- d995d82 Add .type, .hidden, and .size to the new fiat ADX assembly by David Benjamin · 1 year, 10 months ago
- 9d4f833 Use ADX asm for Curve25519 base-point multiplication by Andres Erbsen · 1 year, 10 months ago
- f4a4e27 Make DSA opaque by David Benjamin · 1 year, 10 months ago
- 43f8891 Add saturated X25519 for x86_64+ADX running Linux by Andres Erbsen · 1 year, 10 months ago
- df9955b Handle ChaCha20 counter overflow consistently by David Benjamin · 1 year, 10 months ago
- d605df5 Use packed representation for large Curve25519 table by Andres Erbsen · 1 year, 10 months ago
- 4a0393f Add SHA256 and SHA512 bindings to bssl-crypto by Maurice Lam · 1 year, 10 months ago
- b034104 Make BN_mod_inverse() deal with repeated arguments by Theo Buehler · 1 year, 10 months ago
- e106b53 Remove BN_DEC_FMT2 and test the others by David Benjamin · 1 year, 10 months ago
- 28c2409 Define TLSEXT_nid_unknown by David Benjamin · 1 year, 10 months ago
- be0fdf7 Constant-time test that X25519 has a single path. by Andres Erbsen · 1 year, 10 months ago
- 55b069d Add a value barrier when checking for point doubling. by David Benjamin · 1 year, 10 months ago
- 6cf9820 Align NIDs vs group IDs in TLS group APIs by David Benjamin · 1 year, 10 months ago
- 335523a Align remaining TLS ECDH APIs on "group" terminology by David Benjamin · 1 year, 10 months ago
- 2da5ba9 Align on using the "group" over "curve" for ECDH in TLS by David Benjamin · 1 year, 10 months ago
- 4631ccc Remove SSL_CIPHER_get_value by David Benjamin · 1 year, 10 months ago
- b0a026f add rust bindings for ed25519 by Nabil Wadih · 1 year, 11 months ago
- e30750c Add an ABI test for x25519_NEON by David Benjamin · 1 year, 10 months ago
- da757e6 Add constant-time validation for curve25519 by David Benjamin · 1 year, 10 months ago
- 5fcd47d Add prefetch to aes_hw_ctr32_encrypt_blocks by Ilya Tokar · 1 year, 10 months ago
- 825bec8 Remove variable expansion from CONF fuzzer by David Benjamin · 1 year, 10 months ago
- f31b45d Remove some unreachable character types in the CONF parser by David Benjamin · 1 year, 10 months ago
- 5aefcba Remove some unnecessary NULL checks in conf.c. by David Benjamin · 1 year, 10 months ago
- 83a6ba1 Test the CONF parser more extensively by David Benjamin · 1 year, 10 months ago
- 7e56051 Miscellaneous size_t truncation fixes by David Benjamin · 1 year, 10 months ago
- 89a6253 Add int casts as needed around STACK_OF(T) sizes and indices by David Benjamin · 1 year, 10 months ago
- 8c7e925 Bound STACK_OF(T) sizes by int by David Benjamin · 1 year, 10 months ago
- cf3851c acvptool: clean up better. by Adam Langley · 1 year, 10 months ago
- f712c86 Avoid locks in CRYPTO_free_ex_data by David Benjamin · 1 year, 10 months ago
- b0251b1 Disable TLS_RSA_WITH_3DES_EDE_CBC_SHA by default by David Benjamin · 2 years ago
- 8abcb6f Don't include <stdatomic.h> in C++ by David Benjamin · 1 year, 10 months ago
- 74a75b3 Add a comment about the Chromium sandbox for macOS sysctls by David Benjamin · 1 year, 11 months ago
- 47b2fef Update hkdf.c to avoid potentially vulnerable code pattern. by Nicky Mouha · 1 year, 11 months ago
- dd52194 Fix RAND_enable_fork_unsafe_buffering when called after fork by David Benjamin · 2 years, 3 months ago
- 2eaf070 Add a thread test for ex_data by David Benjamin · 1 year, 11 months ago
- 1599fea Remove read locks from PRNG steady state by David Benjamin · 2 years, 3 months ago
- a05691d Add an atomics library to crypto/internal.h by David Benjamin · 2 years, 3 months ago
- 8a85012 Remove the lock-based atomics fallback by David Benjamin · 2 years, 3 months ago
- 5b845de Use Windows Interlocked* APIs for refcounts when C11 isn't available by David Benjamin · 2 years, 3 months ago
- dd9ee60 Reject RSA keys under 512 bits by David Benjamin · 1 year, 11 months ago
- 786554f Check public components in freeze_private_key by David Benjamin · 1 year, 11 months ago
- 15a0c9a Remove now redundant RSA test by David Benjamin · 1 year, 11 months ago
- 706846d Add documentation for X509_STORE_CTX_set_verify_cb and friends by Bob Beck · 2 years ago
- c1f5d79 Add a multi-threaded mode to bssl speed by David Benjamin · 2 years, 1 month ago
- c215ce7 Use a helper function to implement get_all_foo_names functions. by Adam Langley · 1 year, 11 months ago
- b92fcfd Cap the input size to the conf fuzzer by David Benjamin · 1 year, 11 months ago
- e24491a acvptool: implement pipelining. by Adam Langley · 2 years, 4 months ago
- bf80254 Update googletest by David Benjamin · 1 year, 11 months ago
- 4137759 Update build tools by David Benjamin · 1 year, 11 months ago
- 4540c3c OpenBSD Support by Bob Beck · 2 years, 1 month ago
- c6dd304 Remove unions in BLAKE2b implementation by David Benjamin · 1 year, 11 months ago
- 2aae3f5 Bump the minimum supported MSVC version to VS2019 by David Benjamin · 1 year, 11 months ago
- a972b78 Add APIs to query a list of possible strings for TLS features by David Benjamin · 1 year, 11 months ago
- b1c6f45 Add back support for TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 by Adam Langley · 1 year, 11 months ago
- 722f5d8 Fix PKCS8Test to not rely on RSA-512 by David Benjamin · 1 year, 11 months ago
- 4d30888 Add a more general mechanism for deprecating TLS ciphers by David Benjamin · 2 years ago
- 6d55dc3 Add APIs to support RSA keys with large e. by David Benjamin · 1 year, 11 months ago
- 5b32e81 Remove unions in GCM implementation by David Benjamin · 1 year, 11 months ago
- 5e988c4 Rename EC_RAW_POINT to EC_JACOBIAN by David Benjamin · 1 year, 11 months ago
- 2e565ef Clarify that X25519 also supports EVP_PKEY_new_raw_private_key, etc by David Benjamin · 1 year, 11 months ago
- 1b724a6 Align Kyber names with draft-tls-westerbaan-xyber768d00 by David Benjamin · 1 year, 11 months ago
- 85e6453 Remove unions in polyval implementation by David Benjamin · 1 year, 11 months ago
- e7c3f47 Remove H from GCM128_KEY by David Benjamin · 1 year, 11 months ago
- 62f9751 Don't make assumptions about GCM128_CONTEXT layout in aesni-gcm-x86_64.pl by David Benjamin · 1 year, 11 months ago
- a7f83c4 Don't make assumptions about GCM128_CONTEXT layout in aesv8-gcm-armv8.pl by David Benjamin · 1 year, 11 months ago
- 4c8bcf0 Implement the AuthEncap/AuthDecap HPKE modes by David Benjamin · 1 year, 11 months ago
- 051f891 Update references to draft-irtf-cfrg-gcmsiv by David Benjamin · 1 year, 11 months ago
- 77b6f25 Replace interface{} with any by David Benjamin · 1 year, 11 months ago
- 86ada1e Add new APIs for creating RSA keys by David Benjamin · 1 year, 11 months ago
- 048d21c Disable BlindingCacheConcurrency on FreeBSD. by David Benjamin · 1 year, 11 months ago
- b811a6c Add Kyber to runner tests by Adam Langley · 1 year, 11 months ago
- 9939e14c Invalidated cached RSA, DH, and DSA state when changing keys by David Benjamin · 1 year, 11 months ago
- 2f6409e Support WPA 3.1 "enterprise" mode. by Adam Langley · 2 years ago
- a02b743 runner: Remove an unnecessary use of AllCurves by David Benjamin · 1 year, 11 months ago
- d206f3d Move the old SPKAC types to their own section by David Benjamin · 2 years ago
- 691e45a Remove unimplemented SSL BIO_ctrl values by David Benjamin · 2 years ago
- 26669ff Don't copy all of bssl-sys into the CMake build directory by David Benjamin · 2 years ago
- b352546 Remove go:build ignore from convert_wycheproof by David Benjamin · 1 year, 11 months ago
- 0c7527b X509_sign, etc., should return the length of the signature on success by David Benjamin · 1 year, 11 months ago
- a0afd6a Add some missing includes by David Benjamin · 1 year, 11 months ago
- d42c4e4 Specify the TLS cipher order more straightforwardly by David Benjamin · 2 years ago
- d5f3a9e Squeeze a block at a time when computing the matrix in Kyber by David Benjamin · 1 year, 11 months ago
- 4b6d950 Align TRUST_TOKEN_pst_v1_voprf with draft-21 of VOPRF by Steven Valdez · 2 years ago
- ece1f86 Re-add go:build ignore lines by David Benjamin · 1 year, 11 months ago
- 5748eb8 Move convert_wycheproof into its own package by David Benjamin · 1 year, 11 months ago
- edf7662 Allow passing extra flags to BoGo shim by Roland Shoemaker · 1 year, 11 months ago
- de2d610 Remove TLS_RSA_WITH_NULL_SHA by David Benjamin · 2 years ago
- b0b1f9d Only rerun bindgen when its dependencies change by David Benjamin · 2 years ago
- ac6d558 Add mechanism for deprecated declarations. by Bob Beck · 2 years ago
- d5ac273 Spell includes in wrapper.h like the rest of the project by David Benjamin · 2 years ago
- bcecc7d Replace sort.Sort with sort.Slice by David Benjamin · 2 years ago
- a38d600 Fix allowlist regex in bindgen invocation by David Benjamin · 2 years ago
- 1a5570b Update docs to recommend a much more convenient CMake invocation by David Benjamin · 2 years ago
- 26ead95 Trim some unused XN_FLAG_* values by David Benjamin · 2 years ago
- e2d1401 Remove --size_t-is-usize from bindgen call by David Benjamin · 2 years ago
- 3e91d37 Clarify in ssl.h documentation not to use the verify callback by David Benjamin · 2 years ago
- 58a4094 Move the X509 time functions under "Convenience functions" by David Benjamin · 2 years ago
- 437ef4d Remove the X509at_* functions by David Benjamin · 2 years ago
- 787713b Organize X509_ATTRIBUTE functions into sections. by David Benjamin · 2 years ago
- d9f209b Document a pile of X509 print functions by David Benjamin · 2 years ago