View source for User:Ctz ctz/sandbox/Comparison of TLS implementations

{{userspace draft|date=August 2024}}

{{Short description|none}}
{{About|TLS libraries comparison|cryptographic libraries comparison|Comparison of cryptography libraries}}
{{redirect|Secure Transport|the transportation of valuables|Armored car (valuables)}}
{{Cleanup bare URLs|date=September 2022}}
The [[Transport Layer Security]] (TLS) protocol provides the ability to secure communications across or inside networks. This '''comparison of TLS implementations''' compares several of the most notable [[software library|libraries]]. There are several TLS implementations which are [[free software]] and [[Open-source software|open source]].

All comparison categories use the stable version of each implementation listed in the overview section. The comparison is limited to features that directly relate to the TLS protocol.

== Overview ==
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! Developed by
! Open source
! Software license
! Copyright holder
! Written in
! Latest stable version, release date
! Origin
|-
| [[Botan (programming library)|Botan]]
| Jack Lloyd
| {{yes}}
| {{free|[[Simplified BSD License]]}}
| Jack Lloyd
| [[C++]]
| {{Latest stable software release/Botan}}
| US (Vermont)
|-
|-
| [[BoringSSL]]
| [[Google]]
| {{yes}}
| {{free|[[OpenSSL license#Licensing|OpenSSL-SSLeay dual-license]], [[ISC license]]}}
| Eric Young, Tim Hudson, Sun, OpenSSL project, Google, and others
| [[C (programming language)|C]], [[C++]], [[Go (programming language)|Go]], [[Assembly language|assembly]]
| ??
| Australia/EU
|-
| [[Bouncy Castle (cryptography)|Bouncy Castle]]
| The Legion of the Bouncy Castle Inc.
| {{Yes}}
| {{free|[[MIT License]]}}
| Legion of the Bouncy Castle Inc.
| [[Java (programming language)|Java]], [[C sharp (programming language)|C#]]
| {{Latest stable software release/Bouncy Castle}}
| Australia
|-
| [[BSAFE]]
| [[Dell]], formerly [[RSA Security]]
| {{no}}
| {{proprietary}}
| [[Dell]]
| [[Java (programming language)|Java]], [[C (programming language)|C]], [[Assembly language|assembly]]
| SSL-J {{Latest stable software release/BSAFE SSL-J}}
Micro Edition Suite {{Latest stable software release/BSAFE Micro Edition Suite}}
| Australia
|-
| [[cryptlib]]
| [[Peter Gutmann (computer scientist)|Peter Gutmann]]
| {{yes}}
| {{free|[[Sleepycat License]]}} and commercial license
| [[Peter Gutmann (computer scientist)|Peter Gutmann]]
| [[C (programming language)|C]]
| {{Latest stable software release/cryptlib}}
| NZ
|-
| [[GnuTLS]]
| [[GnuTLS|GnuTLS project]]
| {{yes}}
| {{free|[[GNU Lesser General Public License|LGPL-2.1-or-later]]}}
| [[Free Software Foundation]]
| [[C (programming language)|C]]
| {{wikidata|property|preferred|references|edit|Q1533305|P348|P548=Q2804309}} {{wikidata|qualifier|raw|preferred|single|Q1533305|P348|P548=Q2804309|P577}}
| EU (Greece and Sweden)
|-
| [[Java Secure Socket Extension]] (JSSE)
| [[Oracle Corporation|Oracle]]
| {{Yes}}
| {{free|[[GNU General Public License#Version 2|GNU GPLv2]]}} and commercial license
| Oracle
| [[Java (programming language)|Java]]
| {{Latest stable software release/Java (software platform)}}
| US
|-
| [[LibreSSL]]
| [[OpenBSD|OpenBSD Project]]
| {{yes}}
| {{free|[[Apache License|Apache-1.0]], [[BSD licenses|BSD-4-Clause]], [[ISC license|ISC]], and [[public domain]]}}
| Eric Young, Tim Hudson, Sun, OpenSSL project, OpenBSD Project, and others
| [[C (programming language)|C]], [[Assembly language|assembly]]
| {{wikidata|property|preferred|references|edit|Q16590706|P348|P548=Q2804309}} {{wikidata|qualifier|raw|preferred|single|Q16590706|P348|P548=Q2804309|P577}}
| Canada
|-
| [[MatrixSSL]]<ref name=matrixssl>The features listed are for the closed source version</ref>
| PeerSec Networks
| {{yes}}
| {{free|[[GNU General Public License#Version 2|GNU GPLv2]]+}} and commercial license
| PeerSec Networks
| [[C (programming language)|C]]
| {{Latest stable software release/MatrixSSL}}
| US
|-
| [[Mbed TLS]] (previously PolarSSL)
| [[Arm Holdings|Arm]]
| {{yes}}
| {{free|[[Apache License]] 2.0, [[GNU General Public License#Version 2|GNU GPLv2]]+}} and commercial license
| [[Arm Holdings]]
| [[C (programming language)|C]]
| {{Latest stable software release/Mbed TLS}}
| EU (Netherlands)
|-
| [[Network Security Services]] (NSS)
| [[Mozilla]], [[AOL]], [[Red Hat]], [[Sun Microsystems|Sun]], [[Oracle Corporation|Oracle]], [[Google]] and others
| {{yes}}
| {{free|[[Mozilla Public License|MPL]] 2.0}}
| NSS contributors
| [[C (programming language)|C]], [[Assembly language|assembly]]
| {{Latest stable software release/Network Security Services}}
| US
|-
| [[OpenSSL]]
| [[OpenSSL|OpenSSL project]]
| {{yes}}
| {{free|[[Apache License|Apache-2.0]]}}<ref group=lower-alpha name="openssl-licenses" />
| Eric Young, Tim Hudson, Sun, OpenSSL project, and others
| [[C (programming language)|C]], [[Assembly language|assembly]]
| {{wikidata|property|preferred|references|edit|Q1052790|P348|P548=Q2804309}} {{wikidata|qualifier|raw|preferred|single|Q1052790|P348|P548=Q2804309|P577}}
| Australia/EU
|-
| [[Rustls]]
| Joe Birr-Pixton, Dirkjan Ochtman, Daniel McCarney, Josh Aas, and open source contributors
| {{yes}}
| {{free|[[Apache License|Apache-2.0]], [[MIT License]] and [[ISC license|ISC]]}}
| Open source contributors
| [[Rust (programming language)|Rust]]
| {{Latest stable software release/Rustls}}
| United Kingdom
|-
| [[s2n]]
| [[Amazon.com|Amazon]]
| {{yes}}
| {{free|[[Apache License]] 2.0, [[GNU General Public License#Version 2|GNU GPLv2]]+}} and commercial license
| Amazon, Inc.
| [[C (programming language)|C]]
| Continuous 
| US
|-
| [[Schannel]]
| [[Microsoft]]
| {{no}}
| {{proprietary}}
| Microsoft Inc.
| 
| Windows 11, 2021-10-05
| US
|-
|[[MacOS|Secure Transport]]
| [[Apple Inc.]]
| {{Yes}}
| {{free|[[Apple Public Source License|APSL 2.0]]}}
| Apple Inc.
| 
| 57337.20.44 ([[OS X]] 10.11.2), 2015-12-08
| US
|-
| [[wolfSSL]] (previously CyaSSL)
| wolfSSL<ref name="wolfsslproduct">{{cite web | url=https://www.wolfssl.com/wolfSSL/Products-wolfssl.html | title=wolfSSL product description | accessdate=2016-05-03}}</ref>
| {{yes}}
| {{free|[[GNU General Public License#Version 2|GNU GPLv2]]+}} and commercial license
| wolfSSL Inc.<ref name="wolfsslcompany">{{cite web | url=https://www.wolfssl.com | title=wolfSSL Embedded SSL/TLS | accessdate=2016-05-03}}</ref>
| [[C (programming language)|C]], [[Assembly language|assembly]]
| {{Latest stable software release/wolfSSL}}
| US
|-
| [[Erlang (programming language)|Erlang]]/OTP SSL application
| Ericsson
| {{yes}}
| {{free|Apache License 2.0}}
| Ericsson 
|Erlang
|OTP-21, 2018-06-19
|Sweden
|-
|-class="sortbottom"
! Implementation
! Developed by
! Open source
! Software license
! Copyright owner
! Written in
! Latest stable version, release date
! Origin
|}
{{Reflist|group=lower-alpha|refs=
<ref name="openssl-licenses">[[OpenSSL license#Licensing|Apache-2.0]] for OpenSSL 3.0 and later releases. [[OpenSSL license#Licensing|OpenSSL-SSLeay dual-license]] for any release before OpenSSL 3.0.</ref>
}}

== <span class="anchor" id="TLS version support"></span>TLS/SSL protocol version support ==
Several versions of the TLS protocol exist. SSL 2.0 is a deprecated<ref name=ssl2diediedie>{{cite IETF |rfc=6176 |title=Prohibiting Secure Sockets Layer (SSL) Version 2.0}}</ref> protocol version with significant weaknesses.  SSL 3.0 (1996) and TLS 1.0 (1999) are successors with two weaknesses in CBC-padding that were explained in 2001 by Serge Vaudenay.<ref name="vaudenay-cbc">{{cite web|url=http://infoscience.epfl.ch/record/52417/files/IC_TECH_REPORT_200150.pdf|title=CBC-Padding: Security Flaws in SSL, IPsec, WTLS,...|first=Serge|last=Vaudenay|date=2001}}</ref>  TLS 1.1 (2006) fixed only one of the problems, by switching to random [[initialization vector]]s (IV) for CBC block ciphers, whereas the more problematic use of mac-pad-encrypt instead of the secure pad-mac-encrypt was addressed with RFC 7366.<ref name=rfc7366>{{cite IETF |rfc=7366 |title=Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security}}</ref>  A workaround for SSL 3.0 and TLS 1.0, roughly equivalent to random IVs from TLS 1.1, was widely adopted by many implementations in late 2011.<ref name="BEAST-countermeasure">{{cite web|url=https://www.educatedguesswork.org/2011/11/rizzoduong_beast_countermeasur.html|title=Rizzo/Duong BEAST Countermeasures|archive-url=https://web.archive.org/web/20160311153448/https://educatedguesswork.org/2011/11/rizzoduong_beast_countermeasur.html|archive-date=2016-03-11|url-status=dead}}</ref> In 2014, the [[POODLE]] vulnerability of SSL 3.0 was discovered, which takes advantage of the known vulnerabilities in CBC, and an insecure fallback negotiation used in browsers.<ref name="poodle">{{cite web | url=https://www.openssl.org/~bodo/ssl-poodle.pdf | title=This POODLE Bites: Exploiting The SSL 3.0 Fallback | date=September 2014 | access-date=15 October 2014 |last1=Möller |first1=Bodo |last2=Duong |first2=Thai |last3=Kotowicz |first3=Krzysztof | archive-url=https://web.archive.org/web/20141015204410/https://www.openssl.org/~bodo/ssl-poodle.pdf | archive-date=15 October 2014 | url-status=dead}}</ref>

TLS 1.2 (2008) introduced a means to identify the hash used for digital signatures.  While permitting the use of stronger hash functions for digital signatures in the future (rsa,sha256/sha384/sha512) over the SSL 3.0 conservative choice (rsa,sha1+md5), the TLS 1.2 protocol change inadvertently and substantially weakened the default digital signatures and provides (rsa,sha1) and even (rsa,md5).<ref name="TLSv1.2-changes">{{cite IETF |rfc=5246 |title=The Transport Layer Security (TLS) Protocol Version 1.2 |section=1.2 |sectionname=TLSv1.2's Major Differences from TLSv1.1}}</ref>

[[Datagram Transport Layer Security]] (DTLS or Datagram TLS) 1.0 is a modification of TLS 1.1 for a packet-oriented transport layer, where packet loss and packet reordering have to be tolerated.  The revision DTLS 1.2 based on TLS 1.2 was published in January 2012.<ref name="RFC 6347">{{Cite IETF |rfc=6347}}</ref>

TLS 1.3 (2018) specified in RFC 8446 includes major optimizations and security improvements. QUIC (2021) specified in RFC 9000 and DTLS 1.3 (2022) specified in RFC 9147 builds on TLS 1.3. The publishing of TLS 1.3 and DTLS 1.3 obsoleted TLS 1.2 and DTLS 1.2.

Note that there are known vulnerabilities in SSL 2.0 and SSL 3.0. In 2021, IETF published RFC 8996 also forbidding negotiation of TLS 1.0, TLS 1.1, and DTLS 1.0 due to known vulnerabilities. NIST SP 800-52 requires support of TLS 1.3 by January 2024. Support of TLS 1.3 means that two compliant nodes will never negotiate TLS 1.2.

{| class="wikitable sortable mw-collapsible" style="text-align: left; font-size: smaller"
|-
! Implementation
! [[Transport Layer Security|SSL 2.0]] (insecure)<ref name="sslv2">{{cite IETF|draft=draft-hickman-netscape-ssl-00|title=The SSL Protocol|date=19 April 1995|last1=Elgamal|first1=Taher|last2=Hickman|first2=Kipp E. B.}}</ref>
! [[Transport Layer Security|SSL 3.0]] (insecure)<ref name="auto">{{cite IETF|rfc=6101}}</ref>
! [[Transport Layer Security|TLS 1.0]] (deprecated)<ref name="auto1">{{cite IETF|rfc=2246}}</ref>
! [[Transport Layer Security|TLS 1.1]] (deprecated)<ref name="auto2">{{cite IETF|rfc=4346}}</ref>
! [[Transport Layer Security|TLS 1.2]]<ref name="tls" />
! [[Transport Layer Security|TLS 1.3]]
! [[Datagram Transport Layer Security|DTLS 1.0]] (deprecated)<ref name="auto3">{{cite IETF|rfc=4347}}</ref>
! [[Datagram Transport Layer Security|DTLS 1.2]]<ref name="RFC 6347" />
! [[Datagram Transport Layer Security|DTLS 1.3]]{{fact|date=July 2024}}
|-
| [[Botan (programming library)|Botan]]
| {{yes|No}}
| {{yes|No}}<ref name="Botan 1.11.13">{{cite web|url=http://botan.randombit.net/relnotes/1_11_13.html|title=Version 1.11.13, 2015-01-11 — Botan|date=2015-01-11|accessdate=2015-01-16|url-status=dead|archiveurl=https://web.archive.org/web/20150109154102/http://botan.randombit.net/relnotes/1_11_13.html|archivedate=2015-01-09}}</ref>
| {{yes|No}}
| {{yes|No}}
| {{yes}}
| {{yes}}
| {{yes|No}}
| {{yes}}
| {{no}}
|-
| [[BoringSSL]]
|
|
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}
| {{no}}
|-
|[[Bouncy Castle (cryptography)|Bouncy Castle]]
| {{Yes|No}}
| {{Yes|No}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{Partial|Yes}}<br /><small>(draft version)</small>
| {{okay|Yes}}
| {{yes}}
| {{no}}
|-
| [[BSAFE]] SSL-J<ref name="RSABSAFETECH">{{cite web| title = RSA BSAFE Technical Specification Comparison Tables| url = http://www.emc.com/collateral/data-sheet/11433-bsafe-tech-table.pdf| access-date = 2015-01-09| archive-url = https://web.archive.org/web/20150924043531/http://www.emc.com/collateral/data-sheet/11433-bsafe-tech-table.pdf| archive-date = 2015-09-24| url-status = dead}}</ref>
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|No}}<ref group=lower-alpha name="bsafe-sslj-tls10" />
| {{yes|No}}<ref group=lower-alpha name="bsafe-sslj-tls10" />
| {{yes}}
| {{yes}}
| {{yes|No}}
| {{no}}
| {{no}}
|-
| [[cryptlib]]
| {{yes|No}}
| {{yes|Disabled by default at compile time}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
|
| {{yes|No}}
| {{no}}
| {{no}}
|-
| [[GnuTLS]]
| {{yes|No}}<ref group=lower-alpha name="ssl20-client-hello" />
| {{yes|Disabled by default}}<ref name="GnuTLS-3.4.0">{{cite web|url=http://lists.gnutls.org/pipermail/gnutls-devel/2015-April/007535.html|title=[gnutls-devel] GnuTLS 3.4.0 released|date=2015-04-08|accessdate=2015-04-16}}</ref>
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|Yes}}<ref name="GnuTLS 3.6.3">{{cite web|url=https://lists.gnupg.org/pipermail/gnutls-devel/2018-July/008584.html|title=[gnutls-devel] GnuTLS 3.6.3| date=2018-07-16|accessdate=2018-09-16}}</ref>
| {{okay|Yes}}
| {{yes}}
| {{no}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{yes|No}}<ref group=lower-alpha name="ssl20-client-hello" />
| {{Yes|Disabled by default}}<ref>{{cite web|url=https://www.oracle.com/java/technologies/javase/8u31-relnotes.html|title=Java SE Development Kit 8, Update 31 Release Notes|access-date=2024-01-14}}</ref>
| {{Yes|Disabled by default}}<ref name="JDKDisableTLSv1.0_1.1">{{cite web|url=https://bugs.openjdk.org/browse/JDK-8256490|title=Release Note: Disable TLS 1.0 and 1.1|accessdate=2024-01-14}}</ref>
| {{Yes|Disabled by default}}<ref name="JDKDisableTLSv1.0_1.1"/>
| {{yes}}
| {{yes|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{no}}
|-
| [[LibreSSL]]
| {{yes|No}}<ref name="OpenBSD5.6">{{cite web|url=https://marc.info/?l=openbsd-announce&m=141486254309079|title=OpenBSD 5.6 Released|date=2014-11-01|accessdate=2015-01-20}}</ref>
| {{yes|No}}<ref name="libressl-2.3">{{cite web| title = LibreSSL 2.3.0 Released| url = https://marc.info/?l=openbsd-announce&m=144304330731220| date = 2015-09-23| accessdate = 2015-09-24}}</ref>
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}<ref name="libressl-3.3.3">{{cite web| title = LibreSSL 3.3.3 Released| url = https://marc.info/?l=openbsd-announce&m=162009196519308| date = 2021-05-04| accessdate = 2021-05-04}}</ref>
| {{no}}
|-
| [[MatrixSSL]]
| {{yes|No}}
| {{yes|Disabled by default at compile time}}<ref name="Matrix-POODLE">{{cite web|url=http://www.matrixssl.org/news.html|title=MatrixSSL - News|accessdate=2014-11-09|url-status=dead|archiveurl=https://web.archive.org/web/20150214105056/http://www.matrixssl.org/news.html|archivedate=2015-02-14}}</ref>
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}
| {{no}}
|-
| [[Mbed TLS]]
| {{yes|No}}
| {{yes|No}}<ref name="mbed-3.0.0">{{cite web | title = Mbed TLS 3.0.0 branch released | website = [[GitHub]] | url = https://github.com/ARMmbed/mbedtls/blob/93a3ca6caf20e0e1a90c86ee2fc03e9f1fb4ebfa/ChangeLog | date = 2021-07-07 | accessdate = 2021-08-13}}</ref>
| {{yes|No}}<ref name="mbed-3.0.0"/>
| {{yes|No}}<ref name="mbed-3.0.0"/>
| {{yes}}
| {{Partial|Yes}}<br /><small>(experimental)</small>
| {{okay|Yes}}<ref name="mbed-2.0">{{cite web | title = mbed TLS 2.0.0 released | url = https://tls.mbed.org/tech-updates/releases/mbedtls-2.0.0-released | date = 2015-07-10 | accessdate = 2015-07-14}}</ref>
| {{yes}}<ref name="mbed-2.0"/>
| {{no}}
|-
| [[Network Security Services|NSS]]
| {{yes|No}}<ref group=lower-alpha name="NSS-3.24" />
| {{yes|Disabled by default}}<ref name="NSS-3.19">{{cite web|url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19_release_notes|work=Mozilla Developer Network|title=NSS 3.19 release notes|publisher=Mozilla|accessdate=2015-05-06|archive-date=2015-06-05|archive-url=https://web.archive.org/web/20150605054647/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19_release_notes|url-status=dead}}</ref>
| {{okay|Yes}}
| {{okay|Yes}}<ref name="NSS-3.14">{{cite web|url=https://developer.mozilla.org/en-US/docs/NSS/NSS_3.14_release_notes|work=Mozilla Developer Network|title=NSS 3.14 release notes|publisher=Mozilla|accessdate=2012-10-27|archive-date=2013-01-17|archive-url=https://web.archive.org/web/20130117130029/https://developer.mozilla.org/en-US/docs/NSS/NSS_3.14_release_notes|url-status=dead}}</ref>
| {{yes}}<ref name="NSS-3.15.1">{{cite web|url=https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.1_release_notes|work=Mozilla Developer Network|title=NSS 3.15.1 release notes|publisher=Mozilla|accessdate=2013-08-10}}</ref>
| {{yes}}<ref name="NSS-3.39">{{cite web| url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes#Notable_Changes_in_NSS_3.39| title=NSS 3.39 release notes| date=2018-08-31| work=Mozilla Developer Network| publisher=Mozilla| accessdate=2018-09-15| archive-date=2021-12-07| archive-url=https://web.archive.org/web/20211207014212/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes#Notable_Changes_in_NSS_3.39| url-status=dead}}</ref>
| {{okay|Yes}}<ref name="NSS-3.14"/>
| {{yes}}<ref name="NSS-3.16.2">{{cite web| url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.16.2_release_notes| title=NSS 3.16.2 release notes| date=2014-06-30| work=Mozilla Developer Network| publisher=Mozilla| accessdate=2014-06-30| archive-date=2021-12-07| archive-url=https://web.archive.org/web/20211207015257/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.16.2_release_notes| url-status=dead}}</ref>
| {{no}}
|-
| [[OpenSSL]]
| {{Yes|No}}<ref name="openssl-1.1.0-note"/>
| {{yes|Disabled by default}}
| {{okay|Yes}}
| {{okay|Yes}}<ref name="openssl-1.0.1-note">{{cite web|title=Major changes between OpenSSL 1.0.0h and OpenSSL 1.0.1 [14 Mar 2012] |url=https://www.openssl.org/news/openssl-1.0.1-notes.html |date=2012-03-14 |accessdate=2015-01-20 |url-status=dead |archiveurl=https://web.archive.org/web/20141205180836/http://www.openssl.org/news/openssl-1.0.1-notes.html |archivedate=December 5, 2014 }}</ref>
| {{yes}}<ref name="openssl-1.0.1-note" />
| {{yes}}
| {{okay|Yes}}
| {{yes}}<ref name="openssl-1.0.2-note">{{cite web|url=https://www.openssl.org/news/openssl-1.0.2-notes.html |title=Major changes between OpenSSL 1.0.1l and OpenSSL 1.0.2 [22 Jan 2015] |accessdate=2015-01-22 |url-status=dead |archiveurl=https://web.archive.org/web/20140904045720/http://www.openssl.org/news/openssl-1.0.2-notes.html |archivedate=September 4, 2014 }}</ref>
| {{no}}
|-
| [[Rustls]]
| {{yes|No}}<ref name="rustls-features">{{cite web|url=https://docs.rs/rustls/0.23.12/rustls/manual/_04_features/index.html |title=rustls implemented and unimplemented features documentation |accessdate=2024-08-28 }}</ref>
| {{yes|No}}<ref name="rustls-features"/>
| {{yes|No}}<ref name="rustls-features"/>
| {{yes|No}}<ref name="rustls-features"/>
| {{yes}}<ref name="rustls-features"/>
| {{yes}}<ref name="rustls-features"/>
| {{yes|No}}
| {{no}}
| {{no}}
|-
|-
| [[s2n]]<ref name="S2NSPEC">{{cite web| title = S2N Readme| website = [[GitHub]]| url = https://github.com/awslabs/s2n/blob/master/README.md| date = 2019-12-21}}</ref>
| {{yes|No}}
| {{yes|Disabled by default}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes}}
| {{yes|No}}
| {{no}}
| {{no}}
|-
| [[Schannel]] XP, 2003<ref name="XP2003schannel">{{cite web|url=http://msdn.microsoft.com/en-us/library/aa380512.aspx|title=TLS Cipher Suites (Windows)|website=msdn.microsoft.com|date=14 July 2023 }}</ref>
| {{partial|Disabled by default in MSIE 7}}
| {{No|Enabled by default}}
| {{partial|Enabled by default in MSIE 7}}
| {{yes|No}}
| {{no}}
| {{No}}
| {{yes|No}} 
| {{no}}
| {{no}}
|-
| [[Schannel]] Vista<ref name="Vista2008schannel">{{cite web|url=http://msdn.microsoft.com/en-us/library/ff468651.aspx|title=TLS Cipher Suites in Windows Vista (Windows)|website=msdn.microsoft.com|date=25 October 2021 }}</ref>
| {{yes|Disabled by default}}
| {{No|Enabled by default}}
| {{okay|Yes}}
| {{yes|No}}
| {{no}}
| {{No}}
| {{yes|No}} 
| {{no}}
| {{no}}
|-
|-
| [[Schannel]] 2008<ref name="Vista2008schannel" />
| {{yes|Disabled by default}}
| {{No|Enabled by default}}
| {{okay|Yes}}
| {{Partial|<small>Disabled by default (KB4019276)</small>}}
| {{Partial|<small>Disabled by default (KB4019276)</small>}}
| {{No}}
| {{yes|No}}
| {{no}}
| {{no}}
|-
| [[Schannel]] 7, 2008R2<ref name="Windows7schannel">{{cite web|url=http://msdn.microsoft.com/en-us/library/aa374757.aspx|title=Cipher Suites in TLS/SSL (Schannel SSP) (Windows)|website=msdn.microsoft.com|date=14 July 2023 }}</ref>
| {{Yes|Disabled by default}}
| {{partial|Disabled by default in MSIE 11}}
| {{okay|Yes}}
| {{partial|Enabled by default in MSIE 11}}
| {{partial|Enabled by default in MSIE 11}}
| {{No}}
| {{okay|Yes}}<ref name=MS2574819>{{cite web|title=An update is available that adds support for DTLS in Windows 7 SP1 and Windows Server 2008 R2 SP1|url=http://support.microsoft.com/kb/2574819/en-us|publisher=Microsoft|accessdate=13 November 2012}}</ref> 
| {{no}}<ref name=MS2574819 />
| {{no}}
|-
| [[Schannel]] 8, 2012<ref name="Windows7schannel" />
| {{Yes|Disabled by default}}
| {{No|Enabled by default}}
| {{okay|Yes}}
| {{partial|Disabled by default}}
| {{partial|Disabled by default}}
| {{No}}
| {{okay|Yes}}
| {{no}}
| {{no}}
|-
| [[Schannel]] 8.1, 2012R2, 10 RTM & v1511<ref name="Windows7schannel" />
| {{Yes|Disabled by default}}
| {{partial|Disabled by default in MSIE 11}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{No}}
| {{okay|Yes}}
| {{no}}
| {{no}}
|-
| [[Schannel]] 10 v1607 / 2016<ref name="Windows10_v1607schannel">{{Cite web |date=2022-05-25 |url=https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp- |title=Protocols in TLS/SSL (Schannel SSP) |publisher=Microsoft |accessdate=2023-11-18}}</ref>
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{No}}
| {{okay|Yes}}
| {{yes}}
| {{no}}
|-
| [[Schannel]] 11 / 2022<ref>{{cite web |title=Protocols in TLS/SSL (Schannel SSP) |date=25 May 2022 |url=https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp- |access-date=6 November 2022}}</ref>
| {{Yes|No}}
| {{Yes|Disabled by default}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}
| {{no}}
|-
|[[MacOS|Secure Transport]]
OS X 10.2-10.7, iOS 1-4
| {{No|Yes}}
| {{No|Yes}}
| {{okay|Yes}}
| {{yes|No}}
| {{no}}
|
| {{yes|No}}
| {{no}}
| {{no}}
|-
| Secure Transport OS X 10.8-10.10, iOS 5-8
| {{Yes|No}}<ref group=lower-alpha name="secure-transport-osx" />
| {{No|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}<ref group=lower-alpha name="secure-transport-osx" />
| {{yes}}<ref group=lower-alpha name="secure-transport-osx" />
|
| {{okay|Yes}}<ref group=lower-alpha name="secure-transport-osx" />
| {{no}}
| {{no}}
|-
| Secure Transport OS X 10.11, iOS 9
| {{Yes|No}}
| {{Yes|No}}<ref group=lower-alpha name="secure-transport-osx" />
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
|
| {{okay|Yes}}
| {{Unknown}}
| {{no}}
|-
| Secure Transport OS X 10.13, iOS 11
| {{Yes|No}}
| {{Yes|No}}<ref group=lower-alpha name="secure-transport-osx" />
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{Partial|Yes}}<br /><small>(draft version)</small><ref>{{cite web|url=https://twitter.com/bagder/status/972234259774820352|title=@badger: the 1.3 stuff is apparently in iOS 11 and macOS 10.13.|date=2018-03-09|accessdate=2018-03-09}}</ref>
| {{okay|Yes}}
| {{Unknown}}
| {{no}}
|-
| [[wolfSSL]]
| {{yes|No}}
| {{yes|Disabled by default}}<ref name="wolfSSL-3.6.6">{{cite web|url=http://wolfssl.com/wolfSSL/Blog/Entries/2015/8/24_wolfSSL_3.6.6_is_Now_Available.html|title=[wolfssl] wolfSSL 3.6.6 Released|date=2015-08-20|accessdate=2015-08-24}}</ref>
| {{yes|Disabled by default}}<ref name="wolfSSL-3.13.0">{{cite web|url=https://www.wolfssl.com/wolfssl-3-13-0-now-available/|title=[wolfssl] wolfSSL 3.13.0 Released|date=2017-12-21|accessdate=2022-01-17}}</ref>
| {{okay|Yes}}
| {{yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes}}
|-

| [[Erlang (programming language)|Erlang]]/OTP SSL application<ref>{{cite web|url=https://www.erlang.org/doc/apps/ssl/standards_compliance.html|title=Erlang -- Standards Compliance}}</ref>
| {{yes|No}} <ref group=lower-alpha name="otp-22" />
| {{yes|No}} <ref group=lower-alpha name="otp-23" />
| {{yes|Disabled by default}} <ref group=lower-alpha name="otp-22" />
| {{yes|Disabled by default}} <ref group=lower-alpha name="otp-22" />
| {{yes}}
| {{okay|Partially}} <ref group=lower-alpha name="erlang-tls-1.3-compilance">{{cite web|url=https://www.erlang.org/doc/apps/ssl/standards_compliance.html#tls-1.3|title=Erlang OTP SSL application TLS 1.3 compliance table}}</ref>
| {{yes|Disabled by default}} <ref group=lower-alpha name="otp-22" />
| {{yes}}
| {{no}}
|-
|- class="sortbottom"
! Implementation
! [[Transport Layer Security|SSL 2.0]] (insecure)<ref name="sslv2" />
! [[Transport Layer Security|SSL 3.0]] (insecure)<ref name="auto" />
! [[Transport Layer Security|TLS 1.0]] (deprecated)<ref name="auto1" />
! [[Transport Layer Security|TLS 1.1]] (deprecated)<ref name="auto2" />
! [[Transport Layer Security|TLS 1.2]]<ref name="tls" />
! [[Transport Layer Security|TLS 1.3]]
! [[Datagram Transport Layer Security|DTLS 1.0]] (deprecated)<ref name="auto3" />
! [[Datagram Transport Layer Security|DTLS 1.2]]<ref name="RFC 6347" />
! [[Datagram Transport Layer Security|DTLS 1.3]]{{fact|date=July 2024}}
|}
{{Reflist|group=lower-alpha|refs=
<ref name="ssl20-client-hello">SSL 2.0 client hello is supported for backward compatibility reasons even though SSL 2.0 is not supported.</ref>
<ref name="NSS-3.24">Server-side implementation of the SSL/TLS protocol still supports processing of received v2-compatible client hello messages.{{cite web|url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.24_release_notes|work=Mozilla Developer Network|title=NSS 3.24 release notes|publisher=Mozilla|accessdate=2016-06-19|archive-date=2016-08-26|archive-url=https://web.archive.org/web/20160826100711/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.24_release_notes|url-status=dead}}</ref>
<ref name="secure-transport-osx">Secure Transport: SSL 2.0 was discontinued in OS X 10.8. SSL 3.0 was discontinued in OS X 10.11 and iOS 9.TLS 1.1, 1.2 and DTLS are available on iOS 5.0 and later, and OS X 10.9 and later.{{cite web|url=https://developer.apple.com/library/ios/technotes/tn2287/|work=iOS Developer Library|title=Technical Note TN2287: iOS 5 and TLS 1.2 Interoperability Issues|publisher=Apple Inc.|accessdate=2012-05-03}}</ref>
<ref name="bsafe-sslj-tls10">As of SSL-J 7.0, support for TLS 1.0 and 1.1 has been removed</ref>
<ref name="otp-22">Since OTP 22</ref>
<ref name="otp-23">Since OTP 23</ref>
}}

== NSA Suite B Cryptography ==
Required components for [[NSA Suite B Cryptography]] (RFC 6460) are:
* [[Advanced Encryption Standard]] (AES) with key sizes of 128 and 256 bits. For traffic flow, AES should be used with either the Counter Mode (CTR) for low bandwidth traffic or the [[Galois/Counter Mode]] (GCM) mode of operation for high bandwidth traffic (see [[Block cipher modes of operation]]) — [[symmetric encryption]]
* [[Elliptic Curve Digital Signature Algorithm]] (ECDSA) — [[digital signature]]s
* [[Elliptic Curve Diffie–Hellman]]  (ECDH) — [[key agreement]]
* [[SHA-2|Secure Hash Algorithm 2]] (SHA-256 and SHA-384) — [[message digest]]

Per CNSSP-15, the 256-bit elliptic curve (specified in FIPS 186-2), SHA-256, and AES with 128-bit keys are sufficient for protecting classified information up to the [[Security clearance#Secret|Secret]] level, while the 384-bit elliptic curve (specified in FIPS 186-2), SHA-384, and AES with 256-bit keys are necessary for the protection of [[Security clearance#Top Secret|Top Secret]] information.

{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! [[Transport Layer Security|TLS 1.2]] [[NSA Suite B Cryptography|Suite B]]
|-
| [[Botan (programming library)|Botan]]
| {{yes}}
|- 
| [[Bouncy Castle (cryptography)|Bouncy Castle]]
| {{yes}}
|- 
| [[BSAFE]]
| {{yes}}<ref name=RSABSAFETECH />
|-
| [[cryptlib]]
| {{yes}}
|-
| [[GnuTLS]]
| {{yes}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{yes}}<ref name="docs.oracle.com">{{cite web|url=http://docs.oracle.com/javase/8/docs/technotes/guides/security/enhancements-8.html|title=Security Enhancements in JDK 8|website=docs.oracle.com}}</ref>
|-
| [[LibreSSL]]
| {{yes}}
|-
| [[MatrixSSL]]
| {{yes}}
|-
| [[Mbed TLS]]
| {{yes}}
|-
| [[Network Security Services|NSS]]
| {{no}}<ref>{{cite web |url=https://bugzilla.mozilla.org/show_bug.cgi?id=663320 |title=Bug 663320 - (NSA-Suite-B-TLS) Implement RFC6460 (NSA Suite B profile for TLS) |publisher=Mozilla |accessdate=2014-05-19}}</ref>
|-
| [[OpenSSL]]
| {{yes}}<ref name="openssl-1.0.2-note"/>
|-
| [[Rustls]]
| {{yes}}<ref name="rustls-features"/>
|-
| [[S2n]]
| 
|-
| [[Schannel]]
| {{yes}}<ref name="https://technet.microsoft.com/">{{Cite web | url=https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd566200(v=ws.10) |title = Introducing Compliance to Suite B Cryptography| date=18 September 2012 }}</ref>
|-
|[[MacOS|Secure Transport]]
| {{no}}
|-
| [[wolfSSL]]
| {{yes}}
|-
|-class="sortbottom"
! Implementation
! TLS 1.2 Suite B
|}

== Certifications ==
Note that certain certifications have received serious negative criticism from people who are actually involved in them.<ref>{{Cite web|url=http://index.html/|archiveurl=https://web.archive.org/web/20131227190128/http://veridicalsystems.com/blog/secure-or-compliant-pick-one/|url-status=dead|title=Speeds and Feeds › Secure or Compliant, Pick One|archivedate=December 27, 2013}}</ref>

{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! rowspan="2"|Implementation
! colspan="2"|[[FIPS 140-1]], [[FIPS 140-2]]<ref>{{cite web|url=http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm|title=Search - Cryptographic Module Validation Program - CSRC|website=csrc.nist.gov|access-date=2014-03-18|archive-url=https://web.archive.org/web/20141226152243/http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm|archive-date=2014-12-26|url-status=dead}}</ref>
! [[FIPS 140-3]]
! rowspan="2"|[[Embedded FIPS Solution]]
|-
! Level 1
! Level 2{{Disputed inline|FIPS140-2|date=January 2015}}
! Level 1
|-
| [[Botan (programming library)|Botan]]<ref>{{cite web|url=http://botan.randombit.net/faq.html?highlight=fips#is-botan-fips-140-certified|title="Is botan FIPS 140 certified?" Frequently Asked Questions — Botan|access-date=2014-11-16|archive-url=https://web.archive.org/web/20141129042131/http://botan.randombit.net/faq.html?highlight=fips#is-botan-fips-140-certified|archive-date=2014-11-29|url-status=dead}}</ref>
|
|
|
|
|-
|[[Bouncy Castle (cryptography)|Bouncy Castle]]
|{{yes|BC-FJA 1.0.0 (#2768)<br /> BC-FJA 1.0.1 (#3152)}}
|
|
|
|-
| [[BSAFE]] SSL-J<ref>{{cite web|url=https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search|title=Search - Cryptographic Module Validation Program - CSRC|website=csrc.nist.gov|date=11 October 2016}}</ref>
| {{yes|Crypto-J 6.0 ([https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/1785 1785], [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/1786 1786])<br />Crypto-J 6.1 / 6.1.1.0.1 ([https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/2057 2057], [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/2058 2058])<br />Crypto-J 6.2 / 6.2.1.1 ([https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/2468 2468], [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/2469 2469])<br />Crypto-J 6.2.4 ([https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3172 3172], [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3184 3184])<br />Crypto-J 6.2.5 ([https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3819 #3819], [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3820 #3820])<br />Crypto-J 6.3 ([https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4696 #4696], [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4697 #4697])}}
|
|
|
|-
| [[cryptlib]]<ref>{{cite web|url=http://www.cs.auckland.ac.nz/~pgut001/cryptlib/faq.html#Q8|archive-url=https://web.archive.org/web/20131011085917/http://www.cs.auckland.ac.nz/~pgut001/cryptlib/faq.html#Q8|url-status=dead|archive-date=11 October 2013|title=cryptlib|date=11 October 2013}}</ref>
|
|
|
|
|-
| [[GnuTLS]]<ref>{{cite web |title=B.5 Certification |url=https://www.gnutls.org/manual/gnutls.html#Certification |website=GnuTLS 3.7.7 |access-date=26 September 2022}}</ref>
| {{yes|Red Hat Enterprise Linux GnuTLS Cryptographic Module (#2780)}}
|
|
|
|-
| [[Java Secure Socket Extension|JSSE]]
|
|
|
|
|-
| [[LibreSSL]]<ref name="OpenBSD5.6"/>
| no support
|
|
|
|-
| [[MatrixSSL]]<ref>{{cite web|url=http://cdn2.hubspot.net/hub/327778/file-618993629-pdf/Matrix+SSL-3.pdf|title=Matrix SSL Toolkit|publisher=}}</ref>
| {{yes|SafeZone FIPS Cryptographic Module: 1.1 (#2389)}}
|
|
|
|-
| [[Mbed TLS]]<ref>{{cite web|url=https://mbed-tls.readthedocs.io/en/latest/kb/generic/is-mbedtls-fips-certified/|title=Is mbed TLS FIPS certified? - Mbed TLS documentation|website=Mbed TLS documentation}}</ref>
|
|
|
|
|-
| [[Network Security Services|NSS]]<ref>{{cite web|url=https://wiki.mozilla.org/FIPS_Validation|title=FIPS Validation - MozillaWiki|website=wiki.mozilla.org}}</ref>
| {{yes|Network Security Services: 3.2.2 (#247)<br />Network Security Services Cryptographic Module: 3.11.4 (#815), 3.12.4 (#1278), 3.12.9.1 (#1837)}}
| {{yes|Netscape Security Module: 1 (#7<ref group="notes">with Sun [[Sparc]] 5 w/ Sun [[Solaris (operating system)|Solaris]] v 2.4SE (ITSEC-rated)</ref>), 1.01 (#47<ref group="notes">with Sun [[Ultra 5/10|Ultra-5]] w/ Sun [[Trusted Solaris]] version 2.5.1 (ITSEC-rated)</ref>)<br />Network Security Services: 3.2.2 (#248<ref group="notes">with [[Solaris (operating system)|Solaris]] v8.0 with [[AdminSuite]] 3.0.1 as specified in UK IT SEC CC Report No. P148 EAL4 on a SUN [[SPARC]] [[Ultra 1|Ultra-1]]</ref>)<br />Network Security Services Cryptographic Module: 3.11.4 (#814<ref group="notes">with these platforms; [[Red Hat Enterprise Linux]] Version 4 Update 1 AS on [[IBM System x|IBM xSeries 336]] with Intel Xeon CPU, [[Trusted Solaris]] 8 4/01 on [[Sun Blade (workstation)|Sun Blade 2500 Workstation]] with [[UltraSPARC IIIi]] CPU</ref>), 3.12.4 (#1279, #1280<ref group="notes">with these platforms; [[Red Hat Enterprise Linux]] v5 running on an [[IBM System x]]3550, [[Red Hat Enterprise Linux]] v5 running on an [[ProLiant|HP ProLiant DL145]], Sun [[Solaris 10]] 5/08 running on a Sun [[Sun Blade (workstation)|SunBlade 2000 workstation]], Sun [[Solaris 10]] 5/08 running on a [[Sun Java Workstation|Sun W2100z workstation]]</ref>)}}
|
|
|-
| [[OpenSSL]]<ref>{{cite web|url=https://www.openssl.org/docs/fips/fipsnotes.html|title=OpenSSL and FIPS 140-2|access-date=2014-11-15|archive-url=https://web.archive.org/web/20130528170840/http://www.openssl.org/docs/fips/fipsnotes.html|archive-date=2013-05-28|url-status=dead}}</ref>
| {{yes|OpenSSL FIPS Object Module: 1.0 (#624), 1.1.1 (#733), 1.1.2 (#918), 1.2, 1.2.1, 1.2.2, 1.2.3 or 1.2.4 (#1051)<br />2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7 or 2.0.8 (#1747)}}
| 
|
|
|-
|[[Rustls]]
|
|
| {{yes|aws-lc FIPS module<ref>{{cite web|url=https://docs.rs/rustls/0.23.12/rustls/manual/_06_fips/index.html|title=rustls FIPS documentation|accessdate=2024-08-28}} </ref> ([https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4759 #4759])}}
|
|-
| [[Schannel]]<ref>{{Cite web|url=https://technet.microsoft.com/en-us/library/security/cc750357.aspx#_Microsoft_FIPS_140|title=Microsoft FIPS 140 Validated Cryptographic Modules}}</ref>
| {{yes|Cryptographic modules in Windows NT 4.0, 95, 95, 2000, XP, Server 2003, CE 5, CE 6, Mobile 6.x, Vista, Server 2008, 7, Server 2008 R2, 8, Server 2012, RT, Surface, Phone 8<br />See details on [https://technet.microsoft.com/en-us/library/security/cc750357.aspx#_Microsoft_FIPS_140 Microsoft FIPS 140 Validated Cryptographic Modules]}}
| 
|
|
|-
|[[MacOS|Secure Transport]]
| {{yes|Apple FIPS Cryptographic Module: 1.0 (OS X 10.6, #1514), 1.1 (OS X 10.7, #1701)<br />Apple OS X CoreCrypto Module; CoreCrypto Kernel Module: 3.0 (OS X 10.8, #1964, #1956), 4.0 (OS X 10.9, #2015, #2016)<br />Apple iOS CoreCrypto Module; CoreCrypto Kernel Module: 3.0 (iOS 6, #1963, #1944), 4.0 (iOS 7, #2020, #2021)}}
| 
|
|
|-
| [[wolfSSL]]<ref>{{cite web|url=http://www.wolfssl.com/yaSSL/fips.html|title=wolfCrypt FIPS 140-2 Information - wolfSSL Embedded SSL/TLS Library|publisher=}}</ref>
| {{yes|wolfCrypt FIPS Module: 4.0 (#3389)<br />See details on [https://csrc.nist.gov/Projects/cryptographic-module-validation-program/Certificate/3389 NIST certificate] for validated Operating Environments<br />wolfCrypt FIPS Module: 3.6.0 (#2425)<br />See details on [https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/2425 NIST certificate] for validated Operating Environments}}
|
| {{yes|wolfCrypt FIPS Module (#4178)<br />See details on [https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4718 NIST certificate]}}
| {{yes}}
|-
|-class="sortbottom"
! rowspan="2"|Implementation
! Level 1
! Level 2
! Level 1
! rowspan="2"|Embedded FIPS Solution
|-
! colspan="2"|FIPS 140-1, FIPS 140-2
! colspan="1"|FIPS 140-3
|}
{{Reflist |group="notes"}}

== Key exchange algorithms (certificate-only) ==
This section lists the certificate verification functionality available in the various implementations.
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! [[RSA (cryptosystem)|RSA]]<ref name="tls">{{cite IETF|rfc=5246}}</ref>
! [[RSA (cryptosystem)|RSA]]-EXPORT (insecure)<ref name=tls/>
! [[Diffie–Hellman key exchange|DHE]]-[[RSA (cryptosystem)|RSA]] ([[forward secrecy]])<ref name=tls/>
! [[Diffie–Hellman key exchange|DHE]]-[[Digital Signature Algorithm|DSS]] ([[forward secrecy]])<ref name=tls/>
! [[Elliptic curve Diffie–Hellman|ECDH]]-[[Elliptic Curve DSA|ECDSA]]<ref name="rfc4492">{{cite IETF|rfc=4492}}</ref>
! [[Elliptic curve Diffie–Hellman|ECDHE]]-[[Elliptic Curve DSA|ECDSA]] ([[forward secrecy]])<ref name="rfc4492"/>
! [[Elliptic curve Diffie–Hellman|ECDH]]-[[RSA (cryptosystem)|RSA]]<ref name="rfc4492"/>
! [[Elliptic curve Diffie–Hellman|ECDHE]]-[[RSA (cryptosystem)|RSA]] ([[forward secrecy]])<ref name="rfc4492"/>
! [[GOST]] R 34.10-94, 34.10-2001<ref name=gostlink>{{cite IETF |draft=draft-chudov-cryptopro-cptls-04 |title=GOST 28147-89 Cipher Suites for Transport Layer Security (TLS)}}</ref>
|-
| [[Botan (programming library)|Botan]]
| {{yes|Disabled by default}}
| {{Yes|No}}
| {{yes}}
| {{yes|Disabled by default}}
| {{yes|No}}
| {{yes}}
| {{yes|No}}
| {{yes}}
| {{yes|No}}
|-
| [[BSAFE]]
| {{okay|Yes}}
| {{Yes|No}}
| {{yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
|-
| [[cryptlib]]
| {{okay|Yes}}
| {{Yes|No}}
| {{yes}}
| {{okay|Yes}}
| {{yes|No}}
| {{yes}}
| {{yes|No}}
| {{no}}
| {{yes|No}}
|-
| [[GnuTLS]]
| {{okay|Yes}}
| {{yes|No}}
| {{yes}}
| {{yes|Disabled by default}}<ref name="GnuTLS-3.4.0"/>
| {{yes|No}}
| {{yes}}
| {{yes|No}}
| {{yes}}
| {{yes|No}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{okay|Yes}}
| {{Yes|Disabled by default}}
| {{yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
|-
| [[LibreSSL]]
| {{okay|Yes}}
| {{Yes|No}}<ref name="OpenBSD5.6"/>
| {{yes}}
| {{okay|Yes}} 
| {{Yes|No}}
| {{yes}}
| {{Yes|No}}
| {{yes}}
| {{okay|Yes}}<ref name="libressl-2.1.2">{{cite web|title = LibreSSL 2.1.2 released|url = https://marc.info/?l=openbsd-announce&m=141809396501638| date = 2014-12-09| accessdate = 2015-01-20}}</ref>
|-
| [[MatrixSSL]]
| {{okay|Yes}}
| {{Yes|No}}
| {{yes}}
| {{yes|No}}
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
|-
| [[Mbed TLS]]
| {{okay|Yes}}
| {{Yes|No}}
| {{yes}}
| {{yes|No}}
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
|-
| [[Network Security Services|NSS]]
| {{okay|Yes}}
| {{Yes|Disabled by default}}
| {{Yes}}<ref name="nss-3.20">{{cite web | url = https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20_release_notes | title = NSS 3.20 release notes | publisher = [[Mozilla]] | date = 2015-08-19 | accessdate = 2015-08-20 | archive-date = 2021-12-07 | archive-url = https://web.archive.org/web/20211207015903/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20_release_notes | url-status = dead }}</ref>
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}<ref name=mozilla_bug518787>{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=518787|title=Bug 518787 - Add GOST crypto algorithm support in NSS |author=Mozilla.org|accessdate=2014-07-01}}</ref><ref name=mozilla_bug608725>{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=608725|title=Bug 608725 - Add Russian GOST cryptoalgorithms to NSS and Thunderbird  |author=Mozilla.org|accessdate=2014-07-01}}</ref>
|-
| [[OpenSSL]]
| {{okay|Yes}}
| {{yes|No}}<ref name="openssl-1.1.0-note"/>
| {{yes}}
| {{yes|Disabled by default}}<ref name="openssl-1.1.0-note"/>
| {{Yes|No}}
| {{yes}}
| {{Yes|No}}
| {{yes}}
| {{okay|Yes}}<ref name="OpenSSL-GOST">{{Cite web|url=http://cvs.openssl.org/fileview|archiveurl=https://archive.today/20130415122812/http://cvs.openssl.org/fileview?f=openssl%2Fengines%2Fccgost%2FREADME.gost|url-status=dead|title=OpenSSL: CVS Web Interface|archive-date=2013-04-15|access-date=2014-11-12}}</ref>
|-
| [[Rustls]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes}}<ref name="rustls-features"/>
| {{yes|No}}
| {{yes}}<ref name="rustls-features"/>
| {{yes|No}}
|-
| [[Schannel|Schannel XP/2003]]
| {{okay|Yes}}
| {{No|Yes}}
| {{okay|No}}
| {{no|XP: Max 1024 bits<br />2003: 1024 bits only}}
| {{yes|No}}
| {{no}}
| {{yes|No}}
| {{no}}
| {{yes|No}}<ref name="GOST-extensions-Schannel">Extensions to support GOST in Schannel might be available.{{citation needed|date=November 2014}}</ref>
|-
| [[Schannel|Schannel Vista/2008]]
| {{okay|Yes}}
| {{Yes|Disabled by default}}
| {{okay|No}}
| {{no|1024 bits by default}}<ref name="MSA 3174644">{{Cite web | url=https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2016/3174644 | title=Microsoft Security Advisory 3174644| date=14 October 2022}}</ref>
| {{yes|No}}
| {{yes}}
| {{yes|No}}
| {{partial|except AES_GCM}}
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
|-
| [[Schannel|Schannel 8/2012]]
| {{okay|Yes}}
| {{Yes|Disabled by default}}
| {{partial|AES_GCM only}}<ref name="ms14-066">{{cite web | url=https://technet.microsoft.com/library/security/MS14-066#ID0E5MAC | title=Microsoft Security Bulletin MS14-066 - Critical (Section Update FAQ) | publisher=Microsoft | date=November 11, 2014 | accessdate=11 November 2014}}</ref><ref name="20141111msblog">{{cite web | url=http://blogs.microsoft.com/cybertrust/2014/11/11/hundreds-of-millions-of-microsoft-customers-now-benefit-from-best-in-class-encryption/ | title=Hundreds of Millions of Microsoft Customers Now Benefit from Best-in-Class Encryption | publisher=Microsoft Security | date=November 11, 2014 | accessdate=11 November 2014 | author=Thomlinson, Matt}}</ref><ref name="win8.1aesgcm">{{Cite web|url=https://support.microsoft.com/en-us/topic/update-adds-new-tls-cipher-suites-and-changes-cipher-suite-priorities-in-windows-8-1-and-windows-server-2012-r2-8e395e43-c8ef-27d8-b60c-0fc57d526d94|title=Update adds new TLS cipher suites and changes cipher suite priorities in Windows 8.1 and Windows Server 2012 R2|website=support.microsoft.com}}</ref>
| {{no|1024 bits by default}}<ref name="MSA 3174644" />
| {{yes|No}}
| {{yes}}
| {{yes|No}}
| {{partial|except AES_GCM}}
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
|-
| [[Schannel|Schannel 7/2008R2, 8.1/2012R2]]
| {{okay|Yes}}
| {{Yes|Disabled by default}}
| {{yes}}
| {{okay|2048 bits by default}}<ref name="MSA 3174644" />
| {{yes|No}}
| {{yes}}
| {{yes|No}}
| {{partial|except AES_GCM}}
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
|-
| [[Schannel|Schannel 10]]
| {{okay|Yes}}
| {{Yes|Disabled by default}}
| {{yes}}
| {{okay|2048 bits by default}}<ref name="MSA 3174644" />
| {{yes|No}}
| {{yes}}
| {{yes|No}}
| {{yes}}
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
|-
|[[MacOS|Secure Transport]] OS X 10.6
| {{okay|Yes}}
| {{No|Yes}}
| {{partial|except AES_GCM}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{partial|except AES_GCM}}
| {{okay|yes}}
| {{partial|except AES_GCM}}
| {{yes|No}}
|-
| Secure Transport OS X 10.8-10.10
| {{okay|Yes}}
| {{Yes|No}}
| {{partial|except AES_GCM}}
| {{yes|No}}
| {{okay|Yes}}
| {{partial|except AES_GCM}}
| {{okay|Yes}}
| {{partial|except AES_GCM}}
| {{yes|No}}
|-
| Secure Transport OS X 10.11
| {{okay|Yes}}
| {{Yes|No}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
| {{yes}}
| {{yes|No}}
| {{yes}}
| {{yes|No}}
|-
| [[wolfSSL]]
| {{okay|Yes}}
| {{Yes|No}}
| {{yes}}
| {{yes|No}}
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
|-

|[[Erlang (programming language)|Erlang]]/OTP SSL application
| {{okay|Yes}}
| {{yes|No}}
| {{yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
|-
|-class="sortbottom"
! Implementation
! [[RSA (cryptosystem)|RSA]]<ref name=tls/>
! [[RSA (cryptosystem)|RSA]]-EXPORT (insecure)<ref name=tls/>
! [[Diffie–Hellman key exchange|DHE]]-[[RSA (cryptosystem)|RSA]] ([[forward secrecy]])<ref name=tls/>
! [[Diffie–Hellman key exchange|DHE]]-[[Digital Signature Algorithm|DSS]] ([[forward secrecy]])<ref name=tls/>
! [[Elliptic curve Diffie–Hellman|ECDH]]-[[Elliptic Curve DSA|ECDSA]]<ref name="rfc4492"/>
! [[Elliptic curve Diffie–Hellman|ECDHE]]-[[Elliptic Curve DSA|ECDSA]] ([[forward secrecy]])<ref name="rfc4492"/>
! [[Elliptic curve Diffie–Hellman|ECDH]]-[[RSA (cryptosystem)|RSA]]<ref name="rfc4492"/>
! [[Elliptic curve Diffie–Hellman|ECDHE]]-[[RSA (cryptosystem)|RSA]] ([[forward secrecy]])<ref name="rfc4492"/>
! [[GOST]] R 34.10-94, 34.10-2001<ref name=gostlink/>
|}

== Key exchange algorithms (alternative key-exchanges) ==
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! [[Secure Remote Password protocol|SRP]]<ref name="srp">{{cite IETF|rfc=5054}}</ref>
! [[Secure Remote Password protocol|SRP]]-[[Digital Signature Algorithm|DSS]]<ref name=srp/>
! [[Secure Remote Password protocol|SRP]]-[[RSA (cryptosystem)|RSA]]<ref name=srp/>
! [[Pre-shared key|PSK]]-[[RSA (cryptosystem)|RSA]]<ref name="psk">{{cite IETF|rfc=4279}}</ref>
! [[Pre-shared key|PSK]]<ref name=psk/>
! [[Diffie–Hellman key exchange|DHE]]-[[Pre-shared key|PSK]] ([[forward secrecy]])<ref name=psk/>
! [[Elliptic curve Diffie–Hellman|ECDHE]]-[[Pre-shared key|PSK]] ([[forward secrecy]])<ref name="ecdhepsk">{{cite IETF|rfc=5489}}</ref>
! [[Kerberos (protocol)|KRB5]]<ref name="Kerberos">{{cite IETF|rfc=2712}}</ref>
! [[Diffie–Hellman key exchange|DH]]-ANON<ref name=tls/> (insecure)
! [[Elliptic curve Diffie–Hellman|ECDH]]-ANON<ref name="rfc4492"/> (insecure)
|-
| [[Botan (programming library)|Botan]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{no}}
| {{Yes|No}}
| {{Yes|No}}
|-
| [[BSAFE]] SSL-J
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}<ref>{{cite web|url=https://community.rsa.com/docs/DOC-95884|title=RSA BSAFE SSL-J 6.2.4 Release Notes|date=2018-09-05|archive-url=https://web.archive.org/web/20180910204318/https://community.rsa.com/docs/DOC-95884|archive-date=2018-09-10|url-status=dead}}</ref>
| {{no}}
| {{no}}
| {{no}}
| {{yes|Disabled by default}} 
| {{yes|Disabled by default}}
|-
| [[cryptlib]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{yes}}
| {{no}}
| {{unknown}}
| {{Yes|No}}
| {{Yes|No}}
|-
| [[GnuTLS]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{Yes|Disabled by default}}
| {{Yes|Disabled by default}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{Yes|Disabled by default}} 
| {{Yes|Disabled by default}}
|-
| [[LibreSSL]]
| {{no}}<ref name="libressl_2.0.4">{{cite web |url=https://marc.info/?l=openbsd-tech&m=140710904403657 |title=LibreSSL 2.0.4 released |accessdate=2014-08-04}}</ref>
| {{no}}<ref name="libressl_2.0.4"/>
| {{no}}<ref name="libressl_2.0.4"/>
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{No|Yes}} 
| {{No|Yes}}
|-
| [[MatrixSSL]]
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{Yes|Disabled by default}}
| {{Yes|No}}
|-
| [[Mbed TLS]]
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{Yes|No}} 
| {{Yes|No}}
|-
| [[Network Security Services|NSS]]
| {{no}}<ref name="nss_srp">{{cite web |url=https://bugzilla.mozilla.org/show_bug.cgi?id=405155 |title=Bug 405155 - add support for TLS-SRP, rfc5054 |publisher=Mozilla |accessdate=2014-01-25}}</ref>
| {{no}}<ref name="nss_srp"/>
| {{no}}<ref name="nss_srp"/>
| {{no}}<ref name="nss_psk">{{cite web |url=https://bugzilla.mozilla.org/show_bug.cgi?id6435 |title=Bug 306435 - Mozilla browsers should support the new IETF TLS-PSK protocol to help reduce phishing |publisher=Mozilla |accessdate=2014-01-25}}</ref>
| {{no}}<ref name="nss_psk"/>
| {{no}}<ref name="nss_psk"/>
| {{no}}<ref name="nss_psk"/>
| {{no}}
| {{Yes|Client side only, disabled by default}}<ref>{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=1170510|title=Bug 1170510 - Implement NSS server side support for DH_anon  |publisher=Mozilla|accessdate=2015-06-03}}</ref>
| {{Yes|Disabled by default}}<ref>{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=236245|title=Bug 236245 - Update ECC/TLS to conform to RFC 4492  |publisher=Mozilla|accessdate=2014-06-09}}</ref>
|-
| [[OpenSSL]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{Yes}}<ref name="OpenSSL-0.9.7">{{cite web|url=https://www.openssl.org/news/changelog.html#x58|title=Changes between 0.9.6h and 0.9.7 [31 Dec 2002]|accessdate=2016-01-29}}</ref>
| {{Yes|Disabled by default}}<ref name="OpenSSL-1.0.0">{{cite web|url=https://www.openssl.org/news/changelog.html#x29|title=Changes between 0.9.8n and 1.0.0 [29 Mar 2010]|accessdate=2016-01-29}}</ref>
| {{Yes|Disabled by default}}<ref name="OpenSSL-1.0.0"/>
|-
| [[Rustls]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Schannel]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{Yes|No}}
| {{Yes|No}}
|-
|[[MacOS|Secure Transport]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{unknown}}
| {{No|Yes}}
| {{No|Yes}}
|-
| [[wolfSSL]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}<ref name="wolfssl-3.9.0">{{cite web|url=https://www.wolfssl.com/wolfSSL/Docs-wolfssl-changelog.html|title=wolfSSL (Formerly CyaSSL) Release 3.9.0 (03/18/2016)|date=2016-03-18|accessdate=2016-04-05}}</ref>
| {{yes}}
| {{Yes|No}}
| {{Yes|No}}
|-
|[[Erlang (programming language)|Erlang]]/OTP SSL application
| {{yes |Disabled by default}}
| {{yes |Disabled by default}}
| {{yes |Disabled by default}}
| {{yes |Disabled by default}}
| {{yes |Disabled by default}}
| {{yes |Disabled by default}}
| {{No}}
| {{No}}
| {{yes |Disabled by default}}
|  {{yes |Disabled by default}}
|-class="sortbottom"
|-
! Implementation
! [[Secure Remote Password protocol|SRP]]<ref name=srp/>
! [[Secure Remote Password protocol|SRP]]-[[Digital Signature Algorithm|DSS]]<ref name=srp/>
! [[Secure Remote Password protocol|SRP]]-[[RSA (cryptosystem)|RSA]]<ref name=srp/>
! [[Pre-shared key|PSK]]-[[RSA (cryptosystem)|RSA]]<ref name=psk/>
! [[Pre-shared key|PSK]]<ref name=psk/>
! [[Diffie–Hellman key exchange|DHE]]-[[Pre-shared key|PSK]] ([[forward secrecy]])<ref name=psk/>
! [[Elliptic curve Diffie–Hellman|ECDHE]]-[[Pre-shared key|PSK]] ([[forward secrecy]])<ref name=ecdhepsk/>
! [[Kerberos (protocol)|KRB5]]<ref name=Kerberos/>
! [[Diffie–Hellman key exchange|DH]]-ANON<ref name=tls/> (insecure)
! [[Elliptic curve Diffie–Hellman|ECDH]]-ANON<ref name="rfc4492"/> (insecure)

|}

== Certificate verification methods ==
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! Application-defined
! PKIX path validation<ref>{{cite IETF|rfc=5280}}</ref>
! [[Revocation list|CRL]]<ref>{{cite IETF|rfc=3280}}</ref>
! [[Online Certificate Status Protocol|OCSP]]<ref>{{cite IETF|rfc=2560}}</ref>
! [[DNS-based Authentication of Named Entities|DANE]] (DNSSEC)<ref>{{cite IETF|rfc=6698}}</ref><ref>{{cite IETF|rfc=7218}}</ref>
! Trust on First Use (TOFU)
! [[Certificate Transparency|CT]]<ref>{{cite IETF |title=Certificate Transparency |rfc=6962 |idlink=Certificate Transparency |last1=Laurie |authorlink1=Ben Laurie |first1=B. |last2=Langley |first2=A. |last3=Kasper |first3=E. |date=June 2013 |publisher=[[Internet Engineering Task Force|IETF]] |access-date=2020-08-31 |issn=2070-1721}}</ref>
|-
| [[Botan (programming library)|Botan]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{unknown}}
|-
| [[Bouncy Castle (cryptography)|Bouncy Castle]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{unknown}}
|-
| [[BSAFE]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{unknown}}
|-
| [[cryptlib]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{unknown}}
|-
| [[GnuTLS]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{unknown}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
|-
| [[LibreSSL]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{unknown}}
|-
| [[MatrixSSL]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}<ref>{{cite web|url=http://www.matrixssl.org/blog/releases/matrixssl_3_8_3|title=MatrixSSL 3.8.3|accessdate=2017-01-18|archive-url=https://web.archive.org/web/20170119052959/http://www.matrixssl.org/blog/releases/matrixssl_3_8_3|archive-date=2017-01-19|url-status=dead}}</ref>
| {{no}}
| {{no}}
| {{unknown}}
|-
| [[Mbed TLS]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}<ref>{{cite web|url=https://tls.mbed.org/tech-updates/blog/mbedtls-2.0-defaults-best-practices|title=mbed TLS 2.0 defaults implement best practices|accessdate=2017-01-18}}</ref>
| {{no}}
| {{no}}
| {{unknown}}
|-
| [[Network Security Services|NSS]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}<ref>{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=672600|title=Bug 672600 - Use DNSSEC/DANE chain stapled into TLS handshake in certificate chain validation |publisher=Mozilla|accessdate=2014-06-18}}</ref>
| {{no}}
| {{unknown}}
|-
| [[OpenSSL]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
|-
| [[Rustls]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
|-
| [[s2n]]
|
|
| {{no}} <ref>{{Cite web |title=CRL Validation · Issue #3499 · aws/s2n-tls |url=https://github.com/aws/s2n-tls/issues/3499 |access-date=2022-11-01 |website=GitHub |language=en}}</ref>
| {{unknown}} <ref>{{Cite web |title=OCSP digest support for SHA-256 · Issue #2854 · aws/s2n-tls · GitHub |url=https://github.com/aws/s2n-tls/issues/2854 |access-date=2022-11-01 |website=GitHub |language=en}}</ref>
|
|
| {{unknown}} <ref>{{Cite web |title=[RFC 6962] s2n Client can Validate Signed Certificate Timestamp TLS Extension · Issue #457 · aws/s2n-tls · GitHub |url=https://github.com/aws/s2n-tls/issues/457 |access-date=2022-11-01 |website=GitHub |language=en}}</ref>
|-
|-
| [[Schannel]]
| {{unknown}}
| {{yes}}
| {{yes}}<ref name="TechNet">{{cite web |url=https://technet.microsoft.com/en-us/library/ee619754(WS.10).aspx |title=How Certificate Revocation Works |author=<!--Staff writer(s); no by-line.--> |date=March 16, 2012 |website=[[Microsoft TechNet]] |publisher=[[Microsoft]] |accessdate=July 10, 2013}}</ref>
| {{yes}}<ref name="TechNet" />
| {{no}}
| {{no}}
| {{unknown}}
|-
| [[MacOS|Secure Transport]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{unknown}}
|-
| [[wolfSSL]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{unknown}}
|-
|[[Erlang (programming language)|Erlang]]/OTP SSL application
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{unknown}}
|-class="sortbottom"
|-
! Implementation
! Application-defined
! PKIX path validation
! CRL
! OCSP
! DANE (DNSSEC)
! Trust on First Use (TOFU)
! CT
|}

== Encryption algorithms ==
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! rowspan="2"|Implementation !! colspan="10"|[[Block cipher]] with [[Block cipher mode of operation|mode of operation]] !! [[Stream cipher]] !! None
|-
! [[Advanced Encryption Standard|AES]] [[Galois/Counter Mode|GCM]]<br /><ref name="aes-gcm">
* {{cite IETF|rfc=5288}}
* {{cite IETF|rfc=5289}}</ref>
! [[Advanced Encryption Standard|AES]] [[CCM mode|CCM]]<br /><ref name="aes-ccm">RFC 6655, RFC 7251</ref>
! [[Advanced Encryption Standard|AES]] [[Cipher block chaining|CBC]]
! [[Camellia (cipher)|Camellia]] [[Galois/Counter Mode|GCM]]<br /><ref name="camellia-gcm">{{cite IETF|rfc=6367}}</ref>
! [[Camellia (cipher)|Camellia]] [[Cipher block chaining|CBC]]<br /><ref name="camellia-cbc">{{cite IETF|rfc=5932}}</ref><ref name="camellia-gcm"/>
! [[ARIA (cipher)|ARIA]] [[Galois/Counter Mode|GCM]]<br /><ref name=aria/>
! [[ARIA (cipher)|ARIA]] [[Cipher block chaining|CBC]]<br /><ref name="aria">{{cite IETF|rfc=6209}}</ref>
! [[SEED]] [[Cipher block chaining|CBC]]<br /><ref name="seed-cbc">{{cite IETF|rfc=4162}}</ref>
! {{nowrap|[[Triple DES|3DES EDE]]}} [[Cipher block chaining|CBC]]<br />(insecure)<ref name="sweet32.info">{{cite web|url=https://sweet32.info/|title=Sweet32: Birthday attacks on 64-bit block ciphers in TLS and OpenVPN|website=sweet32.info}}</ref>
! {{nowrap|[[GOST 28147-89]]}} [[Block cipher mode of operation#Counter (CTR)|CNT]]<br />(proposed)<br /><ref name=gostlink/><ref group="n" name="draft">This algorithm is not defined yet as TLS cipher suites in RFCs, is proposed in drafts.</ref>
! [[ChaCha20]]-[[Poly1305]]<br /><ref name="chacha20-poly1305">{{cite IETF|rfc=7905}}</ref>
! Null<br />(insecure)<br /><ref group="n" name="NULL">authentication only, no encryption</ref>
|-
| [[Botan (programming library)|Botan]]
| {{yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|No}}
| {{yes}}<ref name="Botan 1.11.12">{{cite web|url=http://botan.randombit.net/relnotes/1_11_12.html|title=Version 1.11.12, 2015-01-02 — Botan|date=2015-01-02|accessdate=2015-01-09}}</ref>
| {{yes|Not implemented}}
|-
| [[BoringSSL]]
| {{yes}}
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}
| {{yes}}
|
|-
| [[BSAFE]] SSL-J
| {{yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|No}}
| {{no}}
| {{Yes|Disabled by default}}
|-
| [[cryptlib]]
| {{yes}}
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}
| {{no}}
| {{yes|Not implemented}}
|-
| [[GnuTLS]]
| {{yes}}
| {{okay|Yes}}<ref name="GnuTLS-3.4.0"/>
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|Disabled by default}}<ref name="GnuTLS-3.6.0">{{cite web|url=https://lwn.net/Articles/731694/|title=gnutls 3.6.0|date=2017-09-21|accessdate=2018-01-07}}</ref>
| {{yes|No}}
| {{yes}}<ref name="GnuTLS-3.4.12">{{cite web|url=http://permalink.gmane.org/gmane.network.gnutls.general/4131|title=gnutls 3.4.12|date=2016-05-20|accessdate=2016-05-29|archive-url=https://web.archive.org/web/20161013015630/http://permalink.gmane.org/gmane.network.gnutls.general/4131|archive-date=2016-10-13|url-status=dead}}</ref>
| {{yes|Disabled by default}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{Yes}}
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|Disabled by default}}<ref>{{cite web|url=https://www.oracle.com/java/technologies/javase/10-0-1-relnotes.html|title=Java SE DevelopmentK Kit 10 - 10.0.1 Release Notes|date=2018-04-17|access-date=2024-01-14}}</ref>
| {{yes|No}}
| {{yes|Yes<br /><small>(JDK 12+)</small>}}<ref>{{cite web|url=https://www.oracle.com/java/technologies/javase/12-relnote-issues.html|title=JDK 12 Release Notes|access-date=2024-01-14}}</ref>
| {{yes|Disabled by default}}
|-
| [[LibreSSL]]
| {{yes}}<ref name="OpenBSD5.6"/>
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}
| {{okay|Yes}}<ref name="libressl-2.1.2"/>
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}<ref name="OpenBSD5.6"/>
| {{no|Yes}}
| {{okay|Yes}}<ref name="libressl-2.1.2"/>
| {{yes}}<ref name="OpenBSD5.6"/>
| {{yes|Disabled by default}}
|-
| [[MatrixSSL]]
| {{yes}}
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{okay|Yes}}
| {{yes|Disabled by default}}
| {{yes|No}}
| {{yes}}<ref name="matrixssl_3.8.3">{{cite web|url=https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md#changes-in-383|title=Changes in 3.8.3|website=[[GitHub]]|accessdate=2016-06-19}}{{Dead link|date=July 2019 |bot=InternetArchiveBot |fix-attempted=yes }}</ref>
| {{yes|Disabled by default}}
|-
| [[Mbed TLS]]
| {{yes}}
| {{okay|Yes}} <ref name=polarssl_1_3_8>{{cite web|url=https://polarssl.org/tech-updates/releases/polarssl-1.3.8-released|title=PolarSSL 1.3.8 release notes|archive-url=https://web.archive.org/web/20140714220749/https://polarssl.org/tech-updates/releases/polarssl-1.3.8-released|archive-date=2014-07-14|url-status=dead}}</ref>
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}<ref name="mbedtls-2.11.0">{{cite web|url=https://tls.mbed.org/tech-updates/releases/mbedtls-2.11.0-2.7.4-and-2.1.13-released|title=Mbed TLS 2.11.0, 2.7.4 and 2.1.13 released|accessdate=2018-08-30}}</ref>
| {{okay|Yes}}<ref name="mbedtls-2.11.0" />
| {{yes|No}}
| {{yes|No}}<ref name="mbed-3.0.0"/>
| {{yes|No}}
| {{yes}}<ref name="mbedtls-2.12.0">{{cite web|url=https://tls.mbed.org/tech-updates/releases/mbedtls-2.12.0-2.7.5-and-2.1.14-released|title=Mbed TLS 2.12.0, 2.7.5 and 2.1.14 released|accessdate=2018-08-30}}</ref>
| {{yes|Disabled by default at compile time}}
|-
| [[Network Security Services|NSS]]
| {{yes}}<ref name="NSS-3.25">{{cite web|url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.25_release_notes|work=Mozilla Developer Network|title=NSS 3.25 release notes|publisher=Mozilla|accessdate=2016-07-01|archive-date=2021-12-07|archive-url=https://web.archive.org/web/20211207020401/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.25_release_notes|url-status=dead}}</ref>
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}<ref name="NSS-Camellia-GCM">{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=940119|title=Bug 940119 - libssl does not support any TLS_ECDHE_*_CAMELLIA_*_GCM cipher suites|publisher=Mozilla|accessdate=2013-11-19}}</ref><ref group="n" name="pmfork">This algorithm ''is'' implemented in an NSS [[Fork (software development)|fork]] used by [[Pale Moon (web browser)|Pale Moon]].</ref>
| {{okay|Yes}}<ref name="NSS-3.12">{{cite web|url=https://groups.google.com/forum/?hl=ja#!searchin/mozilla.dev.tech.crypto/camellia/mozilla.dev.tech.crypto/3NTvSYkF9MQ/O7Aj7oeiff8J|title=NSS 3.12 is released|accessdate=2013-11-19}}</ref>
| {{okay|No}}
| {{yes|No}}
| {{okay|Yes}}<ref name="NSS-3.12.3">{{cite web|url=https://firefox-source-docs.mozilla.org/security/nss/legacy/nss_releases/nss_3.12.3_release_notes/index.html|work=Mozilla Developer Network|title=NSS 3.12.3 Release Notes|publisher=Mozilla|access-date=2023-04-01|archive-url=https://web.archive.org/web/20230402220534/https://firefox-source-docs.mozilla.org/security/nss/legacy/nss_releases/nss_3.12.3_release_notes/index.html|archive-date=2023-04-02|url-status=dead}}</ref>
| {{no|Yes}}
| {{yes|No}}<ref name=mozilla_bug518787 /><ref name=mozilla_bug608725 />
| {{yes}}<ref name="NSS-3.23">{{cite web|url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.23_release_notes|work=Mozilla Developer Network|title=NSS 3.23 release notes|publisher=Mozilla|accessdate=2016-03-09|archive-date=2021-04-14|archive-url=https://web.archive.org/web/20210414233905/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.23_release_notes|url-status=dead}}</ref>
| {{yes|Disabled by default}}
|-
| [[OpenSSL]]
| {{yes}}<ref name="openssl_1.0.1_commit">{{cite web|url=https://github.com/openssl/openssl/blob/OpenSSL_1_0_1-stable/CHANGES|title=openssl/CHANGES at OpenSSL_1_0_1-stable · openssl/openssl|website=[[GitHub]]|accessdate=2015-01-20}}</ref>
| {{yes|Disabled by default}}<ref name="openssl-1.1.0-note"/>
| {{okay|Yes}}
| {{okay|No}}
| {{yes|Disabled by default}}<ref name="openssl-1.1.0-note">{{cite web|url=https://www.openssl.org/news/openssl-1.1.0-notes.html|title=OpenSSL 1.1.0 Series Release Notes|website=www.openssl.org|access-date=2016-09-03|archive-date=2018-03-17|archive-url=https://web.archive.org/web/20180317162208/https://www.openssl.org/news/openssl-1.1.0-notes.html|url-status=dead}}</ref>
| {{okay|Disabled by default}}<ref name="openssl-1.1.1-note">{{cite web|url=https://www.openssl.org/news/openssl-1.1.1-notes.html|title=OpenSSL 1.1.1 Series Release Notes|website=www.openssl.org|archive-url=https://web.archive.org/web/20240116202037/https://www.openssl.org/news/openssl-1.1.1-notes.html|archive-date=2024-01-16|url-status=dead}}</ref>
| {{yes|No}}
| {{yes|Disabled by default}}<ref name="openssl-1.1.0-note"/>
| {{yes|Disabled by default}}<ref name="openssl-1.1.0-note"/>
| {{okay|Yes}}<ref name="OpenSSL-GOST"/>
| {{yes}}<ref name="openssl-1.1.0-note"/>
| {{yes|Disabled by default}}
|-
| [[Rustls]]
| {{yes}}<ref name="rustls-features"/>
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes}}<ref name="rustls-features"/>
| {{yes|Not implemented}}
|-
| [[Schannel|Schannel XP/2003]]
| {{no}}
| {{yes|No}}
| {{Partial|2003 only}}<ref name=win2003aes>{{Cite web|url=https://docs.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel|title=Cipher Suites in TLS/SSL (Schannel SSP) - Win32 apps|website=docs.microsoft.com|date=14 July 2023 }}</ref>
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
| {{no}}
| {{yes|Disabled by default}}
|-
| [[Schannel|Schannel Vista/2008, 2008R2, 2012]]
| {{no}}
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
| {{no}}
| {{yes|Disabled by default}}
|-
| [[Schannel|Schannel 7, 8, 8.1/2012R2]]
| {{Partial|Yes except ECDHE_RSA}}<br /><ref name="ms14-066" /><ref name="20141111msblog" />
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
| {{no}}
| {{yes|Disabled by default}}
|-
| [[Schannel|Schannel 10]]<ref name=schannel10pre>{{cite web|url=https://dev.ssllabs.com/ssltest/viewClient.html?name=IE&version=11&platform=Win+10+Preview|title=Qualys SSL Labs - Projects / User Agent Capabilities: IE 11 / Win 10 Preview|website=dev.ssllabs.com|archive-url=https://web.archive.org/web/20230714075523/https://dev.ssllabs.com/ssltest/viewClient.html?name=IE&version=11&platform=Win+10+Preview|archive-date=2023-07-14|url-status=dead}}</ref>
| {{yes}}
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
| {{no}}
| {{yes|Disabled by default}}
|-
| [[MacOS|Secure Transport]] OS X 10.6 - 10.10
| {{no}}
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}
| {{no}}
| {{yes|Disabled by default}}
|-
| [[MacOS|Secure Transport]] OS X 10.11
| {{yes}}
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}
| {{no}}
| {{yes|Disabled by default}}
|-
| [[wolfSSL]]
| {{yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}
| {{yes}}
| {{yes|Disabled by default}}
|-
|[[Erlang (programming language)|Erlang]]/OTP SSL application
| {{yes}}
| {{yes|No}}
| {{okay|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes| Disabled by default}}
| {{yes|No}}
|{{okay|Experimental}}
|{{yes|Disable by default}}

|-class="sortbottom"
! rowspan="2"|Implementation !! colspan="10"|[[Block cipher]] with [[Block cipher mode of operation|mode of operation]] !! [[Stream cipher]] !! None
|-
! [[Advanced Encryption Standard|AES]] [[Galois/Counter Mode|GCM]]<br /><ref name="aes-gcm"/>
! [[Advanced Encryption Standard|AES]] [[CCM mode|CCM]]<br /><ref name="aes-ccm"/>
! [[Advanced Encryption Standard|AES]] [[Cipher block chaining|CBC]]
! [[Camellia (cipher)|Camellia]] [[Galois/Counter Mode|GCM]]<br /><ref name="camellia-gcm"/>
! [[Camellia (cipher)|Camellia]] [[Cipher block chaining|CBC]]<br /><ref name="camellia-cbc"/><ref name="camellia-gcm"/>
! [[ARIA (cipher)|ARIA]] [[Galois/Counter Mode|GCM]]<br /><ref name=aria/>
! [[ARIA (cipher)|ARIA]] [[Cipher block chaining|CBC]]<br /><ref name=aria/>
! [[SEED]] [[Cipher block chaining|CBC]]<br /><ref name="seed-cbc"/>
! {{nowrap|[[Triple DES|3DES EDE]]}} [[Cipher block chaining|CBC]]<br />(insecure)<ref name="sweet32.info"/>
! {{nowrap|[[GOST 28147-89]]}} [[Block cipher mode of operation#Counter (CTR)|CNT]]<br />(proposed)<br /><ref name=gostlink/><ref group="n" name="draft"/>
! [[ChaCha20]]-[[Poly1305]]<br /><ref name="chacha20-poly1305"/>
! Null<br />(insecure)<br /><ref group="n" name="NULL"/>

|}
; Notes
{{Reflist|group="n"}}

=== Obsolete algorithms ===
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! rowspan="2"|Implementation !! colspan="4"|[[Block cipher]] with [[Block cipher mode of operation|mode of operation]] !! colspan="2"|[[Stream cipher]]
|-
! [[International Data Encryption Algorithm|IDEA]] [[Cipher block chaining|CBC]]<br />{{refn|group="n"|name="removal_from_tls1.2"|IDEA and DES have been removed from TLS 1.2.<ref>RFC 5469</ref>}}(insecure)<ref name="https://sweet32.info">{{Cite web | url=https://sweet32.info |title = Sweet32: Birthday attacks on 64-bit block ciphers in TLS and OpenVPN}}</ref>
! [[Data Encryption Standard|DES]] [[Cipher block chaining|CBC]]<br />(insecure)<br /><ref group="n" name="removal_from_tls1.2"/>
! [[Data Encryption Standard|DES]]-40 [[Cipher block chaining|CBC]]<br />(EXPORT, insecure)<br /><ref group="n" name="EXPORT">40 bits strength of cipher suites were designed to operate at reduced key lengths in order to comply with US regulations about the export of cryptographic software containing certain strong encryption algorithms (see [[Export of cryptography from the United States]]). These weak suites are forbidden in TLS 1.1 and later.</ref>
! [[RC2]]-40 [[Cipher block chaining|CBC]]<br />(EXPORT, insecure)<br /><ref group="n" name="EXPORT"/>
! [[RC4]]-128<br />(insecure)<br /><ref group="n" name="RC4">The [[Transport Layer Security#RC4 attacks|RC4 attacks]] weaken or break RC4 used in SSL/TLS. Use of RC4 is prohibited by RFC 7465.</ref>
! [[RC4]]-40<br />(EXPORT, insecure)<br /><ref group="n" name="RC4-attacks">The [[Transport Layer Security#RC4 attacks|RC4 attacks]] weaken or break RC4 used in SSL/TLS.</ref><ref group="n" name="EXPORT"/>
|-
| [[Botan (programming library)|Botan]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{Yes|No}}<ref name="Botan 1.11.15">{{cite web|url=http://botan.randombit.net/relnotes/1_11_15.html|title=Version 1.11.15, 2015-03-08 — Botan|date=2015-03-08|accessdate=2015-03-11}}</ref>
| {{yes|No}}
|-
| [[BoringSSL]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|Disabled by default at compile time}}
| {{yes|No}}
|-
| [[BSAFE]] SSL-J
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
|-
| [[cryptlib]]
| {{yes|No}}
| {{yes|Disabled by default at compile time}}
| {{yes|No}}
| {{yes|No}}
| {{yes|Disabled by default at compile time}}
| {{yes|No}}
|-
| [[GnuTLS]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|Disabled by default}}<ref name="GnuTLS-3.4.0"/>
| {{yes|No}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}} <ref>{{cite web|url=http://docs.oracle.com/javase/8/docs/technotes/guides/security/SunProviders.html|title=Java Cryptography Architecture Oracle Providers Documentation|website=docs.oracle.com}}</ref>
|-
| [[LibreSSL]]
| {{no|Yes}}
| {{no|Yes}}
| {{yes|No}}<ref name="OpenBSD5.6"/>
| {{yes|No}}<ref name="OpenBSD5.6"/>
| {{no|Yes}}
| {{yes|No}}<ref name="OpenBSD5.6"/>
|-
| [[MatrixSSL]]
| {{no|Yes}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|No}}
|-
| [[Mbed TLS]]
| {{yes|No}}
| {{yes|Disabled by default at compile time}}
| {{yes|No}}
| {{yes|No}}
| {{yes|Disabled by default at compile time}}<ref name="mbed-2.0"/>
| {{yes|No}}
|-
| [[Network Security Services|NSS]]
| {{no|Yes}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{Partial|Lowest priority}}<ref name="NSS-3.15.3">{{cite web|url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.15.3_release_notes|work=Mozilla Developer Network|title=NSS 3.15.3 release notes|publisher=Mozilla|accessdate=2014-07-13|archive-date=2014-06-05|archive-url=https://web.archive.org/web/20140605001016/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.15.3_release_notes|url-status=dead}}</ref><ref name="mfsa2013-103">{{cite web|url=https://www.mozilla.org/security/announce/2013/mfsa2013-103.html|work=Mozilla|title=MFSA 2013-103: Miscellaneous Network Security Services (NSS) vulnerabilities|accessdate=2014-07-13}}</ref>
| {{yes|Disabled by default}}
|-
| [[OpenSSL]]
| {{yes|Disabled by default}}<ref name="openssl-1.1.0-note"/>
| {{yes|Disabled by default}}
| {{Yes|No}}<ref name="openssl-1.1.0-note"/>
| {{Yes|No}}<ref name="openssl-1.1.0-note"/>
| {{yes|Disabled by default}}
| {{Yes|No}}<ref name="openssl-1.1.0-note"/>
|-
| [[Rustls]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Schannel|Schannel XP/2003]]
| {{yes|No}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
|-
| [[Schannel|Schannel Vista/2008]]
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{no|Yes}}
| {{yes|Disabled by default}}
|-
| [[Schannel|Schannel 7/2008R2]]
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{Partial|Lowest priority<br /><small>will be disabled soon</small>}}<ref name="blogs.windows.com">{{cite web|url=https://blogs.windows.com/msedgedev/2016/08/09/rc4-now-deprecated/|title=RC4 is now disabled in Microsoft Edge and Internet Explorer 11 - Microsoft Edge Dev BlogMicrosoft Edge Dev Blog|website=blogs.windows.com|date=2016-08-09}}</ref>
| {{yes|Disabled by default}}
|-
| [[Schannel|Schannel 8/2012]]
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{Partial|Only as fallback}}
| {{yes|Disabled by default}}
|-
| [[Schannel|Schannel 8.1/2012R2]]
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}<ref name="blogs.windows.com"/>
| {{yes|Disabled by default}}
|-
| [[Schannel|Schannel 10]]<ref name=schannel10pre/>
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}<ref name="blogs.windows.com"/>
| {{yes|Disabled by default}}
|-
| [[MacOS|Secure Transport]] OS X 10.6
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
|-
| [[MacOS|Secure Transport]] OS X 10.7
| {{no|Yes}}
| {{unknown}}
| {{unknown}}
| {{unknown}}
| {{no|Yes}}
| {{unknown}}
|-
| [[MacOS|Secure Transport]] OS X 10.8-10.9
| {{no|Yes}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{no|Yes}}
| {{yes|Disabled by default}}
|-
| [[MacOS|Secure Transport]] OS X 10.10-10.11
| {{no|Yes}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{Partial|Lowest priority}}
| {{yes|Disabled by default}}
|-
| [[MacOS|Secure Transport]] macOS 10.12
| {{no|Yes}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
| {{yes|Disabled by default}}
|-
| [[wolfSSL]]
| {{yes|Disabled by default}}<ref name="wolfssl-3.7.0">{{cite web|url=https://www.wolfssl.com/wolfSSL/Docs-wolfssl-changelog.html|title=wolfSSL (Formerly CyaSSL) Release 3.7.0 (10/26/2015)|date=2015-10-26|accessdate=2015-11-19}}</ref>
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|Disabled by default}}
| {{yes|No}}
|-
|[[Erlang (programming language)|Erlang]]/OTP SSL application
| {{yes |no}}
| {{yes |Disabled by default}}
| {{yes |no}}
| {{yes|no}}
| {{yes |Disabled by default}}
| {{yes|no}}
|-
|-class="sortbottom"
|-
! rowspan="2"|Implementation !! colspan="4"|[[Block cipher]] with [[Block cipher mode of operation|mode of operation]] !! colspan="2"|[[Stream cipher]]
|-
! [[International Data Encryption Algorithm|IDEA]] [[Cipher block chaining|CBC]]<br /><ref group="n" name="removal_from_tls1.2"/>(insecure)<ref name="https://sweet32.info"/>
! [[Data Encryption Standard|DES]] [[Cipher block chaining|CBC]]<br />(insecure)<br /><ref group="n" name="removal_from_tls1.2"/>
! [[Data Encryption Standard|DES]]-40 [[Cipher block chaining|CBC]]<br />(EXPORT, insecure)<br /><ref group="n" name="EXPORT"/>
! [[RC2]]-40 [[Cipher block chaining|CBC]]<br />(EXPORT, insecure)<br /><ref group="n" name="EXPORT"/>
! [[RC4]]-128<br />(insecure)<br /><ref group="n" name="RC4"/>
! [[RC4]]-40<br />(EXPORT, insecure)<br /><ref group="n" name="RC4-attacks"/><ref group="n" name="EXPORT"/>
|-

|}
; Notes
{{Reflist|group="n"}}

== Supported elliptic curves ==
This section lists the supported [[elliptic curve]]s by each implementation.

=== Defined curves in RFC 8446 (for TLS 1.3) and RFC 8422, 7027 (for TLS 1.2 and earlier) ===

{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! applicable TLS version
! colspan="5"|TLS 1.3 and earlier !! colspan="3"|TLS 1.2 and earlier
|-
! Implementation
! [[NIST Curve|secp256r1]]<br />prime256v1<br />{{nowrap|NIST P-256}}<br />(0x0017,<ref name="rfc8446">RFC 8446</ref> 23<ref name="rfc8422">RFC 8422</ref>)
! [[NIST Curve|secp384r1]]<br />{{nowrap|NIST P-384}}<br />(0x0018,<ref name="rfc8446"/> 24<ref name="rfc8422"/>)
! [[NIST Curve|secp521r1]]<br />{{nowrap|NIST P-521}}<br />(0x0019,<ref name="rfc8446"/> 25<ref name="rfc8422"/>)
! [[X25519]]<br />(0x001D,<ref name="rfc8446"/> 29<ref name="rfc8422"/>)
! [[X448]]<br />(0x001E,<ref name="rfc8446"/> 30<ref name="rfc8422"/>)
! [[ECC Brainpool|brainpoolP256r1]]<br />(26)<ref name="rfc7027">RFC 7027</ref>
! [[ECC Brainpool|brainpoolP384r1]]<br />(27)<ref name=rfc7027/>
! [[ECC Brainpool|brainpoolP512r1]]<br />(28)<ref name=rfc7027/>
|-
| [[Botan (programming library)|Botan]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}<ref name="Botan 1.11.12"/>
| {{no}}
| {{yes}}<ref name="Botan 1.11.5">{{cite web|url=http://botan.randombit.net/relnotes/1_11_5.html|title=Version 1.11.5, 2013-11-10 — Botan|date=2013-11-10|accessdate=2015-01-23}}</ref>
| {{yes}}<ref name="Botan 1.11.5"/>
| {{yes}}<ref name="Botan 1.11.5"/>
|-
| [[BoringSSL]]
| {{yes}}
| {{yes}}
| {{okay|Yes}} (disabled by default)
| {{yes}}
| {{no}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[BSAFE]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[GnuTLS]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}<ref name="GnuTLS 3.5.0">{{cite web|url=http://nmav.gnutls.org/2016/05/gnutls-3-5-0.html|title=An overview of the new features in GnuTLS 3.5.0|date=2016-05-02|accessdate=2016-12-09}}</ref>
| {{yes}}<ref name="GnuTLS 3.6.12">{{cite web|url=https://lists.gnupg.org/pipermail/gnutls-help/2020-February/004621.html|title=gnutls 3.6.12|date=2020-02-01|accessdate=2021-08-31}}</ref>
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes|Yes}}<br /><small>x25519: JDK 13+</small><ref name="XDH">{{cite web|url=https://jdk.java.net/13/release-notes|title=JDK 13 Early-Access Release Notes|accessdate=2019-06-20|archive-date=2020-04-01|archive-url=https://web.archive.org/web/20200401060808/http://jdk.java.net/13/release-notes|url-status=dead}}</ref><br /><small>Ed25519:JDK 15+</small><ref name="JSSEEd">{{cite web|url=https://bugs.openjdk.org/browse/JDK-8199231|title=JEP 339: Edwards-Curve Digital Signature Algorithm (EdDSA)|access-date=2024-01-14}}</ref>
| {{yes|Yes}}<br /><small>x448: JDK 13+</small><ref name="XDH" /><br /><small>Ed448: JDK 15+</small><ref name="JSSEEd" />
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[LibreSSL]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}<ref name=libressl-2.5.1>{{cite web|url=https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.5.1-relnotes.txt|title=LibreSSL 2.5.1 release notes |publisher=OpenBSD|date=2017-01-31|accessdate=2017-02-23}}</ref>
| {{no}}
| {{yes}}<ref name="OpenBSD5.6"/>
| {{yes}}<ref name="OpenBSD5.6"/>
| {{yes}}<ref name="OpenBSD5.6"/>
|-
| [[MatrixSSL]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{partial|TLS 1.3 only}}<ref name="MatrixSSL 4.0 changelog">{{cite web|url=https://github.com/matrixssl/matrixssl/blob/4-0-0-open/doc/CHANGES_v4.0.md|title=MatrixSSL 4.0 changelog|website=[[GitHub]]|accessdate=2018-09-18}}</ref>
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
| [[Mbed TLS]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{partial|Primitive only}}<ref name=polarssl_1_3_3>{{cite web|url=https://polarssl.org/tech-updates/releases/polarssl-1.3.3-released|title=PolarSSL 1.3.3 released|date=2013-12-31|access-date=2015-01-23|archive-url=https://web.archive.org/web/20140107122023/https://polarssl.org/tech-updates/releases/polarssl-1.3.3-released|archive-date=2014-01-07|url-status=dead}}</ref>
| {{partial|Primitive only}}<ref name="mbedtls-2.9.0">{{cite web|url=https://tls.mbed.org/tech-updates/releases/mbedtls-2.9.0-2.7.3-and-2.1.12-released|title=Mbed TLS 2.9.0, 2.7.3 and 2.1.12 released|access-date=2018-08-30}}</ref>
| {{yes}}<ref name=polarssl_1_3_1>{{cite web|url=https://polarssl.org/tech-updates/releases/polarssl-1.3.1-released|title=PolarSSL 1.3.1 released|date=2013-10-15|access-date=2015-01-23|archive-url=https://web.archive.org/web/20150123084424/https://polarssl.org/tech-updates/releases/polarssl-1.3.1-released|archive-date=2015-01-23|url-status=dead}}</ref>
| {{yes}}<ref name=polarssl_1_3_1/>
| {{yes}}<ref name=polarssl_1_3_1/>
|-
| [[Network Security Services|NSS]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}<ref>{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=957105|title=Bug 957105 - Add support for curve25519 Key Exchange and UMAC MAC support for TLS |publisher=Mozilla|accessdate=2017-02-23}}</ref>
| {{no}}<ref>{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=1305243|title=Bug 1305243 - Support for X448 |publisher=Mozilla|accessdate=2022-08-04}}</ref><ref>{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=1597057|title=Bug 1597057 - Curve448 or named Ed448-Goldilocks support needed (both X448 key exchange and Ed448 signature algorithm ) |publisher=Mozilla|accessdate=2022-08-04}}</ref>
| {{okay|No}}<ref name="nss_brainpool">{{cite web |url=https://bugzilla.mozilla.org/show_bug.cgi?id=943639 |title=Bug 943639 - Support for Brainpool ECC Curve (rfc5639) |publisher=Mozilla |accessdate=2014-01-25}}</ref>
| {{okay|No}}<ref name="nss_brainpool"/>
| {{okay|No}}<ref name="nss_brainpool"/>
|-
| [[OpenSSL]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}<ref name="openssl-1.1.0x-changelog">{{cite web
 | url = https://www.openssl.org/news/cl110.txt
 | title = OpenSSL&nbsp;1.1.0x Release Notes
 | date = 25 August 2016
 | access-date = 18 May 2018
 | archive-date = 18 May 2018
 | archive-url = https://web.archive.org/web/20180518200620/https://www.openssl.org/news/cl110.txt
 | url-status = dead
 }}</ref><ref name="openssl-x25519-github-tracker">{{cite web
 | url = https://github.com/openssl/openssl/issues/487
 | title = OpenSSL GitHub Issue #487 Tracker
 | website = [[GitHub]]
 | date = 2 December 2015
 | access-date = 18 May 2018
}}</ref>
| {{yes}}<ref name="openssl-1.1.1x-changelog">{{cite web
 | url = https://www.openssl.org/news/cl111.txt
 | title = OpenSSL CHANGES
 | date = 1 May 2018 
 | access-date = 18 May 2018
 | archive-url = https://web.archive.org/web/20180518200747/https://www.openssl.org/news/cl111.txt
 | archive-date = 18 May 2018
 | url-status = dead
}}</ref><ref name="openssl-X448-github-tracker">{{cite web
 | url = https://github.com/openssl/openssl/issues/5049
 | title = OpenSSL GitHub Issue #5049 Tracker
 | website = [[GitHub]]
 | date = 9 January 2018
 | access-date = 18 May 2018
}}</ref>
| {{yes}}<ref name="openssl-1.0.2-note"/>
| {{yes}}<ref name="openssl-1.0.2-note"/>
| {{yes}}<ref name="openssl-1.0.2-note"/>
|-
| [[Rustls]]
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
| {{no}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Schannel|Schannel Vista/2008, 7/2008R2, 8/2012, 8.1/2012R2, 10]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[MacOS|Secure Transport]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[wolfSSL]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}<ref name="wolfssl-3.4.6">{{cite web|url=https://www.wolfssl.com/wolfSSL/Docs-wolfssl-changelog.html|title=wolfSSL (Formerly CyaSSL) Release 3.4.6 (03/30/2015)|date=2015-03-30|accessdate=2015-11-19}}</ref>
| {{yes}}<ref name="wolfssl-4.4.0">{{cite web|url=https://www.wolfssl.com/wolfSSL/Docs-wolfssl-changelog.html|title=wolfSSL Release 4.4.0 (04/22/2020)|date=2020-04-22|accessdate=2022-10-18}}</ref>
| {{yes}}
| {{yes}}
| {{yes}}
|-
| [[Erlang (programming language)|Erlang]]/OTP SSL application
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
|-class="sortbottom"
|-
! Implementation
! [[NIST Curve|secp256r1]]<br />prime256v1<br />{{nowrap|NIST P-256}}<br />(0x0017, 23)
! [[NIST Curve|secp384r1]]<br />{{nowrap|NIST P-384}}<br />(0x0018, 24)
! [[NIST Curve|secp521r1]]<br />{{nowrap|NIST P-521}}<br />(0x0019, 25)
! [[X25519]]<br />(0x001D, 29)
! [[X448]]<br />(0x001E, 30)
! [[ECC Brainpool|brainpoolP256r1]]<br />(26)
! [[ECC Brainpool|brainpoolP384r1]]<br />(27)
! [[ECC Brainpool|brainpoolP512r1]]<br />(28)
|}

=== Proposed curves ===

{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! M221<br />Curve2213<br /><ref name="draft-josefsson-tls-additional-curves">{{cite IETF|draft=draft-josefsson-tls-additional-curves|title=Additional Elliptic Curves for Transport Layer Security (TLS) Key Agreement|first1=Josefsson|last1=Simon|first2=Pégourié-Gonnard|last2=Manuel}}</ref>
! E222<br /><ref name="draft-josefsson-tls-additional-curves"/>
! Curve1174<br /><ref name="draft-josefsson-tls-additional-curves"/>
! E382<br /><ref name="draft-josefsson-tls-additional-curves"/>
! M383<br /><ref name="draft-josefsson-tls-additional-curves"/>
! Curve383187<br /><ref name="draft-josefsson-tls-additional-curves"/>
! Curve41417<br />Curve3617<br /><ref name="draft-josefsson-tls-additional-curves"/>
! M511<br />Curve511187<br /><ref name="draft-josefsson-tls-additional-curves"/>
! E521<br /><ref name="draft-josefsson-tls-additional-curves"/>
|-
| [[Botan (programming library)|Botan]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[BoringSSL]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[BSAFE]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[GnuTLS]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[LibreSSL]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[MatrixSSL]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Mbed TLS]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Network Security Services|NSS]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[OpenSSL]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Rustls]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Schannel|Schannel Vista/2008, 7/2008R2, 8/2012, 8.1/2012R2, 10]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[MacOS|Secure Transport]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[wolfSSL]]
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Erlang (programming language)|Erlang]]/OTP SSL application
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
|-class="sortbottom"
|-
! Implementation
! M221<br />Curve2213
! E222
! Curve1174
! E382
! M383
! Curve383187
! Curve41417<br />Curve3617
! M511<br />Curve511187
! E521

|}

=== Deprecated curves in RFC 8422 ===
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! sect163k1<br />{{nowrap|NIST K-163}}<br />(1)<ref name="rfc4492"/>
! sect163r1<br />(2)<ref name="rfc4492"/>
! sect163r2<br />{{nowrap|NIST B-163}}<br />(3)<ref name="rfc4492"/>
! sect193r1<br />(4)<ref name="rfc4492"/>
! sect193r2<br />(5)<ref name="rfc4492"/>
! sect233k1<br />{{nowrap|NIST K-233}}<br />(6)<ref name="rfc4492"/>
! sect233r1<br />{{nowrap|NIST B-233}}<br />(7)<ref name="rfc4492"/>
! sect239k1<br />(8)<ref name="rfc4492"/>
! sect283k1<br />{{nowrap|NIST K-283}}<br />(9)<ref name="rfc4492"/>
! sect283r1<br />{{nowrap|NIST B-283}}<br />(10)<ref name="rfc4492"/>
! sect409k1<br />{{nowrap|NIST K-409}}<br />(11)<ref name="rfc4492"/>
! sect409r1<br />{{nowrap|NIST B-409}}<br />(12)<ref name="rfc4492"/>
! sect571k1<br />{{nowrap|NIST K-571}}<br />(13)<ref name="rfc4492"/>
! sect571r1<br />{{nowrap|NIST B-571}}<br />(14)<ref name="rfc4492"/>
|-
| [[Botan (programming library)|Botan]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[BoringSSL]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[BSAFE]]
| {{no|Yes}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{no|Yes}}
| {{yes|No}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
| [[GnuTLS]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{yes|Notes}}{{refn|group=lower-alpha|name="JSSEDisableEC"|These elliptic curves were "Disabled by Default" in current JDK families as part of JDK-8236730.<ref>{{cite web |title=Release Note: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default. (Java 7u281, 8u271, 11.0.9, 14) |url=https://bugs.openjdk.java.net/browse/JDK-8236730 |website=JDK Bug System (JBS) |access-date=6 January 2022}}</ref>}}{{refn|group=lower-alpha|name="JSSERemoveEC"|These elliptic curves were subsequently removed in JDK 16+ as part of JDK-8252601.<ref>{{cite web |title=Release Note: Removal of Legacy Elliptic Curves (Java 16) |url=https://bugs.openjdk.java.net/browse/JDK-8235710 |website=JDK Bug System (JBS) |access-date=6 January 2022}}</ref>}}
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
|-
| [[LibreSSL]]
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
| [[MatrixSSL]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Mbed TLS]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Network Security Services|NSS]]
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
| [[OpenSSL]]
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
| [[Rustls]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[Schannel|Schannel Vista/2008, 7/2008R2, 8/2012, 8.1/2012R2, 10]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[MacOS|Secure Transport]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
| [[wolfSSL]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
| {{okay|No}}
|-
|[[Erlang (programming language)|Erlang]]/OTP SSL application
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
|-class="sortbottom"
|-
! Implementation
! sect163k1<br />{{nowrap|NIST K-163}}<br />(1)
! sect163r1<br />(2)
! sect163r2<br />{{nowrap|NIST B-163}}<br />(3)
! sect193r1<br />(4)
! sect193r2<br />(5)
! sect233k1<br />{{nowrap|NIST K-233}}<br />(6)
! sect233r1<br />{{nowrap|NIST B-233}}<br />(7)
! sect239k1<br />(8)
! sect283k1<br />{{nowrap|NIST K-283}}<br />(9)
! sect283r1<br />{{nowrap|NIST B-283}}<br />(10)
! sect409k1<br />{{nowrap|NIST K-409}}<br />(11)
! sect409r1<br />{{nowrap|NIST B-409}}<br />(12)
! sect571k1<br />{{nowrap|NIST K-571}}<br />(13)
! sect571r1<br />{{nowrap|NIST B-571}}<br />(14)

|}

{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! secp160k1<br />(15)<ref name="rfc4492"/>
! secp160r1<br />(16)<ref name="rfc4492"/>
! secp160r2<br />(17)<ref name="rfc4492"/>
! secp192k1<br />(18)<ref name="rfc4492"/>
! secp192r1<br />prime192v1<br />{{nowrap|NIST P-192}}<br />(19)<ref name="rfc4492"/>
! secp224k1<br />(20)<ref name="rfc4492"/>
! secp224r1<br />{{nowrap|NIST P-244}}<br />(21)<ref name="rfc4492"/>
! secp256k1<br />(22)<ref name="rfc4492"/>
! arbitrary prime curves<br />(0xFF01)<ref name="rfc4492"/><ref name="arbitrary-curves">Negotiation of arbitrary curves has been shown to be insecure for certain curve sizes {{cite conference|author=Mavrogiannopoulos, Nikos and Vercautern, Frederik and Velichkov, Vesselin and Preneel, Bart|title=A cross-protocol attack on the TLS protocol|book-title=Proceedings of the 2012 ACM conference on Computer and communications security|year=2012|isbn=978-1-4503-1651-4|url=https://www.cosic.esat.kuleuven.be/publications/article-2216.pdf|pages=62–72|publisher=Association for Computing Machinery|doi=10.1145/2382196.2382206}}</ref>
! arbitrary char2 curves<br />(0xFF02)<ref name="rfc4492"/><ref name="arbitrary-curves"/>
|-
| [[Botan (programming library)|Botan]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
|-
| [[BoringSSL]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
|-
| [[BSAFE]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}
| {{no|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
|-
| [[GnuTLS]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}
| {{no|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|Notes}}<ref group=lower-alpha name="JSSEDisableEC"/><ref group=lower-alpha name="JSSERemoveEC"/>
| {{yes|No}}
| {{yes|No}}
|-
| [[LibreSSL]]
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[MatrixSSL]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}
| {{no|Yes}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Mbed TLS]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Network Security Services|NSS]]
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[OpenSSL]]
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Rustls]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Schannel|Schannel Vista/2008, 7/2008R2, 8/2012, 8.1/2012R2, 10]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
|-
| [[MacOS|Secure Transport]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{no|Yes}}
| {{yes|No}}
| {{yes|No}}
| {{okay|No}}
| {{yes|No}}
| {{yes|No}}
|-
| [[wolfSSL]]
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Erlang (programming language)|Erlang]]/OTP SSL application
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{no|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}

|-class="sortbottom"
|-
! Implementation
! secp160k1<br />(15)
! secp160r1<br />(16)
! secp160r2<br />(17)
! secp192k1<br />(18)
! secp192r1<br />prime192v1<br />{{nowrap|NIST P-192}}<br />(19)
! secp224k1<br />(20)
! secp224r1<br />{{nowrap|NIST P-244}}<br />(21)
! secp256k1<br />(22)
! arbitrary prime curves<br />(0xFF01)
! arbitrary char2 curves<br />(0xFF02)

|}

; Notes
{{Reflist|group=lower-alpha}}

== Data integrity ==
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! [[HMAC]]-[[MD5]]
! [[HMAC]]-[[SHA-1|SHA1]]
! [[HMAC]]-[[SHA-2|SHA256/384]]
! [[Authenticated encryption|AEAD]]
! [[GOST 28147-89|GOST 28147-89 IMIT]]<ref name=gostlink/>
! [[GOST (hash function)|GOST R 34.11-94]]<ref name=gostlink/>
|-
| [[Botan (programming library)|Botan]]
| {{yes|No}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[BSAFE]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[cryptlib]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[GnuTLS]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{yes|Disabled by Default}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[LibreSSL]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}<ref name="libressl-2.1.2"/>
| {{okay|Yes}}<ref name="libressl-2.1.2"/>
|-
| [[MatrixSSL]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Mbed TLS]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Network Security Services|NSS]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}<ref name=mozilla_bug518787 /><ref name=mozilla_bug608725 />
| {{yes|No}}<ref name=mozilla_bug518787 /><ref name=mozilla_bug608725 />
|-
| [[OpenSSL]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{okay|Yes}}<ref name="OpenSSL-GOST"/>
| {{okay|Yes}}<ref name="OpenSSL-GOST"/>
|-
| [[Rustls]]
| {{yes|No}}
| {{yes|No}}
| {{yes|No}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Schannel|Schannel XP/2003, Vista/2008]]
| {{no|Yes}}
| {{okay|Yes}}
| {{partial|XP SP3, 2003 SP2 via hotfix}}<ref name="SHA2 and Windows">{{cite web|url=https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/sha2-and-windows/ba-p/1128617|title=SHA2 and Windows|accessdate=2024-04-28}}</ref>
| {{no}}
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
|-
| [[Schannel|Schannel 7/2008R2, 8/2012, 8.1/2012R2]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{partial|except ECDHE_RSA}}<ref name="ms14-066" /><ref name="20141111msblog" /><ref name="win8.1aesgcm"/>
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
|-
| [[Schannel|Schannel 10]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}<ref name=schannel10pre/>
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
| {{yes|No}}<ref name="GOST-extensions-Schannel"/>
|-
| [[MacOS|Secure Transport]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[wolfSSL]]
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
| [[Erlang (programming language)|Erlang]]/OTP SSL application
| {{no|Yes}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{yes}}
| {{yes|No}}
| {{yes|No}}
|-
|-class="sortbottom"
! Implementation
! HMAC-MD5
! HMAC-SHA1
! HMAC-SHA256/384
! AEAD
! GOST 28147-89 IMIT
! GOST R 34.11-94
|}

== Compression ==
Note the [[CRIME (security exploit)|CRIME security exploit]] takes advantage of TLS compression, so conservative implementations do not enable compression at the TLS level. [[HTTP compression]] is unrelated and unaffected by this exploit, but is exploited by the related [[BREACH (security exploit)|BREACH attack]].
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! DEFLATE<ref name="tls-comp">RFC 3749</ref><br />(insecure)
|-
| [[Botan (programming library)|Botan]]
| {{yes|No}}
|-
| [[BSAFE]]<ref name="RSABSAFETECH" />
| {{yes|No}}
|-
| [[cryptlib]]
| {{yes|No}}
|-
| [[GnuTLS]]
| {{yes|Disabled by default}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{yes|No}}
|-
| [[LibreSSL]]
| {{yes|No}}<ref name="OpenBSD5.6"/>
|-
| [[MatrixSSL]]
| {{yes|Disabled by default}}
|-
| [[Mbed TLS]]
| {{yes|Disabled by default}}
|-
| [[Network Security Services|NSS]]
| {{yes|Disabled by default}}
|-
| [[OpenSSL]]
| {{Yes|Disabled by default}}
|-
| [[Rustls]]
| {{yes|No}}
|-
| [[Schannel]]
| {{yes|No}}
|-
| [[MacOS|Secure Transport]]
| {{yes|No}}
|-
| [[wolfSSL]]
| {{yes|Disabled by default}}
|-
| [[Erlang (programming language)|Erlang]]/OTP SSL application
| {{yes|No}}
|-
|-class="sortbottom"
! Implementation
! DEFLATE
|}

== Extensions ==
In this section the extensions each implementation supports are listed. Note that the Secure Renegotiation extension is critical for HTTPS client security {{citation needed|date=August 2014}}. TLS clients not implementing it are vulnerable to attacks, irrespective of whether the client implements TLS renegotiation.

{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! Secure Renegotiation<br /><ref name="renegotiation">RFC 5746</ref>
! Server Name Indication<br /><ref name="tlsexts">RFC 6066</ref>
! [[Application-Layer Protocol Negotiation|ALPN]]<br /><ref name="alpn">RFC 7301</ref>
! [[OCSP stapling|Certificate Status Request]]<br /><ref name=tlsexts/>
! [[OpenPGP]]<br /><ref name="openpgp">RFC 6091</ref>
! Supplemental Data<br /><ref name="supdata">RFC 4680</ref>
! Session Ticket<br /><ref name="exporter">{{cite IETF|rfc=5077}}</ref>
! Keying Material Exporter<br /><ref name="sticket">{{cite IETF|rfc=5705}}</ref>
! Maximum Fragment Length<br /><ref name=tlsexts/>
! Truncated [[HMAC]]<br /><ref name=tlsexts/>
! [[Encrypt-then-MAC]]<br /><ref name=rfc7366/>
! TLS Fallback SCSV<br /><ref name="tlsfallbackscsv">{{cite IETF|rfc=7507}}</ref>
! Extended Master Secret<br /><ref name="extendedmastersecret">RFC 7627</ref>
! ClientHello Padding<br /><ref name="tlspadding">RFC 7685</ref>
! Raw Public Keys<br /><ref name="rawpublickeys">RFC 7250</ref>
|-
| [[Botan (programming library)|Botan]]
| {{yes}}
| {{yes}}
| {{yes}}<ref name="Botan 1.11.16">{{cite web|url=https://botan.randombit.net/news.html#version-1-11-16-2015-03-29|title=Version 1.11.16, 2015-03-29 — Botan|date=2016-03-29|accessdate=2016-09-08}}</ref>
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{okay|No}}
| {{yes}}
| {{yes}}<ref name="Botan 1.11.10">{{cite web|url=http://botan.randombit.net/relnotes/1_11_10.html|title=Version 1.11.10, 2014-12-10 — Botan|date=2014-12-10|accessdate=2014-12-14}}</ref>
| {{yes}}<ref name="Botan 1.11.26">{{cite web|url=http://botan.randombit.net/news.html#version-1-11-26-2016-01-04|title=Version 1.11.26, 2016-01-04 — Botan|date=2016-01-04|accessdate=2016-02-25}}</ref>
| {{no}}
| {{unknown}}
|-
| [[BSAFE]] SSL-J
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{okay|No}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
|-
| [[cryptlib]]
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}<ref name="cryptlib-maxfrag">Present, but disabled by default due to lack of use by any implementation.</ref>
| {{okay|No}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{unknown}}
|-
| [[GnuTLS]]
| {{yes}}
| {{yes}}
| {{yes}}<ref name="GnuTLS-3.2.0">{{cite web|url=http://article.gmane.org/gmane.network.gnutls.general/3136|title=gnutls 3.2.0|accessdate=2015-01-26|archive-url=https://web.archive.org/web/20160131230710/http://article.gmane.org/gmane.network.gnutls.general/3136|archive-date=2016-01-31|url-status=dead}}</ref>
| {{yes}}
| {{no}}<ref name="lists.gnupg.org">{{Cite web|url=https://lists.gnupg.org/pipermail/gnutls-help/2017-August/004364.html|title=[gnutls-help] GnuTLS 3.6.0 released|first=Nikos|last=Mavrogiannopoulos|date=August 21, 2017}}</ref>
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{okay|No}}
| {{yes}}<ref name="GnuTLS-3.4.0"/>
| {{yes}}<ref name="GnuTLS-3.4.4">{{cite web|url=http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/8267|title=gnutls 3.4.4|accessdate=2015-08-25|archive-url=https://web.archive.org/web/20170717020648/http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/8267|archive-date=2017-07-17|url-status=dead}}</ref>
| {{yes}}<ref name="GnuTLS-3.4.0"/>
| {{yes}}<ref name="DUMBFW">{{cite web|url=https://gnutls.org/manual/html_node/Priority-Strings.html|title=%DUMBFW priority keyword|accessdate=2017-04-30}}</ref>
| {{yes}}<ref name="GnuTLS-3.6.6">{{cite web|url=https://lists.gnupg.org/pipermail/gnutls-help/2019-January/004484.html|title=gnutls 3.6.6|date=2019-01-25|accessdate=2019-09-01}}</ref>
|-
| [[Java Secure Socket Extension|JSSE]]
| {{yes}}
| {{Yes}}<ref name="docs.oracle.com"/>
| {{Yes}}<ref name="docs.oracle.com"/>
| {{yes}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{okay|No}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
|-
| [[LibreSSL]]
| {{yes}}
| {{yes}}
| {{yes}}<ref name="libressl-2.1.3">{{cite web| title = LibreSSL 2.1.3 released| url = https://marc.info/?l=openbsd-announce&m=142193407304782| date = 2015-01-22| accessdate = 2015-01-22}}</ref>
| {{yes}}
| {{no}}
| {{no}}?
| {{yes}}
| {{yes}}?
| {{no}}
| {{okay|No}}
| {{no}}
| {{partial|Server side only}}<ref name="libressl-2.1.4">{{cite web| title = LibreSSL 2.1.4 released| url = https://marc.info/?l=openbsd-announce&m=142543818707898| date = 2015-03-04| accessdate = 2015-03-04}}</ref>
| {{no}}
| {{yes}}
| {{no}}
|-
| [[MatrixSSL]]
| {{yes}}
| {{yes}}
| {{yes}}<ref>{{cite web |title = MatrixSSL - News |url = http://www.matrixssl.org/news.html |date = 2014-12-04 |accessdate = 2015-01-26 |url-status = dead |archiveurl = https://web.archive.org/web/20150214105056/http://www.matrixssl.org/news.html |archivedate = 2015-02-14 }}</ref>
| {{yes}}<ref name="matrixssl_3.8.3"/>
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{okay|Yes}}
| {{no}}
| {{yes}}<ref name="matrixssl_3.8.3"/>
| {{yes}}<ref name="matrixssl_3.8.3"/>
| {{no}}
| {{unknown}}
|-
| [[Mbed TLS]]
| {{yes}}
| {{yes}}
| {{yes}}<ref name="PolarSSL-1.3.6">{{cite web|title=Download overview - PolarSSL|url=https://polarssl.org/tech-updates/releases/polarssl-1.3.6-released|date=2014-04-11|access-date=2015-01-26|archive-date=2015-02-09|archive-url=https://web.archive.org/web/20150209195111/https://polarssl.org/tech-updates/releases/polarssl-1.3.6-released|url-status=dead}}</ref>
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{okay|Disabled by default}}<ref name="mbed-2.0"/>
| {{yes}}<ref name="mbedTLS-1.3.10">{{cite web|url=https://polarssl.org/tech-updates/releases/mbedtls-1.3.10-released|title=mbed TLS 1.3.10 released|date=2015-02-08|access-date=2015-02-09|archive-date=2015-02-09|archive-url=https://web.archive.org/web/20150209180352/https://polarssl.org/tech-updates/releases/mbedtls-1.3.10-released|url-status=dead}}</ref>
| {{yes}}<ref name="mbedTLS-1.3.10"/>
| {{yes}}<ref name="mbedTLS-1.3.10"/>
| {{no}}
| {{no}}
|-
| [[Network Security Services|NSS]]
| {{yes}}
| {{yes}}
| {{yes}}<ref name="NSS-3.15.5">{{cite web|url=https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.5_release_notes|archive-url=https://archive.today/20150126155403/https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.5_release_notes|url-status=dead|archive-date=January 26, 2015|work=Mozilla Developer Network|title=NSS 3.15.5 release notes|publisher=Mozilla|accessdate=2015-01-26}}</ref>
| {{yes}}
| {{no}}<ref>{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=961416|title=Bug 961416 - Support RFC6091 - Using OpenPGP Keys for Transport Layer Security Authentication (TLS1.2) |publisher=Mozilla|accessdate=2014-06-18}}</ref>
| {{no}}
| {{yes}}
| {{yes}}
| {{no}}
| {{okay|No}}
| {{no}}<ref>{{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=972145|title=Bug 972145 - Implement the encrypt-then-MAC TLS extension  |publisher=Mozilla|accessdate=2014-11-06}}</ref>
| {{yes}}<ref>{{cite web|url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.1_release_notes|title=NSS 3.17.1 release notes|accessdate=2014-10-17|archive-date=2019-04-19|archive-url=https://web.archive.org/web/20190419152214/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17.1_release_notes|url-status=dead}}</ref>
| {{yes}}<ref>{{cite web|url=https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes|title=NSS 3.21 release notes|accessdate=2015-11-14|archive-date=2021-12-07|archive-url=https://web.archive.org/web/20211207025807/https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes|url-status=dead}}</ref>
| {{yes}}<ref name="NSS-3.15.5"/>
| {{unknown}}
|-
| [[OpenSSL]]
| {{yes}}
| {{yes}}
| {{yes}}<ref name="openssl-1.0.2-note"/>
| {{yes}}
| {{no}}
| {{no}}?
| {{yes}}
| {{yes}}
| {{yes}}
| {{okay|No}}
| {{yes}}
| {{yes}}<ref>{{cite web|url=https://openssl-library.org/news/secadv/20141015.txt|title=OpenSSL Security Advisory [15 Oct 2014]|date=2014-10-15}}</ref>
| {{yes}}<ref name="openssl-1.1.0-note" />
| {{yes}}<ref name="openssl-1.0.1g-note">{{cite web|url=https://www.openssl.org/news/openssl-1.0.1-notes.html |title=Major changes between OpenSSL 1.0.1f and OpenSSL 1.0.1g [7 Apr 2014] |date=2014-04-07 |accessdate=2015-02-10 |url-status=dead |archive-url=https://web.archive.org/web/20150120120428/https://www.openssl.org/news/openssl-1.0.1-notes.html |archive-date=2015-01-20}}</ref>
| {{yes}}<ref name="openssl3.2.0">{{cite web|url=https://www.openssl.org/blog/blog/2023/11/23/OpenSSL32/index.html|title=OpenSSL Announces Final Release of OpenSSL 3.2.0|date=2023-11-23}}</ref>
|-
| [[Rustls]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{yes}}
| {{yes}}
| {{no}}
| {{okay|No}}
| {{no}}
| {{no}} <ref>rustls does not implement earlier versions that would warrant protection against insecure downgrade</ref>
| {{yes}}
| {{no}}
| {{unknown}}
|-
| [[Schannel|Schannel XP/2003]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{okay|No}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{unknown}}
|-
| [[Schannel|Schannel Vista/2008]]
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{okay|No}}
| {{no}}
| {{no}}
| {{yes}}<ref name="MS15-121">{{cite web|url=https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2015/ms15-121|title=Microsoft Security Bulletin MS15-121|date=March 2023 |accessdate=2024-04-28}}</ref>
| {{no}}
| {{unknown}}
|-
| [[Schannel|Schannel 7/2008R2]]
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{okay|No}}
| {{no}}
| {{no}}
| {{yes}}<ref name="MS15-121"/>
| {{no}}
| {{unknown}}
|-
| [[Schannel|Schannel 8/2012]]
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{partial|Client side only}}<ref name="Schannel_SessionTicket">{{cite web|url=https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831771(v=ws.11)|title=What's New in TLS/SSL (Schannel SSP)|date=31 August 2016 |accessdate=2024-04-28}}</ref>
| {{no}}
| {{no}}
| {{okay|No}}
| {{no}}
| {{no}}
| {{yes}}<ref name="MS15-121"/>
| {{no}}
| {{unknown}}
|-
| [[Schannel|Schannel 8.1/2012R2, 10]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
| {{yes}}<ref name="Schannel_SessionTicket"/>
| {{no}}
| {{no}}
| {{okay|No}}
| {{no}}
| {{no}}
| {{yes}}<ref name="MS15-121"/>
| {{no}}
| {{unknown}}
|-
| [[MacOS|Secure Transport]]
| {{yes}}
| {{yes}}
| {{unknown}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{okay|No}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{unknown}}
|-
| [[wolfSSL]]
| {{yes}}
| {{yes}}
| {{yes}}<ref name="wolfssl-3.7.0"/>
| {{yes}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{okay|Yes}}
| {{yes}}<ref name="wolfssl-4.2.0">{{cite web|url=https://www.wolfssl.com/wolfssl-version-4-2-0-now-available/|title=wolfSSL Version 4.2.0 is Now Available!|date=22 October 2019|accessdate=2021-08-13}}</ref>
| {{no}}
| {{yes}}
| {{no}}
| {{unknown}}
|-
| Erlang/OTP SSL application
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{okay|No}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{unknown}}
|-
|-class="sortbottom"
! Implementation
! Secure Renegotiation
! Server Name Indication
! ALPN
! Certificate Status Request
! OpenPGP 
! Supplemental Data 
! Session Ticket 
! Keying Material Exporter 
! Maximum Fragment Length 
! Truncated HMAC 
! Encrypt-then-MAC
! TLS Fallback SCSV
! Extended Master Secret
! ClientHello Padding
! Raw Public Keys
|}

== Assisted cryptography ==
This section lists the known ability of an implementation to take advantage of CPU instruction sets that optimize encryption, or utilize system specific devices that allow access to underlying cryptographic hardware for acceleration or for data separation.
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! [[PKCS11|PKCS #11 device]]
! [[AES instruction set|Intel AES-NI]]
! [[VIA PadLock]]
! [[ARM architecture#ARMv8-A|ARMv8-A]]
! [[Intel SGX]]
! [http://www.intel.com/content/www/us/en/embedded/technology/quickassist/overview.html Intel QAT]
! [[Intel SHA extensions|Intel SHA]]
! [[NXP CAAM]]
|-
| [[Botan (programming library)|Botan]]
| {{yes}}<ref name="Botan 1.11.31">{{cite web|url=https://botan.randombit.net/news.html#version-1-11-31-2016-08-30|title=Version 1.11.31, 2015-08-30 — Botan|date=2016-08-30|accessdate=2016-09-08}}</ref> 
| {{yes}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| 
| {{no}}
|-
|-
| [[BSAFE]] SSL-J {{refn|group=lower-alpha|Pure Java implementations relies on [[Java virtual machine|JVM]] processor optimization capabilities, such as [[OpenJDK]] support for [[AES-NI]]<ref>{{Cite web|url=http://openjdk.java.net/jeps/164|title=JEP 164: Leverage CPU Instructions for AES Cryptography|website=openjdk.java.net}}</ref>}}{{refn|group=lower-alpha|BSAFE SSL-J can be configured to run in native mode, using BSAFE Crypto-C Micro Edition to benefit from processor optimization.<ref>{{Cite web|url=https://sso.rsasecurity.com/sso/SSO?SPEntityID=rsalink&redirectreason=permissiondenied&referer=https%3A%2F%2Fcommunity.rsa.com%2Ft5%2Frsa-bsafe-archived-resources%2Frsa-bsafe-ssl-j-6-2-5-release-notes%2Fta-p%2F566951|title=RSA SecurID PASSCODE Request|website=sso.rsasecurity.com}}</ref>}}
| {{okay|Yes}}
| {{okay|Yes}}
| {{no}}
| {{okay|Yes}}
| {{no}}
| {{no}}
| {{okay|Yes}}
| {{no}}
|-
| [[cryptlib]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
|
| {{no}}
|
| 
|-
| [[Crypto++]]
|
| {{yes}}
| 
| 
|
| {{no}}
| {{yes}}
|
|-
| [[GnuTLS]]
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}<ref>{{Cite web|url=https://lists.gnupg.org/pipermail/gnutls-devel/2016-October/008194.html|title=[gnutls-devel] gnutls 3.5.5|first=Nikos|last=Mavrogiannopoulos|date=October 9, 2016}}</ref>
| {{no}}
| {{no}}
| {{yes}}
|
|-
| [[Java Secure Socket Extension|JSSE]]
| {{yes}}
| {{yes}}<ref>{{cite web|url=https://stackoverflow.com/questions/14259671/java-ssl-provider-with-aes-ni-support|title=Java SSL provider with AES-NI support|website=stackoverflow.com}}</ref>
| {{no}}
| {{no}}
|
| {{no}}
|
| {{no}}
|-
| [[LibreSSL]]
| {{no}}
| {{yes}}
| {{yes}}
| {{no}}
|
| {{no}}
|
|
|-
| [[MatrixSSL]]
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
|
| {{no}}
|
| {{no}}
|-
| [[Mbed TLS]]
| {{yes}}
| {{yes}}<ref>{{cite web | url=https://polarssl.org/tech-updates/releases/polarssl-1.3.3-released | title=PolarSSL 1.3.3 released | quote=We've incorporated support for AES-NI in our AES and GCM modules. | date=2013-12-31 | access-date=2014-01-07 | archive-url=https://web.archive.org/web/20140107122023/https://polarssl.org/tech-updates/releases/polarssl-1.3.3-released | archive-date=2014-01-07 | url-status=dead}}</ref>
| {{yes}}
| {{no}}
|
| {{no}}
|
| {{no}}
|-
| [[Network Security Services|NSS]]
| {{yes}}<ref>Normally NSS's libssl performs all operations via the PKCS#11 interface, either to hardware or software tokens</ref>
| {{yes}}<ref>{{cite web | url=https://bugzilla.mozilla.org/show_bug.cgi?id=706024 | title=Bug 706024 - AES-NI enhancements to NSS on Sandy Bridge systems | accessdate=2013-09-28}}</ref>
| {{no}}<ref>{{cite web | url=https://bugzilla.mozilla.org/show_bug.cgi?id=479744 | title=Bug 479744 - RFE : VIA Padlock ACE support (hardware RNG, AES, SHA1 and SHA256) | accessdate=2014-04-11}}</ref>
| {{no}}
|
| {{no}}
|
| {{no}}
|-
| [[OpenSSL]]
| {{yes}}<ref>https://habrahabr.ru/post/134725/, http://forum.rutoken.ru/topic/1639/, https://dev.rutoken.ru/pages/viewpage.action?pageId=18055184 {{in lang|ru}}</ref>
| {{yes}}
| {{yes}}
| {{yes}}<ref>{{cite web|url=http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddacb8f27ba4c8a8d51c306c150e1a8703b008f2|title=git.openssl.org Git - openssl.git/commitdiff|website=git.openssl.org}}</ref>
|
| {{no}}
| {{yes}}
| {{Partial}}
|-
| [[Rustls]]
|
| {{yes}}
| 
| {{yes}}
|
|
| {{yes}}
|
|-
| [[Schannel]]
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
|
| {{no}}
|
| {{no}}
|-
| [[MacOS|Secure Transport]]
| {{no}}
| {{Yes}}<ref>https://opensource.apple.com/source/Security/Security-55179.13/sec/Security/SecECKey.c</ref><ref>{{cite web |url=http://km.support.apple.com/library/APPLE/APPLECARE_ALLGEOS/HT5396/Crypto_Officer_Role_Guide_for_FIPS_140-2_Compliance_OS_X_Mountain_Lion_v10.8.pdf |title=Crypto Officer Role Guide for FIPS 140-2 Compliance OS X Mountain Lion v10.8 |publisher=Apple Inc. |date=2013}}</ref>
| {{no}}
| {{Yes}}
|
| {{no}}
|
| {{no}}
|-
| [[wolfSSL]]
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}<ref>{{cite web|url=https://www.wolfssl.com/wolfSSL/Blog/Entries/2017/1/18_wolfSSL_Asynchronous_Intel_QuickAssist_Support.html|title=wolfSSL Asynchronous Intel QuickAssist Support - wolfSSL|date=18 January 2017|publisher=}}</ref>
|
| {{yes}}<ref>{{cite web|url=https://community.nxp.com/t5/i-MX-Processors/CAAM-support-in-wolfSSL/m-p/1013736|title=CAAM support in wolfSSL |date=10 March 2020|publisher=}}</ref>
|-
|-class="sortbottom"
! Implementation
! PKCS #11 device
! Intel AES-NI
! VIA PadLock
! ARMv8-A
! Intel SGX
! Intel QAT
! Intel SHA
! NXP CAAM
|}

{{Reflist|group=lower-alpha}}

== System-specific backends ==
This section lists the ability of an implementation to take advantage of the available operating system specific backends, or even the backends provided by another implementation.
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! [http://cryptodev-linux.org/ /dev/crypto]
! [http://www.chronox.de/crypto-API/crypto/userspace-if.html af_alg]
! [[Cryptographic Service Provider|Windows CSP]]
! [https://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/man3/Common%20Crypto.3cc.html CommonCrypto]
! [[OpenSSL|OpenSSL engine]]
|-
| [[Botan (programming library)|Botan]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{partial}}
|-
| [[BSAFE]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
|-
| [[cryptlib]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
|-
| [[GnuTLS]]
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
|-
| [[Java Secure Socket Extension|JSSE]]
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
|-
| [[LibreSSL]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}<ref name="libressl-2.2.1">{{cite web| title = LibreSSL 2.2.1 Released| url = http://marc.info/?l=openbsd-announce&m=143635991232240| date = 2015-07-08| accessdate = 2016-01-30}}</ref>
|-
| [[MatrixSSL]]
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{yes}}
|-
| [[Mbed TLS]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
|-
| [[Network Security Services|NSS]]
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
|-
| [[OpenSSL]]
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{yes}}
|-
| [[Rustls]]
| {{no}}
| {{yes}} <ref>{{cite web|title=ktls integration for rustls|accessdate=2024-08-29|url=https://github.com/rustls/ktls}}</ref>
| {{no}}
| {{no}}
| {{no}}
|-
| [[Schannel]]
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
|-
| [[MacOS|Secure Transport]]
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
|-
| [[wolfSSL]]
| {{yes}}
| {{yes}}
| {{partial}}
| {{no}}
| {{yes}}<ref name="wolfProvider">{{cite web| title = wolfProvider| url = https://www.wolfssl.com/wolfengine-openssl-provider-solution-now-public/ |date = 2021-11-10| accessdate = 2022-01-17}}</ref>
|-
| [[Erlang (programming language)|Erlang]]/OTP SSL application
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
|-
|-class="sortbottom"
! Implementation
! /dev/crypto
! af_alg
! Windows CSP
! CommonCrypto
! OpenSSL engine
|}

== Cryptographic module/token support ==
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! [[Trusted Platform Module|TPM]] support
! Hardware token support
! Objects identified via
|-
| [[Botan (programming library)|Botan]]
| {{partial}}<ref name="Botan 1.11.26"/>
| {{yes|[[PKCS 11|PKCS #11]]}}
| 
|-
| [[BSAFE]] SSL-J
| {{no}}
| {{no}}
| 
|-
| [[cryptlib]]
| {{no}}
| {{yes|[[PKCS 11|PKCS #11]]}}
| User-defined label
|-
| [[GnuTLS]]
| {{yes}}
| {{yes|[[PKCS 11|PKCS #11]]}}
| RFC 7512 PKCS #11 URLs<ref name=pkcs11urls>{{cite IETF |rfc=7512 |title=The PKCS #11 URI Scheme}}</ref>
|-
| [[Java Secure Socket Extension|JSSE]]
| {{no}}
| {{yes|[[PKCS11]] [[Java Cryptography Architecture]],<br />[[Java Cryptography Extension]]}}
| 
|-
| [[LibreSSL]]
| {{yes}}
| {{partial|[[PKCS 11|PKCS #11]] (via 3rd party module)}}
| Custom method
|-
| [[MatrixSSL]]
| {{no}}
| {{yes|[[PKCS 11|PKCS #11]]}}
| 
|-
| [[Mbed TLS]]
| {{no}}
| {{yes|[[PKCS 11|PKCS #11]] (via libpkcs11-helper) or standard hooks}}
| Custom method
|-
| [[Network Security Services|NSS]]
| {{no}}
| {{yes|[[PKCS 11|PKCS #11]]}}
|
|-
| [[OpenSSL]]
| {{yes}}
| {{partial|[[PKCS 11|PKCS #11]] (via 3rd party module)}}<ref name=libp11>{{cite web|url=https://github.com/OpenSC/libp11|title=libp11: PKCS#11 wrapper library|date=19 January 2018|publisher=|via=GitHub}}</ref>
| RFC 7512 PKCS #11 URLs<ref name=pkcs11urls/>
|-
| [[Rustls]]
| {{no}}
| {{yes|[[Microsoft CryptoAPI]]}} <ref>{{cite web|url=https://github.com/rustls/rustls-cng|title=Windows CNG bridge for rustls|accessdate=2024-08-29}}</ref>
| Custom method
|-
| [[Schannel]]
| {{no}}
| {{yes|[[Microsoft CryptoAPI]]}}
| UUID, User-defined label
|-
| [[MacOS|Secure Transport]]
| 
| 
| 
|-
| [[wolfSSL]]
| {{yes}}
| {{yes|[[PKCS 11|PKCS #11]]}}
| 
|-
|-class="sortbottom"
! Implementation
! TPM support
! Hardware token support
! Objects identified via
|}

== Code dependencies ==
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! Dependencies
! Optional dependencies
|-
| [[Botan (programming library)|Botan]]
| C++20
| [[SQLite]]<br />[[zlib]] (compression)<br />[[bzip2]]  (compression)<br />[[XZ Utils|liblzma]] (compression)<br />[[boost (C++ libraries)|boost]]<br />trousers (TPM)
|-
| [[GnuTLS]]
| libc<br />nettle<br />gmp
| zlib (compression)<br />p11-kit (PKCS #11)<br />trousers (TPM)<br />[[Unbound (DNS server)|libunbound]] (DANE)
|-
| [[Java Secure Socket Extension|JSSE]]
| Java
|
|-
| [[MatrixSSL]]
| none
| zlib (compression)
|-
| [[MatrixSSL|MatrixSSL-open]]
| libc or newlib
|
|-
| [[Mbed TLS]]
| libc
| libpkcs11-helper (PKCS #11)<br />zlib (compression)
|-
| [[Network Security Services|NSS]]
| libc<br />libnspr4<br />libsoftokn3<br />libplc4<br />libplds4
| zlib (compression)
|-
| [[Rustls]]
| rust {{mono|core}} library
| rust {{mono|std}} library<br />zlib-rs (compression)<br />brotli (compression)<br />''ring'' (cryptography)<br />aws-lc-rs (cryptography)<br />
|-
| [[OpenSSL]]
| libc
| zlib (compression)<br />brotli (compression)<br />zstd (compression)<br />
|-
| [[wolfSSL]]
| None
| libc<br />zlib (compression)
|-
| [[Erlang (programming language)|Erlang]]/OTP SSL application
| libcrypto (from OpenSSL), Erlang/OTP  and its public_key, crypto and asn1 applications
| Erlang/OTP -inets (http fetching of CRLs)
|-
|-class="sortbottom"
! Implementation
! Dependencies
! Optional dependencies
|}

== Development environment ==
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! Namespace
! Build tools
! API manual
! Crypto back-end
! {{clarify span|OpenSSL compatibility Layer|date=November 2013}}
|-
| [[Botan (programming library)|Botan]]
| Botan::TLS
| Makefile
| Sphinx
| Included (pluggable)
| {{no}}
|-
| [[Bouncy Castle (cryptography)|Bouncy Castle]]
| org.bouncycastle
| Java Development Environment
| Programmers reference manual (PDF)
| Included (pluggable)
| {{no}}
|-
| [[BSAFE]] SSL-J
|com.rsa.asn1{{cref2|group=dev_env_footnotes|a}}<br />
com.rsa.certj{{cref2|group=dev_env_footnotes|b}}<br />
com.rsa.jcp{{cref2|group=dev_env_footnotes|c}}<br />
com.rsa.jsafe{{cref2|group=dev_env_footnotes|d}}<br />
com.rsa.ssl{{cref2|group=dev_env_footnotes|e}}<br />
com.rsa.jsse{{cref2|group=dev_env_footnotes|f}}
| [[Java Classloader|Java classloader]]
| Javadoc, Developer's guide (HTML)
| Included
| {{no}}
|-
| [[cryptlib]]
| crypt*
| makefile, MSVC project workspaces
| Programmers reference manual (PDF), architecture design manual (PDF)
| Included (monolithic)
| {{no}}
|-
| [[GnuTLS]]
| gnutls_*
| Autoconf, automake, libtool
| Manual and API reference (HTML, PDF)
| External, [[Nettle (cryptographic library)|libnettle]]
| {{yes}} (limited)
|-
| [[Java Secure Socket Extension|JSSE]]
| javax.net.ssl<br />
sun.security.ssl
| Makefile
| API Reference (HTML) +
{{Javadoc:SE-guide|security/jsse/JSSERefGuide.html|JSSE Reference Guide}}
| [[Java Cryptography Architecture]],<br />[[Java Cryptography Extension]]
| {{No}}
|-
| [[MatrixSSL]]
| matrixSsl_*<br />
ps*
| Makefile, MSVC project workspaces, Xcode projects for OS X and iOS
| API Reference (PDF), Integration Guide
| Included (pluggable)
| {{yes}} (Subset: SSL_read, SSL_write, etc.)
|-
| [[Mbed TLS]]
| mbedtls_ssl_*<br />
mbedtls_sha1_*<br />
mbedtls_md5_*<br />
mbedtls_x509*<br />
...
| Makefile, [[CMake]], MSVC project workspaces, yotta
| API Reference + High Level and Module Level Documentation (HTML)
| Included (monolithic)
| {{no}}
|-
| [[Network Security Services|NSS]]
| CERT_*<br />
SEC_*<br />
SECKEY_*<br />
NSS_*<br />
PK11_*<br />
SSL_*<br />
...
| Makefile
| Manual (HTML)
| Included, PKCS#11 based<ref name=nsscrypto>On the fly replaceable/augmentable.</ref>
| {{yes}} (separate package called nss_compat_ossl<ref name=nsscapatossl>{{cite web|url=http://fedoraproject.org/wiki/Nss_compat_ossl|title=Nss compat ossl - Fedora Project Wiki|website=fedoraproject.org}}</ref>)
|-
| [[OpenSSL]]
| SSL_*<br />
SHA1_*<br />
MD5_*<br />
EVP_*<br />
...
| Makefile
| Man pages
| Included (monolithic)
| {{N/a}}
|-
| [[Rustls]]
| {{code|rustls::}}
| cargo
| [https://docs.rs/rustls/0.23.12/rustls/ API reference] and [https://docs.rs/rustls/0.23.12/rustls/manual/ design manual]
| Two options included (pluggable)
| {{yes}}<ref>{{cite web|url=https://github.com/rustls/rustls-openssl-compat/|title=rustls-openssl compatibility layer|accessdate=2024-08-29}}</ref> (subset)
|-
| [[wolfSSL]]
| wolfSSL_*<br />
CyaSSL_*<br />
SSL_*
| Autoconf, automake, libtool, MSVC project workspaces, XCode projects, CodeWarrior projects, MPLAB X projects, Keil, IAR, Clang, GCC, e2Studio
| Manual and API Reference (HTML, PDF)
| Included (monolithic)
| {{yes}} (about 60% of API)
|-
|-class="sortbottom"
! Implementation
! Namespace
! Build tools
! API manual
! Crypto back-end
! OpenSSL compatibility layer
|}
{{cnote2 begin | liststyle=lower-alpha}}
{{cnote2 | group=dev_env_footnotes| a | ASN.1 manipulation classes}}
{{cnote2 | group=dev_env_footnotes| b | Cert-J proprietary API}}
{{cnote2 | group=dev_env_footnotes| c | Certificate Path manipulation classes}}
{{cnote2 | group=dev_env_footnotes| d | Crypto-J proprietary API, [[Java Cryptography Extension|JCE]], [[Cryptographic Message Syntax|CMS]] and [[Public key infrastructure|PKI]]}} API
{{cnote2 | group=dev_env_footnotes| e | SSLJ proprietary API}}
{{cnote2 | group=dev_env_footnotes| f | [[Java Secure Socket Extension|JSSE]] API}}
{{cnote2 end}}

== Portability concerns ==
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! Platform requirements
! Network requirements
! Thread safety
! Random seed
! Able to cross-compile
! No OS (bare metal)
! Supported operating systems
|-
| [[Botan (programming library)|Botan]]
| C++11
| None
| {{yes|Thread-safe}}
| Platform-dependent
| {{yes}}
|
| Windows, Linux, macOS, Android, iOS, FreeBSD, OpenBSD, Solaris, AIX, HP-UX, QNX, BeOS, IncludeOS
|-
| [[BSAFE]] SSL-J
| Java
| Java SE network components
| {{yes|Thread-safe}}
| Depends on java.security.SecureRandom
| {{yes}}
| {{no}}
| FreeBSD, Linux, macOS, Microsoft Windows, Android, AIX, Solaris
|-
| [[cryptlib]]
| C89
| POSIX send() and recv(). API to supply your own replacement
| {{yes|Thread-safe}}
| Platform-dependent, including hardware sources
| {{yes}}
| {{yes}}
| AMX, BeOS, ChorusOS, DOS, eCos, FreeRTOS/OpenRTOS, uItron, MVS, OS/2, Palm OS, QNX Neutrino, RTEMS, Tandem NonStop, ThreadX, uC/OS II, Unix (AIX, FreeBSD, HPUX, Linux, macOS, Solaris, etc.), VDK, VM/CMS, VxWorks, Win16, Win32, Win64, WinCE/PocketPC/etc, XMK
|-
| [[GnuTLS]]
| C89
| POSIX send() and recv(). API to supply your own replacement.
| {{partial|Thread-safe, needs custom mutex hooks if neither POSIX nor Windows threads are available.}}
| Platform dependent
| {{yes}}
| {{no}}
| Generally any POSIX platforms or Windows, commonly tested platforms include Linux, Win32/64, macOS, Solaris, OpenWRT, FreeBSD, NetBSD, OpenBSD.
|-
| [[Java Secure Socket Extension|JSSE]]
| Java
| Java SE network components
| {{yes|Thread-safe}}
| Depends on java.security.SecureRandom
| {{yes}}
|
| Java based, platform-independent
|-
| [[MatrixSSL]]
| C89
| None
| {{yes|Thread-safe}}
| Platform dependent
| {{yes}}
| {{yes}}
| All
|-
| [[Mbed TLS]]
| C89
| POSIX read() and write(). API to supply your own replacement.
| {{partial|Threading layer available (POSIX or own hooks)}}
| Random seed set through entropy pool
| {{yes}}
| {{yes}}
| Known to work on: Win32/64, Linux, macOS, Solaris, FreeBSD, NetBSD, OpenBSD, OpenWRT, iPhone (iOS), Xbox, Android, eCos, SeggerOS, RISC OS
|-
| [[Network Security Services|NSS]]
| C89, NSPR<ref name=nspr>{{cite web|url=https://www.mozilla.org/projects/nspr/|title=NSPR|website=Mozilla Developer Network}}</ref>
| NSPR<ref name=nspr /> PR_Send() and PR_Recv(). API to supply your own replacement.
| {{yes|Thread-safe}}
| Platform dependent<ref name=nssplatformdep>For Unix/Linux it uses /dev/urandom if available, for Windows it uses CAPI. For other platforms it gets data from clock, and tries to open system files. NSS has a set of platform dependent functions it uses to determine randomness.</ref>
| {{yes}} (but cumbersome)
| {{no}}
| AIX, Android, FreeBSD, NetBSD, OpenBSD, BeOS, HP-UX, IRIX, Linux, macOS, OS/2, Solaris, OpenVMS, Amiga DE, Windows, WinCE, Sony PlayStation

|-
| [[Rustls]]
| [[Rust (programming language)]]
| None
| {{yes|Thread-safe}}
| Platform dependent
| {{yes}}
| {{yes}}
| All supported by [[Rust (programming language)]]
|-
| [[OpenSSL]]
| C89
| None
| {{yes|Thread-safe}}
| Platform dependent
| {{yes}}
| {{no}}
| Unix-like, DOS (with djgpp), Windows, OpenVMS, NetWare, eCos
|-
| [[wolfSSL]]
| C89
| POSIX send() and recv(). API to supply your own replacement.
| {{yes|Thread-safe}}
| Random seed set through wolfCrypt
| {{yes}}
| {{yes}}
| Win32/64, Linux, macOS, Solaris, ThreadX, VxWorks, FreeBSD, NetBSD, OpenBSD, embedded Linux, Yocto Project, OpenEmbedded, WinCE, Haiku, OpenWRT, iPhone (iOS), Android, Nintendo Wii and Gamecube through DevKitPro, QNX, MontaVista, NonStop, TRON/ITRON/μITRON, eCos, Micrium μC/OS-III, FreeRTOS, SafeRTOS, NXP/Freescale MQX, Nucleus, TinyOS, HP/UX, AIX, ARC MQX, Keil RTX, TI-RTOS, uTasker, embOS, INtime, Mbed, uT-Kernel, RIOT, CMSIS-RTOS, FROSTED, Green Hills INTEGRITY, TOPPERS, PetaLinux, Apache mynewt
|-
|-class="sortbottom"
! Implementation
! Platform requirements
! Network requirements
! Thread safety
! Random seed
! Able to cross-compile
! No OS (bare metal)
! Supported operating systems
|}

==See also==
* [[SCTP]] — with DTLS support
* [[DCCP]] — with DTLS support
* [[Secure Real-time Transport Protocol|SRTP]] — with DTLS support (DTLS-SRTP) and Secure Real-Time Transport Control Protocol (SRTCP)

== References ==
{{Reflist|30em}}

{{SSL/TLS}}

{{DEFAULTSORT:Comparison Of TLS implementations}}