tlslite

This is wonderful. I was super excited to dive in an find the RSA code so I could preen about Bleichenbacher's vulnerability, but she neatly sidestepped that by doing ECDH. Then I thought, well, maybe it's P-curve ECDH and I can preen about invalid curve attacks on static-ephemeral ECDH. But nope, X25519! My point here, apart from making fun of myself for being the kind of person who would write this stuff on a message board, is TLS 1.3 is pretty solid. The "block thing" that's kind of weird is, I assume, the TLS Record Layer. TLS runs (ordinarily) over TCP, which provides a non-demarcated stream of bytes. TLS breaks that stream up into records, and runs its handshake messages over one type of record, (say) HTTPS over another, and "alerts" over a third. The Record Layer also interacts, I think, with TLS's misbegotten compression system? I

Having found no mention of TLS Lite in the last few discussions[0], I thought this TLS lib with just under 10.000 LoC (roughly 1/30 of OpenSSL's) deserves a bit of spotlight. Written by Trevor Perris of "Moxie Marlinspike and Trevor Perrin's TACK."-fame. Summary from the page: TLS Lite is an open source python library that implements SSL and TLS. TLS Lite supports RSA and SRP ciphersuites. [It] is pure python, however it can use other libraries for faster crypto operations. Direct link to the Github-page: https://github.com/trevp/tlslite Now onwards with the arguments ("side-channel attacks?")! [0] It has actually never been on HN, if Algolia is to be trusted.