)]}'
{
  "commit": "04018c592935abe5ebf3e619eac206de45d9635f",
  "tree": "efd696a6d3e7bb3f596ab5bd7361d65b25d62053",
  "parents": [
    "9c1f8b4ac761706ffadcc01e07357ffb2a9332a0"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Sat Mar 31 18:13:55 2018 -0400"
  },
  "committer": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Mon Apr 02 18:22:58 2018 +0000"
  },
  "message": "Remove EC_LOOSE_SCALAR.\n\nECDSA converts digests to scalars by taking the leftmost n bits, where n\nis the number of bits in the group order. This does not necessarily\nproduce a fully-reduced scalar.\n\nMontgomery multiplication actually tolerates this slightly looser bound,\nso we did not bother with the conditional subtraction. However, this\nsubtraction is free compared to the multiplication, inversion, and base\npoint multiplication. Simplify things by keeping it fully-reduced.\n\nChange-Id: If49dffefccc21510f40418dc52ea4da7e3ff198f\nReviewed-on: https://boringssl-review.googlesource.com/26968\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d29ea34a0f5a28d283857578f7f45eab38bc70ea",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/bn/div.c",
      "new_id": "1950561ef99ab21083fe3ec23be1f81c469aa2da",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/bn/div.c"
    },
    {
      "type": "modify",
      "old_id": "8c121a0749328c8b03d598e004ab2d444440f5ce",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/bn/internal.h",
      "new_id": "668d8ddf7e5343693678e9c097f180f5a7dfd975",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/bn/internal.h"
    },
    {
      "type": "modify",
      "old_id": "2f73718af90d1657735591e19e935e5f9d688fb8",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/ecdsa/ecdsa.c",
      "new_id": "85490fad48337e0a72a8d604e0b362ebbf57b019",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/ecdsa/ecdsa.c"
    }
  ]
}
