partial|Yes}}<br /><small>(draft version)</small>

| {{okay|Yes}}

| {{yes}}

| {{no}}

|-

| [[BSAFE]] SSL-J<ref name="RSABSAFETECH">{{cite web| title = RSA BSAFE Technical Specification Comparison Tables| url = http://www.emc.com/collateral/data-sheet/11433-bsafe-tech-table.pdf| access-date = 2015-01-09| archive-url = https://web.archive.org/web/20150924043531/http://www.emc.com/collateral/data-sheet/11433-bsafe-tech-table.pdf| archive-date = 2015-09-24| url-status = dead}}</ref>

Line 259 ⟶ 263:

| {{yes}}

| {{yes|No}}

| {{no}}

| {{no}}

|-

| [[cryptlib]]

| {{yes|No}}

| {{yes|Disabled by default at compile timeNo}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes}}

|

| {{yes|No}}

| {{no}}

| {{no}}

|-

Line 280 ⟶ 286:

| {{okay|Yes}}

| {{yes}}

| {{no}}

|-

| [[Java Secure Socket Extension|JSSE]]

Line 290 ⟶ 297:

| {{okay|Yes}}

| {{yes}}

| {{no}}

|-

| [[LibreSSL]]

Line 300 ⟶ 308:

| {{okay|Yes}}

| {{yes}}<ref name="libressl-3.3.3">{{cite web| title = LibreSSL 3.3.3 Released| url = https://marc.info/?l=openbsd-announce&m=162009196519308| date = 2021-05-04| accessdate = 2021-05-04}}</ref>

| {{no}}

|-

| [[MatrixSSL]]

Line 310 ⟶ 319:

| {{okay|Yes}}

| {{yes}}

| {{no}}

|-

| [[Mbed TLS]]

Line 320 ⟶ 330:

| {{okay|Yes}}<ref name="mbed-2.0">{{cite web | title = mbed TLS 2.0.0 released | url = https://tls.mbed.org/tech-updates/releases/mbedtls-2.0.0-released | date = 2015-07-10 | accessdate = 2015-07-14}}</ref>

| {{yes}}<ref name="mbed-2.0"/>

| {{no}}

|-

| [[Network Security Services|NSS]]

Line 330 ⟶ 341:

| {{okay|Yes}}<ref name="NSS-3.14"/>

| {{yes}}<ref name="NSS-3.16.2">{{cite web| url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.16.2_release_notes| title=NSS 3.16.2 release notes| date=2014-06-30| work=Mozilla Developer Network| publisher=Mozilla| accessdate=2014-06-30| archive-date=2021-12-07| archive-url=https://web.archive.org/web/20211207015257/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.16.2_release_notes| url-status=dead}}</ref>

| {{no}}

|-

| [[OpenSSL]]

Line 340 ⟶ 352:

| {{okay|Yes}}

| {{yes}}<ref name="openssl-1.0.2-note">{{cite web|url=https://www.openssl.org/news/openssl-1.0.2-notes.html |title=Major changes between OpenSSL 1.0.1l and OpenSSL 1.0.2 [22 Jan 2015] |accessdate=2015-01-22 |url-status=dead |archiveurl=https://web.archive.org/web/20140904045720/http://www.openssl.org/news/openssl-1.0.2-notes.html |archivedate=September 4, 2014 }}</ref>

| {{no}}

|-

| [[Rustls]]

Line 349 ⟶ 362:

| {{yes}}<ref name="rustls-features"/>

| {{yes|No}}

| {{no}}

| {{no}}

|-

Line 360 ⟶ 374:

| {{yes}}

| {{yes|No}}

| {{no}}

| {{no}}

|-

Line 370 ⟶ 385:

| {{No}}

| {{yes|No}}

| {{no}}

| {{no}}

|-

Line 380 ⟶ 396:

| {{No}}

| {{yes|No}}

| {{no}}

| {{no}}

|-

Line 391 ⟶ 408:

| {{No}}

| {{yes|No}}

| {{no}}

| {{no}}

|-

Line 402 ⟶ 420:

| {{okay|Yes}}<ref name=MS2574819>{{cite web|title=An update is available that adds support for DTLS in Windows 7 SP1 and Windows Server 2008 R2 SP1|url=http://support.microsoft.com/kb/2574819/en-us|publisher=Microsoft|accessdate=13 November 2012}}</ref>

| {{no}}<ref name=MS2574819 />

| {{no}}

|-

| [[Schannel]] 8, 2012<ref name="Windows7schannel" />

Line 411 ⟶ 430:

| {{No}}

| {{okay|Yes}}

| {{no}}

| {{no}}

|-

Line 421 ⟶ 441:

| {{No}}

| {{okay|Yes}}

| {{no}}

| {{no}}

|-

Line 432 ⟶ 453:

| {{okay|Yes}}

| {{yes}}

| {{no}}

|-

| [[Schannel]] 11 / 2022<ref>{{cite web |title=Protocols in TLS/SSL (Schannel SSP) |date=25 May 2022 |url=https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp- |access-date=6 November 2022}}</ref>

Line 442 ⟶ 464:

| {{okay|Yes}}

| {{yes}}

| {{no}}

|-

|[[MacOS|Secure Transport]]

Line 452 ⟶ 475:

|

| {{yes|No}}

| {{no}}

| {{no}}

|-

Line 462 ⟶ 486:

|

| {{okay|Yes}}<ref group=lower-alpha name="secure-transport-osx" />

| {{no}}

| {{no}}

|-

Line 473 ⟶ 498:

| {{okay|Yes}}

| {{Unknown}}

| {{no}}

|-

| Secure Transport OS X 10.13, iOS 11

Line 483 ⟶ 509:

| {{okay|Yes}}

| {{Unknown}}

| {{no}}

|-

| [[wolfSSL]]

Line 492 ⟶ 519:

| {{yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes}}

|-

Line 504 ⟶ 532:

| {{yes|Disabled by default}} <ref group=lower-alpha name="otp-22" />

| {{yes}}

| {{no}}

|-

|- class="sortbottom"

Line 515 ⟶ 544:

! [[Datagram Transport Layer Security|DTLS 1.0]] (deprecated)<ref name="auto3" />

! [[Datagram Transport Layer Security|DTLS 1.2]]<ref name="RFC 6347" />

! [[Datagram Transport Layer Security|DTLS 1.3]]

|}

{{Reflist|group=lower-alpha|refs=

Line 611 ⟶ 641:

|-

|[[Bouncy Castle (cryptography)|Bouncy Castle]]

|{{yes|BC-FJA 12.0.0 (#27684743)<br /> BC-FJA 2.1.0.1 (#31524943)<br> BC-FNA 1.0.2 (#4416}}

|

|

Line 733 ⟶ 763:

| {{yes}}

| {{okay|Yes}}

| {{yes|No}}

| {{yes}}

| {{yes|No}}

| {{noyes}}

| {{yes|No}}

|-

Line 998 ⟶ 1,028:

| {{yes}}

| {{no}}

| {{unknownno}}

| {{Yes|No}}

| {{Yes|No}}

Line 2,578 ⟶ 2,608:

! [[HMAC]]-[[SHA-2|SHA256/384]]

! [[Authenticated encryption|AEAD]]

! [[GOST 28147-89|GOST 28147-89 IMIT]]<br/><ref name=gostlink/>

! [[GOST (hash function)|GOST R 34.11-94]]<br/><ref name=gostlink/>

|-

| [[Botan (programming library)|Botan]]

| {{yes|No Y}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes|No Y}}

| {{yes|No Y}}

|-

| [[BSAFE]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes|No Y}}

| {{yes|No Y}}

|-

| [[cryptlib]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes|No Y}}

| {{yes|No Y}}

|-

| [[GnuTLS]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes|No Y}}

| {{yes|No Y}}

|-

| [[Java Secure Socket Extension|JSSE]]

Line 2,618 ⟶ 2,648:

| {{okay|Yes}}

| {{yes}}

| {{yes|No Y}}

| {{yes|No Y}}

|-

| [[LibreSSL]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{okay|Yes}}<br/><ref name="libressl-2.1.2"/>

| {{okay|Yes}}<br/><ref name="libressl-2.1.2"/>

|-

| [[MatrixSSL]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes|No Y}}

| {{yes|No Y}}

|-

| [[Mbed TLS]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes|No Y}}

| {{yes|No Y}}

|-

| [[Network Security Services|NSS]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes|No Y}}<br/><ref name=mozilla_bug518787 /><ref name=mozilla_bug608725 />

| {{yes|No Y}}<br/><ref name=mozilla_bug518787 /><ref name=mozilla_bug608725 />

|-

| [[OpenSSL]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{okay|Yes}}<br/><ref name="OpenSSL-GOST"/>

| {{okay|Yes}}<br/><ref name="OpenSSL-GOST"/>

|-

| [[Rustls]]

| {{yes|No Y}}

| {{yes|No Y}}

| {{yes|No Y}}

| {{yes}}

| {{yes|No Y}}

| {{yes|No Y}}

|-

| [[Schannel|Schannel XP/2003, Vista/2008]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{partial|XP SP3, 2003 SP2 via hotfix}}<br/><ref name="SHA2 and Windows">{{cite web|url=https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/sha2-and-windows/1128617|title=SHA2 and Windows|access-date=2024-12-25}}</ref>

| {{no}}

| {{yes|No Y}}<br/><ref name="GOST-extensions-Schannel"/>

| {{yes|No Y}}<br/><ref name="GOST-extensions-Schannel"/>

|-

| [[Schannel|Schannel 7/2008R2, 8/2012, 8.1/2012R2]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{partial|except ECDHE_RSA}}<br/><ref name="ms14-066" /><ref name="20141111msblog" /><ref name="win8.1aesgcm"/>

| {{yes|No Y}}<br/><ref name="GOST-extensions-Schannel"/>

| {{yes|No Y}}<br/><ref name="GOST-extensions-Schannel"/>

|-

| [[Schannel|Schannel 10]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}<br/><ref name=schannel10pre/>

| {{yes|No Y}}<br/><ref name="GOST-extensions-Schannel"/>

| {{yes|No Y}}<br/><ref name="GOST-extensions-Schannel"/>

|-

| [[MacOS|Secure Transport]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes|No Y}}

| {{yes|No Y}}

|-

| [[wolfSSL]]

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes|No Y}}

| {{yes|No Y}}

|-

| [[Erlang (programming language)|Erlang]]/OTP SSL application

| {{no|Yes N}}

| {{okay|Yes}}

| {{okay|Yes}}

| {{yes}}

| {{yes|No Y}}

| {{yes|No Y}}

|-

|-class="sortbottom"

Line 3,178 ⟶ 3,208:

|

|

| {{yes}}

|

| {{no}}

| {{no}}

Line 3,383 ⟶ 3,413:

|-

| [[cryptlib]]

| {{noyes}}

| {{no}}

| {{no}}

Line 3,501 ⟶ 3,531:

|-

| [[cryptlib]]

| {{noyes}}

| {{yes|[[PKCS 11|PKCS #11]]}}

| User-defined label