Introduction
In 2016, the landscape of transport protocol security witnessed the emergence of a project that would become a game changer: Rustls. Over the past decade, Rustls has not only matured but also redefined the standards of Transport Layer Security (TLS). Let's look back on ten years of innovation, improvements, and community engagement.
Promising Beginnings
On May 2, 2016, Joe Birr-Pixton initiated the project with a first commit. Less than four months later, Rustls reached a functional first version, 0.1.0, on August 27, 2016. From the start, Rustls benefited from significant external contributions, notably from @briansmith and @djc. In 2018, the project incorporated QUIC support thanks to @djc and @Ralith, marking a major external feature contribution.
Growth and External Contributions
Between 2018 and 2020, the project pursued a third-party audit, funded by CNCF and conducted by Cure53, to enhance its robustness. In 2021, Rustls reached another milestone with its first paid contributions, notably through ISRG's Prossimo initiative, accelerating the development of essential features.
Releases Up to 0.23: Stability and Features
From version 0.1.0 to 0.23, Rustls experienced a series of progressive updates, consolidating its functionality and strengthening its API. The 0.23 version, released on February 29, 2024, introduced notable enhancements such as FIPS-certified cryptography, certificate compression, and post-quantum cryptography.
The Present: Toward Version 0.24
The upcoming 0.24 version promises a wealth of improvements. Among them, external buffering optimizes bulk data processing performance, increased support for async-friendly usage, and a "split mode" for more flexible CryptoProvider management.
External Buffering Performance
Initially, all data passed through std::io traits, leading to unnecessary copies and complex error handling. Version 0.24 introduces the TlsInputBuffer trait, moving buffering outside Rustls, thus improving control over buffer sizes and avoiding copies.
Future Perspectives
With features like no_std environment support and post-quantum key exchange, Rustls continues to position itself as an innovation leader in TLS. The future may see the emergence of new features focused on performance and security, supported by an engaged community.
Conclusion
Rustls has established itself as a key player in the TLS security domain. Its ability to innovate and adapt to the changing needs of the industry makes it a project worth watching closely. Let's discuss your project in 15 minutes.