Symmetric Ciphers

	AES128-SHA
	AES256-SHA
	AES128-SHA256
	AES256-SHA256

Asymmetric Ciphers

	RSA 512/1024/2048/4096 bit encryption/decryption.
	RSA signing/verification

Digests

	SHA1
	MD5
	SHA256/384/512
	HMAC-SHA1
	HMAC-MD5
	HMAC-SHA256

RNG

	/dev/urandom on Linux.
	Microsoft's crypto interfaces on Win32.
	Alternatively a custom implementation seeded by the private key and other variables.

SSL Protocol Features

	TLSv1.0/1.1/1.2.
	Session resumption on both client and server (number of sessions is run- time configurable).
	Session renegotiation (instantiated via an API call on either the client or the server).
	Integrity checking on packet sizes, handshake types.
	Two threading models: a SSL_CTX instance can support many SSL connections in a single thread - and multiple threads can have one SSL_CTX context each (the default); and a SSL_CTX  instance can have an individual thread for each SSL connection (via a configuration change allowing mutexing).
	Partial openssl API compatibility via a wrapper (compile-time configurable).

Certificate/Key Support

	X.509 certificate support. No v3 extensions are supported.
	Self-signed v1 certificates can be generated given a private key.
	PEM private keys can be decrypted with AES128 or AES256 ciphers.
	Server peer verification (can choose between automatic verification, or verification after the handshake).
	Client peer verification on the server (handshake is terminated immediately on failure).
	Certificate chaining - the number of certificates is compile- time configurable individually on both client/server.
	CA certificate store size is compile-time configurable.
	PKCS#8, PKCS#12 key/certificates supported (PBE-SHA1-RC4-128 encryption only, with a single key).

Supported Platforms

	Linux (32/64 bit)
	Win32 (VC7.0/VC8.0/VC9.0)
	Cygwin

Supported Language Bindings (with sample code for each)

	C
	C#
	VB.NET
	Java
	Perl
	Lua

Web Server Specifications

	Small footprint.
	CGI 1.1 capable (optional protection using a uid/gid change).
	Basic authentication (via a .htpasswd file).
	Can allow/deny SSL access on particular directories (via a .htaccess file).
	Directories/files can be denied access (via a .htaccess file).
	Lua and Lua Pages are now supported.