1. 3c88240 Simplify Montgomery RR precomputation. by Brian Smith · 1 year, 5 months ago
  2. b628f87 Clear some false positives in constant-time validation by David Benjamin · 1 year, 3 months ago
  3. 9206d7c Fix segfault if CRYPTO_set_thread_local fails and calls rand_thread_state_free. by Sean McGrail · 1 year, 5 months ago
  4. af3c895 Revert "sha: Move Armv7 dispatching to C" by Bob Beck · 1 year, 3 months ago
  5. 3599db2 sha: Add SSSE3 check to SHAEXT SHA-256 implementation. by Brian Smith · 1 year, 4 months ago
  6. 62f43f5 sha: Move Armv7 dispatching to C by David Benjamin · 1 year, 4 months ago
  7. 547221f Assume the Arm assembler can handle ADR by David Benjamin · 1 year, 4 months ago
  8. f2a3aae sha: Remove check for SSSE3 for AVX variants. by Brian Smith · 1 year, 4 months ago
  9. 10c24cb sha: Move AArch64/X86-64 dispatching to C. by Brian Smith · 1 year, 4 months ago
  10. c41de81 Add missing include by David Benjamin · 1 year, 4 months ago
  11. 59906b3 Consistently call CRYPTO_free_ex_data first by David Benjamin · 1 year, 4 months ago
  12. 90004f0 Use relative links in markdown files by David Benjamin · 1 year, 4 months ago
  13. 4b9dd97 Add a value barrier in p224_select_point by David Benjamin · 1 year, 4 months ago
  14. 70ca6bc Add CRYPTO_{addc,subc}_* functions to crypto/internal.h by David Benjamin · 1 year, 4 months ago
  15. 251ee0b Implement the old FIPS 186-2 PRF by David Benjamin · 1 year, 4 months ago
  16. ad57528 Simplify AES-GCM counter increment by David Benjamin · 1 year, 5 months ago
  17. a126322 Remove unnecessary length check before OPENSSL_memcpy by David Benjamin · 1 year, 5 months ago
  18. 478b28a Fix delocate build rules with make by David Benjamin · 1 year, 5 months ago
  19. a96e737 Skip ForkDetect tests on iOS by David Benjamin · 1 year, 5 months ago
  20. c4b1738 Add missing include for waitpid by David Benjamin · 1 year, 5 months ago
  21. bfa8369 Add support for fork detection via pthread_atfork() by Bob Beck · 1 year, 11 months ago
  22. 8313e13 Replace remaining references to __ARM_ARCH__ with __ARM_ARCH by David Benjamin · 1 year, 6 months ago
  23. 8d0a83d Consistently use SIZE_MAX over (size_t)-1 by David Benjamin · 1 year, 6 months ago
  24. 216db67 Also add OPENSSL_calloc by David Benjamin · 1 year, 6 months ago
  25. dd68e4b Add OPENSSL_zalloc by David Benjamin · 1 year, 6 months ago
  26. 20c9406 Add table-independent x86+adx asm for P-256 by Andres Erbsen · 1 year, 6 months ago
  27. 340fe15 CMake doesn't have an error function by David Benjamin · 1 year, 6 months ago
  28. db1e987 Return the correct value in EVP_CIPHER_CTX_iv_length after EVP_CTRL_AEAD_SET_IVLEN by Alex Gaynor · 1 year, 7 months ago
  29. 0043172 Add BN_bn2lebinpad and BN_lebin2bn by David Benjamin · 1 year, 7 months ago
  30. 9f4cad2 Fix typo in .size directives for aesni_gcm_encrypt by David Benjamin · 1 year, 8 months ago
  31. cb583e7 Default to q = (p-1)/2 for DH keygen by David Benjamin · 1 year, 8 months ago
  32. 7ce5d41 Select SHA-256 vs SHA-512 explicitly in perlasm by David Benjamin · 1 year, 8 months ago
  33. 39a7507 Hash-to-curve is now RFC 9380 by David Benjamin · 1 year, 8 months ago
  34. 87c00d5 Align DH keygen with NIST's formulation when q is available by David Benjamin · 1 year, 8 months ago
  35. d85444e Consistently reject large p and large q in DH by David Benjamin · 1 year, 8 months ago
  36. 7ae2b91 Split TLS 1.0 and 1.2 self checks. by Adam Langley · 1 year, 8 months ago
  37. 04487c4 MD5 and SHA-1 are not actually approved in the TLS KDF. by Adam Langley · 1 year, 8 months ago
  38. 6738d47 Restore OPENSSL_RAND_TRUSTY by David Benjamin · 1 year, 8 months ago
  39. 23d6e4c Replace BIO_snprintf with snprintf within the library by David Benjamin · 1 year, 9 months ago
  40. 2200060 Temporarily disable the Trusty CRYPTO_sysrand implementation by David Benjamin · 1 year, 9 months ago
  41. d43fef7 Fix aarch64 build with GCC by David Benjamin · 1 year, 9 months ago
  42. 70be012 Use constant curve-specific groups whenever possible by David Benjamin · 2 years, 1 month ago
  43. 2b8a057 Entropy changes for trusty and windows. by Bob Beck · 1 year, 9 months ago
  44. a36ac0a Use std::make_unique when possible by David Benjamin · 1 year, 9 months ago
  45. 417069f Make built-in curves static. by David Benjamin · 2 years, 1 month ago
  46. 0f222e6 Clear some size_t truncations by David Benjamin · 1 year, 9 months ago
  47. 9fc1c33 Add Intel Indirect Branch Tracking support. by Bob Beck · 1 year, 10 months ago
  48. 80dcb67 Embed the generator into EC_GROUP by David Benjamin · 2 years, 2 months ago
  49. 7dc4a03 Fuchsia has getentropy() via musl - use it and drop the custom file by Bob Beck · 1 year, 9 months ago
  50. 72540c1 Embed BN_MONT_CTX into EC_GROUP. by David Benjamin · 2 years, 2 months ago
  51. 53f09ad Move to preferring getentropy() for system provided entropy by Bob Beck · 1 year, 9 months ago
  52. 8e8f87e Don't store a redundant copy of the EC_GROUP field modulus by David Benjamin · 2 years, 2 months ago
  53. 5eab868 Remove field_minus_order from EC_GROUP. by David Benjamin · 2 years, 2 months ago
  54. 6f13380 Don't store a redundant copy of the order in EC_GROUP by David Benjamin · 2 years, 2 months ago
  55. a369247 Fix the Windows fuzzer build by David Benjamin · 1 year, 9 months ago
  56. a905bbb Consistently include BTI markers in every assembly file by David Benjamin · 1 year, 10 months ago
  57. e79649b Use ProcessPrng instead of RtlGenRandom on Windows by Alex Gough · 1 year, 10 months ago
  58. 6a7d8b5 Remove p > q normalization in RSA keys by David Benjamin · 1 year, 10 months ago
  59. 02d2715 Implement BN_MONT_CTX_new_consttime with Montgomery reduction by David Benjamin · 3 years, 3 months ago
  60. 98e1227 Make bn_mod_lshift_consttime faster by David Benjamin · 1 year, 10 months ago
  61. 04c3d40 Remove CRYPTO_MUTEX from public headers by David Benjamin · 1 year, 10 months ago
  62. d4553e0 Make RSA opaque by David Benjamin · 1 year, 10 months ago
  63. b034104 Make BN_mod_inverse() deal with repeated arguments by Theo Buehler · 1 year, 10 months ago
  64. e106b53 Remove BN_DEC_FMT2 and test the others by David Benjamin · 1 year, 10 months ago
  65. 55b069d Add a value barrier when checking for point doubling. by David Benjamin · 1 year, 10 months ago
  66. 5fcd47d Add prefetch to aes_hw_ctr32_encrypt_blocks by Ilya Tokar · 1 year, 10 months ago
  67. 47b2fef Update hkdf.c to avoid potentially vulnerable code pattern. by Nicky Mouha · 1 year, 11 months ago
  68. dd52194 Fix RAND_enable_fork_unsafe_buffering when called after fork by David Benjamin · 2 years, 3 months ago
  69. 1599fea Remove read locks from PRNG steady state by David Benjamin · 2 years, 3 months ago
  70. dd9ee60 Reject RSA keys under 512 bits by David Benjamin · 1 year, 11 months ago
  71. 786554f Check public components in freeze_private_key by David Benjamin · 1 year, 11 months ago
  72. 4540c3c OpenBSD Support by Bob Beck · 2 years, 1 month ago
  73. 6d55dc3 Add APIs to support RSA keys with large e. by David Benjamin · 1 year, 11 months ago
  74. 5b32e81 Remove unions in GCM implementation by David Benjamin · 1 year, 11 months ago
  75. 5e988c4 Rename EC_RAW_POINT to EC_JACOBIAN by David Benjamin · 1 year, 11 months ago
  76. 85e6453 Remove unions in polyval implementation by David Benjamin · 1 year, 11 months ago
  77. e7c3f47 Remove H from GCM128_KEY by David Benjamin · 1 year, 11 months ago
  78. 62f9751 Don't make assumptions about GCM128_CONTEXT layout in aesni-gcm-x86_64.pl by David Benjamin · 1 year, 11 months ago
  79. a7f83c4 Don't make assumptions about GCM128_CONTEXT layout in aesv8-gcm-armv8.pl by David Benjamin · 1 year, 11 months ago
  80. 051f891 Update references to draft-irtf-cfrg-gcmsiv by David Benjamin · 1 year, 11 months ago
  81. 86ada1e Add new APIs for creating RSA keys by David Benjamin · 1 year, 11 months ago
  82. 9939e14c Invalidated cached RSA, DH, and DSA state when changing keys by David Benjamin · 1 year, 11 months ago
  83. a0afd6a Add some missing includes by David Benjamin · 1 year, 11 months ago
  84. 4b6d950 Align TRUST_TOKEN_pst_v1_voprf with draft-21 of VOPRF by Steven Valdez · 2 years ago
  85. ece1f86 Re-add go:build ignore lines by David Benjamin · 1 year, 11 months ago
  86. aa31748 Generate 64-bit Curve25519 and P256 code for MSVC by Andres Erbsen · 2 years, 1 month ago
  87. 480344d Move TLS 1.3 KDF functions into the FIPS module. by Adam Langley · 2 years ago
  88. d3acd45 Move HKDF into the FIPS module. by Adam Langley · 2 years ago
  89. 89de6e1 Move RSA (en|de)cryption out of the FIPS module. by Adam Langley · 2 years ago
  90. a438519 Fix miscellaneous size_t truncations by David Benjamin · 2 years ago
  91. 7464656 Add CTRDBG_STATE to bssl::UniquePtr by David Benjamin · 2 years ago
  92. 50bc2ea Tidy up HMAC_Init_ex slightly by David Benjamin · 2 years, 1 month ago
  93. ecb722a Add prefetch to sha1_block_data_order_shaext by Ilya Tokar · 2 years, 1 month ago
  94. 76cb7c5 urandom_test: force MADV_WIPEONFORK both ways. by Adam Langley · 2 years, 1 month ago
  95. 5eb9343 Go back to breaking syscalls with the syscall number by David Benjamin · 2 years, 1 month ago
  96. 8251dd8 Pass the full user_regs_struct to PTRACE_SETREGS by David Benjamin · 2 years, 1 month ago
  97. bffae8a Print the reason the child stopped in urandom_test by David Benjamin · 2 years, 1 month ago
  98. ebd43ef Move data from .text to .rodata on x86_64 by Theo Buehler · 2 years, 1 month ago
  99. 3cd7faa Tweak urandom_test for Android devices without getrandom. by Adam Langley · 2 years, 1 month ago
  100. 474ddf8 Cap the number of ECDSA and DSA sign iterations. by David Benjamin · 2 years, 2 months ago