# 概述

BabaSSL是一个现代的密码学和通信安全协议的基础库。BabaSSL诞生于阿里巴巴集团和蚂蚁集团内部。

# 特性

BabaSSL提供如下主要的功能特性：
  * 支持[RFC 8998](https://datatracker.ietf.org/doc/html/rfc8998)，即TLS 1.3 + 国密单证书
  * 支持GB/T 38636-2020 TLCP标准，即双证书国密通信协议
  * 支持[QUIC](https://datatracker.ietf.org/doc/html/rfc9000) API
  * 支持Delegated Credentials功能，基于[draft-ietf-tls-subcerts-10](https://www.ietf.org/archive/id/draft-ietf-tls-subcerts-10.txt)
  * ……

# 文档

BabaSSL的相关文档组织在[Github Wiki](https://github.com/BabaSSL/BabaSSL/wiki)和[BabaSSL官方网站](https://babassl.github.io/)上。

# 报告安全缺陷

我们使用蚂蚁集团的威胁搜集系统，请访问如下地址进行安全缺陷的报告：

 * https://security.alipay.com/

注意：对于非安全相关的Bug，请使用Github Issues进行提交。

---

# Overview

BabaSSL is a modern cryptographic and secure protocol library developed by the amazing people in Alibaba Digital Economy.

# Feature

BabaSSL provides the following major features:
  * Support [RFC 8998](https://datatracker.ietf.org/doc/html/rfc8998), Chinese SM cipher suites in TLS 1.3 protocol
  * Support NTLS (formal GM dual-certificate protocol) handshake processing, according to GB/T 38636-2020 TLCP
  * [QUIC](https://datatracker.ietf.org/doc/html/rfc9000) API support
  * Support delegated credentials, according to [draft-ietf-tls-subcerts-10](https://www.ietf.org/archive/id/draft-ietf-tls-subcerts-10.txt)
  * ...

# Documentation

Docs of BabaSSL are organized at two major places, [Github Wiki](https://github.com/BabaSSL/BabaSSL/wiki) and [BabaSSL Official Website](https://babassl.github.io/).

# Reporting Security Bugs

We use the following website for security bugs reporting:

  * https://security.alipay.com/

Note: for other non-security related bugs, please use Github Issues instead.