NSS, NSPR has been used heavily in multiple products. Software development kit In addition to libraries and APIs, NSS provides security tools required for debugging, diagnostics, certificate and key management, cryptography-module management, and other development tasks. NSS comes with an extensive and growing set of documentation, including introductory material, API references, man pages for command-line tools, and sample code. Programmers can utilize NSS as source and as shared (dynamic) libraries. Every NSS release is backward-compatible with previous releases, allowing NSS users to upgrade to new NSS shared libraries without recompiling or relinking their applications. Interoperability and open standards NSS supports a range of security standards, including the following: TLS 1.0 (RFC 2246), 1.1 (RFC 4346), 1.2 (RFC 5246), and 1.3 (RFC 8446). The Transport Layer Security (TLS) protocol from the IETF supersedes SSL v3.0 while remaining backward-compatible with SSL v3 implementations. SSL 3.0. The Secure Sockets Layer (SSL) protocol allows mutual authentication between a client and server and the establishment of an authenticated and encrypted connection. DTLS 1.0 (RFC 4347) and 1.2 (RFC 6347). DTLS-SRTP (RFC 5764). The following PKCS standards: PKCS #1. RSA standard that governs implementation of public-key cryptography based on the RSA algorithm. PKCS #3. RSA standard that governs implementation of Diffie–Hellman key agreement. PKCS #5. RSA standard that governs password-based cryptography, for example to encrypt private keys for storage. PKCS #7. RSA standard that governs the application of cryptography to data, for example digital signatures and digital envelopes. PKCS #8. RSA standard that governs the storage and encryption of private keys. PKCS #9. RSA standard that governs selected attribute types, including those used with PKCS #7, PKCS #8, and PKCS #10. PKCS #10. RSA standard that governs the syntax for certificate requests. PKCS #11. RSA standard that governs communication with cryptographic tokens (such as hardware accelerators and smart cards) and permits application independence from specific algorithms and implementations. PKCS #12. RSA standard that governs the format used to store or transport private keys, certificates, and other secret material. Cryptographic Message Syntax, used in S/MIME (RFC 2311 and RFC 2633). IETF message specification (based on the popular Internet MIME standard) that provides a consistent way to send and receive signed and encrypted MIME data. X.509 v3. ITU standard that governs the format of certificates used for authentication in public-key cryptography. OCSP (RFC 2560). The Online Certificate Status Protocol (OCSP) governs real-time confirmation of certificate validity. PKIX Certificate