Back to browse
GitHub Repository

A minimal TLS 1.3 client implementation with full handshake key derivation

1 starsC

A ground up TLS 1.3 client written in C

by theotrama·Feb 24, 2026·3 points·0 comments

AI Analysis

●●SolidWizardryShip It

Educational TLS 1.3 implementation, useful for learning but production alternatives exist.

Strengths
  • Full handshake key derivation from first principles; genuine learning artifact on a hard problem.
  • 2+ weeks of constraint-driven learning; author's write-up shows real engagement with protocol complexity.
  • Validates against xargs.org test vectors—discipline in verification.
Weaknesses
  • Client-only, cut corners acknowledged; production should use OpenSSL/BoringSSL/rustls.
  • No clear use case beyond education; incremental learning value if reader already knows crypto basics.
Category
Target Audience

Cryptography learners, systems programmers, security researchers

Similar To

OpenSSL · BoringSSL · rustls (production alternatives)

Similar Projects

SecurityMid

Using subliminal channels to hide data in TLS handshakes

Uses EdDSA signatures to smuggle arbitrary bytes through TLS handshakes — a classic subliminal-channel trick applied to modern TLS code. The repo includes an actual client/server PoC (https_client.c, https_server.c), a cert generation script, and a bundled wolfSSL build so you can reproduce the experiment. Clever demo, but it reads like research code rather than a hardened tool: there's little on threat modelling, detection, or performance trade-offs.

WizardryNiche Gem
desmoulins
203mo ago
Security●●Solid

Open-source API Key server written in Go by Ory

Token derivation for fine-grained capabilities beats static API keys from Auth0 or Vault.

SlickNiche Gem
leetvibecoder
3533d ago