Comparison of TLS implementations: Difference between revisions

Revision as of 07:25, 17 August 2024

Revision as of 09:01, 29 August 2024

Line 129:

| Australia/EU

|-

| [[Rustls]]

| Joe Birr-Pixton, Dirkjan Ochtman, Daniel McCarney, Josh Aas, and open source contributors

| {{yes}}

| {{free|[[Apache License|Apache-2.0]], [[MIT License]] and [[ISC license|ISC]]}}

| Open source contributors

| [[Rust (programming language)|Rust]]

| {{Latest stable software release/Rustls}}

| United Kingdom

|-

| [[s2n]]

| [[Amazon.com|Amazon]]

Line 344 ⟶ 352:

| {{yes}}<ref name="openssl-1.0.2-note">{{cite web|url=https://www.openssl.org/news/openssl-1.0.2-notes.html |title=Major changes between OpenSSL 1.0.1l and OpenSSL 1.0.2 [22 Jan 2015] |accessdate=2015-01-22 |url-status=dead |archiveurl=https://web.archive.org/web/20140904045720/http://www.openssl.org/news/openssl-1.0.2-notes.html |archivedate=September 4, 2014 }}</ref>

| {{no}}

|-

| [[Rustls]]

| {{yes|No}}<ref name="rustls-features">{{cite web|url=https://docs.rs/rustls/0.23.12/rustls/manual/_04_features/index.html |title=rustls implemented and unimplemented features documentation |accessdate=2024-08-28 }}</ref>

| {{yes|No}}<ref name="rustls-features"/>

| {{yes|No}}<ref name="rustls-features"/>

| {{yes|No}}<ref name="rustls-features"/>

| {{yes}}<ref name="rustls-features"/>

| {{yes}}<ref name="rustls-features"/>

| {{yes|No}}

| {{no}}

| {{no}}

|-

|-

| [[s2n]]<ref name="S2NSPEC">{{cite web| title = S2N Readme| website = [[GitHub]]| url = https://github.com/awslabs/s2n/blob/master/README.md| date = 2019-12-21}}</ref>

Line 580 ⟶ 600:

| [[OpenSSL]]

| {{yes}}<ref name="openssl-1.0.2-note"/>

|-

| [[Rustls]]

| {{yes}}<ref name="rustls-features"/>

|-

| [[S2n]]

Line 676 ⟶ 699:

|

|

|

|-

|[[Rustls]]

|

|

| {{yes|aws-lc FIPS module<ref>{{cite web|url=https://docs.rs/rustls/0.23.12/rustls/manual/_06_fips/index.html|title=rustls FIPS documentation|accessdate=2024-08-28}} </ref> ([https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4759 #4759])}}

|

|-

Line 832 ⟶ 861:

| {{yes}}

| {{okay|Yes}}<ref name="OpenSSL-GOST">{{Cite web|url=http://cvs.openssl.org/fileview|archiveurl=https://archive.today/20130415122812/http://cvs.openssl.org/fileview?f=openssl%2Fengines%2Fccgost%2FREADME.gost|url-status=dead|title=OpenSSL: CVS Web Interface|archive-date=2013-04-15|access-date=2014-11-12}}</ref>

|-

| [[Rustls]]

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes}}<ref name="rustls-features"/>

| {{yes|No}}

| {{yes}}<ref name="rustls-features"/>

| {{yes|No}}

|-

| [[Schannel|Schannel XP/2003]]

Line 1,091 ⟶ 1,131:

| {{Yes|Disabled by default}}<ref name="OpenSSL-1.0.0">{{cite web|url=https://www.openssl.org/news/changelog.html#x29|title=Changes between 0.9.8n and 1.0.0 [29 Mar 2010]|accessdate=2016-01-29}}</ref>

| {{Yes|Disabled by default}}<ref name="OpenSSL-1.0.0"/>

|-

| [[Rustls]]

| {{no}}

| {{no}}

| {{no}}

| {{no}}

| {{no}}

| {{no}}

| {{no}}

| {{no}}

| {{yes|No}}

| {{yes|No}}

|-

| [[Schannel]]

Line 1,265 ⟶ 1,317:

| {{no}}

| {{yes}}

|-

| [[Rustls]]

| {{yes}}

| {{yes}}

| {{yes}}

| {{no}}

| {{no}}

| {{no}}

| {{no}}

|-

| [[s2n]]

Line 1,496 ⟶ 1,557:

| {{yes}}<ref name="openssl-1.1.0-note"/>

| {{yes|Disabled by default}}

|-

| [[Rustls]]

| {{yes}}<ref name="rustls-features"/>

| {{yes|No}}

| {{yes|No}}

| {{okay|No}}

| {{yes|No}}

| {{okay|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes}}<ref name="rustls-features"/>

| {{yes|Not implemented}}

|-

| [[Schannel|Schannel XP/2003]]

Line 1,728 ⟶ 1,803:

| {{yes|Disabled by default}}

| {{Yes|No}}<ref name="openssl-1.1.0-note"/>

|-

| [[Rustls]]

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

|-

| [[Schannel|Schannel XP/2003]]

Line 1,996 ⟶ 2,079:

| {{yes}}<ref name="openssl-1.0.2-note"/>

| {{yes}}<ref name="openssl-1.0.2-note"/>

|-

| [[Rustls]]

| {{yes}}

| {{yes}}

| {{no}}

| {{yes}}

| {{no}}

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

|-

| [[Schannel|Schannel Vista/2008, 7/2008R2, 8/2012, 8.1/2012R2, 10]]

Line 2,165 ⟶ 2,258:

|-

| [[OpenSSL]]

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

|-

| [[Rustls]]

| {{okay|No}}

| {{okay|No}}

Line 2,412 ⟶ 2,516:

| {{yes}}

| {{yes}}

|-

| [[Rustls]]

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

| {{okay|No}}

|-

| [[Schannel|Schannel Vista/2008, 7/2008R2, 8/2012, 8.1/2012R2, 10]]

Line 2,628 ⟶ 2,748:

| {{no|Yes}}

| {{yes}}

| {{yes|No}}

| {{yes|No}}

|-

| [[Rustls]]

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{okay|No}}

| {{yes|No}}

| {{yes|No}}

Line 2,788 ⟶ 2,920:

| {{okay|Yes}}<ref name="OpenSSL-GOST"/>

| {{okay|Yes}}<ref name="OpenSSL-GOST"/>

|-

| [[Rustls]]

| {{yes|No}}

| {{yes|No}}

| {{yes|No}}

| {{yes}}

| {{yes|No}}

| {{yes|No}}

|-

| [[Schannel|Schannel XP/2003, Vista/2008]]

Line 2,883 ⟶ 3,023:

| [[OpenSSL]]

| {{Yes|Disabled by default}}

|-

| [[Rustls]]

| {{yes|No}}

|-

| [[Schannel]]

Line 3,092 ⟶ 3,235:

| {{yes}}<ref name="openssl-1.0.1g-note">{{cite web|url=https://www.openssl.org/news/openssl-1.0.1-notes.html |title=Major changes between OpenSSL 1.0.1f and OpenSSL 1.0.1g [7 Apr 2014] |date=2014-04-07 |accessdate=2015-02-10 |url-status=dead |archive-url=https://web.archive.org/web/20150120120428/https://www.openssl.org/news/openssl-1.0.1-notes.html |archive-date=2015-01-20}}</ref>

| {{yes}}<ref name="openssl3.2.0">{{cite web|url=https://www.openssl.org/blog/blog/2023/11/23/OpenSSL32/index.html|title=OpenSSL Announces Final Release of OpenSSL 3.2.0|date=2023-11-23}}</ref>

|-

| [[Rustls]]

| {{yes}}

| {{yes}}

| {{yes}}

| {{yes}}

| {{no}}

| {{no}}

| {{yes}}

| {{yes}}

| {{no}}

| {{okay|No}}

| {{no}}

| {{no}} <ref>rustls does not implement earlier versions that would warrant protection against insecure downgrade</ref>

| {{yes}}

| {{no}}

| {{unknown}}

|-

| [[Schannel|Schannel XP/2003]]

Line 3,372 ⟶ 3,532:

| {{yes}}

| {{Partial}}

|-

| [[Rustls]]

|

| {{yes}}

|

| {{yes}}

|

|

| {{yes}}

|

|-

| [[Schannel]]

Line 3,497 ⟶ 3,667:

| {{no}}

| {{yes}}

|-

| [[Rustls]]

| {{no}}

| {{yes}} <ref>{{cite web|title=ktls integration for rustls|accessdate=2024-08-29|url=https://github.com/rustls/ktls}}</ref>

| {{no}}

| {{no}}

| {{no}}

|-

| [[Schannel]]

Line 3,592 ⟶ 3,769:

| {{partial|[[PKCS 11|PKCS #11]] (via 3rd party module)}}<ref name=libp11>{{cite web|url=https://github.com/OpenSC/libp11|title=libp11: PKCS#11 wrapper library|date=19 January 2018|publisher=|via=GitHub}}</ref>

| RFC 7512 PKCS #11 URLs<ref name=pkcs11urls/>

|-

| [[Rustls]]

| {{no}}

| {{yes|[[Microsoft CryptoAPI]]}} <ref>{{cite web|url=https://github.com/rustls/rustls-cng|title=Windows CNG bridge for rustls|accessdate=2024-08-29}}</ref>

| Custom method

|-

| [[Schannel]]

Line 3,649 ⟶ 3,831:

| libc<br />libnspr4<br />libsoftokn3<br />libplc4<br />libplds4

| zlib (compression)

|-

| [[Rustls]]

| rust {{mono|core}} library

| rust {{mono|std}} library<br />zlib-rs (compression)<br />brotli (compression)<br />''ring'' (cryptography)<br />aws-lc-rs (cryptography)<br />

|-

| [[OpenSSL]]

Line 3,769 ⟶ 3,955:

| Included (monolithic)

| {{N/a}}

|-

| [[Rustls]]

| {{code|rustls::}}

| cargo

| [https://docs.rs/rustls/0.23.12/rustls/ API reference] and [https://docs.rs/rustls/0.23.12/rustls/manual/ design manual]

| Two options included (pluggable)

| {{yes}}<ref>{{cite web|url=https://github.com/rustls/rustls-openssl-compat/|title=rustls-openssl compatibility layer|accessdate=2024-08-29}}</ref> (subset)

|-

| [[wolfSSL]]

Line 3,879 ⟶ 4,072:

| {{no}}

| AIX, Android, FreeBSD, NetBSD, OpenBSD, BeOS, HP-UX, IRIX, Linux, macOS, OS/2, Solaris, OpenVMS, Amiga DE, Windows, WinCE, Sony PlayStation

|-

| [[Rustls]]

| [[Rust (programming language)]]

| None

| {{yes|Thread-safe}}

| Platform dependent

| {{yes}}

| {{yes}}

| All supported by [[Rust (programming language)]]

|-

| [[OpenSSL]]