TLSHandler

C# implementation of TLS 1.2/1.3

as you dig deeper, Transport Layer Security becomes Application Layer Security to you

Server/Client certificate support:

• [x] RSA
• [ ] ECC

BulkEncryption implementation:

• [x] AES_128_CBC
• [x] AES_256_CBC
• [x] AES_128_GCM
• [x] AES_256_GCM
• [x] ChaCha20_Poly1305

NamedGroup implementation:

• [x] secp256r1 (0x0017)
• [x] secp384r1 (0x0018)
• [x] secp521r1 (0x0019)
• [x] x25519 (0x001D)
• [x] x448 (0x001E)

SignatureAlgorithm implementation:

• [x] rsa_pkcs1sha256 (0x0401)    (TLS 1.3 Mandatory)_
• [x] rsa_pkcs1_sha384 (0x0501)
• [x] rsa_pkcs1_sha512 (0x0601)
• [x] rsa_pss_rsaesha256 (0x0804)    (TLS 1.3 Mandatory)_
• [x] rsa_pss_rsae_sha384 (0x0805)
• [x] rsa_pss_rsae_sha512 (0x0806)
• [ ] ecdsa_secp256r1sha256 (0x0403)    (TLS 1.3 Mandatory)_
• [ ] ecdsa_secp384r1_sha384 (0x0503)
• [ ] ecdsa_secp521r1_sha512 (0x0603)

CipherSuite implementation:

• [x] TLS_RSA_WITH_AES_128_CBC_SHA (0x002F)    (TLS 1.2 Mandatory)
• [x] TLS_RSA_WITH_AES_128_CBC_SHA256 (0x003C)
• [x] TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xC013)
• [x] TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xC027)
• [ ] TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xC009)
• [ ] TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xC023)
• [x] TLS_AES_128_GCM_SHA256 (0x1301)    (TLS 1.3 Mandatory)
• [x] TLS_AES_256_GCM_SHA384 (0x1302)
• [x] TLS_CHACHA20_POLY1305_SHA256 (0x1303)    (TLS1.3 Mobile Client Prefer)

Not implemented

• [ ] NewSessionTicket handshake message
• [ ] Psk KeyExchange
• [ ] 0-RTT Data

Usage

• https sample is a working demo of https service without using SslStream

• if you don't know how to Read tls records from a stream, you were actually looking for System.Net.Security.SslStream but not this repository