)]}'
{
  "commit": "ec92ec471cd78b236613151d5cd8a43b260a286c",
  "tree": "bd75a85da43f2b5620808596b9f5e42b15454e8b",
  "parents": [
    "b82f945ebcc9252ea79d2df9e38ee45afae9535c"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Sat Sep 14 21:43:04 2019 -0400"
  },
  "committer": {
    "name": "CQ bot account: commit-bot@chromium.org",
    "email": "commit-bot@chromium.org",
    "time": "Mon Sep 16 16:55:31 2019 +0000"
  },
  "message": "Parse explicit EC curves more strictly.\n\nWycheproof has a series of ECDH tests for whether we reject misspelled\nexplicit versions of named curves in public keys, including the wrong\ncofactor. We pass those tests easily because we reject those in public\nkeys altogether, consistent with RFC 5480.\n\nHowever, we do parse explicit curves for private keys, for compatibility\nwith keys produced by older OpenSSLs with unfortunate defaults. Were\nthat parser enabled for public keys too, we would trip some of these\nWycheproof tests because we ignore the cofactor.\n\nTighten the parser up. If the cofactor is not one, ignore the curve.\nAlso syntax-check the seed, even though we ignore it.\n\nChange-Id: I39936e027a72d2dc5532beb2407575ad8042d4c9\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/37484\nCommit-Queue: Adam Langley \u003cagl@google.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "31988f3f9eec8f787c36c177859222d6133d6b6e",
      "old_mode": 33188,
      "old_path": "crypto/ec_extra/ec_asn1.c",
      "new_id": "9769d014e4e88121d70d994baf9e29aa4f12e609",
      "new_mode": 33188,
      "new_path": "crypto/ec_extra/ec_asn1.c"
    },
    {
      "type": "modify",
      "old_id": "2ac51d392b5acad7be2feec5f25e70ce862270f9",
      "old_mode": 33188,
      "old_path": "crypto/evp/evp_tests.txt",
      "new_id": "0c890fd63c1157e17976911d25ead91fff60e025",
      "new_mode": 33188,
      "new_path": "crypto/evp/evp_tests.txt"
    }
  ]
}