434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
|
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
|
-
-
-
+
+
+
-
-
-
-
-
+
+
+
+
-
-
+
+
+
-
+
-
-
-
+
+
+
+
-
-
-
-
+
+
+
+
-
-
-
+
+
+
-
-
-
+
+
+
|
<dt><strong>session_cache_mode</strong> <em>mode</em></dt>
<dd>Server cache mode (client, server, or both).</dd>
</dl>
</blockquote>
<dt><a name="tls::ciphers"><strong>tls::ciphers</strong>
<em>?protocol? ?verbose? ?supported?</em></a></dt>
<dd>Without any args, returns a list of all ciphers. With
<em>protocol</em>, only the ciphers supported for that protocol
are returned where <em>protocol</em> must be one of <b>ssl2, ssl3,
<dd>Without any args, returns a list of all ciphers. With <em>protocol</em>,
only the ciphers supported for that protocol are returned. See
<b>tls::protocols</b> command for the supported protocols. If
tls1, tls1.1, tls1.2,</b> or <b>tls1.3</b>. If <em>verbose</em> is
specified as true then a verbose, human readable list is returned
with additional information on the cipher. If <em>supported</em>
is specified as true, then only the ciphers supported for protocol
will be listed.</dd>
<dt><a name="tls::digest"><strong>tls::digest</strong> <em>digest ?-bin|-hex?
[-file filename | -command cmdName | -chan channelId | ?-data? data]</em></a></dt>
<dt><a name="tls::digest"><strong>tls::digest</strong> <b>-digest</b>
<em>name ?-bin|-hex? [-file filename | -command cmdName |
-chan channelId | -data data]</em></a></dt>
<dd>Calculate the message digest for data using <em>digest</em> hash
function. Returns value as a hex string (default) or as a binary value
with <b>-bin</b> option. Argument <em>digest</em> can be any OpenSSL
with <b>-bin</b> or <b>-binary</b> option. Digest can be any OpenSSL
supported hash function including: <b>md4</b>, <b>md5</b>, <b>sha1</b>,
<b>sha256</b>, <b>sha512</b>, <b>sha3-256</b>, etc. See
<b>tls::digests</b> command for a full list.
<br>
Using the <b>-data</b> option will immediately return the message
digest for <em>data</em> in the specified format.
<br>
Using the <b>-file</b> option will open file <em>filename</em>, read
the file data, close the file, and return the message digest in the
specified format. This uses the TCL APIs, so VFS files are supported.
Using the <b>-file</b> or <b>-filename</b> option will open file
<em>filename</em>, read the file data, close the file, and return the
message digest in the specified format. This uses the TCL APIs, so VFS
files are supported.
<br>
Using the <b>-chan</b> option, a stacked channel is created for
<em>channelId</em> and data read from the channel is used to calculate
a message digest with the result returned with the last read operation
before EOF. Channel is automatically set to binary mode.
Using the <b>-chan</b> or <b>-channel</b> option, a stacked channel is
created for <em>channelId</em> and data read from the channel is used
to calculate a message digest with the result returned with the last
read operation before EOF. Channel is automatically set to binary mode.
<br>
Using the <b>-command</b> option, a new command <em>cmdName</em> is
created and returned. To add data to the hash function, call
"<em>cmdName</em> <b>update</b> <em>data</em>", where data is
the data to add. When done, call "<em>cmdName</em> <b>finalize</b>"
to return the message digest.
</dd>
<dt><a name="tls::cmac"><strong>tls::cmac</strong> <em>digest</em>
<strong>-cipher</strong> <em>name</em> ?-bin|-hex? [-file filename |
-command cmdName | -chan channelId | ?-data? data]</em></a></dt>
<dt><a name="tls::cmac"><strong>tls::cmac</strong> <b>-cipher</b> <em>name</em>
<b>-key</b> <em>key ?-bin|-hex? [-file filename | -command cmdName |
-chan channelId | -data data]</em></a></dt>
<dd>Calculate the Cipher-based Message Authentication Code (CMAC). Same arguments
as <b>tls::digest</b> with additional option <b>-cipher</b> to specify the
cipher to use and for certain ciphers, <b>-key</b> to specify the key.</dd>
<dt><a name="tls::hmac"><strong>tls::hmac</strong> <em>digest</em>
<strong>-key</strong> <em>key</em> ?-bin|-hex? [-file filename |
-command cmdName | -chan channelId | ?-data? data]</em></a></dt>
<dt><a name="tls::hmac"><strong>tls::hmac</strong> <b>-digest</b> <em>name</em>
<b>-key</b> <em>key ?-bin|-hex? [-file filename | -command cmdName |
-chan channelId | -data data]</em></a></dt>
<dd>Calculate the Hashed Message Authentication Code (HMAC). Same arguments
as <b>tls::digest</b> with additional option <b>-key</b> to specify the
key to use. To salt a password, append or prepend the salt
data to the password. </dd>
<dt><a name="tls::md4"><strong>tls::md4</strong> <em>data</em></a></dt>
<dd>Returns the MD4 message-digest for <em>data</em> as a hex string.</dd>
|