Changelog

• 397d2458cdbe5a0386ba0edf6770009e8d694ee9 Update module github.com/pion/dtls/v3 to v3.1.10
• 8d759ccd0e38511735424b27d9d7af503b177bf3 Allow PSK handshake if client certs are required
• 6710047db5b7a16f9173f345b9cab1f8628fde0c Honor requested certificate types
• 17146cd7626ffc063276132f8e343fe559e1ba99 Update module github.com/pion/transport/v5 to v5.1.1
• 49c21621717f1473e570a76bf637c263a9598980 Update CI configs to v0.12.7
• 05e93d511937414dc765fcbb686ea3820e0c36f8 Avoid comparing entire x509 structs
• 185ef2d2b1f1202937cdb2e71e1cf553bcb90278 Add local path migration API
• 93102563cca25aeaa07128211644660e1d3e18a5 Support multiple paths internally
• bf4686a4d234835df36008ca259452e556d22e56 Implement 1.3 CID requests
• 05e47ce632b71d7af3d334fde49b65a24413bb4f Update module github.com/pion/transport/v5 to v5.1.0 (#1135)
• cfb985d259de28cf15e447adf63f65f991bbc242 Update WithMaxVersion's comment
• 7e96c55b0fd7f93f226757119354e9d9b29cef0b Add DTLS 1.3 keying-material exporter (#1133)
• c2c2da0c6525077b7715077727f06ff6db9c4b6f Add post-handshake NewConnectionID handling
• 0f93eae6c0b83f2166f6a821358b24b92a1ec4d7 Schedule 1.3 post-handshake messages by type
• c69d11092290e4fed91d79f25fcb5c1b9e53afb8 Support multiple CIDs in 1.3 state
• f68eaf4ab7c496dcc4009e9c40f756d698d9363b Support multiple CID aliases per conn
• cf7ced4e47306126f4304d0b3f6cc18bb752e9c0 Track record key usage stats
• a4c49b89ba9808017a782ae5c80ce96520fcd015 Remove unused and duplicated code
• 7f6751cffd54c5f21ab9cc74d43eeb7a891669b5 Remove doc file
• ea098b664ff03a04053d8f4ee47b321d0419c79a Update to /v4
• 5f3ca8f4031dde70a6667e489abb7d8eaf5262df Use shared interop workflow
• 4c8593e355bc376b017ee12e0c2203d9bcea2fa2 Discard late plaintext control records
• 1422912151f8a9c34908d5a0c473c8a1a80707b1 Replace mutable record-layer with parse/marshal
• c3260f2c7e0c647a3decc502a9d415732d991ec4 Fix race in CID rebinding tests
• a40d470e785c7d3d2b2f7925904a5a48725934cc Enforce CID requirements on queued datagrams
• 2497cb7dcfb9b63516ec1cdb6dd7bfe5793bc00c Optimize allocations for handshake and compaction (#1096)
• 1682c5a641310cf2c0f65fd7ca1ad2e8e171d6a6 Update module github.com/pion/transport/v5 to v5.0.1
• b11e303cbe8929504f2ef8122fe68d6d93e4d646 Update MDNs example mod
• 8ca1f055f1067b225aa6cf973e627c98f0314609 Fix flaky HRR retransmission test
• e6a3cae0ad965ba1b620877ec1d74212656b876e Enforce RFC 9146 & 9147 CID routing rules
• 9b628e02564e8e0102064035ebb31dce15cba09d Fix racy ACK test
• e731329b6357855b164d0d9c989e3439aca396bf Update to transport/v5 and Deadline.Context
• 733a38094d1093c55e87899956a49e727755e2ef Preserve full-width 1.3 record numbers
• 6622d4d0d41717612aab5320a35ed91f828a7b5e Update module github.com/pion/transport/v4 to v4.1.1
• 02c1445da81072d6850f1518dc00e380eaf8b068 Update 1.3 seq tracking after auth
• f883ed6b03bbb2210a7ed1335ebb2e26973110b1 Bound DTLS 1.3 read-key selection
• 84cf9e8c2c5418b064899f423e2600e3877a802d Validate CID lengths during handshakes
• f22b49b40d8c140d5d49189a3aa08d93669a81d2 Enforce CID generator length
• f998c2caed589f58722f0a457fbb786414e9d4ec Fix UDP truncation handling on Windows
• 859cc4f851b7fd654db22213e7aa9515b6d4d853 Continue receiving after truncated datagrams
• d679411acaf12276cf8c7132114d0c21ad0f9fdd Bound MTU and receive-buffer to 65535
• 1a14b35816f198eadc7520eadb32dd63e384a28b Remove stream-to-packet transport adapters
• 3d2f13a0d236ab95fe0a85d3e25ca8fb2c2a9c04 Discard oversized and empty datagrams
• 474c3e2e7a4e97ee83ff57ae550cf6e4f717dcfa Optimize PacketConn (#1076)
• 59f4c33b90c58fa6256a9cf1db49d1a9976b3536 Add mDNS example for DetachedConn
• e72115d8e8854a3d3992bc0dc2140e072cc8c75a Implement DetachedConn
• 2a3670e7defc11bb332035eb8ca1d08136894b0e Stabilize test HRR retransmission
• fb3caee474965c9b8e8a2bebd933ef3ecb46b86e Optimize buffer used by PacketConn (#1075)
• 73d391cb31c053930e23d929ac1ab23d9ede7844 Check for non-approved algos on resume (#1079)
• 16fcc8432011043c73b2cc3ae7e09f9429dd925d Set LLL line-length to 320
• 88918834b34747fcb6525748a4667228807b09c3 Deduplicate handshake test helpers
• 3eaa3156ce9a1190b7d8b2f2bb571a00a50ef31d Consolidate options / config tests
• ca9cd6104d34390ae28a37ffbc3817b10c0dc115 Consolidate E2E scenarios
• f09375fb4026e84405154b86abfcf7235b03da46 Rework client and listener constructors
• 923d6e611a7fad0b91f5af94ff28084e650fbed6 Simplify cipher suite and record protection
• d1b4219544dedc4b63d811931326d4e0bdaf3c1b Drop the transient WithOptions suffix
• bff4a0fc6a0069c7958a11f3bb005297cfd70521 Close rejected listeners at Accept
• f4105667b31bcb124baccdd80a5014c032fc207a Fix packet connection leak
• 1736faa4fdc43699d5dd9aac57bff9faace5f651 Represent protocol versions as uint16
• 0cbc18d13f8a64d5346a1130c5d39829d460f8a8 Add optimizations for connection & handshake (#820)
• dccb7be0a6329aebb65b4d4d7d9d5d719b6698f8 Simplify datagram handling
• b8d08561b8c3a5ad3ebcdd60c3d4d22f4eb8e573 Update recordlayer package documentation
• fefb0a11b60910d7eb99714935f402f68c2dcb80 Replace Packet with outbound record intent
• c46aa6580cea087efb3a43b8fba948d0e3feefe9 Consolidate duplicated tests
• e8e87981c98b64bf7c42b01eb0dd91e1acb01e97 Remove redundant option tests
• 8a0527078e9e9fd13e90d760d325dbc5d5f82d28 Consolidate 1.2 and 1.3 SelectSignatureScheme
• ccb84ac3d87632b2660ef5a1b9e80036be5647a0 Fix RSA e2e timeout
• 150ae6c0cb71c69829e1ace40f6bd5ca5b78d51b Remove redundant Algorithms13
• 48ac143bd6ae8feb0e97b7cfb0081f1b2f31f613 Remove redundant handshake tests
• 415cdd1466460252c39af8efcdca89fdc84c2f5f Consolidate cipher fuzz and benchmark
• 716d333cbdd5a3864901fa5a8cf2557c708e3064 Fix unpack error missmatch
• f5cb9afbfa921b349d2b1139f823480ce6b47a1a Add accessor for negotiated DTLS role + version
• 857bac5c811c3fc5a016a35987009573372a3cda Update docker.io/library/golang Docker tag to v1.27
• bc06a6744cdff4ebf949458b0662c279ad5bf261 Make receive buffer size configurable
• 7ab189f8483f1fc69596cceedeab1d4318e6c539 Cover all supported groups in test
• 550094091a5bbe38ce22e932e379ab7ba9334578 Remove duplicated flight tests
• ee6e744f52dd5039cefa7af8aa625a5903cde1c1 Remove duplicated flight4 CID test
• c0d05ce6f48476539552772e7fa946ec3f6fff34 Remove duplicated pkg tests
• 24d7f48ef899012e13f8d258e08ba5bf1922f712 Remove duplicated record-layer tests
• d573b087d375c939882016963f96673125ab4578 Clarify readBufferLease ownership comment
• b65cec834039f62b605dcbfc3239920fb17b8aec Update CID state comment to reflect new API
• f1b423a17dac4945814df57f84cc48e4976bad0d Drop the 13 suffix from CiphertextRecord13
• 2ddc5d4a5d8920d90dc8fe0ed8d88001537a44b0 Move to a unified UnpackDatagram API
• aff5a0d2b58894b827e91845decb284182991193 Return zero bytes from write on failure
• 9133ae5ea4f6ffd91b30855626a13a21b3415e95 Add path migration policies
• 4c9bac533bd584a0f2cae7f5e1961fb5e3f7b0bf Use unique record numbers for fragments
• 66a287946ee8b903d9689a56ff789c1b31613b74 Add RRC to the README
• 80c42b10c5617126560c65bf5f8f85e7062f7703 Integrate and test RRC
• 355c1ff25b40618100febec9509cd0d04147ab83 RRC path validation state
• c883628a618be160fee116f2261ef3fc28b3c602 Add RRC record encoding
• 80416f4e59d3a64d015d71b941ca15d3327e0831 Negotiate RRC
• f68da6628b5ae8d88fba0eaa9caa170ac6d8b704 Register RCC extension
• f86d23f002c8344a6c821cfdca2de52d085d804b Implement 1.3 CID routing and rebinding
• 502eaa45819d0f6fe90f1847a63eb1c621ca1b60 Test HRR ClientHello loss and reordering
• c6f948c1c448f896b22422f837c9fb8b9dcd9621 Validate ClientHello retries
• 80bdc5d8873d155c535b46a66b832a93f4c96014 Move errors and helpers into errors.go
• 86435aa59c250eb8acffa8a0b1285d27f64f8e8b Rename extensionnegotiation to negotiation
• 3fa4afe0b3814f66ec82c2a720886a667c1363d1 Add shared ClientHello retry validation
• c5a27e6bda4b6e68f13d63c19528145f138791cb Require and test SRTP profiles
• f9a8aee13726a898431eb45daf68483a44ac6ada Update module github.com/stretchr/testify to v1.12.1
• 1211026ef53e29dc85207600cf8c08abd9e5c63f Negotiate SRTP in EncryptedExtensions
• 7383b8ef0a53fdcd7304e1693d2e69a7e3be6ea7 Negotiate 1.2 SRTP / MKI from final offers
• 64e2a86e7ddf50945f6755243ec1392cc0c7072a Test CID negotiation
• 94be68e9c6d229cbe47391fc73efa36a79e6c676 Update module github.com/stretchr/testify to v1.12.0 (#1032)
• 6cfb06fb6b5601e281aa112830d3ecb19642017a Make CID negotiations transactional
• c0941c5e1878f7c568ef196ec5cd8ee161ce2d4c Validate ServerHello against ClientHello
• e9c4270ce089c25a898e5c67b1d194fbb5b0c3eb Restore curves after daul-stack fallback
• e7372358d8bd50438c433b1ee6f0a33a62a57366 Reject unsolicited ServerHello extensions
• a059c387ddf3f11e6fac31dd121bb3edb4973846 Snapshot final clientHello offers
• cdf5b6afc8b054f53597a2c8b6de10bda07f43ce Reuse decoded handshake messages
• 38db60f524ae51b7720ec0cfbcd4fccc150ff676 Propagate handshake cache errors
• 76fe765497d55ed0797616b7e36f2e5a5fde3bb9 Validate extension blocks by context
• ce6468483638004e19f5a470e2a82f423a6d42ab Implement Error for Alert
• f26320b25834c33cffd268a44456d495e6dbb081 Port fuzz tests from old API
• 026b6152bce76bc7fa73af90622cae900ba38fd6 Serialize DTLS 1.3 application writes
• 3e402c26760149e695bfcfafa98fab6f5ad435e2 Remove old extensions API
• d24c3f53072db1af6b7f3c0eb676dccce1437d2d Switch to the new extensions API
• c4cce43f15f2a6dcc287cd19b1d71ab38d4ba2bf Extenstion framing api, split by version
• 767d04469ced03a2b7131bed469a773cd48f19e5 Use tools.ietf.org for spec links
• c22de29506f157041827651cc3ca3714b57945da Update README for DTLS 1.3
• 4cf73e6e77de70b2fa8f1246ac742d6cce9539c8 Fuzz CID in record headers
• 509006fc5384b826c616c27c362bd0d07d8d7f48 Test Flights static CID handling
• ed2de9b367c0670198182534da74a644d608311b Simplify flights code, remove nolints
• 39e16acb32c06a4bc9427f4372995303f9109c30 Integrate CID into record-layer and conn
• ca2e79a530cddb2b5742b07d85559b56aba3b672 Implement static 1.3 CID negotiation
• ae4a3f42c975881eda6a020287d34cec15b51f92 Handle duplicated Flight 4
• 22a0632f40b13f140a0b07c8205052c9d590263d Resume and ACK split flights
• 7e286969fe4a8d9ef2cda05d5ec5ca6a3291d35e Recognize partial handshake retransmissions
• 676e2a7dde42339c1d47f3edfa19848024598f5b Use one-shot completion for post-handshake result
• b053693716dc7089afb90e0b2622a6990bd7f918 Add public UpdateKeys API
• eb478beb01bd0e4e6b62d934314311308dc5b514 Add 1.3 CID state scaffold
• d26388d44aee2f2777f874b632a4c79b7d4ddddf Implement inbound keyUpdate
• e39ed7fb9185d6004348b061910ac6eed83b1c57 Implement outbound keyUpdate
• de94497853a1d7f1651abe9cd63c410e4f3c750c Remove redundant 13-suffixes
• 17a3450701796dc8ea19c6b0abe5f5cf48af35e0 Generalize post-handshake command handler
• b20df6955a6c4d19ad950bdb1cd6d03b53c79c31 Retain previous read keys
• bbc34390f48778697a060a262710e0fdddd26b96 Remove duplicated errors and aliases
• 04c886bf4e7fe6e95a504a3a6dbea3248d5912a9 Remove record-protection singleton
• 1540b1d47dc8a9e7229bba6e5a55a76d4086e74b Route record-protection through traffic-keys
• 2ca44ab9a38922080215fca7a90131a2e7da3a7a Per epoch directional traffic keys
• 6725a597dc8a52526e220775c5478a98fd3302e5 Add epoch-aware traffic keys state
• 2abda23573aa61ecbd01a383edb48247da16f23a Collapse duplicated aes_gcm code
• ff068ac0077b1d5f0d0f79b48d0d59689c5a4a49 Directional traffic-protection factory
• 919a1247c9a2ee4cf4169ab9d959a9cb0642d4b6 Derive traffic secert update
• 51029ec23d979eff5376a348d214712f224d0c4f Define versions and settings behavior
• e73780eb735cba3ad36fbd805f5dbf0d52913c9d Enable X25519MLKEM768 by default
• 119432da7444bed18e0a7c3b0e39267d724f6dff Handle flights split across datagrams
• 35a70671a4326575320c8e2782e6e57d3ec75fb5 Complete DTLS 1.3 ACK reliability
• 5dbb82269637f182d2809b2978904e90440a7402 Add 1.3 client certificate requests
• 0069fd12f142bd208c9355de16204dfad0fc9573 Omit KeyShare if selected group was offered
• 755a24e1481e31f8cfe8d57a9f313b16bdb5252d Wait for test client close
• 6592b33d7d344a6159709c7573185e86eeb90dbc Post-handshake handling and NewSessionTicket
• a6b3709edbc4619f7b9b91fd82435f22b756330d Run dtls-interop in CI
• 66cf2cd96126360c83dd996afe52fa188e3dc7ad Handle DTLS 1.3 ACK retransmissions
• 30e978167dd0299332ad3f790deb3cb803971c7a Wire acks in RecvHandshakeState
• 9183f4a40ea8f2dba927e25cd610dd17e6eb8631 Add post-handshake state manager
• 3b73e0a0b2ed0b5c8043a8a9a2d3f5ef15ae2190 Fix a race in TestPSKServerKeyExchange
• b420a9c9b02a6378e9c409173f4aabb69854acbe Update module github.com/pion/transport/v4 to v4.1.0
• 6267bdebbe3d29aa42bd6b7b29d928df8d287094 Polish test contexts and spelling
• 6cb949ef9c3126e3af2de1c2b596404604296ec1 Use standard clone and max helpers
• 91cd9960c487a9b214c7181058e456e7c31d40aa Move state cloning into state package
• 5bf898077d91d830d18743e1191d23ba6999e4c7 Simplify handshake config construction
• 623a706813c44b2a5d3a1a7b662bc3df3bdb3251 Use standard context cancellation
• 50f87b9231fc833b3591a7b467755c327e794f3c Move connection config into config.go
• 406b5f1a08ce01fcb572310c4417a1b63e046ee5 Split incoming packet handling
• 09839176611d2d6153a2126ba3c0a1f2626f7832 Clarify connection state storage
• 8f5b227ecdd1394e1e7d2bf69cc05b52ab4a52e4 Clean FSM13 helpers
• 5281154285690f31451f4b664cdfc913413065d7 Polish Go naming and cloning idioms
• 48e6259c2d452a21660c1a104a0d1bbd4d7a1c79 Remove cipher suite forwarders
• d1b3b84d55fc16a194ab522bdd5d06ba5c64adb4 Collapse listener constructor layers
• fbd8a41b9a07f9791aecc25489b7230d3ae91c98 Simplify handshake connection adapter
• 01e0f6561dec695ccd170240918e9943d0cf5eb8 Remove redundant wrappers
• 2f2923ad09b261a036e808d645421d6f17b2e667 Implement handshake lifecycle
• 5f7c9b37714c4b6af046108117620c8ceb0e6421 Break into a file per flight
• ebcfc2b7191ba948aa34d966ed4b310edcfe0025 Removed unused cookieLength and sessionLength
• deb71ba674d1db31e681a31beae9be4891f9a897 Refactor fsm13 wait into paths
• 8332b63a0e61159b8f861986939a9c4fb97c196c Deduplicate server and client flight code
• 4216cc8f088561de433b5a7d4e0e264054e26f69 Add parse dependencies and hooks
• 0f5339203b612cb51e5d99f056f818b1484abbe0 Extract multiple-returns into structs
• d9fb6d52e8ab67d133af8d47397f0120c4f42528 Extract duplicated precessing code
• 8d11ec7741dd8911af29aa6a0073970e851855b6 Refactor handleIncomingPacket output
• 4bcc2f7af81034cfc069244fe7912c9584141b04 Remove aliases
• 6e2c99e6071bf0cd20bad259ef61f043a87735bc Add post-handshake message types
• edc4be1e14f2b86cb881c2feec5180104373e39f Add test for flighthandler behavior
• d491d8e65e472db5257c1690eb6615cd542d7800 Rename common flight handler utils
• 52e61c7be0b0727b0b1cd3f13769ea2bc21c604e Add certificate auth to server flight 4
• 28f4ba88480f756820e11541d3fa6c4bd13cdda8 Send DTLS 1.3 final flight ACK
• d74bf0b7b8fa041d18793746320028ec5d432866 Fix queued 1.3 packets read race
• 023f3e85f869da189cbecea9fcb7a7c15e216b39 Move handshake_test.go to protocol/handshake
• 761933a0be051250e626fbbed97932a4437d4deb Move handshake_cache_test to internal/flight
• 4ac1343d458230dc5ee06c085c63ae4c3853f059 Move crypto test to internal/handshakecrypto
• 8c381b7afa88258dfacbfb972c7355f73087d73f Move compression methods to internal/flight
• 751ebf00e3dbe75d5ae10bae00fdbb24960c9dc8 Move fragment buffer to internal
• 54a3530de9c593f2d7f23634b30cef99366d13c6 Fix TestSupportedEllipticCurves race
• aee63c787b6c7699aeebc3b5053566d7367383eb Move and dedup utils to internal
• f8fa55479a6b13234e28516819ff2d8d96b5991e Deduplicate code, remove dupl nolints
• 545b69a1e6e2558387dafebb84e82606053f7e69 Remove unused nolints
• 676ae39c5201698ce8ed8766de27400a21f7ab93 Add key schedule coverage
• 69f11c432ea4cfddcff5c4c969e59b9297f3325d Verify client Finished
• 7975646a9e9e494a1371ef73075a909ffeb2605f Select and validate client certificates
• daba048b3416a2504fbcc1ec5ef9000b0a780f73 Generate client Flight 5 Finished
• e1fb308f9f85069079b7191bdb3209a5bd2690bd Update CI configs to v0.12.4
• f17a7ae59bf59500a25690adcee0abed560d4e58 Validate server identity
• 99536fdc008fb812d5223c69361ca5abf1ed501d Parse server cert messages
• 7c45cb4fe5685bc128698d9194bfbfbecd159bb6 Verify server Finished
• 515f9c6a56188ac292726cf96f2e3f37671249c5 Generate server protected finished
• d4d586ca5e976c126b1346c36a77467274206d50 Export handshake Finished base keys
• 0299894f30b11881fd52d7326b253adf507dfbc2 Derive application secrets
• 4465b141c4a8b9caad49dfe4ca571057c3915911 Derive handshake master secret
• 52c8178abd387c10723b80c498ec94cc3c4c9971 Delay BasicIO test close
• fb4d94f282c820aa203a3e3cc329866b3616a981 Refactor handshake and application secrets
• 740a214d5bee98c61f55ba599be7fdfbcb762235 Rename 1.3 preMasterSecret to keyAgreementSecret
• 26681245b88a773bdf60870ce2aa57d4272a581d Group state by version
• c3de4813c465bbe1cd60214c034db603fe9fceec Finish transcript authed handshake
• be4ef7f0dc9e734a99160b3fe9b6e988307b3efa Implement FSM send and wait
• 7dd6141b179ccbde4b7e63674007db64300c6bc7 Hook protected records into cache
• 22cfe0d36c422db96fc8149dc3f698db51254e29 Decrypt protected DTLS 1.3 records
• 25493eecf8eea4a5847038bac270995afc6a64cf Write protected handshake records
• 486e3713f18be59246b8d979da73efed216eda31 Isolate extension payload unmarshal
• 1d610b85e7ffe071fbb34c3707b659392d2416c0 Only pass extensions declared length
• d1bcb39c1313f92715fec3e260434360932d9332 Extract flight3Parse
• f7c6ef667dcc838373c4990b703a45787c270f91 Unblock reads when conn is closed
• 88697ec60205a37ad88adc02fcde7f86d8955e67 Remove outdated unused nolints
• c47972de0cf9f5f764934909c7f9a486914e3ceb Remove version suffixes from flights
• 649b889b4b55bbdeb08cd4144b66f0cbfeb48635 Fix dtls 1.3 epoch handling
• 8aea6086bb098a5f414d60cd87ef700a5c196500 Init handshake record protection
• b27366270bde4e691a7277ab53ffe3a781b4890f Break down prepareHandshakeStart
• c1eb9559e1c47c98235a9cd1bc9867d26748bcb0 Move trasncript ownership to FSM
• a8c94e30d9395ceb14eb17cf9d059c22740ca482 Refactor transcript, fsm, handshake to internal
• 7e1eac839ca9c9b75e7e51d47d4c4eb5db3ccff0 Test CHACHA20_POLY1305_SHA256
• 792f719a9baee5ec878cf035c5e8b4d4d5696c70 Test aes-256-gcm
• 3205a39a686545f077096751f03361ac38e0e964 Test aes-128-gcm
• f160c58e56d99c94bc6799c4ded85cb4e96c5db0 Test 1.3 sequence-number masking/unmasking
• 220e167dfe19e306408e90f3335db49a403238e0 Remove the 13 suffix
• a68e0d94ba2c691c0191d236421d45ac4fde4fb0 Add 1.3 ciphers open
• d4b129c0eff0e33d44c4b387a8ec5175326ee8d9 Add 13 ciphers seal
• 43d9d3672fe4c439edf6abd14bc5f8060813af51 Remove 13 suffix from InitFromTrafficSecrets13
• d8bc7dbd9805d45c19189ebe33c774f44e1237c4 Add 1.3 cipher suite secret init
• f7216c27205c088f0f5ef0b50be9c347b4cade83 Preserve close in nettest test
• c5c26cba58c59d5b903f1c3b5e31889e6c557c72 Inintal X25519MLKEM768 key exchange support
• dff7a19b72418263baf67e0b4e56708347253126 Skip benchmark buffer on 386
• 34e813f53741100d0e9f3c6f23a61f6ed96a3fe8 Add CHACHA20_POLY1305_SHA256 1.3 record primitives
• 3bdd4296f5ece0f48766400925b41f6d04d7a6e2 Add AES 128_GCM_SHA256/256_GCM_SHA384
• fd79bde2909eeb5b51cb8c0c6c60ec8ffd010aee Add AES-256-GCM record-protection
• 17258601a503c61622a6585a91c741cc3fc6d031 Add EncryptedExtensions
• 2ca3820a17b113813e90b7667952994fb8e3549b Move flight enums into 1.2 and 1.3 package
• 60e739a857c3b29d2e7453932040edb260ac4122 Move flighthandlers to internal
• 8ed75388de253eaeac3667eb4c0843555a0c6d33 Allow close_notify on test assertion
• 412557e8d81b0ece4d02541622e6aa9c9efd0f82 Relax TestContextConfig cancel timing
• 1dbd237f9167b6fd41e33e6e19e08625a7a2e920 Derive handshake secrets from transcript
• bb16113c061e2477da986e827efd46aa05f53f14 Fix flaky test
• 4beaa36c49bd411ea9b2e0f57d425259513b0c28 Append inbound handshakes to transcript
• a2140946d11f51d02de7c66cdbe76c36d8191c57 Move dtlsConfig to internal
• 388a7d2b5ec8a7eefd4b03d6884cf778ff998afa Add transcript helpers for handshake
• 4807a25250a6f0ae7a18a033d6695bb835995a62 Remove Config
• 8f059b8ecebdc3632145617bef67a27f68beb2c7 Drop non-standard Go errors
• 43cfb4fb41f3eaa49fecabf327a603eb231cfbd7 Increase E2E test timeout
• 5f0afc31ecc0ae8bbf6a4a7beb973112f5662021 Send and require signature_algorithms
• 16d20e5b510c8adcdd8d6a4ce21bb226d52257e4 DTLS 1.3: Add flight 3 (#834)
• f949f3c1d493cbcbd9149ad1d20dcd4948908213 Implement Flight 2 Generation+Parsing for DTLS 1.3
• c60de4f11b53e2aca5914c07462ad185332ac703 DTLS 1.3: Add flights 0 and 1 (#829)
• 20776597de761346244e1c35702561ae21d58ce4 DTLS 1.3 cipher-suite metadata and filtering/validation helpers (#855)
• 18e08c4732b7026c2d98f944f658f39912065cbe Remove the obsolete Go 1.14 build tag
• a9fac6581506a6e2cdc014e2a56c411bfa154c05 Implement DTLS 1.3 record layer encoding
• 37022b33ae403ff0452147d0b68ee893c6fdcb00 Integrate handshake transcript into FSM
• 18315fe16bf30f3585f46e5b89182493f04a0a28 Update actions/checkout action to v7
• 61a241fcab546f7f43699039fff1257c038ee680 DTLS 1.3 FSM architecture (#738)
• 8789078cf50d2a7cf12450f7902a455d29a28c83 Implement DTLS 1.3 handshake transcript
• 031eb1450b43afef8057a7901d4a9b6c3f121949 Add ACK ContentType with tests
• 7c02953135ae2faa1cd283c66adaeb3306730882 Retact v3.1.3 for breaking compatiblity with firefox
• 063b1ad6c4eb4b9c6d821b01034c55a1ce8fd0a7 Restore Firefox compatibility
• 154808041380b3a4bb55e227f344cff1bf6dea3a Update module github.com/pion/transport/v4 to v4.0.2 (#836)
• 1031af5f402de27ba610d171038c5fd2a6d848e1 Update dtls-1.2 branch name
• 517ebf2f117d75cef9cef2a2d9b6b43a3d9b7f83 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
• f44f857d6e3e0b5e4d9b1cf948a5155eac337431 Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
• 179c3537df19273ebc763d0598f9ef07ce962088 Add DTLS 1.3 Unified Header (#793)
• d7a09d407472705b22c4141c07140402d5e9a3db Document main-branch tagging freeze
• fd27a52a64265097a621432090926a651109b4cb Add private min and max version API (#823)
• 620d6425fb873786357f9786982cf0e0981f34f2 Improve fuzzing for all extensions (#805)
• 977de19f2d4f559f631c69280b2351f8478aa938 Update CI configs to v0.12.2
• e6950f0291850b86fb704f65acf3ace88cd5b9d7 Filter non-approved FIPS curves in FIPS mode (#817)
• 848c4bc17e147981c0b9e40bef866bb7f7c0a773 Optimize handshake memory usage
• d0e736c2e6bcd89dada06355ef95fd0fe3957d14 DTLS 1.3 OID filter extension (#814)
• 956d41df4ab17c1e1e387060c62242c72e8cd763 Update module golang.org/x/crypto to v0.48.0 (#809)
• b86cb7515e56183ec0a3918d4f2738dc9b51f6ea Add missing checks and validations
• 726522d91c73331f242ea6b5006a80e4c4244a6c Apply modernize and lint upgrades
• d994b8bf4f571f1cf37a2f59d2c5e9b2c7a5efd7 Update CI configs to v0.12.1
• 4fcce60395bf052abc530afd4a5ec25876e18fb4 Fix handshake hang on Finish in retransmit state
• a25c8b860afe987ca4f17e0cc213ff686da652af Add ListenConfig option to Listener
• 42b83fe3850722740d5258f878de148486a3ec83 Remove custom AddUint48 helper
• 5a4e85a2fa567cc1da818d08ad2dad0d7a3346e2 DTLS 1.3 Add the Certificate Authorities extension (#807)
• 812fc22c4f43abdf4d1da216e69e92421a64aa2c DTLS 1.3 post handshake auth extension (#806)
• 39f310037631fb84fc47ff73447b23387eb666e3 DTLS 1.3 Add EarlyDataIndication extension (#804)
• d1d58f212102887ef3c7e6b696d6bc218af3d7b9 Update CI configs to v0.12.0
• 16413bad7fa0426de4c11d95f1ed2e76c0159d8b Add HKDF funcs for Key Scheduling - DTLS v1.3 (#737)
• accee59ca63fc19171f0b807b378bb96aa49d33a Implement ChaCha20-Poly1305 Ciphersuite (#794)
• 6b4fe8c044e03a73b6ecc8516911c7842268a430 Add RSA_PSS_RSAE back to DTLS 1.2 and fix parsing (#801)
• 5ee9206c372458946776fe12cc7239acdd792e29 Upgrade E2E Test Docker Image (for OpenSSL 3.x) (#799)