FAIL: 0.5-RTT: coalesced server data precedes client Finished delivery — error.AuthenticationFailed
FAIL: batched expands under one keying match independent HKDF-Expand-Label — error.TestExpectedEqual
FAIL: batched record layer and finished key match independent HKDF-Expand-Label — error.TestExpectedEqual
FAIL: clientFinished: empty CertificateRequest with no credentials still finishes — error.InvalidVerifyData
FAIL: clientFinished: RFC 8448 §3 emits Finished and upgrades to app keys — error.InvalidVerifyData
FAIL: clientFinished: RFC 8448 §4 resumption_master_secret over the live transcript — error.InvalidVerifyData
FAIL: clientFinished: sends empty Certificate before Finished for CertificateRequest — error.InvalidVerifyData
FAIL: comptime std constants match the runtime backend hash — error.TestExpectedEqual
FAIL: deriveHandshakeKeys: RFC 8448 §3 server handshake key/iv/finished — error.TestExpectedEqual
FAIL: handleRecord: accepts 17 consecutive NewSessionTickets — error.InvalidVerifyData
FAIL: handleRecord: all-zero inner plaintext maps to unexpected_message — error.InvalidVerifyData
FAIL: handleRecord: application data resets both post-handshake flood counters — error.InvalidVerifyData
FAIL: handleRecord: close_notify returns closed — error.InvalidVerifyData
FAIL: handleRecord: drives RFC 8448 §3 handshake to connected — error.AuthenticationFailed
FAIL: handleRecord: empty application data does not reset flood counters — error.InvalidVerifyData
FAIL: handleRecord: fatal alert returns PeerAlert — error.InvalidVerifyData
FAIL: handleRecord: invalid server KeyUpdate request is rejected — error.InvalidVerifyData
FAIL: handleRecord: KeyUpdate flood cap fires despite empty app-data interleaving — error.InvalidVerifyData
FAIL: handleRecord: KeyUpdate flood is rejected — error.InvalidVerifyData
FAIL: handleRecord: KeyUpdate not at record boundary is rejected — error.InvalidVerifyData
FAIL: handleRecord: malformed NewSessionTicket is rejected — error.InvalidVerifyData
FAIL: handleRecord: NewSessionTicket flood is rejected with ticket-specific error — error.InvalidVerifyData
FAIL: handleRecord: NewSessionTicket is surfaced as an event — error.InvalidVerifyData
FAIL: handleRecord: post-handshake unexpected inner content type is rejected — error.InvalidVerifyData
FAIL: handleRecord: self-initiated sendKeyUpdate response surfaces rx only — error.InvalidVerifyData
FAIL: handleRecord: server KeyUpdate(update_not_requested) surfaces key_update rx only — error.InvalidVerifyData
FAIL: handleRecord: server KeyUpdate(update_requested) ratchets rx and responds — error.InvalidVerifyData
FAIL: handleRecord: unacknowledged write blocks further calls — error.InvalidVerifyData
FAIL: handshakeSecretFor matches handshakeSecret over the early secret — error.TestExpectedEqual
FAIL: HkdfSha256.clientHandshakeTrafficSecret: RFC 8448 §3 — error.TestExpectedEqual
FAIL: HkdfSha256.finishedKey: RFC 8448 §3 server — error.TestExpectedEqual
FAIL: HkdfSha256.handshakeSecret: RFC 8448 §3 — error.TestExpectedEqual
FAIL: HkdfSha256.masterSecret: RFC 8448 §3 — error.TestExpectedEqual
FAIL: HkdfSha256.nextTrafficSecret: RFC 8446 §7.2 — error.TestExpectedEqual
FAIL: HkdfSha256: RFC 8448 §3/§4 PSK and resumption secrets — error.TestExpectedEqual
FAIL: HkdfSha256.serverHandshakeTrafficSecret: RFC 8448 §3 — error.TestExpectedEqual
FAIL: HkdfSha256.trafficIv: RFC 8448 §3 server handshake — error.TestExpectedEqual
FAIL: HkdfSha256.trafficKey: RFC 8448 §3 server handshake — error.TestExpectedEqual
FAIL: HkdfSha384: traffic key/iv, finished key, traffic-upd (independent vector) — error.TestExpectedEqual
FAIL: Hmac keyed once gives the same MAC for every reuse and every split — error.TestExpectedEqual
FAIL: Hmac matches std HMAC for every key and message length class — error.TestExpectedEqual
FAIL: OpenSSL s_client interoperates with ztls P-384 server — error.OpenSslClientFailed
FAIL: OpenSSL s_client interoperates with ztls RFC 10024 server groups — error.OpenSslClientFailed
FAIL: OpenSSL s_client interoperates with ztls server — error.OpenSslClientFailed
FAIL: OpenSSL s_client resumes with ztls server-issued ticket — error.OpenSslClientFailed
FAIL: OpenSSL s_client with -cert interoperates with ztls server (required client auth) — error.OpenSslClientFailed
FAIL: OpenSSL s_server interoperates with ztls client — error.AuthenticationFailed
FAIL: OpenSSL s_server interoperates with ztls P-384 client — error.AuthenticationFailed
FAIL: OpenSSL s_server interoperates with ztls RFC 10024 client groups — error.AuthenticationFailed
FAIL: processFlight: buffered path rejects handshake message after server Finished — error.TestUnexpectedError
FAIL: processFlight: reassembles handshake message split across records — error.InvalidVerifyData
FAIL: processFlight: rejects handshake message after server Finished — error.TestUnexpectedError
FAIL: processFlight: RFC 8448 §3 flight split one message per record — error.InvalidVerifyData
FAIL: processFlight: RFC 8448 §3 full server flight to connected — error.InvalidVerifyData
FAIL: processServerHello: RFC 8448 §3 installs server handshake keys — error.TestExpectedEqual
FAIL: ratchetClientKey: RFC 8446 §7.2 next application write key — error.InvalidVerifyData
FAIL: ratchetKtlsTx: client advances only an idle TX epoch — error.InvalidVerifyData
FAIL: receiveKtlsRecord: client finds KeyUpdate after NewSessionTicket — error.InvalidVerifyData
FAIL: receiveKtlsRecord: client processes kernel-decrypted records — error.InvalidVerifyData
FAIL: receiveRecord: RX progresses while a client TX record is pending — error.InvalidVerifyData
FAIL: sendAlert: encrypted close_notify after handshake — error.InvalidVerifyData
FAIL: ztls client resumes with OpenSSL s_server (PSK resumption) — error.AuthenticationFailed
FAIL: ztls client sends 0-RTT early data to OpenSSL s_server — error.AuthenticationFailed
FAIL: ztls client with credentials interoperates with OpenSSL s_server -Verify — error.AuthenticationFailed
TESTS FAILED
