Protean is a fork of the uTLS library, designed to provide a robust and extensible framework for creating an indistinguishable TLS simulator.
- Cryptographically Sound: Employs an HMQV-based Authenticated Key Exchange (AKE) protocol to ensure secure key exchange with identity protection and weak Perfect Forward Secrecy (wPFS).
- Extensibility: Supports flexible extensions for QUIC, HTTP fingerprint and post-handshake messages simulation, leveraging the TLS connection towards the minic target.
- Protocol Compatibility: Supports TLS 1.3 and TLS 1.2.
- Resistant to Aparecium Attack: Designed to be resilient against known interative active probing.
Check the compatibility tests
Protean actively exposes client's ephemeral private keys during the handshake process by a secure means, allowing the server to authenticate the client and perform a delegated handshake towards the target server. By this mean, the server could acquire any necessary server fingerprints as it required, like performing an MITM attack. The implementation is detailed in the protocol specification