1. 6cf9820 Align NIDs vs group IDs in TLS group APIs by David Benjamin · 1 year, 10 months ago
  2. 2da5ba9 Align on using the "group" over "curve" for ECDH in TLS by David Benjamin · 1 year, 10 months ago
  3. c215ce7 Use a helper function to implement get_all_foo_names functions. by Adam Langley · 1 year, 11 months ago
  4. b1c6f45 Add back support for TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 by Adam Langley · 1 year, 11 months ago
  5. 1b724a6 Align Kyber names with draft-tls-westerbaan-xyber768d00 by David Benjamin · 1 year, 11 months ago
  6. 2f6409e Support WPA 3.1 "enterprise" mode. by Adam Langley · 2 years ago
  7. de2d610 Remove TLS_RSA_WITH_NULL_SHA by David Benjamin · 2 years ago
  8. 8cacbd9 Add functions to allow the mocking of AES hw support for testing. by Bob Beck · 2 years ago
  9. 44a389a Tidy up some lengths in SSL_SESSION by David Benjamin · 2 years, 4 months ago
  10. 6e723e5 Convert a few more ints to bools in libssl. by David Benjamin · 2 years ago
  11. 08b1f38 Use KEM terminology in TLS ECDHE and key_share abstractions by David Benjamin · 2 years, 1 month ago
  12. a5dcf35 Move the ASN.1-based SSLKeyShare serialization to handoff.cc. by David Benjamin · 2 years, 2 months ago
  13. dcabfe2 Make OPENSSL_malloc push ERR_R_MALLOC_FAILURE on failure. by Bob Beck · 2 years, 2 months ago
  14. fc07738 Add stubs for hybrid Kyber768 with X25519 or P-256. by Adam Langley · 2 years, 3 months ago
  15. a614d46 Add SSL_was_key_usage_invalid. by David Benjamin · 2 years, 4 months ago
  16. a1dffbf Define CBS/CBB tags as uint32_t with a typedef. by David Benjamin · 2 years, 5 months ago
  17. 32013e8 Maintain the sequence number as a uint64_t. by David Benjamin · 2 years, 6 months ago
  18. 46af243 Use Array<uint8_t> in DTLS1_OUTGOING_MESSAGE. by David Benjamin · 2 years, 7 months ago
  19. 361e3e0 Move the DTLS cookie to SSL_HANDSHAKE. by David Benjamin · 2 years, 7 months ago
  20. adaa322 Add handshake hints for TLS 1.2 session tickets. by David Benjamin · 2 years, 8 months ago
  21. 4bd32a8 Convert more of the SSL write path to size_t and Spans. by David Benjamin · 3 years, 11 months ago
  22. 4a6c8fd Support handshake hints for TLS 1.2 full handshakes. by David Benjamin · 2 years, 8 months ago
  23. b95c7e5 Fix up book-keeping between the write buffer and pending writes. by David Benjamin · 2 years, 8 months ago
  24. 451ea3c Add SSL_[CTX_]_set_compliance_policy. by Adam Langley · 2 years, 10 months ago
  25. 3f180b8 Implement SSL_CTX_set_num_tickets. by David Benjamin · 2 years, 11 months ago
  26. 493d5cb Try to require C++14. by David Benjamin · 3 years ago
  27. 2144076 Remove VS 2015 support. by David Benjamin · 3 years ago
  28. 123eaae Record ClientHelloInner values in msg_callback. by David Benjamin · 3 years, 2 months ago
  29. 44425dd Fold ssl_decode_client_hello_inner into ssl_client_hello_decrypt. by David Benjamin · 3 years, 2 months ago
  30. 69030a0 Match OPENSSL_EXPORT in ssl/internal.h friend declarations. by David Benjamin · 3 years, 5 months ago
  31. 18b6836 Update to draft-ietf-tls-esni-13. by David Benjamin · 3 years, 9 months ago
  32. d55f450 Avoid re-hashing the transcript multiple times. by David Benjamin · 3 years, 8 months ago
  33. a75027b Make ssl_parse_extensions a little easier to use. by David Benjamin · 3 years, 8 months ago
  34. e2cb423 Deduplicate our three ServerHello parsers. by David Benjamin · 3 years, 9 months ago
  35. 8648c53 Refer to RFCs consistently. by David Benjamin · 3 years, 7 months ago
  36. ba423c9 Implement ClientHelloOuter handshakes. by David Benjamin · 3 years, 10 months ago
  37. a10017c Reduce bouncing on the cache lock in ssl_update_cache. by David Benjamin · 3 years, 9 months ago
  38. 7f85116 Unexport almost all of LHASH. by David Benjamin · 3 years, 9 months ago
  39. ec552ca Rename t1_lib.cc to extensions.cc. by David Benjamin · 3 years, 10 months ago
  40. 9cbe737 Validate ECH public names. by David Benjamin · 3 years, 10 months ago
  41. e9c5d72 Add an option to permute ClientHello extension order. by David Benjamin · 3 years, 10 months ago
  42. 83a4993 Add most of an ECH client implementation. by David Benjamin · 3 years, 10 months ago
  43. 24545c5 Add a basic API to make ECHConfigs. by David Benjamin · 3 years, 10 months ago
  44. c890ae5 Make ECH server APIs take EVP_HPKE_KEY. by David Benjamin · 3 years, 10 months ago
  45. c3b373b Rename SSL_ECH_SERVER_CONFIG_LIST to SSL_ECH_KEYS. by David Benjamin · 3 years, 10 months ago
  46. b32aa05 Tidy up the PSK binder logic. by David Benjamin · 3 years, 10 months ago
  47. c89ce97 Move the TLS vs DTLS header length adjustment into ssl_add_clienthello_tlsext. by David Benjamin · 3 years, 10 months ago
  48. 5acf9f4 Replace hs->needs_psk_binder with an output parameter. by David Benjamin · 3 years, 10 months ago
  49. 14e51ad Make add_clienthello callbacks const. by David Benjamin · 3 years, 10 months ago
  50. 246c556 Compute the ECH GREASE payload outside of the callbacks. by David Benjamin · 3 years, 10 months ago
  51. 43ab56c Pick up the GREASE ECH config ID from grease_seed. by David Benjamin · 3 years, 10 months ago
  52. 33e8c78 Initialize grease_seed on construction. by David Benjamin · 3 years, 10 months ago
  53. 97ede40 Move key_share computation out of ClientHello callbacks. by David Benjamin · 3 years, 10 months ago
  54. 6c9758f Release some temporaries outside of ClientHello callbacks. by David Benjamin · 3 years, 10 months ago
  55. 4e93cd4 Move the early_data_{offered,reason} logic out of extension callbacks. by David Benjamin · 3 years, 10 months ago
  56. 26f186b Implement a handshake hint for certificate compression. by David Benjamin · 3 years, 10 months ago
  57. 3a036c7 Add SSL_ech_accepted API and ech_is_required alerts. by David Benjamin · 3 years, 10 months ago
  58. bcef514 Const-correct message creation hooks. by David Benjamin · 3 years, 10 months ago
  59. b587911 Remove the Channel ID callback. by David Benjamin · 3 years, 10 months ago
  60. 8acec00 Manage Channel ID handshake state better. by David Benjamin · 3 years, 10 months ago
  61. 3675eb3 GREASE is now RFC 8701. by David Benjamin · 3 years, 10 months ago
  62. d89ec68 Remove draft tokbind implementation. by David Benjamin · 3 years, 10 months ago
  63. 962b375 Move session ID assignment out of ssl_get_new_session. by David Benjamin · 3 years, 11 months ago
  64. 8349dfc Fix the ech_accept comment. by David Benjamin · 3 years, 11 months ago
  65. 070a6c3 Export the HPKE implementation. by David Benjamin · 3 years, 11 months ago
  66. 1d58cd1 Shift the KEM dependency in HPKE up a step. by David Benjamin · 3 years, 11 months ago
  67. 9b2cdb7 Add SSL_can_release_private_key. by David Benjamin · 4 years ago
  68. f39c81d Introduce EVP_HPKE_{AEAD,KDF} types. by David Benjamin · 3 years, 11 months ago
  69. 94a63a5 Implement ECH draft 10 and update HPKE to draft 08. by Steven Valdez · 4 years ago
  70. b571e77 Add experimental handshake hints API. by David Benjamin · 4 years ago
  71. 1596137 Export ssl_client_hello_init for fuzzers. by David Benjamin · 4 years ago
  72. 12a3e7e Check for invalid ALPN inputs in SSL_(CTX_)set_alpn_protos. by David Benjamin · 4 years ago
  73. 3b8c5ec Rearrange key share and early data logic. by David Benjamin · 4 years ago
  74. 00e434d Add ECH server (draft-ietf-tls-esni-09). by Daniel McArdle · 4 years, 1 month ago
  75. 0a6c3fc Rearrange SSLKeyShare::Serialize. by David Benjamin · 4 years ago
  76. 08b1729 Fix ssl/internal.h sectioning. by David Benjamin · 4 years ago
  77. 3d8b8c3 Add support for the new QUIC TLS extension codepoint by David Schinazi · 4 years, 2 months ago
  78. c295935 Send ECH acceptance signal from backend server. by Dan McArdle · 4 years, 5 months ago
  79. ca058c0 Revert "Add support for the new QUIC TLS extension codepoint" by Adam Langley · 4 years, 3 months ago
  80. 7ba96a6 Add support for the new QUIC TLS extension codepoint by David Schinazi · 4 years, 3 months ago
  81. 1920c6f Implement GREASE for ECH (draft-ietf-tls-esni-08). by Dan McArdle · 5 years ago
  82. 5351c8b Rename the master_key field in SSL_SESSION to secret. by David Benjamin · 4 years, 4 months ago
  83. 0a6bfa3 Always check the TLS 1.3 downgrade signal. by David Benjamin · 4 years, 4 months ago
  84. 51607f1 Implement draft-vvv-tls-alps-01. by Steven Valdez · 4 years, 8 months ago
  85. c4ec14c Switch ssl_parse_extensions to bool and Span. by David Benjamin · 4 years, 6 months ago
  86. 3743aaf Add SSL_CIPHER_get_protocol_id. by David Benjamin · 4 years, 6 months ago
  87. 662bfad Fix potential leak in bssl::Array::Shrink. by David Benjamin · 4 years, 6 months ago
  88. dcd6e44 Support delegated credentials verison 06 by Watson Ladd · 4 years, 8 months ago
  89. 5fa22ed Avoid relying on SSL_get_session's behavior during the handshake. by David Benjamin · 4 years, 9 months ago
  90. 53a17f5 Add a |SSL_process_tls13_new_session_ticket|. by Adam Langley · 4 years, 10 months ago
  91. 8519432 Modify how QUIC 0-RTT go/no-go decision is made. by Nick Harper · 4 years, 10 months ago
  92. 7c52299 Restrict when 0-RTT will be accepted in QUIC. by Nick Harper · 5 years ago
  93. 6bfd25c Add is_quic bit to SSL_SESSION by Nick Harper · 5 years ago
  94. 5298ef9 Configure QUIC secrets inside set_{read,write}_state. by David Benjamin · 5 years ago
  95. 1e85905 Revise QUIC encryption secret APIs. by David Benjamin · 5 years ago
  96. b092192 Keep the encryption state and encryption level in sync. by David Benjamin · 5 years ago
  97. 754d4c9 Fix client handling of 0-RTT rejects with cipher mismatch. by David Benjamin · 5 years ago
  98. 0c30649 Clean up TLS 1.3 handback logic. by David Benjamin · 5 years ago
  99. f9cc26f Require handshake flights end at record boundaries. by David Benjamin · 5 years ago
  100. 82a4b22 Rename TLS-specific functions to tls_foo from ssl3_foo. by David Benjamin · 5 years ago