1. 1599fea Remove read locks from PRNG steady state by David Benjamin · 2 years, 3 months ago
  2. a05691d Add an atomics library to crypto/internal.h by David Benjamin · 2 years, 3 months ago
  3. 8a85012 Remove the lock-based atomics fallback by David Benjamin · 2 years, 3 months ago
  4. 5b845de Use Windows Interlocked* APIs for refcounts when C11 isn't available by David Benjamin · 2 years, 3 months ago
  5. dd9ee60 Reject RSA keys under 512 bits by David Benjamin · 2 years ago
  6. 786554f Check public components in freeze_private_key by David Benjamin · 2 years ago
  7. 15a0c9a Remove now redundant RSA test by David Benjamin · 2 years ago
  8. 706846d Add documentation for X509_STORE_CTX_set_verify_cb and friends by Bob Beck · 2 years ago
  9. c1f5d79 Add a multi-threaded mode to bssl speed by David Benjamin · 2 years, 2 months ago
  10. c215ce7 Use a helper function to implement get_all_foo_names functions. by Adam Langley · 2 years ago
  11. b92fcfd Cap the input size to the conf fuzzer by David Benjamin · 2 years ago
  12. e24491a acvptool: implement pipelining. by Adam Langley · 2 years, 5 months ago
  13. bf80254 Update googletest by David Benjamin · 2 years ago
  14. 4137759 Update build tools by David Benjamin · 2 years ago
  15. 4540c3c OpenBSD Support by Bob Beck · 2 years, 1 month ago
  16. c6dd304 Remove unions in BLAKE2b implementation by David Benjamin · 2 years ago
  17. 2aae3f5 Bump the minimum supported MSVC version to VS2019 by David Benjamin · 2 years ago
  18. a972b78 Add APIs to query a list of possible strings for TLS features by David Benjamin · 2 years ago
  19. b1c6f45 Add back support for TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 by Adam Langley · 2 years ago
  20. 722f5d8 Fix PKCS8Test to not rely on RSA-512 by David Benjamin · 2 years ago
  21. 4d30888 Add a more general mechanism for deprecating TLS ciphers by David Benjamin · 2 years ago
  22. 6d55dc3 Add APIs to support RSA keys with large e. by David Benjamin · 2 years ago
  23. 5b32e81 Remove unions in GCM implementation by David Benjamin · 2 years ago
  24. 5e988c4 Rename EC_RAW_POINT to EC_JACOBIAN by David Benjamin · 2 years ago
  25. 2e565ef Clarify that X25519 also supports EVP_PKEY_new_raw_private_key, etc by David Benjamin · 2 years ago
  26. 1b724a6 Align Kyber names with draft-tls-westerbaan-xyber768d00 by David Benjamin · 2 years ago
  27. 85e6453 Remove unions in polyval implementation by David Benjamin · 2 years ago
  28. e7c3f47 Remove H from GCM128_KEY by David Benjamin · 2 years ago
  29. 62f9751 Don't make assumptions about GCM128_CONTEXT layout in aesni-gcm-x86_64.pl by David Benjamin · 2 years ago
  30. a7f83c4 Don't make assumptions about GCM128_CONTEXT layout in aesv8-gcm-armv8.pl by David Benjamin · 2 years ago
  31. 4c8bcf0 Implement the AuthEncap/AuthDecap HPKE modes by David Benjamin · 2 years ago
  32. 051f891 Update references to draft-irtf-cfrg-gcmsiv by David Benjamin · 2 years ago
  33. 77b6f25 Replace interface{} with any by David Benjamin · 2 years ago
  34. 86ada1e Add new APIs for creating RSA keys by David Benjamin · 2 years ago
  35. 048d21c Disable BlindingCacheConcurrency on FreeBSD. by David Benjamin · 2 years ago
  36. b811a6c Add Kyber to runner tests by Adam Langley · 2 years ago
  37. 9939e14c Invalidated cached RSA, DH, and DSA state when changing keys by David Benjamin · 2 years ago
  38. 2f6409e Support WPA 3.1 "enterprise" mode. by Adam Langley · 2 years ago
  39. a02b743 runner: Remove an unnecessary use of AllCurves by David Benjamin · 2 years ago
  40. d206f3d Move the old SPKAC types to their own section by David Benjamin · 2 years ago
  41. 691e45a Remove unimplemented SSL BIO_ctrl values by David Benjamin · 2 years ago
  42. 26669ff Don't copy all of bssl-sys into the CMake build directory by David Benjamin · 2 years ago
  43. b352546 Remove go:build ignore from convert_wycheproof by David Benjamin · 2 years ago
  44. 0c7527b X509_sign, etc., should return the length of the signature on success by David Benjamin · 2 years ago
  45. a0afd6a Add some missing includes by David Benjamin · 2 years ago
  46. d42c4e4 Specify the TLS cipher order more straightforwardly by David Benjamin · 2 years ago
  47. d5f3a9e Squeeze a block at a time when computing the matrix in Kyber by David Benjamin · 2 years ago
  48. 4b6d950 Align TRUST_TOKEN_pst_v1_voprf with draft-21 of VOPRF by Steven Valdez · 2 years ago
  49. ece1f86 Re-add go:build ignore lines by David Benjamin · 2 years ago
  50. 5748eb8 Move convert_wycheproof into its own package by David Benjamin · 2 years ago
  51. edf7662 Allow passing extra flags to BoGo shim by Roland Shoemaker · 2 years ago
  52. de2d610 Remove TLS_RSA_WITH_NULL_SHA by David Benjamin · 2 years ago
  53. b0b1f9d Only rerun bindgen when its dependencies change by David Benjamin · 2 years ago
  54. ac6d558 Add mechanism for deprecated declarations. by Bob Beck · 2 years, 1 month ago
  55. d5ac273 Spell includes in wrapper.h like the rest of the project by David Benjamin · 2 years ago
  56. bcecc7d Replace sort.Sort with sort.Slice by David Benjamin · 2 years ago
  57. a38d600 Fix allowlist regex in bindgen invocation by David Benjamin · 2 years ago
  58. 1a5570b Update docs to recommend a much more convenient CMake invocation by David Benjamin · 2 years ago
  59. 26ead95 Trim some unused XN_FLAG_* values by David Benjamin · 2 years ago
  60. e2d1401 Remove --size_t-is-usize from bindgen call by David Benjamin · 2 years ago
  61. 3e91d37 Clarify in ssl.h documentation not to use the verify callback by David Benjamin · 2 years ago
  62. 58a4094 Move the X509 time functions under "Convenience functions" by David Benjamin · 2 years ago
  63. 437ef4d Remove the X509at_* functions by David Benjamin · 2 years ago
  64. 787713b Organize X509_ATTRIBUTE functions into sections. by David Benjamin · 2 years ago
  65. d9f209b Document a pile of X509 print functions by David Benjamin · 2 years ago
  66. aa31748 Generate 64-bit Curve25519 and P256 code for MSVC by Andres Erbsen · 2 years, 2 months ago
  67. 32b5130 Widen ASN1_mbstring_copy and ASN1_mbstring_ncopy to ossl_ssize_t by David Benjamin · 2 years, 1 month ago
  68. 6776d5c Update test_fips.c with new functions added to FIPS module. by Adam Langley · 2 years ago
  69. a4593ce break-tests.sh: break run-time tests and use two test_fips binaries. by Adam Langley · 2 years, 9 months ago
  70. c466222 Skip some BIO_gets tests if tmpfile fails on Android by David Benjamin · 2 years ago
  71. 6e1e367 Switch to new ACVP test for TLS 1.2 KDF. by Adam Langley · 2 years ago
  72. cee2dbb Default SSL_set_enforce_rsa_key_usage to enabled. by David Benjamin · 2 years ago
  73. fa7afff add extra lints to align with Chromium rust toolchain by Nabil Wadih · 2 years ago
  74. 404d98b Include bindgen generated file via a build time env var, this plays nicer with other build systems like Soong and Gn. by Nabil Wadih · 2 years ago
  75. 480344d Move TLS 1.3 KDF functions into the FIPS module. by Adam Langley · 2 years ago
  76. d3acd45 Move HKDF into the FIPS module. by Adam Langley · 2 years ago
  77. 4ae4fb7 Drop CECPQ2 support. by Adam Langley · 2 years ago
  78. 298e6c2 expose a reset API on hmac which resets the current instance back to its original state keeping the same key as initially used by Nabil Wadih · 2 years, 1 month ago
  79. 5fb362c Remove X509V3_EXT_add_list and X509V3_EXT_cleanup by David Benjamin · 2 years ago
  80. 8abd1b5 Remove support for "old-style" X509V3_EXT_METHODs. by David Benjamin · 2 years ago
  81. abfd5eb Restore some default cases in tasn_dec.c and tasn_enc.c by David Benjamin · 2 years ago
  82. 8cacbd9 Add functions to allow the mocking of AES hw support for testing. by Bob Beck · 2 years ago
  83. 9423510 Fix up do_ext_i2d's error-handling by David Benjamin · 2 years ago
  84. c5f762d Add Trust Token version using standardized hash2curve. by Steven Valdez · 2 years, 1 month ago
  85. 89de6e1 Move RSA (en|de)cryption out of the FIPS module. by Adam Langley · 2 years, 1 month ago
  86. 7b9b9ba leaked_storage in method POLICYQUALINFO *notice_section by wangjiale3 · 2 years, 1 month ago
  87. a438519 Fix miscellaneous size_t truncations by David Benjamin · 2 years, 1 month ago
  88. bf1b792 Remove SSL_CIPHER_get_rfc_name by David Benjamin · 2 years ago
  89. fe7a067 Run `go fmt` in `ssl/test/runner`. by Adam Langley · 2 years ago
  90. 8843d98 If the ret is not null, it needs to be released before return by wangjiale3 · 2 years, 1 month ago
  91. 0c069cb Don't consume the newline in BIO_gets for fds by David Benjamin · 2 years, 1 month ago
  92. 9a56503 RESOURCE_LEAK in method STACK_OF(TRUST_TOKEN) *voprf_unblind before return 0 by wangjiale3 · 2 years, 1 month ago
  93. 44a389a Tidy up some lengths in SSL_SESSION by David Benjamin · 2 years, 4 months ago
  94. e8b168d Fix size_t truncations in bio_mem.c by David Benjamin · 2 years, 1 month ago
  95. 6e723e5 Convert a few more ints to bools in libssl. by David Benjamin · 2 years, 1 month ago
  96. 502d24c Add various tests for memory BIOs. by David Benjamin · 2 years, 1 month ago
  97. d897027 Update X25519+Kyber ID. by Adam Langley · 2 years, 1 month ago
  98. bc49415 Add comment about regenerating peg files. by Adam Langley · 2 years, 1 month ago
  99. 58472cc Adding a C implementation of Kyber. by Sophie Schmieg · 2 years, 1 month ago
  100. 28226f5 Fix handling of critical X.509 policy constraints by David Benjamin · 2 years, 1 month ago