Changelog

• 56f786321c846dbdc035152d619d670dcf04c02a Retransmit server flight on repeated CH
• ee71667c005d4ae1745490f2c6ef87555d898c68 Document ECH support
• 39f10b49a27e2c13588c5f8704fdcf4dc32ed410 Add ECH public options
• cf4b0e0201ddf1997cd7c288cc7e3b1376cb5191 Allow early-data through ECH
• c74a1f5e32b5b63621cdd298885af19510489329 Add ECH support for external PSKs
• f64c71bb755b1f5c9f3e694412451d47e2b65ebb Handle ECH rejection, retry, fallback
• 00e10f6d46e4b32b7f983a029b41141c29aa9dcd Add client ECH acceptance for HRR
• f2d606b1f333a15ade4e6d103f8728b30f4ecf9f Handle ECH client acceptance
• 76bfecc1ad26551c3c343b487402fee42763021d Integrate ECH with HRR
• a45c9b0a95263cc6f8f8ab3fb9f805e16a429ec6 Add server ECH handshake integration
• 2f72ede6f053330a5bc95e1a53cc139da6622b51 Add server ECH decryption and confirmation
• c32bfb8e33d15f68023d8300b72aca0e960cb7aa Reject IPv4 literals in ECH public names
• 07d1a198af7cfbc2f52c800783f921c0616c46ca Add initial ECH ClientHello construction
• d181dcb5b53ea2e50e5c4497ed61c9e374f9f616 Apply read and write deadlines to handshake
• bc08aaaa5bbac7416f5cd7d54ef6561109528b07 ECH configuration and cryptographic helpers
• 33601b4a1bdcdfad5c516ac1ddb6ccad7ae3d795 Fix CCM length encoding of long additional data
• e4680306883903f402d59652be861fe422723b9e Extract CH wire parsing and validation
• e2177ba760465f0ae794c39d1968b009d6054134 Move dev CID errors to their final home in connection_id
• 8779a0d2475fe38f71111926089856abbb8d48de Remove gocyclo, maintidx and gocognit
• 8c26fc91ed799af11e0f75f3958b3073e049260e Update CI configs to v0.12.8
• dd739cd122991bc5cece0349c7b0b621a6fd9cd1 Add ECH extension formats and alert
• 79e17221553cf480f3296cc29082cd78c5e9b2b8 Document state export/resumption support for DTLS 1.3
• 39010ef3e43459e4a44d64d2f6db673ef1c9146e Extend TestResume to test DTLS 1.3
• c1890c27f5a8bae991864c6e7ef7c327756da1a1 Support DTLS 1.3 state resume / export
• fb2e4f79a45060937e691784f1d3b2be30881b4e Add helpers for 1.3 state export/restoration
• a4a0aba7b8674fc4d1688f0e14fbfd9dd0aefe86 Consolidate CID state copying and ciphers
• 03598cc4d01a5640138e5f384050e6ae28953262 Keep isClient state during state resumption
• 1c813fa1e98df494631b1c301bd9b342994219e9 Remove the tag-freeze warning
• bab22bddfb306802062a300fd67bd73b478347b0 Document resumption and 0RTT support
• e32d7c07c1ab576b66fec8d1a939ff2ed2c239c1 DTLS 1.3 resumption example with optional 0-RTT
• 5ec130cdac726c261b24418236f021c5c9a2990e Wire and test early data into detachedConn
• bd3289dd53bd361a8886a94d259f7e08e105bff5 Negotiate early-data
• 8abf39fd22056c4943bc2faa0aaba8d7815a9c25 Negotiate ALPN in DTLS 1.3
• 13cd371f8c49c410e4e8d25f667675e2a92baf7f Add optional session-store for early-data
• 8c6164e03b7999995c4e42df5d608fd90612f208 Support epoch 1 application records
• a722df0697a6cde0d5bc2cb2bb5019f17804df0a Derive DTLS 1.3 early traffic keys
• 2426c6da9daf9907f7da8c3d255d01c49cb0b7df Set and advertise early-data limit
• ba9360e37744666b3358f877e0ea2a36e63fbec1 Add DetachedConn 0rtt early-data API
• 18c50cc33b482127c397e52b93b28145e482b7d3 Wire 1.3 resumption into handshake
• b8ce6f71447873886141ae8f7574cf4d7fd40d52 Select 1.3 server resumption tickets
• d20a76a4145eefff5b5f31b9b2c53740e6d9d84f Load and validate cached 1.3 sessionTickets
• fb0db039eba4779ecd9e36d39ed07853dee97d68 Cache peer certificates with session tickets
• 9025dd699d5dfa43d3343ed4e0977ab585893aa2 Finish 1.3 NewSessionTicket lifecycle
• 2b1ffb99e518ef4a11392d1269e8136b0f01fd0f Derive 1.3 resumption secrets
• e6a8a211f6607265e8f0154bc92ae4a1de1ecc6d Extract flight4Generate
• 9016586dec8a43400c8fda9c89a94c18eed946f6 Move mDNS example to v4
• 2b49400428d5563d150cba490871f22c3e6aec0f Scope empty identity hint to ECDHE-PSK
• 8dfdae63a8d272b525269800d47bdea5ba42020f Update module golang.org/x/net to v0.55.0 [SECURITY] (#881)
• e5a0f386688891a697ed227998c09413e94a8027 Fix empty 1.2 ECDHE-PSK identity hint
• 1e441cadab1c5ab266aa52c2a156e25527baee8e Remove public network and E2E tests
• 534c8b4d2c02a7153cdfb56ac248aed3c6b8e027 Document PSK 1.3 supprt in README
• 9f2a63c6535d53119dc4b2a57d5f24b8a4626a1d Add 1.3 psk_ke support as fallback
• b386d79a194310cd16c3505cb6923bae5a2a5c1e Add SHA-384 support for 1.3 PSK
• e705c45e2195e2945d1bc11260d38da2b08afcc8 Add multiple 1.3 PSK identity support
• 386d44309ddedb194edf8e7476e60ece991d2110 Add missing CID and 1.3 features to README
• 202f779caaf5c119b2b604bf3429b2d660513d34 Consolidate public configs into options.go
• 48ff9c6c1ca59f3b1f493c24d8d7c6ea3a2fbbf6 Rework WithPSK for 1.3, identities and hashes
• d045231bdc8b3663519029e3984eb55c2b8ae207 Wire 1.3 PSK into flight and FSM
• 4dd4ec3b1bc0bb1d170dc0ac51473ec0e2640ce1 Implement 1.3 PSK handshake helpers
• 7741cd0b7ae6414d5a7ec712568b4939143900c8 Document public PSK APIs after 1.3
• 762a4adcb6e2ff1d59f0853cead0ed85ce4d79e0 Add 1.3 PSK state
• cd755b7dd98acb018e4cc957b2558b0e8d63bada Implement 1.3 PSK binder and ClientHello helpers
• 2b9989aa8cdf37f7ca1e06cd59aa7601f047ebca Accept reordered extensions in ClientHello2 (#1156)
• 997787377f027a5758540767836796f99863384e Add PSK support to 1.3 key derivation