1. 20c93ab Remove OPENSSL_IA32_SSE2 checks in x86 perlasm by David Benjamin · 1 year, 2 months ago
  2. 01ea563 Move NEON dispatch in bn_mul_mont to C by David Benjamin · 1 year, 2 months ago
  3. 15a76eb Rewrite bn_big_endian_to_words to avoid a GCC false positive by David Benjamin · 1 year, 2 months ago
  4. 4a8653a bn: Move ia32cap_P references from x86_64-mont.pl to C. by Brian Smith · 1 year, 3 months ago
  5. 97dc336 Fix SHA ABI tests by David Benjamin · 1 year, 2 months ago
  6. 12316ab sha: Move Armv7 dispatching to C (reland) by David Benjamin · 1 year, 4 months ago
  7. 7cb8df5 bn: Move x86-64 argument-based dispatching of bn_mul_mont to C. by Brian Smith · 1 year, 3 months ago
  8. 77ee4e4 aes gcm: Remove Atom Silvermont optimizations. by Brian Smith · 1 year, 4 months ago
  9. a4c3f8d Document assumptions made by bssl-crypto's unboxed HMAC_CTX by David Benjamin · 1 year, 2 months ago
  10. f42be90 Avoid unions in CCM by David Benjamin · 1 year, 2 months ago
  11. 3c88240 Simplify Montgomery RR precomputation. by Brian Smith · 1 year, 5 months ago
  12. b628f87 Clear some false positives in constant-time validation by David Benjamin · 1 year, 2 months ago
  13. 9206d7c Fix segfault if CRYPTO_set_thread_local fails and calls rand_thread_state_free. by Sean McGrail · 1 year, 5 months ago
  14. af3c895 Revert "sha: Move Armv7 dispatching to C" by Bob Beck · 1 year, 2 months ago
  15. 3599db2 sha: Add SSSE3 check to SHAEXT SHA-256 implementation. by Brian Smith · 1 year, 4 months ago
  16. 62f43f5 sha: Move Armv7 dispatching to C by David Benjamin · 1 year, 4 months ago
  17. 547221f Assume the Arm assembler can handle ADR by David Benjamin · 1 year, 4 months ago
  18. f2a3aae sha: Remove check for SSSE3 for AVX variants. by Brian Smith · 1 year, 4 months ago
  19. 10c24cb sha: Move AArch64/X86-64 dispatching to C. by Brian Smith · 1 year, 4 months ago
  20. c41de81 Add missing include by David Benjamin · 1 year, 4 months ago
  21. 59906b3 Consistently call CRYPTO_free_ex_data first by David Benjamin · 1 year, 4 months ago
  22. 90004f0 Use relative links in markdown files by David Benjamin · 1 year, 4 months ago
  23. 4b9dd97 Add a value barrier in p224_select_point by David Benjamin · 1 year, 4 months ago
  24. 70ca6bc Add CRYPTO_{addc,subc}_* functions to crypto/internal.h by David Benjamin · 1 year, 4 months ago
  25. 251ee0b Implement the old FIPS 186-2 PRF by David Benjamin · 1 year, 4 months ago
  26. ad57528 Simplify AES-GCM counter increment by David Benjamin · 1 year, 5 months ago
  27. a126322 Remove unnecessary length check before OPENSSL_memcpy by David Benjamin · 1 year, 5 months ago
  28. 478b28a Fix delocate build rules with make by David Benjamin · 1 year, 5 months ago
  29. a96e737 Skip ForkDetect tests on iOS by David Benjamin · 1 year, 5 months ago
  30. c4b1738 Add missing include for waitpid by David Benjamin · 1 year, 5 months ago
  31. bfa8369 Add support for fork detection via pthread_atfork() by Bob Beck · 1 year, 10 months ago
  32. 8313e13 Replace remaining references to __ARM_ARCH__ with __ARM_ARCH by David Benjamin · 1 year, 6 months ago
  33. 8d0a83d Consistently use SIZE_MAX over (size_t)-1 by David Benjamin · 1 year, 6 months ago
  34. 216db67 Also add OPENSSL_calloc by David Benjamin · 1 year, 6 months ago
  35. dd68e4b Add OPENSSL_zalloc by David Benjamin · 1 year, 6 months ago
  36. 20c9406 Add table-independent x86+adx asm for P-256 by Andres Erbsen · 1 year, 6 months ago
  37. 340fe15 CMake doesn't have an error function by David Benjamin · 1 year, 6 months ago
  38. db1e987 Return the correct value in EVP_CIPHER_CTX_iv_length after EVP_CTRL_AEAD_SET_IVLEN by Alex Gaynor · 1 year, 7 months ago
  39. 0043172 Add BN_bn2lebinpad and BN_lebin2bn by David Benjamin · 1 year, 7 months ago
  40. 9f4cad2 Fix typo in .size directives for aesni_gcm_encrypt by David Benjamin · 1 year, 7 months ago
  41. cb583e7 Default to q = (p-1)/2 for DH keygen by David Benjamin · 1 year, 8 months ago
  42. 7ce5d41 Select SHA-256 vs SHA-512 explicitly in perlasm by David Benjamin · 1 year, 8 months ago
  43. 39a7507 Hash-to-curve is now RFC 9380 by David Benjamin · 1 year, 8 months ago
  44. 87c00d5 Align DH keygen with NIST's formulation when q is available by David Benjamin · 1 year, 8 months ago
  45. d85444e Consistently reject large p and large q in DH by David Benjamin · 1 year, 8 months ago
  46. 7ae2b91 Split TLS 1.0 and 1.2 self checks. by Adam Langley · 1 year, 8 months ago
  47. 04487c4 MD5 and SHA-1 are not actually approved in the TLS KDF. by Adam Langley · 1 year, 8 months ago
  48. 6738d47 Restore OPENSSL_RAND_TRUSTY by David Benjamin · 1 year, 8 months ago
  49. 23d6e4c Replace BIO_snprintf with snprintf within the library by David Benjamin · 1 year, 9 months ago
  50. 2200060 Temporarily disable the Trusty CRYPTO_sysrand implementation by David Benjamin · 1 year, 9 months ago
  51. d43fef7 Fix aarch64 build with GCC by David Benjamin · 1 year, 9 months ago
  52. 70be012 Use constant curve-specific groups whenever possible by David Benjamin · 2 years, 1 month ago
  53. 2b8a057 Entropy changes for trusty and windows. by Bob Beck · 1 year, 9 months ago
  54. a36ac0a Use std::make_unique when possible by David Benjamin · 1 year, 9 months ago
  55. 417069f Make built-in curves static. by David Benjamin · 2 years, 1 month ago
  56. 0f222e6 Clear some size_t truncations by David Benjamin · 1 year, 9 months ago
  57. 9fc1c33 Add Intel Indirect Branch Tracking support. by Bob Beck · 1 year, 10 months ago
  58. 80dcb67 Embed the generator into EC_GROUP by David Benjamin · 2 years, 1 month ago
  59. 7dc4a03 Fuchsia has getentropy() via musl - use it and drop the custom file by Bob Beck · 1 year, 9 months ago
  60. 72540c1 Embed BN_MONT_CTX into EC_GROUP. by David Benjamin · 2 years, 1 month ago
  61. 53f09ad Move to preferring getentropy() for system provided entropy by Bob Beck · 1 year, 9 months ago
  62. 8e8f87e Don't store a redundant copy of the EC_GROUP field modulus by David Benjamin · 2 years, 1 month ago
  63. 5eab868 Remove field_minus_order from EC_GROUP. by David Benjamin · 2 years, 1 month ago
  64. 6f13380 Don't store a redundant copy of the order in EC_GROUP by David Benjamin · 2 years, 1 month ago
  65. a369247 Fix the Windows fuzzer build by David Benjamin · 1 year, 9 months ago
  66. a905bbb Consistently include BTI markers in every assembly file by David Benjamin · 1 year, 10 months ago
  67. e79649b Use ProcessPrng instead of RtlGenRandom on Windows by Alex Gough · 1 year, 10 months ago
  68. 6a7d8b5 Remove p > q normalization in RSA keys by David Benjamin · 1 year, 10 months ago
  69. 02d2715 Implement BN_MONT_CTX_new_consttime with Montgomery reduction by David Benjamin · 3 years, 3 months ago
  70. 98e1227 Make bn_mod_lshift_consttime faster by David Benjamin · 1 year, 10 months ago
  71. 04c3d40 Remove CRYPTO_MUTEX from public headers by David Benjamin · 1 year, 10 months ago
  72. d4553e0 Make RSA opaque by David Benjamin · 1 year, 10 months ago
  73. b034104 Make BN_mod_inverse() deal with repeated arguments by Theo Buehler · 1 year, 10 months ago
  74. e106b53 Remove BN_DEC_FMT2 and test the others by David Benjamin · 1 year, 10 months ago
  75. 55b069d Add a value barrier when checking for point doubling. by David Benjamin · 1 year, 10 months ago
  76. 5fcd47d Add prefetch to aes_hw_ctr32_encrypt_blocks by Ilya Tokar · 1 year, 10 months ago
  77. 47b2fef Update hkdf.c to avoid potentially vulnerable code pattern. by Nicky Mouha · 1 year, 10 months ago
  78. dd52194 Fix RAND_enable_fork_unsafe_buffering when called after fork by David Benjamin · 2 years, 3 months ago
  79. 1599fea Remove read locks from PRNG steady state by David Benjamin · 2 years, 3 months ago
  80. dd9ee60 Reject RSA keys under 512 bits by David Benjamin · 1 year, 11 months ago
  81. 786554f Check public components in freeze_private_key by David Benjamin · 1 year, 11 months ago
  82. 4540c3c OpenBSD Support by Bob Beck · 2 years, 1 month ago
  83. 6d55dc3 Add APIs to support RSA keys with large e. by David Benjamin · 1 year, 11 months ago
  84. 5b32e81 Remove unions in GCM implementation by David Benjamin · 1 year, 11 months ago
  85. 5e988c4 Rename EC_RAW_POINT to EC_JACOBIAN by David Benjamin · 1 year, 11 months ago
  86. 85e6453 Remove unions in polyval implementation by David Benjamin · 1 year, 11 months ago
  87. e7c3f47 Remove H from GCM128_KEY by David Benjamin · 1 year, 11 months ago
  88. 62f9751 Don't make assumptions about GCM128_CONTEXT layout in aesni-gcm-x86_64.pl by David Benjamin · 1 year, 11 months ago
  89. a7f83c4 Don't make assumptions about GCM128_CONTEXT layout in aesv8-gcm-armv8.pl by David Benjamin · 1 year, 11 months ago
  90. 051f891 Update references to draft-irtf-cfrg-gcmsiv by David Benjamin · 1 year, 11 months ago
  91. 86ada1e Add new APIs for creating RSA keys by David Benjamin · 1 year, 11 months ago
  92. 9939e14c Invalidated cached RSA, DH, and DSA state when changing keys by David Benjamin · 1 year, 11 months ago
  93. a0afd6a Add some missing includes by David Benjamin · 1 year, 11 months ago
  94. 4b6d950 Align TRUST_TOKEN_pst_v1_voprf with draft-21 of VOPRF by Steven Valdez · 2 years ago
  95. ece1f86 Re-add go:build ignore lines by David Benjamin · 1 year, 11 months ago
  96. aa31748 Generate 64-bit Curve25519 and P256 code for MSVC by Andres Erbsen · 2 years, 1 month ago
  97. 480344d Move TLS 1.3 KDF functions into the FIPS module. by Adam Langley · 2 years ago
  98. d3acd45 Move HKDF into the FIPS module. by Adam Langley · 2 years ago
  99. 89de6e1 Move RSA (en|de)cryption out of the FIPS module. by Adam Langley · 2 years ago
  100. a438519 Fix miscellaneous size_t truncations by David Benjamin · 2 years ago