- 480344d Move TLS 1.3 KDF functions into the FIPS module. by Adam Langley · 2 years ago
- dcabfe2 Make OPENSSL_malloc push ERR_R_MALLOC_FAILURE on failure. by Bob Beck · 2 years, 2 months ago
- f7d37fb Fix various malloc failure paths. by David Benjamin · 2 years, 2 months ago
- 50e7ea5 LSC: Apply clang-tidy's modernize-use-bool-literals to boringssl by Anton Bikineev · 3 years, 2 months ago
- 19fe794 Fix calculation of draft-13 ECH confirmation signal. by David Benjamin · 3 years, 7 months ago
- 18b6836 Update to draft-ietf-tls-esni-13. by David Benjamin · 3 years, 10 months ago
- 006f20a Add Span::first() and Span::last(). by David Benjamin · 3 years, 9 months ago
- 83a4993 Add most of an ECH client implementation. by David Benjamin · 3 years, 11 months ago
- b32aa05 Tidy up the PSK binder logic. by David Benjamin · 3 years, 10 months ago
- 49ee62f Update the ECH GREASE size selection. by David Benjamin · 3 years, 11 months ago
- c295935 Send ECH acceptance signal from backend server. by Dan McArdle · 4 years, 5 months ago
- 5351c8b Rename the master_key field in SSL_SESSION to secret. by David Benjamin · 4 years, 4 months ago
- 5298ef9 Configure QUIC secrets inside set_{read,write}_state. by David Benjamin · 5 years ago
- 1e85905 Revise QUIC encryption secret APIs. by David Benjamin · 5 years ago
- b092192 Keep the encryption state and encryption level in sync. by David Benjamin · 5 years ago
- 754d4c9 Fix client handling of 0-RTT rejects with cipher mismatch. by David Benjamin · 5 years ago
- cc0c286 TLS 1.3 split handshake initial support. by Matthew Braithwaite · 5 years ago
- d634357 Add initial support for 0-RTT with QUIC. by David Benjamin · 6 years ago
- e530ea3 Use spans for the various TLS 1.3 secrets. by David Benjamin · 6 years ago
- b244e3a Switch another low-level function to spans. by David Benjamin · 6 years ago
- 79b8b3a Switch tls13_enc.cc to spans. by David Benjamin · 6 years ago
- 9806ae0 Check the second ClientHello's PSK binder on resumption. by David Benjamin · 6 years ago
- bc42402 Trim some more per-connection memory. by David Benjamin · 6 years ago
- 94b2871 Remove SSL_export_early_keying_material. by David Benjamin · 6 years ago
- 3cbb029 Allow configuring QUIC method per-connection by Alessandro Ghedini · 6 years ago
- 2cc6f44 Use same HKDF label as TLS 1.3 for QUIC as per draft-ietf-quic-tls-17 by Alessandro Ghedini · 6 years ago
- c8e0f90 Add an interface for QUIC integration. by Steven Valdez · 7 years ago
- 8525ff3 Another batch of bools. by David Benjamin · 7 years ago
- 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
- 89b9ecf Add more scopers. by David Benjamin · 7 years ago
- 50596f8 Switch some easy SSL fields to UniquePtr. by David Benjamin · 7 years ago
- 7e5dd25 Remove draft22 and experiment2. by Steven Valdez · 7 years ago
- 64cc121 Remove deprecated TLS 1.3 variants. by Steven Valdez · 7 years ago
- 650d8c3 Implement TLS 1.3 early exporters. by David Benjamin · 7 years ago
- cd8470f Adding support for draft 21 as a TLS 1.3 variant. by Steven Valdez · 7 years ago
- 75a1f23 Have a bit more fun with Span. by David Benjamin · 7 years ago
- d1e3ce1 Rename ssl3_send_alert and ssl3_protocol_version. by David Benjamin · 7 years ago
- 1c58471 Add TLS 1.3 EXPORTER_SECRET to SSLKEYLOGFILE. by David Benjamin · 7 years ago
- a4bafd3 Add SSL_SESSION_{get,set}_protocol_version. by David Benjamin · 7 years ago
- b949355 Add bssl::Span<T>::subspan and use it. by David Benjamin · 8 years ago
- c7d4d21 Add experiment without client CCS and fix session ID bug. by Steven Valdez · 8 years ago
- c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
- ca9e8f5 Tidy up handshake digest logic. by David Benjamin · 8 years ago
- 7934f08 Replace init_msg/init_num with a get_message hook. by David Benjamin · 8 years ago
- 6dc8bf6 Convert SSL_TRANSCRIPT to C++. by David Benjamin · 8 years ago
- e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
- 1386aad Switch various things to scopers. by David Benjamin · 8 years ago
- cfc11c2 C++-ify SSL_AEAD_CTX. by David Benjamin · 8 years ago
- 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
- 81678aa Switch t1_lib, tls_record, and tls13_both to C++. by David Benjamin · 8 years ago[Renamed from ssl/tls13_enc.c]
- 8f36c51 Revise version negotiation logic on the C side. by Steven Valdez · 8 years ago
- 2f3404b Enforce incrementing counter for TLS 1.2 AES-GCM. by Steven Valdez · 8 years ago
- 794cc59 Send half-RTT tickets when negotiating 0-RTT. by David Benjamin · 8 years ago
- 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 8 years ago
- 45738dd Move new_cipher and new_session to SSL_HANDSHAKE. by David Benjamin · 8 years ago
- 908ac19 Moving transcript and PRF functions to SSL_TRANSCRIPT. by Steven Valdez · 8 years ago
- 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 8 years ago
- 4cb8494 Splitting handshake traffic derivation from key change. by Steven Valdez · 8 years ago
- 6e4fc33 Pass explicit hs parameters to tls13_*.c. by David Benjamin · 8 years ago
- 3d622e5 Add missing bounds check in tls13_derive_resumption_secret. by David Benjamin · 8 years ago
- 32b47a5 Allow PSK binder mismatches in fuzzer mode. by David Benjamin · 8 years ago
- a833c35 Update to TLS 1.3 draft 18. by Steven Valdez · 8 years ago
- 4b0d0e4 Validate input iv/mac sizes in SSL_AEAD_CTX_new. by David Benjamin · 8 years ago
- c4aa727 Updating Key Schedule and KeyUpdate to draft 16. by Steven Valdez · 8 years ago
- 0fb46d4 const-correct a variable. by David Benjamin · 9 years ago
- 4aa154e Adding code to send session as PSK Identity. by Steven Valdez · 9 years ago
- 1dc53d2 Adding handling for KeyUpdate post-handshake message. by Steven Valdez · 9 years ago
- 87eab49 Splitting SSL session state. by Steven Valdez · 9 years ago
- e776cc2 Implement SSLKEYLOGFILE support for TLS 1.3. by David Benjamin · 9 years ago
- 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago
