package srtp

Import Path
	github.com/pion/srtp/v3 (on go.dev)

Dependency Relation
	imports 21 packages, and imported by one package

Involved Source Files

	    context.go
	    crypto.go
	    errors.go
	    key_derivation.go
	    keying.go
	    option.go
	    protection_profile.go
	    protection_profile_with_args.go
	    session.go
	    session_srtcp.go
	    session_srtp.go
	    srtcp.go
	  d srtp.go
		Package srtp implements Secure Real-time Transport Protocol

	    srtp_cipher.go
	    srtp_cipher_aead_aes_gcm.go
	    srtp_cipher_aes_cm_hmac_sha1.go
	    stream.go
	    stream_srtcp.go
	    stream_srtp.go
	    util.go
Package-Level Type Names (total 13)

	/* sort by: alphabet | popularity */
	 type Config (struct)
		Config is used to configure a session.
		You can provide either a KeyingMaterialExporter to export keys
		or directly pass the keys themselves.
		After a Config is passed to a session it must not be modified.

		Fields (total 7)
			AcceptStreamTimeout time.Time
			BufferFactory func(packetType packetio.BufferPacketType, ssrc uint32) io.ReadWriteCloser
			Keys SessionKeys
			LocalOptions []ContextOption
				List of local/remote context options.
				ReplayProtection is enabled on remote context by default.
				Default replay protection window size is 64.

			LoggerFactory logging.LoggerFactory
			Profile ProtectionProfile
			RemoteOptions []ContextOption
				List of local/remote context options.
				ReplayProtection is enabled on remote context by default.
				Default replay protection window size is 64.

		Methods (only one)
			(*Config) ExtractSessionKeysFromDTLS(exporter KeyingMaterialExporter, isClient bool) error
				ExtractSessionKeysFromDTLS allows setting the Config SessionKeys by
				extracting them from DTLS. This behavior is defined in RFC5764:
				https://tools.ietf.org/html/rfc5764

		As Inputs Of (at least 2)
			func NewSessionSRTCP(conn net.Conn, config *Config) (*SessionSRTCP, error)
			func NewSessionSRTP(conn net.Conn, config *Config) (*SessionSRTP, error)

	 type Context (struct)
		Context represents a SRTP cryptographic context.
		Context can only be used for one-way operations.
		it must either used ONLY for encryption or ONLY for decryption.
		Note that Context does not provide any concurrency protection:
		access to a Context from multiple goroutines requires external
		synchronization.

		Methods (total 11)
			(*Context) AddCipherForMKI(mki, masterKey, masterSalt []byte) error
				AddCipherForMKI adds new MKI with associated masker key and salt.
				Context must be created with MasterKeyIndicator option
				to enable MKI support. MKI must be unique and have the same length as the one used for creating Context.
				Operation is not thread-safe, you need to provide synchronization with decrypting packets.

			(*Context) DecryptRTCP(dst, encrypted []byte, header *rtcp.Header) ([]byte, error)
				DecryptRTCP decrypts a buffer that contains a RTCP packet.

			(*Context) DecryptRTP(dst, encrypted []byte, header *rtp.Header) ([]byte, error)
				DecryptRTP decrypts a RTP packet with an encrypted payload.

			(*Context) EncryptRTCP(dst, decrypted []byte, header *rtcp.Header) ([]byte, error)
				EncryptRTCP Encrypts a RTCP packet.

			(*Context) EncryptRTP(dst []byte, plaintext []byte, header *rtp.Header) ([]byte, error)
				EncryptRTP marshals and encrypts an RTP packet, writing to the dst buffer provided.
				If the dst buffer does not have the capacity to hold `len(plaintext) + 10` bytes,
				a new one will be allocated and returned.
				If a rtp.Header is provided, it will be Unmarshaled using the plaintext.

			(*Context) Index(ssrc uint32) (uint32, bool)
				Index returns SRTCP index value of specified SSRC.

			(*Context) ROC(ssrc uint32) (uint32, bool)
				ROC returns SRTP rollover counter value of specified SSRC.

			(*Context) RemoveMKI(mki []byte) error
				RemoveMKI removes one of MKIs. You cannot remove last MKI and one used for encrypting RTP/RTCP packets.
				Operation is not thread-safe, you need to provide synchronization with decrypting packets.

			(*Context) SetIndex(ssrc uint32, index uint32)
				SetIndex sets SRTCP index value of specified SSRC.

			(*Context) SetROC(ssrc uint32, roc uint32)
				SetROC sets SRTP rollover counter value of specified SSRC.

			(*Context) SetSendMKI(mki []byte) error
				SetSendMKI switches MKI and cipher used for encrypting RTP/RTCP packets.
				Operation is not thread-safe, you need to provide synchronization with encrypting packets.

		As Outputs Of (at least one exported)
			func CreateContext(masterKey, masterSalt []byte, profile ProtectionProfile, opts ...ContextOption) (c *Context, err error)

	 type ContextOption (func)
		ContextOption represents option of Context using the functional options pattern.

		As Outputs Of (at least 13)
			func MasterKeyIndicator(mki []byte) ContextOption
			func RolloverCounterCarryingTransform(mode RCCMode, rocTransmitRate uint16) ContextOption
			func SRTCPEncryption() ContextOption
			func SRTCPNoEncryption() ContextOption
			func SRTCPNoReplayProtection() ContextOption
			func SRTCPReplayDetectorFactory(fn func() replaydetector.ReplayDetector) ContextOption
			func SRTCPReplayProtection(windowSize uint) ContextOption
			func SRTPAuthenticationTagLength(authTagRTPLen int) ContextOption
			func SRTPEncryption() ContextOption
			func SRTPNoEncryption() ContextOption
			func SRTPNoReplayProtection() ContextOption
			func SRTPReplayDetectorFactory(fn func() replaydetector.ReplayDetector) ContextOption
			func SRTPReplayProtection(windowSize uint) ContextOption
		As Inputs Of (at least one exported)
			func CreateContext(masterKey, masterSalt []byte, profile ProtectionProfile, opts ...ContextOption) (c *Context, err error)

	 type KeyingMaterialExporter (interface)
		KeyingMaterialExporter allows package SRTP to extract keying material.

		Methods (only one)
			( KeyingMaterialExporter) ExportKeyingMaterial(label string, context []byte, length int) ([]byte, error)
		Implemented By (at least 4)
			*github.com/pion/dtls/v2.State
			*github.com/pion/dtls/v3.State
			*github.com/quic-go/quic-go/internal/handshake.ConnectionState
			*crypto/tls.ConnectionState
		As Inputs Of (at least one exported)
			func (*Config).ExtractSessionKeysFromDTLS(exporter KeyingMaterialExporter, isClient bool) error

	 type ProtectionProfile uint16 (basic type)
		ProtectionProfile specifies Cipher and AuthTag details, similar to TLS cipher suite.

		Methods (total 7)
			( ProtectionProfile) AEADAuthTagLen() (int, error)
				AEADAuthTagLen returns length of authentication tag in bytes for AEAD protection profiles.
				For AES ones it returns zero.

			( ProtectionProfile) AuthKeyLen() (int, error)
				AuthKeyLen returns length of authentication key in bytes for AES protection profiles.
				For AEAD ones it returns zero.

			( ProtectionProfile) AuthTagRTCPLen() (int, error)
				AuthTagRTCPLen returns length of RTCP authentication tag in bytes for AES protection profiles.
				
					For AEAD ones it returns zero.

			( ProtectionProfile) AuthTagRTPLen() (int, error)
				AuthTagRTPLen returns length of RTP authentication tag in bytes for AES protection profiles.
				For AEAD ones it returns zero.

			( ProtectionProfile) KeyLen() (int, error)
				KeyLen returns length of encryption key in bytes.
				For all profiles except NullHmacSha1_32 and NullHmacSha1_80 is
				also the length of the session key.

			( ProtectionProfile) SaltLen() (int, error)
				SaltLen returns length of salt key in bytes.
				For all profiles except NullHmacSha1_32 and NullHmacSha1_80
				is also the length of the session salt.

			( ProtectionProfile) String() string
				String returns the name of the protection profile.

		Implements (at least 2)
			 ProtectionProfile : expvar.Var
			 ProtectionProfile : fmt.Stringer
		As Inputs Of (at least one exported)
			func CreateContext(masterKey, masterSalt []byte, profile ProtectionProfile, opts ...ContextOption) (c *Context, err error)
		As Types Of (total 8)
			const ProtectionProfileAeadAes128Gcm
			const ProtectionProfileAeadAes256Gcm
			const ProtectionProfileAes128CmHmacSha1_32
			const ProtectionProfileAes128CmHmacSha1_80
			const ProtectionProfileAes256CmHmacSha1_32
			const ProtectionProfileAes256CmHmacSha1_80
			const ProtectionProfileNullHmacSha1_32
			const ProtectionProfileNullHmacSha1_80

	 type RCCMode int (basic type)
		RCCMode is the mode of Roll-over Counter Carrying Transform from RFC 4771.

		As Inputs Of (at least one exported)
			func RolloverCounterCarryingTransform(mode RCCMode, rocTransmitRate uint16) ContextOption
		As Types Of (total 4)
			const RCCMode1
			const RCCMode2
			const RCCMode3
			const RCCModeNone

	 type ReadStreamSRTCP (struct)
		ReadStreamSRTCP handles decryption for a single RTCP SSRC.

		Methods (total 5)
			(*ReadStreamSRTCP) Close() error
				Close removes the ReadStream from the session and cleans up any associated state.

			(*ReadStreamSRTCP) GetSSRC() uint32
				GetSSRC returns the SSRC we are demuxing for.

			(*ReadStreamSRTCP) Read(buf []byte) (int, error)
				Read reads and decrypts full RTCP packet from the nextConn.

			(*ReadStreamSRTCP) ReadRTCP(buf []byte) (int, *rtcp.Header, error)
				ReadRTCP reads and decrypts full RTCP packet and its header from the nextConn.

			(*ReadStreamSRTCP) SetReadDeadline(t time.Time) error
				SetReadDeadline sets the deadline for the Read operation.
				Setting to zero means no deadline.

		Implements (at least 5)
			*ReadStreamSRTCP : github.com/pion/datachannel.ReadDeadliner
			*ReadStreamSRTCP : github.com/prometheus/common/expfmt.Closer
			*ReadStreamSRTCP : io.Closer
			*ReadStreamSRTCP : io.ReadCloser
			*ReadStreamSRTCP : io.Reader
		As Outputs Of (at least 2)
			func (*SessionSRTCP).AcceptStream() (*ReadStreamSRTCP, uint32, error)
			func (*SessionSRTCP).OpenReadStream(ssrc uint32) (*ReadStreamSRTCP, error)

	 type ReadStreamSRTP (struct)
		ReadStreamSRTP handles decryption for a single RTP SSRC.

		Methods (total 5)
			(*ReadStreamSRTP) Close() error
				Close removes the ReadStream from the session and cleans up any associated state.

			(*ReadStreamSRTP) GetSSRC() uint32
				GetSSRC returns the SSRC we are demuxing for.

			(*ReadStreamSRTP) Read(buf []byte) (int, error)
				Read reads and decrypts full RTP packet from the nextConn.

			(*ReadStreamSRTP) ReadRTP(buf []byte) (int, *rtp.Header, error)
				ReadRTP reads and decrypts full RTP packet and its header from the nextConn.

			(*ReadStreamSRTP) SetReadDeadline(t time.Time) error
				SetReadDeadline sets the deadline for the Read operation.
				Setting to zero means no deadline.

		Implements (at least 5)
			*ReadStreamSRTP : github.com/pion/datachannel.ReadDeadliner
			*ReadStreamSRTP : github.com/prometheus/common/expfmt.Closer
			*ReadStreamSRTP : io.Closer
			*ReadStreamSRTP : io.ReadCloser
			*ReadStreamSRTP : io.Reader
		As Outputs Of (at least 2)
			func (*SessionSRTP).AcceptStream() (*ReadStreamSRTP, uint32, error)
			func (*SessionSRTP).OpenReadStream(ssrc uint32) (*ReadStreamSRTP, error)

	 type SessionKeys (struct)
		SessionKeys bundles the keys required to setup an SRTP session.

		Fields (total 4)
			LocalMasterKey []byte
			LocalMasterSalt []byte
			RemoteMasterKey []byte
			RemoteMasterSalt []byte

	 type SessionSRTCP (struct)
		SessionSRTCP implements io.ReadWriteCloser and provides a bi-directional SRTCP session
		SRTCP itself does not have a design like this, but it is common in most applications
		for local/remote to each have their own keying material. This provides those patterns
		instead of making everyone re-implement.

		Methods (total 4)
			(*SessionSRTCP) AcceptStream() (*ReadStreamSRTCP, uint32, error)
				AcceptStream returns a stream to handle RTCP for a single SSRC.

			(*SessionSRTCP) Close() error
				Close ends the session.

			(*SessionSRTCP) OpenReadStream(ssrc uint32) (*ReadStreamSRTCP, error)
				OpenReadStream opens a read stream for the given SSRC, it can be used
				if you want a certain SSRC, but don't want to wait for AcceptStream.

			(*SessionSRTCP) OpenWriteStream() (*WriteStreamSRTCP, error)
				OpenWriteStream returns the global write stream for the Session.

		Implements (at least 2)
			*SessionSRTCP : github.com/prometheus/common/expfmt.Closer
			*SessionSRTCP : io.Closer
		As Outputs Of (at least one exported)
			func NewSessionSRTCP(conn net.Conn, config *Config) (*SessionSRTCP, error)

	 type SessionSRTP (struct)
		SessionSRTP implements io.ReadWriteCloser and provides a bi-directional SRTP session
		SRTP itself does not have a design like this, but it is common in most applications
		for local/remote to each have their own keying material. This provides those patterns
		instead of making everyone re-implement.

		Methods (total 4)
			(*SessionSRTP) AcceptStream() (*ReadStreamSRTP, uint32, error)
				AcceptStream returns a stream to handle RTCP for a single SSRC.

			(*SessionSRTP) Close() error
				Close ends the session.

			(*SessionSRTP) OpenReadStream(ssrc uint32) (*ReadStreamSRTP, error)
				OpenReadStream opens a read stream for the given SSRC, it can be used
				if you want a certain SSRC, but don't want to wait for AcceptStream.

			(*SessionSRTP) OpenWriteStream() (*WriteStreamSRTP, error)
				OpenWriteStream returns the global write stream for the Session.

		Implements (at least 2)
			*SessionSRTP : github.com/prometheus/common/expfmt.Closer
			*SessionSRTP : io.Closer
		As Outputs Of (at least one exported)
			func NewSessionSRTP(conn net.Conn, config *Config) (*SessionSRTP, error)

	 type WriteStreamSRTCP (struct)
		WriteStreamSRTCP is stream for a single Session that is used to encrypt RTCP.

		Methods (total 3)
			(*WriteStreamSRTCP) SetWriteDeadline(t time.Time) error
				SetWriteDeadline sets the deadline for the Write operation.
				Setting to zero means no deadline.

			(*WriteStreamSRTCP) Write(b []byte) (int, error)
				Write encrypts and writes a full RTCP packets to the nextConn.

			(*WriteStreamSRTCP) WriteRTCP(header *rtcp.Header, payload []byte) (int, error)
				WriteRTCP encrypts a RTCP header and its payload to the nextConn.

		Implements (at least 4)
			*WriteStreamSRTCP : github.com/pion/datachannel.WriteDeadliner
			*WriteStreamSRTCP : github.com/miekg/dns.Writer
			*WriteStreamSRTCP : internal/bisect.Writer
			*WriteStreamSRTCP : io.Writer
		As Outputs Of (at least one exported)
			func (*SessionSRTCP).OpenWriteStream() (*WriteStreamSRTCP, error)

	 type WriteStreamSRTP (struct)
		WriteStreamSRTP is stream for a single Session that is used to encrypt RTP.

		Methods (total 3)
			(*WriteStreamSRTP) SetWriteDeadline(t time.Time) error
				SetWriteDeadline sets the deadline for the Write operation.
				Setting to zero means no deadline.

			(*WriteStreamSRTP) Write(b []byte) (int, error)
				Write encrypts and writes a full RTP packets to the nextConn.

			(*WriteStreamSRTP) WriteRTP(header *rtp.Header, payload []byte) (int, error)
				WriteRTP encrypts a RTP packet and writes to the connection.

		Implements (at least 5)
			*WriteStreamSRTP : github.com/pion/datachannel.WriteDeadliner
			*WriteStreamSRTP : github.com/pion/webrtc/v4.TrackLocalWriter
			*WriteStreamSRTP : github.com/miekg/dns.Writer
			*WriteStreamSRTP : internal/bisect.Writer
			*WriteStreamSRTP : io.Writer
		As Outputs Of (at least one exported)
			func (*SessionSRTP).OpenWriteStream() (*WriteStreamSRTP, error)


Package-Level Functions (total 16)

	 func CreateContext(masterKey, masterSalt []byte, profile ProtectionProfile, opts ...ContextOption) (c *Context, err error)
		CreateContext creates a new SRTP Context.
		
		CreateContext receives variable number of ContextOption-s.
		Passing multiple options which set the same parameter let the last one valid.
		Following example create SRTP Context with replay protection with window size of 256.
		
			decCtx, err := srtp.CreateContext(key, salt, profile, srtp.SRTPReplayProtection(256))

	 func MasterKeyIndicator(mki []byte) ContextOption
		MasterKeyIndicator sets RTP/RTCP MKI for the initial master key. Array passed as an argument will be
		copied as-is to encrypted SRTP/SRTCP packets, so it must be of proper length and in Big Endian format.
		All MKIs added later using Context.AddCipherForMKI must have the same length as the one used here.

	 func NewSessionSRTCP(conn net.Conn, config *Config) (*SessionSRTCP, error)
		NewSessionSRTCP creates a SRTCP session using conn as the underlying transport.

	 func NewSessionSRTP(conn net.Conn, config *Config) (*SessionSRTP, error)
		NewSessionSRTP creates a SRTP session using conn as the underlying transport.

	 func RolloverCounterCarryingTransform(mode RCCMode, rocTransmitRate uint16) ContextOption
		RolloverCounterCarryingTransform enables Rollover Counter Carrying Transform from RFC 4771.
		ROC value is sent in Authentication Tag of SRTP packets every rocTransmitRate packets.
		
		RFC 4771 defines 3 RCC modes. pion/srtp supports mode RCCm2 for AES-CM and NULL profiles,
		and mode RCCm3 for AES-GCM (AEAD) profiles.
		
		From RFC 4771: "[For modes RCCm1 and and RCCm3] the length of the MAC is shorter than the length
		of the authentication tag. To achieve the same (or less) MAC forgery success probability on all
		packets when using RCCm1 or RCCm2, as with the default integrity transform in RFC 3711,
		the tag-length must be set to 14 octets, which means that the length of MAC_tr is 10 octets."
		
		Protection profiles ProtectionProfile*CmHmacSha1_32 uses 4-byte SRTP auth tag, so in RCCm2 mode
		SRTP packets with ROC will not be integrity protected.
		
		You can increase the length of the authentication tag using SRTPAuthenticationTagLength option
		to mitigate this issue.

	 func SRTCPEncryption() ContextOption
		SRTCPEncryption enables SRTCP encryption.

	 func SRTCPNoEncryption() ContextOption
		SRTCPNoEncryption disables SRTCP encryption.
		This option is useful when you want to use NullCipher for SRTCP and keep authentication only.
		It simplifies debugging and testing, but it is not recommended for production use.

	 func SRTCPNoReplayProtection() ContextOption
		SRTCPNoReplayProtection disables SRTCP replay protection.

	 func SRTCPReplayDetectorFactory(fn func() replaydetector.ReplayDetector) ContextOption
		SRTCPReplayDetectorFactory sets custom SRTCP replay detector.

	 func SRTCPReplayProtection(windowSize uint) ContextOption
		SRTCPReplayProtection sets SRTCP replay protection window size.

	 func SRTPAuthenticationTagLength(authTagRTPLen int) ContextOption
		SRTPAuthenticationTagLength sets length of SRTP authentication tag in bytes for AES-CM protection
		profiles. Decreasing the length of the authentication tag is not recommended for production use,
		as it decreases integrity protection.
		
		Zero value means that there is no authentication tag, what may be useful for debugging and testing.
		
		This option is ignored for AEAD profiles.

	 func SRTPEncryption() ContextOption
		SRTPEncryption enables SRTP encryption.

	 func SRTPNoEncryption() ContextOption
		SRTPNoEncryption disables SRTP encryption.
		This option is useful when you want to use NullCipher for SRTP and keep authentication only.
		It simplifies debugging and testing, but it is not recommended for production use.
		
		Note: you can also use SRTPAuthenticationTagLength(0) to disable authentication tag too.

	 func SRTPNoReplayProtection() ContextOption
		SRTPNoReplayProtection disables SRTP replay protection.

	 func SRTPReplayDetectorFactory(fn func() replaydetector.ReplayDetector) ContextOption
		SRTPReplayDetectorFactory sets custom SRTP replay detector.

	 func SRTPReplayProtection(windowSize uint) ContextOption
		SRTPReplayProtection sets SRTP replay protection window size.


Package-Level Variables (total 2)

	  var ErrFailedToVerifyAuthTag error
		ErrFailedToVerifyAuthTag is returned when decryption fails due to invalid authentication tag.

	  var ErrMKINotFound error
		ErrMKINotFound is returned when decryption fails due to unknown MKI value in packet.


Package-Level Constants (total 12)

	const ProtectionProfileAeadAes128Gcm ProtectionProfile = 7
		Supported protection profiles
		See https://www.iana.org/assignments/srtp-protection/srtp-protection.xhtml
		
		AES128_CM_HMAC_SHA1_80 and AES128_CM_HMAC_SHA1_32 are valid SRTP profiles,
		but they do not have an DTLS-SRTP Protection Profiles ID assigned
		in RFC 5764. They were in earlier draft of this RFC:
		https://datatracker.ietf.org/doc/html/draft-ietf-avt-dtls-srtp-03#section-4.1.2
		Their IDs are now marked as reserved in the IANA registry. Despite this Chrome supports them:
		https://chromium.googlesource.com/chromium/deps/libsrtp/+/84122798bb16927b1e676bd4f938a6e48e5bf2fe/srtp/include/srtp.h#694
		
		Null profiles disable encryption, they are used for debugging and testing.
		They are not recommended for production use.
		Use of them is equivalent to using ProtectionProfileAes128CmHmacSha1_NN
		profile with SRTPNoEncryption and SRTCPNoEncryption options.

	const ProtectionProfileAeadAes256Gcm ProtectionProfile = 8
		Supported protection profiles
		See https://www.iana.org/assignments/srtp-protection/srtp-protection.xhtml
		
		AES128_CM_HMAC_SHA1_80 and AES128_CM_HMAC_SHA1_32 are valid SRTP profiles,
		but they do not have an DTLS-SRTP Protection Profiles ID assigned
		in RFC 5764. They were in earlier draft of this RFC:
		https://datatracker.ietf.org/doc/html/draft-ietf-avt-dtls-srtp-03#section-4.1.2
		Their IDs are now marked as reserved in the IANA registry. Despite this Chrome supports them:
		https://chromium.googlesource.com/chromium/deps/libsrtp/+/84122798bb16927b1e676bd4f938a6e48e5bf2fe/srtp/include/srtp.h#694
		
		Null profiles disable encryption, they are used for debugging and testing.
		They are not recommended for production use.
		Use of them is equivalent to using ProtectionProfileAes128CmHmacSha1_NN
		profile with SRTPNoEncryption and SRTCPNoEncryption options.

	const ProtectionProfileAes128CmHmacSha1_32 ProtectionProfile = 2
		Supported protection profiles
		See https://www.iana.org/assignments/srtp-protection/srtp-protection.xhtml
		
		AES128_CM_HMAC_SHA1_80 and AES128_CM_HMAC_SHA1_32 are valid SRTP profiles,
		but they do not have an DTLS-SRTP Protection Profiles ID assigned
		in RFC 5764. They were in earlier draft of this RFC:
		https://datatracker.ietf.org/doc/html/draft-ietf-avt-dtls-srtp-03#section-4.1.2
		Their IDs are now marked as reserved in the IANA registry. Despite this Chrome supports them:
		https://chromium.googlesource.com/chromium/deps/libsrtp/+/84122798bb16927b1e676bd4f938a6e48e5bf2fe/srtp/include/srtp.h#694
		
		Null profiles disable encryption, they are used for debugging and testing.
		They are not recommended for production use.
		Use of them is equivalent to using ProtectionProfileAes128CmHmacSha1_NN
		profile with SRTPNoEncryption and SRTCPNoEncryption options.

	const ProtectionProfileAes128CmHmacSha1_80 ProtectionProfile = 1
		Supported protection profiles
		See https://www.iana.org/assignments/srtp-protection/srtp-protection.xhtml
		
		AES128_CM_HMAC_SHA1_80 and AES128_CM_HMAC_SHA1_32 are valid SRTP profiles,
		but they do not have an DTLS-SRTP Protection Profiles ID assigned
		in RFC 5764. They were in earlier draft of this RFC:
		https://datatracker.ietf.org/doc/html/draft-ietf-avt-dtls-srtp-03#section-4.1.2
		Their IDs are now marked as reserved in the IANA registry. Despite this Chrome supports them:
		https://chromium.googlesource.com/chromium/deps/libsrtp/+/84122798bb16927b1e676bd4f938a6e48e5bf2fe/srtp/include/srtp.h#694
		
		Null profiles disable encryption, they are used for debugging and testing.
		They are not recommended for production use.
		Use of them is equivalent to using ProtectionProfileAes128CmHmacSha1_NN
		profile with SRTPNoEncryption and SRTCPNoEncryption options.

	const ProtectionProfileAes256CmHmacSha1_32 ProtectionProfile = 4
		Supported protection profiles
		See https://www.iana.org/assignments/srtp-protection/srtp-protection.xhtml
		
		AES128_CM_HMAC_SHA1_80 and AES128_CM_HMAC_SHA1_32 are valid SRTP profiles,
		but they do not have an DTLS-SRTP Protection Profiles ID assigned
		in RFC 5764. They were in earlier draft of this RFC:
		https://datatracker.ietf.org/doc/html/draft-ietf-avt-dtls-srtp-03#section-4.1.2
		Their IDs are now marked as reserved in the IANA registry. Despite this Chrome supports them:
		https://chromium.googlesource.com/chromium/deps/libsrtp/+/84122798bb16927b1e676bd4f938a6e48e5bf2fe/srtp/include/srtp.h#694
		
		Null profiles disable encryption, they are used for debugging and testing.
		They are not recommended for production use.
		Use of them is equivalent to using ProtectionProfileAes128CmHmacSha1_NN
		profile with SRTPNoEncryption and SRTCPNoEncryption options.

	const ProtectionProfileAes256CmHmacSha1_80 ProtectionProfile = 3
		Supported protection profiles
		See https://www.iana.org/assignments/srtp-protection/srtp-protection.xhtml
		
		AES128_CM_HMAC_SHA1_80 and AES128_CM_HMAC_SHA1_32 are valid SRTP profiles,
		but they do not have an DTLS-SRTP Protection Profiles ID assigned
		in RFC 5764. They were in earlier draft of this RFC:
		https://datatracker.ietf.org/doc/html/draft-ietf-avt-dtls-srtp-03#section-4.1.2
		Their IDs are now marked as reserved in the IANA registry. Despite this Chrome supports them:
		https://chromium.googlesource.com/chromium/deps/libsrtp/+/84122798bb16927b1e676bd4f938a6e48e5bf2fe/srtp/include/srtp.h#694
		
		Null profiles disable encryption, they are used for debugging and testing.
		They are not recommended for production use.
		Use of them is equivalent to using ProtectionProfileAes128CmHmacSha1_NN
		profile with SRTPNoEncryption and SRTCPNoEncryption options.

	const ProtectionProfileNullHmacSha1_32 ProtectionProfile = 6
		Supported protection profiles
		See https://www.iana.org/assignments/srtp-protection/srtp-protection.xhtml
		
		AES128_CM_HMAC_SHA1_80 and AES128_CM_HMAC_SHA1_32 are valid SRTP profiles,
		but they do not have an DTLS-SRTP Protection Profiles ID assigned
		in RFC 5764. They were in earlier draft of this RFC:
		https://datatracker.ietf.org/doc/html/draft-ietf-avt-dtls-srtp-03#section-4.1.2
		Their IDs are now marked as reserved in the IANA registry. Despite this Chrome supports them:
		https://chromium.googlesource.com/chromium/deps/libsrtp/+/84122798bb16927b1e676bd4f938a6e48e5bf2fe/srtp/include/srtp.h#694
		
		Null profiles disable encryption, they are used for debugging and testing.
		They are not recommended for production use.
		Use of them is equivalent to using ProtectionProfileAes128CmHmacSha1_NN
		profile with SRTPNoEncryption and SRTCPNoEncryption options.

	const ProtectionProfileNullHmacSha1_80 ProtectionProfile = 5
		Supported protection profiles
		See https://www.iana.org/assignments/srtp-protection/srtp-protection.xhtml
		
		AES128_CM_HMAC_SHA1_80 and AES128_CM_HMAC_SHA1_32 are valid SRTP profiles,
		but they do not have an DTLS-SRTP Protection Profiles ID assigned
		in RFC 5764. They were in earlier draft of this RFC:
		https://datatracker.ietf.org/doc/html/draft-ietf-avt-dtls-srtp-03#section-4.1.2
		Their IDs are now marked as reserved in the IANA registry. Despite this Chrome supports them:
		https://chromium.googlesource.com/chromium/deps/libsrtp/+/84122798bb16927b1e676bd4f938a6e48e5bf2fe/srtp/include/srtp.h#694
		
		Null profiles disable encryption, they are used for debugging and testing.
		They are not recommended for production use.
		Use of them is equivalent to using ProtectionProfileAes128CmHmacSha1_NN
		profile with SRTPNoEncryption and SRTCPNoEncryption options.

	const RCCMode1 RCCMode = 1
		RCCMode1 is RCCm1 mode from RFC 4771. In this mode ROC and truncated auth tag is sent every R-th packet,
		and no auth tag in other ones. This mode is not supported by pion/srtp.

	const RCCMode2 RCCMode = 2
		RCCMode2 is RCCm2 mode from RFC 4771. In this mode ROC and truncated auth tag is sent every R-th packet,
		and full auth tag in other ones. This mode is supported for AES-CM and NULL profiles only.

	const RCCMode3 RCCMode = 3
		RCCMode3 is RCCm3 mode from RFC 4771. In this mode ROC is sent every R-th packet (without truncated auth tag),
		and no auth tag in other ones. This mode is supported for AES-GCM profiles only.

	const RCCModeNone RCCMode = 0
		RCCModeNone is the default mode.

The pages are generated with Golds v0.8.2. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
PR and bug reports are welcome and can be submitted to the issue list.
Please follow @zigo_101 (reachable from the left QR code) to get the latest news of Golds.