- 6cf9820 Align NIDs vs group IDs in TLS group APIs by David Benjamin · 1 year, 10 months ago
- 2da5ba9 Align on using the "group" over "curve" for ECDH in TLS by David Benjamin · 1 year, 10 months ago
- c215ce7 Use a helper function to implement get_all_foo_names functions. by Adam Langley · 1 year, 11 months ago
- b1c6f45 Add back support for TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 by Adam Langley · 1 year, 11 months ago
- 1b724a6 Align Kyber names with draft-tls-westerbaan-xyber768d00 by David Benjamin · 1 year, 11 months ago
- 2f6409e Support WPA 3.1 "enterprise" mode. by Adam Langley · 2 years ago
- de2d610 Remove TLS_RSA_WITH_NULL_SHA by David Benjamin · 2 years ago
- 8cacbd9 Add functions to allow the mocking of AES hw support for testing. by Bob Beck · 2 years ago
- 44a389a Tidy up some lengths in SSL_SESSION by David Benjamin · 2 years, 4 months ago
- 6e723e5 Convert a few more ints to bools in libssl. by David Benjamin · 2 years ago
- 08b1f38 Use KEM terminology in TLS ECDHE and key_share abstractions by David Benjamin · 2 years, 1 month ago
- a5dcf35 Move the ASN.1-based SSLKeyShare serialization to handoff.cc. by David Benjamin · 2 years, 2 months ago
- dcabfe2 Make OPENSSL_malloc push ERR_R_MALLOC_FAILURE on failure. by Bob Beck · 2 years, 2 months ago
- fc07738 Add stubs for hybrid Kyber768 with X25519 or P-256. by Adam Langley · 2 years, 3 months ago
- a614d46 Add SSL_was_key_usage_invalid. by David Benjamin · 2 years, 4 months ago
- a1dffbf Define CBS/CBB tags as uint32_t with a typedef. by David Benjamin · 2 years, 5 months ago
- 32013e8 Maintain the sequence number as a uint64_t. by David Benjamin · 2 years, 6 months ago
- 46af243 Use Array<uint8_t> in DTLS1_OUTGOING_MESSAGE. by David Benjamin · 2 years, 7 months ago
- 361e3e0 Move the DTLS cookie to SSL_HANDSHAKE. by David Benjamin · 2 years, 7 months ago
- adaa322 Add handshake hints for TLS 1.2 session tickets. by David Benjamin · 2 years, 8 months ago
- 4bd32a8 Convert more of the SSL write path to size_t and Spans. by David Benjamin · 3 years, 11 months ago
- 4a6c8fd Support handshake hints for TLS 1.2 full handshakes. by David Benjamin · 2 years, 8 months ago
- b95c7e5 Fix up book-keeping between the write buffer and pending writes. by David Benjamin · 2 years, 8 months ago
- 451ea3c Add SSL_[CTX_]_set_compliance_policy. by Adam Langley · 2 years, 10 months ago
- 3f180b8 Implement SSL_CTX_set_num_tickets. by David Benjamin · 2 years, 11 months ago
- 493d5cb Try to require C++14. by David Benjamin · 3 years ago
- 2144076 Remove VS 2015 support. by David Benjamin · 3 years ago
- 123eaae Record ClientHelloInner values in msg_callback. by David Benjamin · 3 years, 2 months ago
- 44425dd Fold ssl_decode_client_hello_inner into ssl_client_hello_decrypt. by David Benjamin · 3 years, 2 months ago
- 69030a0 Match OPENSSL_EXPORT in ssl/internal.h friend declarations. by David Benjamin · 3 years, 5 months ago
- 18b6836 Update to draft-ietf-tls-esni-13. by David Benjamin · 3 years, 9 months ago
- d55f450 Avoid re-hashing the transcript multiple times. by David Benjamin · 3 years, 8 months ago
- a75027b Make ssl_parse_extensions a little easier to use. by David Benjamin · 3 years, 8 months ago
- e2cb423 Deduplicate our three ServerHello parsers. by David Benjamin · 3 years, 9 months ago
- 8648c53 Refer to RFCs consistently. by David Benjamin · 3 years, 7 months ago
- ba423c9 Implement ClientHelloOuter handshakes. by David Benjamin · 3 years, 10 months ago
- a10017c Reduce bouncing on the cache lock in ssl_update_cache. by David Benjamin · 3 years, 9 months ago
- 7f85116 Unexport almost all of LHASH. by David Benjamin · 3 years, 9 months ago
- ec552ca Rename t1_lib.cc to extensions.cc. by David Benjamin · 3 years, 10 months ago
- 9cbe737 Validate ECH public names. by David Benjamin · 3 years, 10 months ago
- e9c5d72 Add an option to permute ClientHello extension order. by David Benjamin · 3 years, 10 months ago
- 83a4993 Add most of an ECH client implementation. by David Benjamin · 3 years, 10 months ago
- 24545c5 Add a basic API to make ECHConfigs. by David Benjamin · 3 years, 10 months ago
- c890ae5 Make ECH server APIs take EVP_HPKE_KEY. by David Benjamin · 3 years, 10 months ago
- c3b373b Rename SSL_ECH_SERVER_CONFIG_LIST to SSL_ECH_KEYS. by David Benjamin · 3 years, 10 months ago
- b32aa05 Tidy up the PSK binder logic. by David Benjamin · 3 years, 10 months ago
- c89ce97 Move the TLS vs DTLS header length adjustment into ssl_add_clienthello_tlsext. by David Benjamin · 3 years, 10 months ago
- 5acf9f4 Replace hs->needs_psk_binder with an output parameter. by David Benjamin · 3 years, 10 months ago
- 14e51ad Make add_clienthello callbacks const. by David Benjamin · 3 years, 10 months ago
- 246c556 Compute the ECH GREASE payload outside of the callbacks. by David Benjamin · 3 years, 10 months ago
- 43ab56c Pick up the GREASE ECH config ID from grease_seed. by David Benjamin · 3 years, 10 months ago
- 33e8c78 Initialize grease_seed on construction. by David Benjamin · 3 years, 10 months ago
- 97ede40 Move key_share computation out of ClientHello callbacks. by David Benjamin · 3 years, 10 months ago
- 6c9758f Release some temporaries outside of ClientHello callbacks. by David Benjamin · 3 years, 10 months ago
- 4e93cd4 Move the early_data_{offered,reason} logic out of extension callbacks. by David Benjamin · 3 years, 10 months ago
- 26f186b Implement a handshake hint for certificate compression. by David Benjamin · 3 years, 10 months ago
- 3a036c7 Add SSL_ech_accepted API and ech_is_required alerts. by David Benjamin · 3 years, 10 months ago
- bcef514 Const-correct message creation hooks. by David Benjamin · 3 years, 10 months ago
- b587911 Remove the Channel ID callback. by David Benjamin · 3 years, 10 months ago
- 8acec00 Manage Channel ID handshake state better. by David Benjamin · 3 years, 10 months ago
- 3675eb3 GREASE is now RFC 8701. by David Benjamin · 3 years, 10 months ago
- d89ec68 Remove draft tokbind implementation. by David Benjamin · 3 years, 10 months ago
- 962b375 Move session ID assignment out of ssl_get_new_session. by David Benjamin · 3 years, 11 months ago
- 8349dfc Fix the ech_accept comment. by David Benjamin · 3 years, 11 months ago
- 070a6c3 Export the HPKE implementation. by David Benjamin · 3 years, 11 months ago
- 1d58cd1 Shift the KEM dependency in HPKE up a step. by David Benjamin · 3 years, 11 months ago
- 9b2cdb7 Add SSL_can_release_private_key. by David Benjamin · 4 years ago
- f39c81d Introduce EVP_HPKE_{AEAD,KDF} types. by David Benjamin · 3 years, 11 months ago
- 94a63a5 Implement ECH draft 10 and update HPKE to draft 08. by Steven Valdez · 4 years ago
- b571e77 Add experimental handshake hints API. by David Benjamin · 4 years ago
- 1596137 Export ssl_client_hello_init for fuzzers. by David Benjamin · 4 years ago
- 12a3e7e Check for invalid ALPN inputs in SSL_(CTX_)set_alpn_protos. by David Benjamin · 4 years ago
- 3b8c5ec Rearrange key share and early data logic. by David Benjamin · 4 years ago
- 00e434d Add ECH server (draft-ietf-tls-esni-09). by Daniel McArdle · 4 years, 1 month ago
- 0a6c3fc Rearrange SSLKeyShare::Serialize. by David Benjamin · 4 years ago
- 08b1729 Fix ssl/internal.h sectioning. by David Benjamin · 4 years ago
- 3d8b8c3 Add support for the new QUIC TLS extension codepoint by David Schinazi · 4 years, 2 months ago
- c295935 Send ECH acceptance signal from backend server. by Dan McArdle · 4 years, 5 months ago
- ca058c0 Revert "Add support for the new QUIC TLS extension codepoint" by Adam Langley · 4 years, 3 months ago
- 7ba96a6 Add support for the new QUIC TLS extension codepoint by David Schinazi · 4 years, 3 months ago
- 1920c6f Implement GREASE for ECH (draft-ietf-tls-esni-08). by Dan McArdle · 5 years ago
- 5351c8b Rename the master_key field in SSL_SESSION to secret. by David Benjamin · 4 years, 4 months ago
- 0a6bfa3 Always check the TLS 1.3 downgrade signal. by David Benjamin · 4 years, 4 months ago
- 51607f1 Implement draft-vvv-tls-alps-01. by Steven Valdez · 4 years, 8 months ago
- c4ec14c Switch ssl_parse_extensions to bool and Span. by David Benjamin · 4 years, 6 months ago
- 3743aaf Add SSL_CIPHER_get_protocol_id. by David Benjamin · 4 years, 6 months ago
- 662bfad Fix potential leak in bssl::Array::Shrink. by David Benjamin · 4 years, 6 months ago
- dcd6e44 Support delegated credentials verison 06 by Watson Ladd · 4 years, 8 months ago
- 5fa22ed Avoid relying on SSL_get_session's behavior during the handshake. by David Benjamin · 4 years, 9 months ago
- 53a17f5 Add a |SSL_process_tls13_new_session_ticket|. by Adam Langley · 4 years, 10 months ago
- 8519432 Modify how QUIC 0-RTT go/no-go decision is made. by Nick Harper · 4 years, 10 months ago
- 7c52299 Restrict when 0-RTT will be accepted in QUIC. by Nick Harper · 5 years ago
- 6bfd25c Add is_quic bit to SSL_SESSION by Nick Harper · 5 years ago
- 5298ef9 Configure QUIC secrets inside set_{read,write}_state. by David Benjamin · 5 years ago
- 1e85905 Revise QUIC encryption secret APIs. by David Benjamin · 5 years ago
- b092192 Keep the encryption state and encryption level in sync. by David Benjamin · 5 years ago
- 754d4c9 Fix client handling of 0-RTT rejects with cipher mismatch. by David Benjamin · 5 years ago
- 0c30649 Clean up TLS 1.3 handback logic. by David Benjamin · 5 years ago
- f9cc26f Require handshake flights end at record boundaries. by David Benjamin · 5 years ago
- 82a4b22 Rename TLS-specific functions to tls_foo from ssl3_foo. by David Benjamin · 5 years ago