blob: 6ef029a81823927dbf5d0e8e9f163c2244eed81f [file] [log] [blame]
Paul Bakker3c18a832012-01-23 09:44:43 +00001/**
Paul Bakker37ca75d2011-01-06 12:28:03 +00002 * @file
3 * Main page documentation file.
4 */
5
6/**
Paul Bakker4cb87f42015-07-10 14:09:43 +01007 * @mainpage mbed TLS v2.0.0 source code documentation
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +02008 *
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +00009 * This documentation describes the internal structure of mbed TLS. It was
Paul Bakker37ca75d2011-01-06 12:28:03 +000010 * automatically generated from specially formatted comment blocks in
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +000011 * mbed TLS's source code using Doxygen. (See
Paul Bakker37ca75d2011-01-06 12:28:03 +000012 * http://www.stack.nl/~dimitri/doxygen/ for more information on Doxygen)
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020013 *
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +000014 * mbed TLS has a simple setup: it provides the ingredients for an SSL/TLS
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020015 * implementation. These ingredients are listed as modules in the
16 * \ref mainpage_modules "Modules section". This "Modules section" introduces
17 * the high-level module concepts used throughout this documentation.\n
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +000018 * Some examples of mbed TLS usage can be found in the \ref mainpage_examples
Paul Bakker37ca75d2011-01-06 12:28:03 +000019 * "Examples section".
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020020 *
Paul Bakker37ca75d2011-01-06 12:28:03 +000021 * @section mainpage_modules Modules
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020022 *
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +000023 * mbed TLS supports SSLv3 up to TLSv1.2 communication by providing the
Paul Bakker37ca75d2011-01-06 12:28:03 +000024 * following:
25 * - TCP/IP communication functions: listen, connect, accept, read/write.
26 * - SSL/TLS communication functions: init, handshake, read/write.
27 * - X.509 functions: CRT, CRL and key handling
28 * - Random number generation
29 * - Hashing
30 * - Encryption/decryption
31 *
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020032 * Above functions are split up neatly into logical interfaces. These can be
33 * used separately to provide any of the above functions or to mix-and-match
34 * into an SSL server/client solution that utilises a X.509 PKI. Examples of
35 * such implementations are amply provided with the source code.
36 *
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +000037 * Note that mbed TLS does not provide a control channel or (multiple) session
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020038 * handling without additional work from the developer.
Paul Bakker37ca75d2011-01-06 12:28:03 +000039 *
40 * @section mainpage_examples Examples
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020041 *
Paul Bakker37ca75d2011-01-06 12:28:03 +000042 * Example server setup:
43 *
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020044 * \b Prerequisites:
Paul Bakker37ca75d2011-01-06 12:28:03 +000045 * - X.509 certificate and private key
46 * - session handling functions
47 *
48 * \b Setup:
49 * - Load your certificate and your private RSA key (X.509 interface)
50 * - Setup the listening TCP socket (TCP/IP interface)
51 * - Accept incoming client connection (TCP/IP interface)
52 * - Initialise as an SSL-server (SSL/TLS interface)
53 * - Set parameters, e.g. authentication, ciphers, CA-chain, key exchange
54 * - Set callback functions RNG, IO, session handling
55 * - Perform an SSL-handshake (SSL/TLS interface)
56 * - Read/write data (SSL/TLS interface)
57 * - Close and cleanup (all interfaces)
58 *
Paul Bakker37ca75d2011-01-06 12:28:03 +000059 * Example client setup:
60 *
61 * \b Prerequisites:
62 * - X.509 certificate and private key
63 * - X.509 trusted CA certificates
64 *
65 * \b Setup:
66 * - Load the trusted CA certificates (X.509 interface)
67 * - Load your certificate and your private RSA key (X.509 interface)
68 * - Setup a TCP/IP connection (TCP/IP interface)
69 * - Initialise as an SSL-client (SSL/TLS interface)
70 * - Set parameters, e.g. authentication mode, ciphers, CA-chain, session
71 * - Set callback functions RNG, IO
72 * - Perform an SSL-handshake (SSL/TLS interface)
73 * - Verify the server certificate (SSL/TLS interface)
74 * - Write/read data (SSL/TLS interface)
75 * - Close and cleanup (all interfaces)
Paul Bakker37ca75d2011-01-06 12:28:03 +000076 */