feat: tls 1.3 compliant implementation

[viztea]

QUIC embeds the TLS 1.3 handshake protocol for improved security and fewer round-trips

Resources

RFCs:

• Using TLS to Secure QUIC
• TLS 1.3

Implementations:

• pjtr/agent15
• rmarx/quicker - note: this implementation uses Draft 20 of the QUIC protocol

TODO:

• Handshake Protocol
  • Client Hello
  • Server Hello
• Extensions
  • (mandatory) supported_versions
  • (mandatory) cookie
  • (mandatory) signture_algorithms
  • (mandatory) signature_algorithms_cert
  • (mandatory) supported_groups
  • (mandatory) key_share
  • (mandatory) sever_name
  • application_layer_protocol_negotiation
  • certificate_authorities
  • psk_key_exchange_modes
• Cryptography
  • Cipher Suites
    • (mandatory) TLS_AES_128_GCM_SHA256
      • jvm
      • linux
    • (should) TLS_AES_256_GCM_SHA384
      • jvm
      • linux
    • (should) TLS_CHACHA20_POLY1305_SHA256
      • jvm
      • linux
  • Signature Algorithms
    • rsa_pkcs1_sha256 (must for certificates)
      • jvm
      • linux
    • rsa_pss_rsae_sha256 (must for certificates and CertificateVerify)
      • jvm
      • linux
    • ecdsa_secp256r1_sha256
      • jvm
      • linux
  • Key Exchange Algorithms
    • (mandatory)secp256r1
      • jvm
      • linux
    • (should) x25519
      • jvm
      • linux

In order to actually implement TLS we need to have a cryptography library. The following could be used

• JVM - could use javax crypto or bouncycastle
• Linux X64 - could possibly use BoringSSL or WolfSSL

However, I'm currently working on porting Bouncycastle to Kotlin for Multiplatform cryptography.

Note: this todo list is a work in progress, I still need to fully research what I need for a working implementation