1. 8094b54 Add BIO versions of i2d_DHparams and d2i_DHparams. by David Benjamin · 7 years ago
  2. f64c373 Fix build with GCC 4.9.2 and -Wtype-limits. by Adam Langley · 7 years ago
  3. bb3a456 Move some RSA keygen support code into separate files. by David Benjamin · 7 years ago
  4. 5d626b2 Add some more compatibility functions. by David Benjamin · 7 years ago
  5. 57eaeab Fix include path. by Adam Langley · 7 years ago
  6. 0318b05 Add some OpenSSL compatibility functions and hacks. by David Benjamin · 7 years ago
  7. ed188fd Enforce supported_versions in the second ServerHello. by David Benjamin · 7 years ago
  8. 2a92847 Restore some MSVC warnings. by David Benjamin · 7 years ago
  9. bf33114 Rename third_party/wycheproof to satisfy a bureaucrat. by David Benjamin · 7 years ago
  10. 3c37d0a Reland "Fix bssl client/server's error-handling." by David Benjamin · 7 years ago
  11. 0cdbc87 Revert "Fix bssl client/server's error-handling." by Steven Valdez · 7 years ago
  12. e7ca8a5 Fix bssl client/server's error-handling. by David Benjamin · 7 years ago
  13. 537553f Prevent out of bound read in do_buf (a_strex). by Steven Valdez · 7 years ago
  14. 179c4e2 Update Wycheproof, add keywrap tests, and fix a bug. by David Benjamin · 7 years ago
  15. cf341d0 Add missing #include of <openssl/mem.h>. by Matthew Braithwaite · 7 years ago
  16. f6d9f0b bn/asm/*-mont.pl: fix memory access pattern in final subtraction. by David Benjamin · 7 years ago
  17. dd444b1 Fix bugs in X509_NAME_add_entry. by Steven Valdez · 7 years ago
  18. 0c9ac2e Drop FULL_UNROLL code in aes.c. by Adam Langley · 7 years ago
  19. 8e75ae4 Add a Wycheproof driver for AES-CBC. by David Benjamin · 7 years ago
  20. 302bb39 Small curve25519 cleanups. by David Benjamin · 7 years ago
  21. 3f94467 Add an ECDH Wycheproof driver. by David Benjamin · 7 years ago
  22. 5505328 Add AEAD Wycheproof drivers. by David Benjamin · 7 years ago
  23. 58d6fc4 Add missing #include of <openssl/err.h>. by Matthew Braithwaite · 7 years ago
  24. c596415 Add a DSA Wycheproof driver. by David Benjamin · 7 years ago
  25. 5707274 Add Ed25519 Wycheproof driver. by David Benjamin · 7 years ago
  26. 8370fb6 Implement constant-time generic multiplication. by David Benjamin · 7 years ago
  27. 8b0dc7a Simplify ec_wNAF_mul table sizing. by David Benjamin · 7 years ago
  28. 041dd68 Clear mallocs in ec_wNAF_mul. by David Benjamin · 7 years ago
  29. e14e4a7 Remove ec_compute_wNAF's failure cases. by David Benjamin · 7 years ago
  30. 40d76f4 Add ECDSA and RSA verify Wycheproof drivers. by David Benjamin · 7 years ago
  31. 5509bc0 Add a test driver for Wycheproof's x25519_test.json. by David Benjamin · 7 years ago
  32. bf4bcdf Fix some stuttering. by David Benjamin · 7 years ago
  33. b8546dd Update location of root certificates on Fuchsia by Joshua Liebow-Feeser · 7 years ago
  34. cece326 Add SHA256_TransformBlocks. by Adam Langley · 7 years ago
  35. ec4f0dd EC_GROUP_dup cannot fail. by David Benjamin · 7 years ago
  36. 32e0d10 Add EC_FELEM for EC_POINTs and related temporaries. by David Benjamin · 7 years ago
  37. 6a289b3 Remove EC_POINTs_make_affine and related logic. by David Benjamin · 7 years ago
  38. 06d467c ghashv8-armx.pl: add Qualcomm Kryo results. by David Benjamin · 7 years ago
  39. a7c8f2b ghashv8-armvx.pl: Fix various typos. by David Benjamin · 7 years ago
  40. a63d0ad Require BN_mod_exp_mont* inputs be reduced. by David Benjamin · 7 years ago
  41. 52a68a9 Remove unused string.h include. by David Benjamin · 7 years ago
  42. 5c0e0ce Remove Z = 1 special-case in generic point_get_affine. by David Benjamin · 7 years ago
  43. f5858ca Remove unnecessary endian flip in p224-64.c. by David Benjamin · 7 years ago
  44. b8f14b7 Add dedicated scalar inversion code to p256-x86_64.c. by David Benjamin · 7 years ago
  45. 364a51e Abstract scalar inversion in EC_METHOD. by David Benjamin · 7 years ago
  46. b27b579 Add some tests for scalar operations. by David Benjamin · 7 years ago
  47. 3861ae6 p256-x86_64-asm.pl: add .cfi and SEH handlers to new functions. by David Benjamin · 7 years ago
  48. 5c30dab Import P-256 scalar multiplication assembly from OpenSSL. by David Benjamin · 7 years ago
  49. 7121fe2 Align ECDSA sign/verify scalar inversions. by David Benjamin · 7 years ago
  50. 941f535 Abstract away EC_SCALAR operations. by David Benjamin · 7 years ago
  51. 9291be5 Remove return values from bn_*_small. by David Benjamin · 7 years ago
  52. 3f8074c Fix the error on overly large group orders. by David Benjamin · 7 years ago
  53. cd01254 Explicitly guarantee BN_MONT_CTX::{RR,N} have the same width. by David Benjamin · 7 years ago
  54. a293871 Improve the RSA key generation failure probability. by David Benjamin · 7 years ago
  55. 9af9b94 Restore the BN_mod codepath for public Montgomery moduli. by David Benjamin · 7 years ago
  56. 7e2a8a3 Speed up variable windowed exponentation a bit. by David Benjamin · 7 years ago
  57. b1e6a85 Change OPENSSL_cpuid_setup to reserve more extended feature space. by Jesse Selover · 7 years ago
  58. 35e7c99 Remove files from Trusty which can't link because of Trusty libc. by Jesse Selover · 7 years ago
  59. 56ea9e2 Fix bn_mod_exp_mont_small when exponentiating to zero. by David Benjamin · 7 years ago
  60. e0ae249 Remove a = 0 special-case in BN_mod_exp_mont. by David Benjamin · 7 years ago
  61. d319205 Deny CRT to unbalanced RSA keys. by David Benjamin · 7 years ago
  62. 024f5df Avoid some divisions in Lucky 13 fix. by David Benjamin · 7 years ago
  63. 27e4c3b Add an OPENSSL_malloc_init stub. by David Benjamin · 7 years ago
  64. acddb8c Avoid modifying stack in sk_find. by Steven Valdez · 7 years ago
  65. 628b3c7 Don't write out a bad OID by David Benjamin · 7 years ago
  66. b2eaeb0 Drop some trial-division primes for 1024-bit candidates. by Adam Langley · 7 years ago
  67. eda47f5 Make generic point arithmetic slightly less variable-time. by David Benjamin · 7 years ago
  68. ba9da44 Tolerate a null BN_CTX in BN_primality_test. by David Benjamin · 7 years ago
  69. 5b05988 Implement field_{mul,sqr} in p224-64.c with p224_felems. by David Benjamin · 7 years ago
  70. c81ecf3 Add test coverage for the a != -3 case. by David Benjamin · 7 years ago
  71. 04018c5 Remove EC_LOOSE_SCALAR. by David Benjamin · 7 years ago
  72. 9c1f8b4 Add tests for large digests. by David Benjamin · 7 years ago
  73. 2257e8f Use bn_rshift_words for the ECDSA bit-shift. by David Benjamin · 7 years ago
  74. 0645c05 Test the bit-shifting case in ECDSA. by David Benjamin · 7 years ago
  75. cbe7792 Extract the single-subtraction reduction into a helper function. by David Benjamin · 7 years ago
  76. 25f3d84 Rewrite BN_rand without an extra malloc. by David Benjamin · 7 years ago
  77. eb7c300 Only do 16 iterations to blind the primality test. by Adam Langley · 7 years ago
  78. 5833dd8 Limit the public exponent in RSA_generate_key_ex. by David Benjamin · 7 years ago
  79. c1c6eeb Check d is mostly-reduced in RSA_check_key. by David Benjamin · 7 years ago
  80. cba958f Make RSA_check_key constant-time and more meaningful. by David Benjamin · 7 years ago
  81. c4e4757 Make RSA key generation constant-time. by David Benjamin · 7 years ago
  82. a44dae7 Add a constant-time generic modular inverse function. by David Benjamin · 7 years ago
  83. 1044553 Add new GCD and related primitives. by David Benjamin · 7 years ago
  84. 23af438 Compute p - q in constant time. by David Benjamin · 7 years ago
  85. 8d9ee7d Replace rsa_greater_than_pow2 with BN_cmp. by David Benjamin · 7 years ago
  86. 97ac45e Change the order of GCD and trial division. by David Benjamin · 7 years ago
  87. 1902d81 Tighten and test name-checking functions. by Adam Langley · 7 years ago
  88. 56f5eb9 Name constant-time functions more consistently. by David Benjamin · 7 years ago
  89. e6f46e2 Blind the range check for finding a Rabin-Miller witness. by David Benjamin · 7 years ago
  90. 8eadca5 Don't leak |a| in the primality test. by David Benjamin · 7 years ago
  91. 9362ed9 Use a Barrett reduction variant for trial division. by David Benjamin · 7 years ago
  92. 232a6be Make primality testing mostly constant-time. by David Benjamin · 7 years ago
  93. 50418af Add some EC base point multiplication test vectors. by David Benjamin · 7 years ago
  94. 718c88c Fix a bug in p224-64.c. by David Benjamin · 7 years ago
  95. 2e16f6b Add a test for CRYPTO_memcmp. by David Benjamin · 7 years ago
  96. 2a19a17 Limit ASN.1 constructed types recursive definition depth by David Benjamin · 7 years ago
  97. 0970d39 Make various BIGNUM comparisons constant-time. by David Benjamin · 7 years ago
  98. ad06686 Add bn_usub_fixed. by David Benjamin · 7 years ago
  99. d89d65b Add utility program for emitting P-256 x86-64 table. by Adam Langley · 7 years ago
  100. 5fca613 Fix typo in point_add. by David Benjamin · 7 years ago