lemon-tls 0.7.0 → 0.10.0

package/src/utils.js

@@ -125,10 +125,77 @@ function timingSafeEqualU8(a, b) {
 }
 
 
+/**
+ * Parse an X509Certificate DN string into the object shape Node's certificate
+ * objects use.
+ *
+ * crypto.X509Certificate gives `subject`/`issuer` as newline-separated
+ * "KEY=value" text, but Node documents them on a certificate object as objects
+ * keyed by RDN type: { C, ST, L, O, OU, CN }. Passing the raw string through
+ * meant tls.checkServerIdentity() — which reads cert.subject.CN — could never
+ * find a Common Name, so any certificate without a SAN was rejected outright
+ * even when its CN matched. The exported identity check did not work against
+ * this library's own getPeerCertificate() output, which is exactly the pairing
+ * Node documents.
+ *
+ * A type may legitimately repeat (OU is the common case); Node represents a
+ * repeat as an array and a single occurrence as a plain string.
+ *
+ * Idempotent: an already-parsed object is returned unchanged, so callers can
+ * pass either form.
+ */
+function parseDN(dn) {
+  if (dn == null) return {};
+  if (typeof dn === 'object') return dn;
+  let out = {};
+  let lines = String(dn).split('\n');
+  for (let i = 0; i < lines.length; i++) {
+    let line = lines[i];
+    if (!line) continue;
+    let eq = line.indexOf('=');
+    if (eq < 1) continue;
+    let k = line.slice(0, eq).trim();
+    let v = line.slice(eq + 1);
+    if (!Object.prototype.hasOwnProperty.call(out, k)) out[k] = v;
+    else if (Array.isArray(out[k])) out[k].push(v);
+    else out[k] = [out[k], v];
+  }
+  return out;
+}
+
+/**
+ * A certificate (DER) as node:tls's getPeerCertificate() describes it:
+ * subject and issuer as RDN objects, the SAN string, the validity dates,
+ * fingerprints, serial, and the raw DER. One place for TLSSocket, the
+ * session's identity check and anything above (QUIC) — they built it
+ * apiece. Unparseable: just { raw }.
+ */
+function certificateObject(der) {
+  if (!der) return null;
+  try {
+    let x = new crypto.X509Certificate(der);
+    return {
+      subject: parseDN(x.subject),
+      issuer: parseDN(x.issuer),
+      subjectaltname: x.subjectAltName,
+      valid_from: x.validFrom,
+      valid_to: x.validTo,
+      fingerprint: x.fingerprint,
+      fingerprint256: x.fingerprint256,
+      serialNumber: x.serialNumber,
+      raw: der
+    };
+  } catch (e) {
+    return { raw: der };
+  }
+}
+
 export {
+  certificateObject,
   concatUint8Arrays,
   arraybufferEqual,
   arraysEqual,
   uint8Equal,
-  timingSafeEqualU8
+  timingSafeEqualU8,
+  parseDN
 };

package/src/wire.js

@@ -54,6 +54,14 @@ const TLS_CONTENT_TYPE = {
   APPLICATION_DATA: 23
 };
 
+// The largest one handshake message may be, as its header declares it, or a
+// CompressedCertificate decompressed to. OpenSSL allows a ClientHello of
+// 128 KB and certificate chains up to 100 KB (max_cert_list); QUIC's CRYPTO
+// buffer in QUICO is 64 KB. The 24-bit length would allow 16 MB — memory a
+// peer could make us hold, or inflate a few hundred bytes into, before it
+// has proven anything. A maxHandshakeSize below it lowers it.
+const HANDSHAKE_MESSAGE_MAX = 128 * 1024;
+
 const TLS_ALERT_LEVEL = {
   WARNING: 1,
   FATAL: 2
@@ -75,12 +83,14 @@ const TLS_ALERT = {
   PROTOCOL_VERSION: 70,
   INSUFFICIENT_SECURITY: 71,
   INTERNAL_ERROR: 80,
+  INAPPROPRIATE_FALLBACK: 86,   // RFC 7507 (TLS_FALLBACK_SCSV)
   USER_CANCELED: 90,
   MISSING_EXTENSION: 109,
   UNSUPPORTED_EXTENSION: 110,
   UNRECOGNIZED_NAME: 112,
   CERTIFICATE_REQUIRED: 116,
-  NO_APPLICATION_PROTOCOL: 120
+  NO_APPLICATION_PROTOCOL: 120,
+  ECH_REQUIRED: 121
 };
 
 const TLS_MESSAGE_TYPE = {
@@ -97,6 +107,8 @@ const TLS_MESSAGE_TYPE = {
   CLIENT_KEY_EXCHANGE: 16,
   FINISHED: 20,
   KEY_UPDATE: 24,
+  CERTIFICATE_STATUS: 22,       // RFC 6066 §8 (TLS 1.2: the stapled OCSP response)
+  COMPRESSED_CERTIFICATE: 25,   // RFC 8879
   MESSAGE_HASH: 254 // HRR flow marker
 };
 
@@ -113,6 +125,7 @@ const TLS_EXT = {
   MAX_FRAGMENT_LENGTH: 1,
   STATUS_REQUEST: 5,
   SUPPORTED_GROUPS: 10,
+  EC_POINT_FORMATS: 11,
   SIGNATURE_ALGORITHMS: 13,
   USE_SRTP: 14,
   HEARTBEAT: 15,
@@ -122,6 +135,7 @@ const TLS_EXT = {
   SERVER_CERT_TYPE: 20,
   PADDING: 21,
   EXTENDED_MASTER_SECRET: 23,
+  COMPRESS_CERTIFICATE: 27,     // RFC 8879
   SESSION_TICKET: 35,
   PRE_SHARED_KEY: 41,
   EARLY_DATA: 42,
@@ -304,6 +318,7 @@ let exts = {};
 exts.SERVER_NAME = { encode: null, decode: null };
 exts.SUPPORTED_VERSIONS = { encode: null, decode: null };
 exts.SUPPORTED_GROUPS = { encode: null, decode: null };
+exts.EC_POINT_FORMATS = { encode: null, decode: null };
 exts.SIGNATURE_ALGORITHMS = { encode: null, decode: null };
 exts.PSK_KEY_EXCHANGE_MODES = { encode: null, decode: null };
 exts.KEY_SHARE = { encode: null, decode: null };
@@ -313,6 +328,47 @@ exts.RENEGOTIATION_INFO = { encode: null, decode: null };
 exts.SESSION_TICKET = { encode: null, decode: null };
 exts.EXTENDED_MASTER_SECRET = { encode: null, decode: null };
 exts.CERTIFICATE_AUTHORITIES = { encode: null, decode: null };
+exts.COMPRESS_CERTIFICATE = { encode: null, decode: null };
+exts.STATUS_REQUEST = { encode: null, decode: null };
+
+/* ---------------------- STATUS_REQUEST (5) ---------------------- */
+// RFC 6066 §8. Three places, three bodies:
+//   ClientHello:       CertificateStatusRequest — status_type ocsp(1),
+//                      responder_id_list<0..2^16-1>, request_extensions<0..2^16-1>
+//   ServerHello (1.2): empty — "a CertificateStatus message follows"
+//   CertificateEntry (1.3, RFC 8446 §4.4.2.1): CertificateStatus itself
+// Encoded from { ocsp: true } (the request with empty lists, as every
+// browser sends it) or a raw body; decoded to { status_type } or {} when
+// empty. Unknown status types are not an error: the server just does not
+// answer them.
+exts.STATUS_REQUEST.encode = function (value) {
+  if (value instanceof Uint8Array) return value;
+  if (value && value.ocsp) return new Uint8Array([1, 0, 0, 0, 0]);
+  return new Uint8Array(0);
+};
+exts.STATUS_REQUEST.decode = function (data) {
+  if (data.length === 0) return {};
+  return { status_type: data[0] };
+};
+
+/* ---------------------- COMPRESS_CERTIFICATE (27) ---------------------- */
+// RFC 8879 §3: CertificateCompressionAlgorithm algorithms<2..2^8-2> — a
+// one-byte length, then 16-bit codes.
+exts.COMPRESS_CERTIFICATE.encode = function (value) {
+  let list = Array.isArray(value) ? value : [];
+  let out = new Uint8Array(1 + list.length * 2);
+  out[0] = list.length * 2;
+  for (let i = 0; i < list.length; i++) w_u16(out, 1 + i * 2, list[i]);
+  return out;
+};
+exts.COMPRESS_CERTIFICATE.decode = function (data) {
+  if (data.length < 1) throw parseError('compress_certificate: empty');
+  let n = data[0];
+  if (n < 2 || n % 2 !== 0 || 1 + n !== data.length) throw parseError('compress_certificate: bad length');
+  let out = [];
+  for (let i = 1; i < 1 + n; i += 2) out.push((data[i] << 8) | data[i + 1]);
+  return out;
+};
 
 /* ---------------------- CERTIFICATE_AUTHORITIES (47) ---------------------- */
 // RFC 8446 §4.2.4: DistinguishedName authorities<3..2^16-1> — the list is
@@ -527,6 +583,24 @@ exts.SUPPORTED_GROUPS.decode = function (data) {
   return out; // array of named groups
 };
 
+/* ---------------------------- EC_POINT_FORMATS (11) ---------------------------- */
+// RFC 8422 §5.1.2: ECPointFormat ec_point_format_list<1..2^8-1>, one byte per
+// format. 0 is uncompressed — the only format TLS 1.2 still uses, and the one
+// every list must contain.
+exts.EC_POINT_FORMATS.encode = function (value) {
+  let formats = Array.isArray(value) && value.length > 0 ? value : [0];
+  return veclen(1, new Uint8Array(formats));
+};
+
+exts.EC_POINT_FORMATS.decode = function (data) {
+  let off = 0;
+  let list;
+  [list, off] = readVec(data, off, 1);
+  if (off !== data.length) throw parseError('trailing data after ec_point_formats');
+  if (list.length === 0) throw parseError('empty ec_point_formats list');
+  return Array.from(list); // array of point formats
+};
+
 /* -------------------------- SIGNATURE_ALGORITHMS (13) -------------------------- */
 exts.SIGNATURE_ALGORITHMS.encode = function (value) {
   // A codec encodes what it is handed; the set of signature schemes is policy
@@ -723,7 +797,16 @@ exts.KEY_SHARE.encode = function (value) {
   return veclen(2, concatUint8Arrays(parts));
 };
 
-exts.KEY_SHARE.decode = function (data) {
+// `kind` — the message the extension is in ('client_hello', 'server_hello';
+// parse_hello passes it) — decides the form; the three forms cannot be told
+// apart by length. An empty client_shares, which RFC 8446 §4.2.8 allows ("in
+// order to request group selection from the server, at the cost of an
+// additional round trip"), is two bytes [00 00]: read as a HelloRetryRequest's
+// NamedGroup it became a share for group 0x0000, refused illegal_parameter
+// (not in supported_groups) — where the client asked for a HelloRetryRequest.
+// Scanners enumerate a server's groups exactly so; every probe failed.
+exts.KEY_SHARE.decode = function (data, kind) {
+  if (kind === 'client_hello') return decode_client_shares(data);
   // HelloRetryRequest form: just NamedGroup (2 bytes, no key_exchange)
   if (data.length === 2) {
     let g, off = 0;
@@ -747,12 +830,17 @@ exts.KEY_SHARE.decode = function (data) {
     }
   }
 
-  // ClientHello form: vector<2> of KeyShareEntry
+  return decode_client_shares(data);
+};
+
+// ClientHello form: vector<2> of KeyShareEntry, exactly filling the extension.
+function decode_client_shares(data) {
   let off2 = 0;
   let listBytes;
   [listBytes, off2] = r_u16(data, off2);
 
   let end = off2 + listBytes;
+  if (end !== data.length) throw parseError('key_share: client_shares length does not match the extension');
   let out = [];
 
   while (off2 < end) {
@@ -767,9 +855,10 @@ exts.KEY_SHARE.decode = function (data) {
 
     out.push({ group: g2, key_exchange: ke2 });
   }
+  if (off2 !== end) throw parseError('key_share: an entry overruns client_shares');
 
   return out; // array of entries
-};
+}
 
 /* ------------------------------------ ALPN (16) ----------------------------------- */
 exts.ALPN.encode = function (value) {
@@ -949,7 +1038,7 @@ function build_extensions(list) {
  *     CertificateRequest) → use parse_extension_list().
  * Both share this core so the duplicate/overflow rules apply identically.
  */
-function parse_extension_list(buf) {
+function parse_extension_list(buf, kind) {
   let off = 0;
   let out = [];
   let seen = {};   // RFC 8446 §4.2: "There MUST NOT be more than one extension of the same type"
@@ -986,7 +1075,7 @@ function parse_extension_list(buf) {
 
     let name = ext_name_by_code(t);
     let dec = exts[name] && exts[name].decode;
-    let val = dec ? dec(d) : null;
+    let val = dec ? dec(d, kind) : null;
 
     out.push({ type: t, name: name, data: d, value: val });
   }
@@ -998,7 +1087,7 @@ function parse_extension_list(buf) {
  * Parse a length-prefixed extensions vector that ENDS the enclosing structure.
  * `buf` must START with the 2-byte vector length and contain nothing after it.
  */
-function parse_extensions(buf) {
+function parse_extensions(buf, kind) {
   let off = 0;
   let n;
   [n, off] = r_u16(buf, off);
@@ -1010,7 +1099,7 @@ function parse_extensions(buf) {
   if (end > buf.length) throw parseError('extensions vector length exceeds body');
   if (end < buf.length) throw parseError('trailing data after extensions vector');
 
-  return parse_extension_list(buf.subarray(off, end));
+  return parse_extension_list(buf.subarray(off, end), kind);
 }
 
 
@@ -1158,7 +1247,7 @@ function parse_hello(params) {
   let extensions = [];
   if (body.length > off) {
     let extRaw = body.subarray(off);
-    extensions = parse_extensions(extRaw);
+    extensions = parse_extensions(extRaw, type);
   }
 
   // --- version תמיד ערך יחיד ---
@@ -1262,6 +1351,51 @@ function build_certificate(params) {
   }
 }
 
+/* ------------------------ CompressedCertificate ------------------------ */
+// RFC 8879 §4: algorithm (u16), uncompressed_length (u24),
+// compressed_certificate_message<1..2^24-1> (u24-prefixed).
+/**
+ * CertificateStatus (RFC 6066 §8): status_type ocsp(1), then the DER OCSP
+ * response as an opaque<1..2^24-1>. The body of the TLS 1.2 handshake
+ * message, and of the status_request extension in a TLS 1.3 CertificateEntry.
+ */
+function build_certificate_status(response) {
+  let r = toU8(response);
+  let out = new Uint8Array(4 + r.length);
+  out[0] = 1;
+  out[1] = (r.length >>> 16) & 0xff; out[2] = (r.length >>> 8) & 0xff; out[3] = r.length & 0xff;
+  out.set(r, 4);
+  return out;
+}
+
+/** CertificateStatus → { status_type, response }; decode_error on a bad length. */
+function parse_certificate_status(body) {
+  if (body.length < 4) throw parseError('CertificateStatus: too short');
+  let len = (body[1] << 16) | (body[2] << 8) | body[3];
+  if (len === 0 || 4 + len !== body.length) throw parseError('CertificateStatus: bad length');
+  return { status_type: body[0], response: body.slice(4) };
+}
+
+function build_compressed_certificate(params) {
+  let data = params.compressed;
+  let out = new Uint8Array(2 + 3 + 3 + data.length);
+  let o = 0;
+  o = w_u16(out, o, params.algorithm);
+  out[o++] = (params.uncompressed_length >>> 16) & 0xff; out[o++] = (params.uncompressed_length >>> 8) & 0xff; out[o++] = params.uncompressed_length & 0xff;
+  out[o++] = (data.length >>> 16) & 0xff; out[o++] = (data.length >>> 8) & 0xff; out[o++] = data.length & 0xff;
+  out.set(data, o);
+  return out;
+}
+
+function parse_compressed_certificate(body) {
+  if (body.length < 8) throw parseError('CompressedCertificate: truncated');
+  let algorithm = (body[0] << 8) | body[1];
+  let uncompressed_length = (body[2] << 16) | (body[3] << 8) | body[4];
+  let n = (body[5] << 16) | (body[6] << 8) | body[7];
+  if (n < 1 || 8 + n !== body.length) throw parseError('CompressedCertificate: bad length');
+  return { algorithm: algorithm, uncompressed_length: uncompressed_length, compressed: body.subarray(8) };
+}
+
 function parse_certificate(body) {
   // always returns:
   // {
@@ -1932,6 +2066,7 @@ function parse_hello_verify_request(body) {
 
 /* ================================ Exports ================================= */
 export {
+  HANDSHAKE_MESSAGE_MAX,
   TLS_VERSION,
   DTLS_VERSION,
   is_tls13_wire,
@@ -1967,6 +2102,10 @@ export {
 
   build_certificate,
   parse_certificate,
+  build_compressed_certificate,
+  parse_compressed_certificate,
+  build_certificate_status,
+  parse_certificate_status,
 
   build_certificate_verify,
   parse_certificate_verify,

package/types/crypto.d.ts

@@ -0,0 +1,40 @@
+// lemon-tls/crypto — Key schedule primitives: HKDF, the TLS 1.3 secrets, exporters, cipher-suite tables.
+// Low-level: typed loosely; see the source for each signature.
+
+export declare const DEFAULT_CIPHER_SUITES_TLS12: any;
+export declare const DEFAULT_CIPHER_SUITES_TLS13: any;
+export declare const LABEL_PREFIX_DTLS13: string;
+export declare const LABEL_PREFIX_TLS13: string;
+export declare const TLS_CIPHER_SUITES: any;
+export declare function build_cert_verify_tbs(...args: any[]): any;
+export declare function build_cert_verify_tbs_with_hash(...args: any[]): any;
+export declare function build_hkdf_label(...args: any[]): any;
+export declare function compute_psk_binder(...args: any[]): any;
+export declare function default_cipher_suites(...args: any[]): any;
+export declare function derive_app_traffic_secrets(...args: any[]): any;
+export declare function derive_app_traffic_secrets_with_hash(...args: any[]): any;
+export declare function derive_binder_key(...args: any[]): any;
+export declare function derive_client_early_traffic_secret(...args: any[]): any;
+export declare function derive_exporter_master_secret_with_hash(...args: any[]): any;
+export declare function derive_handshake_traffic_secrets(...args: any[]): any;
+export declare function derive_handshake_traffic_secrets_psk(...args: any[]): any;
+export declare function derive_handshake_traffic_secrets_psk_with_hash(...args: any[]): any;
+export declare function derive_handshake_traffic_secrets_with_hash(...args: any[]): any;
+export declare function derive_psk(...args: any[]): any;
+export declare function derive_resumption_master_secret(...args: any[]): any;
+export declare function derive_resumption_master_secret_with_hash(...args: any[]): any;
+export declare function derive_sn_key(...args: any[]): any;
+export declare function getHashFn(...args: any[]): any;
+export declare function getHashLen(...args: any[]): any;
+export declare function get_handshake_finished(...args: any[]): any;
+export declare function get_handshake_finished_with_hash(...args: any[]): any;
+export declare function hkdf_expand(...args: any[]): any;
+export declare function hkdf_expand_label(...args: any[]): any;
+export declare function hkdf_extract(...args: any[]): any;
+export declare function hmac(...args: any[]): any;
+export declare function is_usable_cipher_suite(...args: any[]): any;
+export declare function suite_matches_version(...args: any[]): any;
+export declare function tls12_exporter(...args: any[]): any;
+export declare function tls12_prf(...args: any[]): any;
+export declare function tls13_exporter(...args: any[]): any;
+export declare function tls_derive_from_master_secret_tls12(...args: any[]): any;

package/types/record.d.ts

@@ -0,0 +1,40 @@
+// lemon-tls/record — The record layer: AEAD keys and nonces, encrypt/decrypt for TLS and DTLS records.
+// Low-level: typed loosely; see the source for each signature.
+
+export declare const CT: any;
+export declare function aesEcbEncrypt(...args: any[]): any;
+export declare function buildAad12(...args: any[]): any;
+export declare function buildDtlsAad12(...args: any[]): any;
+export declare function buildDtlsAck(...args: any[]): any;
+export declare function buildDtlsPlaintext(...args: any[]): any;
+export declare function buildEncryptedDtls12(...args: any[]): any;
+export declare function buildEncryptedDtls13(...args: any[]): any;
+export declare function buildUnifiedHdr(...args: any[]): any;
+export declare function decrypt12(...args: any[]): any;
+export declare function decryptDtls12(...args: any[]): any;
+export declare function decryptEncryptedDtls13(...args: any[]): any;
+export declare function decryptRecord(...args: any[]): any;
+export declare function decryptRecordWithAadView(...args: any[]): any;
+export declare function deriveKeys(...args: any[]): any;
+export declare function deriveKeys12(...args: any[]): any;
+export declare function encrypt12(...args: any[]): any;
+export declare function encryptCompleteRecord12(...args: any[]): any;
+export declare function encryptCompleteRecord13(...args: any[]): any;
+export declare function encryptDtls12(...args: any[]): any;
+export declare function encryptRecord(...args: any[]): any;
+export declare function getAeadAlgo(...args: any[]): any;
+export declare function getChachaNonce12(...args: any[]): any;
+export declare function getNonce(...args: any[]): any;
+export declare function getNonce12(...args: any[]): any;
+export declare function getNonceInto(...args: any[]): any;
+export declare function isUnifiedHdr(...args: any[]): any;
+export declare function maskRecordNumber(...args: any[]): any;
+export declare function parseDtlsAck(...args: any[]): any;
+export declare function parseDtlsDatagram(...args: any[]): any;
+export declare function parseDtlsPlaintext(...args: any[]): any;
+export declare function parseInnerPlaintext(...args: any[]): any;
+export declare function parseUnifiedHdr(...args: any[]): any;
+export declare function reconstructDtlsSeq(...args: any[]): any;
+export declare function resolveReadEpoch(...args: any[]): any;
+export declare function seqToBytes(...args: any[]): any;
+export declare function writeRecord(...args: any[]): any;

package/types/session.d.ts

@@ -0,0 +1,3 @@
+// lemon-tls/session — the TLS state machine on its own, with no socket.
+import { TLSSession } from '../index.js';
+export default TLSSession;

package/types/wire.d.ts

@@ -0,0 +1,62 @@
+// lemon-tls/wire — TLS and DTLS messages: parse_* and build_* for each handshake message, and the codes (TLS_EXT, TLS_ALERT, …).
+// Low-level: typed loosely; see the source for each signature.
+
+export declare const DTLS_VERSION: any;
+export declare const HANDSHAKE_MESSAGE_MAX: number;
+export declare const TLS13_HRR_RANDOM: any;
+export declare const TLS_ALERT: any;
+export declare const TLS_ALERT_LEVEL: any;
+export declare const TLS_CONTENT_TYPE: any;
+export declare const TLS_EXT: any;
+export declare const TLS_MESSAGE_TYPE: any;
+export declare const TLS_VERSION: any;
+export declare function build_certificate(...args: any[]): any;
+export declare function build_certificate_request(...args: any[]): any;
+export declare function build_certificate_status(...args: any[]): any;
+export declare function build_certificate_verify(...args: any[]): any;
+export declare function build_client_key_exchange_ecdhe(...args: any[]): any;
+export declare function build_client_key_exchange_rsa(...args: any[]): any;
+export declare function build_compressed_certificate(...args: any[]): any;
+export declare function build_dtls_handshake(...args: any[]): any;
+export declare function build_extensions(...args: any[]): any;
+export declare function build_hello(...args: any[]): any;
+export declare function build_hello_retry_request(...args: any[]): any;
+export declare function build_hello_verify_request(...args: any[]): any;
+export declare function build_key_update(...args: any[]): any;
+export declare function build_message(...args: any[]): any;
+export declare function build_new_session_ticket(...args: any[]): any;
+export declare function build_new_session_ticket_tls12(...args: any[]): any;
+export declare function build_server_ecdh_params(...args: any[]): any;
+export declare function build_server_key_exchange_ecdhe(...args: any[]): any;
+export declare const exts: any;
+export declare function is_tls12_wire(...args: any[]): any;
+export declare function is_tls13_wire(...args: any[]): any;
+export declare function parse_certificate(...args: any[]): any;
+export declare function parse_certificate_request(...args: any[]): any;
+export declare function parse_certificate_status(...args: any[]): any;
+export declare function parse_certificate_verify(...args: any[]): any;
+export declare function parse_client_key_exchange_ecdhe(...args: any[]): any;
+export declare function parse_client_key_exchange_rsa(...args: any[]): any;
+export declare function parse_compressed_certificate(...args: any[]): any;
+export declare function parse_dtls_handshake(...args: any[]): any;
+export declare function parse_extension_list(...args: any[]): any;
+export declare function parse_extensions(...args: any[]): any;
+export declare function parse_hello(...args: any[]): any;
+export declare function parse_hello_verify_request(...args: any[]): any;
+export declare function parse_key_update(...args: any[]): any;
+export declare function parse_message(...args: any[]): any;
+export declare function parse_new_session_ticket(...args: any[]): any;
+export declare function parse_new_session_ticket_tls12(...args: any[]): any;
+export declare function parse_server_key_exchange(...args: any[]): any;
+export declare function r_bytes(...args: any[]): any;
+export declare function r_u16(...args: any[]): any;
+export declare function r_u24(...args: any[]): any;
+export declare function r_u8(...args: any[]): any;
+export declare function readVec(...args: any[]): any;
+export declare function veclen(...args: any[]): any;
+export declare function w_bytes(...args: any[]): any;
+export declare function w_u16(...args: any[]): any;
+export declare function w_u24(...args: any[]): any;
+export declare function w_u48(...args: any[]): any;
+export declare function w_u64(...args: any[]): any;
+export declare function w_u8(...args: any[]): any;