Alternative TLS implementation in Go

Adam Langley 1ac9b9783b crypto/{cipher,tls,internal/cryptohw}: prioritise AES-GCM when hardware support is present. ... Support for ChaCha20-Poly1305 ciphers was recently added to crypto/tls. These ciphers are preferable in software, but they cannot beat hardware support for AES-GCM, if present. This change moves detection for hardware AES-GCM support into cipher/internal/cipherhw so that it can be used from crypto/tls. Then, when AES-GCM hardware is present, the AES-GCM cipher suites are prioritised by default in crypto/tls. (Some servers, such as Google, respect the client's preference between AES-GCM and ChaCha20-Poly1305.) Fixes #17779. Change-Id: I50de2be486f0b0b8052c4628d3e3205a1d54a646 Reviewed-on: https://go-review.googlesource.com/32871 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org>		2016-11-07 20:01:18 +00:00
testdata	crypto/tls: enable ChaCha20-Poly1305 cipher suites by default.	2016-10-18 06:54:30 +00:00
alert.go	crypto/tls: switch to OpenSSL 1.1.0 for test data.	2016-10-12 17:03:46 +00:00
cipher_suites.go	crypto/tls: enable ChaCha20-Poly1305 cipher suites by default.	2016-10-18 06:54:30 +00:00
common.go	crypto/{cipher,tls,internal/cryptohw}: prioritise AES-GCM when hardware support is present.	2016-11-07 20:01:18 +00:00
conn_test.go	crypto/tls: implement countermeasures against CBC padding oracles	2016-10-04 13:21:02 +00:00
conn.go	crypto/tls: add CloseWrite method to Conn	2016-10-26 23:05:40 +00:00
example_test.go	crypto/x509: add example of using a custom root list.	2014-02-19 11:18:35 -05:00
generate_cert.go	crypto/tls: Support ECDSA keys in generate_cert.go	2014-07-28 14:46:34 -07:00
handshake_client_test.go	all: sprinkle t.Parallel on some slow tests	2016-11-04 16:56:57 +00:00
handshake_client.go	crypto/tls: add GetClientCertificate callback	2016-10-27 17:20:07 +00:00
handshake_messages_test.go	crypto/tls: decouple handshake signatures from the handshake hash.	2015-04-30 03:47:02 +00:00
handshake_messages.go	crypto/tls: allow renegotiation to be handled by a client.	2016-04-28 17:56:28 +00:00
handshake_server_test.go	all: sprinkle t.Parallel on some slow tests	2016-11-04 16:56:57 +00:00
handshake_server.go	crypto/tls: add a SignatureScheme type.	2016-10-27 17:11:04 +00:00
handshake_test.go	crypto/tls: switch to OpenSSL 1.1.0 for test data.	2016-10-12 17:03:46 +00:00
key_agreement.go	crypto/tls: support X25519.	2016-10-12 17:04:28 +00:00
prf_test.go	crypto/tls: decouple handshake signatures from the handshake hash.	2015-04-30 03:47:02 +00:00
prf.go	all: standardize RFC mention format	2016-04-12 21:07:52 +00:00
ticket.go	crypto/tls: minor refactors for readability	2016-03-14 21:17:37 +00:00
tls_test.go	all: sprinkle t.Parallel on some slow tests	2016-11-04 16:56:57 +00:00
tls.go	crypto/tls: add Config.Clone	2016-09-01 04:26:12 +00:00