)]}'
{
  "commit": "19fe7943ce593068bf447f05c2dbed4a324146ef",
  "tree": "bc4655e3f3044323c7a93c378140220309fdca86",
  "parents": [
    "18b6836b2f6340187a7981c82be9be9d092d36d6"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Thu Sep 02 13:07:24 2021 -0400"
  },
  "committer": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Thu Sep 02 22:11:49 2021 +0000"
  },
  "message": "Fix calculation of draft-13 ECH confirmation signal.\n\nApparently both we and Go flipped the parameter order for HKDF-Extract\nrelative to the HKDF spec. (The spec orders the salt before the key.)\nNot sure how that happened.\n\nFound doing interop testing with Stephen Farrell\u0027s implementation.\n\nhttps://pkg.go.dev/golang.org/x/crypto/hkdf#Extract\nhttps://datatracker.ietf.org/doc/html/rfc5869#section-2.2\nhttps://datatracker.ietf.org/doc/html/draft-ietf-tls-esni-13#section-7.2\n\nBug: 275\nChange-Id: I40a7d53b45cb548e93e6a7ae235e98e55dec4a7a\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/49185\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "59aaa49364f2083a54846f2a8b5f36b6560fdb57",
      "old_mode": 33188,
      "old_path": "include/openssl/hkdf.h",
      "new_id": "5b27acc63fdb102c659b5a0d917b2b504887eb3d",
      "new_mode": 33188,
      "new_path": "include/openssl/hkdf.h"
    },
    {
      "type": "modify",
      "old_id": "f5290c38b6611a1525f8fadb30b798d4cf1d0b1e",
      "old_mode": 33188,
      "old_path": "ssl/test/runner/prf.go",
      "new_id": "5731be03313de737acd470b30ec613289472e5b3",
      "new_mode": 33188,
      "new_path": "ssl/test/runner/prf.go"
    },
    {
      "type": "modify",
      "old_id": "69428875b740f5f35121036c6cd28fc78e388b4a",
      "old_mode": 33188,
      "old_path": "ssl/tls13_enc.cc",
      "new_id": "c7b75a6d4ccb5b251aebe6d29aaca1416d72e408",
      "new_mode": 33188,
      "new_path": "ssl/tls13_enc.cc"
    }
  ]
}