- 20c93ab Remove OPENSSL_IA32_SSE2 checks in x86 perlasm by David Benjamin · 1 year, 2 months ago
- 01ea563 Move NEON dispatch in bn_mul_mont to C by David Benjamin · 1 year, 2 months ago
- 15a76eb Rewrite bn_big_endian_to_words to avoid a GCC false positive by David Benjamin · 1 year, 2 months ago
- 4a8653a bn: Move ia32cap_P references from x86_64-mont.pl to C. by Brian Smith · 1 year, 3 months ago
- 97dc336 Fix SHA ABI tests by David Benjamin · 1 year, 2 months ago
- 12316ab sha: Move Armv7 dispatching to C (reland) by David Benjamin · 1 year, 4 months ago
- 7cb8df5 bn: Move x86-64 argument-based dispatching of bn_mul_mont to C. by Brian Smith · 1 year, 3 months ago
- 77ee4e4 aes gcm: Remove Atom Silvermont optimizations. by Brian Smith · 1 year, 4 months ago
- a4c3f8d Document assumptions made by bssl-crypto's unboxed HMAC_CTX by David Benjamin · 1 year, 2 months ago
- f42be90 Avoid unions in CCM by David Benjamin · 1 year, 2 months ago
- 3c88240 Simplify Montgomery RR precomputation. by Brian Smith · 1 year, 5 months ago
- b628f87 Clear some false positives in constant-time validation by David Benjamin · 1 year, 2 months ago
- 9206d7c Fix segfault if CRYPTO_set_thread_local fails and calls rand_thread_state_free. by Sean McGrail · 1 year, 5 months ago
- af3c895 Revert "sha: Move Armv7 dispatching to C" by Bob Beck · 1 year, 2 months ago
- 3599db2 sha: Add SSSE3 check to SHAEXT SHA-256 implementation. by Brian Smith · 1 year, 4 months ago
- 62f43f5 sha: Move Armv7 dispatching to C by David Benjamin · 1 year, 4 months ago
- 547221f Assume the Arm assembler can handle ADR by David Benjamin · 1 year, 4 months ago
- f2a3aae sha: Remove check for SSSE3 for AVX variants. by Brian Smith · 1 year, 4 months ago
- 10c24cb sha: Move AArch64/X86-64 dispatching to C. by Brian Smith · 1 year, 4 months ago
- c41de81 Add missing include by David Benjamin · 1 year, 4 months ago
- 59906b3 Consistently call CRYPTO_free_ex_data first by David Benjamin · 1 year, 4 months ago
- 90004f0 Use relative links in markdown files by David Benjamin · 1 year, 4 months ago
- 4b9dd97 Add a value barrier in p224_select_point by David Benjamin · 1 year, 4 months ago
- 70ca6bc Add CRYPTO_{addc,subc}_* functions to crypto/internal.h by David Benjamin · 1 year, 4 months ago
- 251ee0b Implement the old FIPS 186-2 PRF by David Benjamin · 1 year, 4 months ago
- ad57528 Simplify AES-GCM counter increment by David Benjamin · 1 year, 5 months ago
- a126322 Remove unnecessary length check before OPENSSL_memcpy by David Benjamin · 1 year, 5 months ago
- 478b28a Fix delocate build rules with make by David Benjamin · 1 year, 5 months ago
- a96e737 Skip ForkDetect tests on iOS by David Benjamin · 1 year, 5 months ago
- c4b1738 Add missing include for waitpid by David Benjamin · 1 year, 5 months ago
- bfa8369 Add support for fork detection via pthread_atfork() by Bob Beck · 1 year, 10 months ago
- 8313e13 Replace remaining references to __ARM_ARCH__ with __ARM_ARCH by David Benjamin · 1 year, 6 months ago
- 8d0a83d Consistently use SIZE_MAX over (size_t)-1 by David Benjamin · 1 year, 6 months ago
- 216db67 Also add OPENSSL_calloc by David Benjamin · 1 year, 6 months ago
- dd68e4b Add OPENSSL_zalloc by David Benjamin · 1 year, 6 months ago
- 20c9406 Add table-independent x86+adx asm for P-256 by Andres Erbsen · 1 year, 6 months ago
- 340fe15 CMake doesn't have an error function by David Benjamin · 1 year, 6 months ago
- db1e987 Return the correct value in EVP_CIPHER_CTX_iv_length after EVP_CTRL_AEAD_SET_IVLEN by Alex Gaynor · 1 year, 7 months ago
- 0043172 Add BN_bn2lebinpad and BN_lebin2bn by David Benjamin · 1 year, 7 months ago
- 9f4cad2 Fix typo in .size directives for aesni_gcm_encrypt by David Benjamin · 1 year, 7 months ago
- cb583e7 Default to q = (p-1)/2 for DH keygen by David Benjamin · 1 year, 8 months ago
- 7ce5d41 Select SHA-256 vs SHA-512 explicitly in perlasm by David Benjamin · 1 year, 8 months ago
- 39a7507 Hash-to-curve is now RFC 9380 by David Benjamin · 1 year, 8 months ago
- 87c00d5 Align DH keygen with NIST's formulation when q is available by David Benjamin · 1 year, 8 months ago
- d85444e Consistently reject large p and large q in DH by David Benjamin · 1 year, 8 months ago
- 7ae2b91 Split TLS 1.0 and 1.2 self checks. by Adam Langley · 1 year, 8 months ago
- 04487c4 MD5 and SHA-1 are not actually approved in the TLS KDF. by Adam Langley · 1 year, 8 months ago
- 6738d47 Restore OPENSSL_RAND_TRUSTY by David Benjamin · 1 year, 8 months ago
- 23d6e4c Replace BIO_snprintf with snprintf within the library by David Benjamin · 1 year, 9 months ago
- 2200060 Temporarily disable the Trusty CRYPTO_sysrand implementation by David Benjamin · 1 year, 9 months ago
- d43fef7 Fix aarch64 build with GCC by David Benjamin · 1 year, 9 months ago
- 70be012 Use constant curve-specific groups whenever possible by David Benjamin · 2 years, 1 month ago
- 2b8a057 Entropy changes for trusty and windows. by Bob Beck · 1 year, 9 months ago
- a36ac0a Use std::make_unique when possible by David Benjamin · 1 year, 9 months ago
- 417069f Make built-in curves static. by David Benjamin · 2 years, 1 month ago
- 0f222e6 Clear some size_t truncations by David Benjamin · 1 year, 9 months ago
- 9fc1c33 Add Intel Indirect Branch Tracking support. by Bob Beck · 1 year, 10 months ago
- 80dcb67 Embed the generator into EC_GROUP by David Benjamin · 2 years, 1 month ago
- 7dc4a03 Fuchsia has getentropy() via musl - use it and drop the custom file by Bob Beck · 1 year, 9 months ago
- 72540c1 Embed BN_MONT_CTX into EC_GROUP. by David Benjamin · 2 years, 1 month ago
- 53f09ad Move to preferring getentropy() for system provided entropy by Bob Beck · 1 year, 9 months ago
- 8e8f87e Don't store a redundant copy of the EC_GROUP field modulus by David Benjamin · 2 years, 1 month ago
- 5eab868 Remove field_minus_order from EC_GROUP. by David Benjamin · 2 years, 1 month ago
- 6f13380 Don't store a redundant copy of the order in EC_GROUP by David Benjamin · 2 years, 1 month ago
- a369247 Fix the Windows fuzzer build by David Benjamin · 1 year, 9 months ago
- a905bbb Consistently include BTI markers in every assembly file by David Benjamin · 1 year, 10 months ago
- e79649b Use ProcessPrng instead of RtlGenRandom on Windows by Alex Gough · 1 year, 10 months ago
- 6a7d8b5 Remove p > q normalization in RSA keys by David Benjamin · 1 year, 10 months ago
- 02d2715 Implement BN_MONT_CTX_new_consttime with Montgomery reduction by David Benjamin · 3 years, 3 months ago
- 98e1227 Make bn_mod_lshift_consttime faster by David Benjamin · 1 year, 10 months ago
- 04c3d40 Remove CRYPTO_MUTEX from public headers by David Benjamin · 1 year, 10 months ago
- d4553e0 Make RSA opaque by David Benjamin · 1 year, 10 months ago
- b034104 Make BN_mod_inverse() deal with repeated arguments by Theo Buehler · 1 year, 10 months ago
- e106b53 Remove BN_DEC_FMT2 and test the others by David Benjamin · 1 year, 10 months ago
- 55b069d Add a value barrier when checking for point doubling. by David Benjamin · 1 year, 10 months ago
- 5fcd47d Add prefetch to aes_hw_ctr32_encrypt_blocks by Ilya Tokar · 1 year, 10 months ago
- 47b2fef Update hkdf.c to avoid potentially vulnerable code pattern. by Nicky Mouha · 1 year, 10 months ago
- dd52194 Fix RAND_enable_fork_unsafe_buffering when called after fork by David Benjamin · 2 years, 3 months ago
- 1599fea Remove read locks from PRNG steady state by David Benjamin · 2 years, 3 months ago
- dd9ee60 Reject RSA keys under 512 bits by David Benjamin · 1 year, 11 months ago
- 786554f Check public components in freeze_private_key by David Benjamin · 1 year, 11 months ago
- 4540c3c OpenBSD Support by Bob Beck · 2 years, 1 month ago
- 6d55dc3 Add APIs to support RSA keys with large e. by David Benjamin · 1 year, 11 months ago
- 5b32e81 Remove unions in GCM implementation by David Benjamin · 1 year, 11 months ago
- 5e988c4 Rename EC_RAW_POINT to EC_JACOBIAN by David Benjamin · 1 year, 11 months ago
- 85e6453 Remove unions in polyval implementation by David Benjamin · 1 year, 11 months ago
- e7c3f47 Remove H from GCM128_KEY by David Benjamin · 1 year, 11 months ago
- 62f9751 Don't make assumptions about GCM128_CONTEXT layout in aesni-gcm-x86_64.pl by David Benjamin · 1 year, 11 months ago
- a7f83c4 Don't make assumptions about GCM128_CONTEXT layout in aesv8-gcm-armv8.pl by David Benjamin · 1 year, 11 months ago
- 051f891 Update references to draft-irtf-cfrg-gcmsiv by David Benjamin · 1 year, 11 months ago
- 86ada1e Add new APIs for creating RSA keys by David Benjamin · 1 year, 11 months ago
- 9939e14c Invalidated cached RSA, DH, and DSA state when changing keys by David Benjamin · 1 year, 11 months ago
- a0afd6a Add some missing includes by David Benjamin · 1 year, 11 months ago
- 4b6d950 Align TRUST_TOKEN_pst_v1_voprf with draft-21 of VOPRF by Steven Valdez · 2 years ago
- ece1f86 Re-add go:build ignore lines by David Benjamin · 1 year, 11 months ago
- aa31748 Generate 64-bit Curve25519 and P256 code for MSVC by Andres Erbsen · 2 years, 1 month ago
- 480344d Move TLS 1.3 KDF functions into the FIPS module. by Adam Langley · 2 years ago
- d3acd45 Move HKDF into the FIPS module. by Adam Langley · 2 years ago
- 89de6e1 Move RSA (en|de)cryption out of the FIPS module. by Adam Langley · 2 years ago
- a438519 Fix miscellaneous size_t truncations by David Benjamin · 2 years ago