linqigang888 / babassl

A Brisk and Better Assured Cryptographic Toolkit

概述

BabaSSL是一个现代的密码学和通信安全协议的基础库。BabaSSL诞生于阿里巴巴集团和蚂蚁集团内部。

特性

BabaSSL提供如下主要的功能特性：

• 支持RFC 8998，即TLS 1.3 + 国密单证书
• 支持GB/T 38636-2020 TLCP标准，即双证书国密通信协议
• 支持QUIC API
• 支持Delegated Credentials功能，基于draft-ietf-tls-subcerts-10
• ……

文档

BabaSSL的相关文档组织在Github Wiki和BabaSSL官方网站上。

报告安全缺陷

我们使用蚂蚁集团的威胁搜集系统，请访问如下地址进行安全缺陷的报告：

• https://security.alipay.com/

注意：对于非安全相关的Bug，请使用Github Issues进行提交。

---

Overview

BabaSSL is a modern cryptographic and secure protocol library developed by the amazing people in Alibaba Digital Economy.

Feature

BabaSSL provides the following major features:

• Support RFC 8998, Chinese SM cipher suites in TLS 1.3 protocol
• Support NTLS (formal GM dual-certificate protocol) handshake processing, according to GB/T 38636-2020 TLCP
• QUIC API support
• Support delegated credentials, according to draft-ietf-tls-subcerts-10
• ...

Documentation

Docs of BabaSSL are organized at two major places, Github Wiki and BabaSSL Official Website.

Reporting Security Bugs

We use the following website for security bugs reporting:

• https://security.alipay.com/

Note: for other non-security related bugs, please use Github Issues instead.