Editing GnuTLS (section)

== Features ==
GnuTLS consists of a library that allows client applications to start secure sessions using the available protocols.
It also provides command-line tools, including an X.509 certificate manager, a test client and server, and random key and password generators.

GnuTLS has the following features:
* [[Transport Layer Security|TLS]] 1.3, TLS 1.2, TLS 1.1, TLS 1.0, and SSL 3.0 protocols
* [[Datagram Transport Layer Security|Datagram TLS]] (DTLS) 1.2, and DTLS 1.0, protocols
* [[TLS-SRP]]: [[Secure remote password protocol]] (SRP) for TLS authentication
* [[TLS-PSK]]: [[Pre-shared key]] (PSK) for TLS authentication
* [[X.509]] and [[OpenPGP]] [[Public key certificate|certificate]]<ref>{{IETF RFC|6091}}</ref> handling
* CPU assisted cryptography and cryptographic accelerator support ([[/dev/crypto]]), [[VIA PadLock]] and [[AES-NI]] instruction sets<ref>[http://www.gnutls.org/ The GnuTLS Transport Layer Security Library]</ref>
* Support for [[smart card]]s and for hardware security modules
* Storage of cryptographic keys in the system's [[Trusted Platform Module]] (TPM)