- e0900ac Mirror dsa.h's deprecation notice in dh.h. by David Benjamin · 4 years, 7 months ago
- cefbf9c Const-correct X509_get0_extensions. by David Benjamin · 4 years, 7 months ago
- 3743aaf Add SSL_CIPHER_get_protocol_id. by David Benjamin · 4 years, 7 months ago
- 9adcb0a Add TrustTokenV2. by Steven Valdez · 4 years, 7 months ago
- ee4af9e Add X509_get_pathlen and X509_REVOKED_get0_extensions. by David Benjamin · 4 years, 8 months ago
- 5eeaf30 Add some accommodations for FreeRDP by Adam Langley · 4 years, 7 months ago
- ca3f243 Require non-NULL store in X509_STORE_CTX_init. by David Benjamin · 4 years, 8 months ago
- 6d70353 Const-correct X509V3_CONF_METHOD. by David Benjamin · 4 years, 8 months ago
- 6247347 Avoid unions in X509_NAME logic. by David Benjamin · 4 years, 8 months ago
- 49e9f67 Bump OPENSSL_VERSION_NUMBER to 1.1.1. by David Benjamin · 4 years, 7 months ago
- a82cfdf Document more of x509.h. by David Benjamin · 4 years, 8 months ago
- 662bfad Fix potential leak in bssl::Array::Shrink. by David Benjamin · 4 years, 7 months ago
- 6ad3b46 Remove ASN1_STRING_length_set. by David Benjamin · 4 years, 8 months ago
- 6a263ce Revert "Check AlgorithmIdentifier parameters for RSA and ECDSA signatures." by Adam Langley · 4 years, 7 months ago
- bc24805 Implement PSK variants of HPKE setup functions. by Daniel McArdle · 4 years, 8 months ago
- bef6a2f acvp: support working with files. by Adam Langley · 4 years, 8 months ago
- 4ef5de0 Document a few more functions in x509.h. by David Benjamin · 4 years, 8 months ago
- 298d8be Add subject key ID and authority key ID accessors. by David Benjamin · 4 years, 8 months ago
- 1c58648 Remove sxnet and pkey_usage_period extensions. by David Benjamin · 4 years, 10 months ago
- 125a38f Const-correct various X509 functions. by David Benjamin · 4 years, 8 months ago
- 95d8eaa Make X509_set_not{Before,After} functions rather than macros. by David Benjamin · 4 years, 8 months ago
- 48cb69f Add X509_get0_uids from OpenSSL 1.1.0. by David Benjamin · 4 years, 8 months ago
- 9372f38 Bound RSA and DSA key sizes better. by David Benjamin · 4 years, 8 months ago
- c947efa Add set1 versions of X509 timestamp setters. by David Benjamin · 4 years, 8 months ago
- edd4c5f Consistently sort generated build files. by David Benjamin · 4 years, 8 months ago
- 5630891 delocate: use 64-bit GOT offsets in the large memory model. by Adam Langley · 4 years, 8 months ago
- 430ccd6 Update HPKE implementation and test vectors to draft-irtf-cfrg-hpke-05. by Daniel McArdle · 4 years, 8 months ago
- d3a5b87 Handle NULL arguments in some i2d_* functions. by Adam Langley · 4 years, 8 months ago
- a0b49d6 aarch64: support BTI and pointer authentication in assembly by Tamas Petz · 4 years, 10 months ago
- dcd6e44 Support delegated credentials verison 06 by Watson Ladd · 4 years, 8 months ago
- 0cd846f delocation: large memory model support. by Adam Langley · 4 years, 9 months ago
- 74161f4 Enforce presence of ALPN when QUIC is in use. by Nick Harper · 4 years, 9 months ago
- 7d3a24d Fix the naming of alert error codes. by David Benjamin · 4 years, 9 months ago
- 70fee17 Use golang.org/x/crypto in runner. by David Benjamin · 4 years, 10 months ago
- 281a8f5 Disable ClientHello padding for QUIC. by Nick Harper · 4 years, 9 months ago
- db129f3 Add X509_SIG_get0 and X509_SIG_getm. by David Benjamin · 4 years, 9 months ago
- 8b601c8 Implement HPKE. by Daniel McArdle · 4 years, 9 months ago
- cac9392 Disallow TLS 1.3 compatibility mode in QUIC. by Nick Harper · 5 years ago
- 54858b6 Switch clang-format IncludeBlocks to Preserve. by David Benjamin · 4 years, 9 months ago
- d054e1b Fix unterminated clang-format off. by David Benjamin · 4 years, 9 months ago
- 1a63507 Add line number to doc.go error messages. by Daniel McArdle · 4 years, 9 months ago
- f0558c3 Kick the bots. by Adam Langley · 4 years, 9 months ago
- 8c0a6eb Add a JSON output to generate_build_files.py. by David Benjamin · 4 years, 9 months ago
- 83b74c6 Add details of 20190808 FIPS certification. by Adam Langley · 4 years, 9 months ago
- 8f88b27 Link to ws2_32 more consistently. by David Benjamin · 4 years, 9 months ago
- de19612 Allow explicitly-encoded X.509v1 versions for now. by David Benjamin · 4 years, 9 months ago
- eda849d Opaquify PKCS8_PRIV_KEY_INFO. by David Benjamin · 4 years, 10 months ago
- 5d7c2f8 Implement i2d_PUBKEY and friends without crypto/asn1. by David Benjamin · 4 years, 10 months ago
- d0637e9 Remove TRUST_TOKEN_experiment_v0. by Steven Valdez · 4 years, 11 months ago
- b9fbf40 Clarify in-place rules for low-level AES mode functions. by David Benjamin · 4 years, 10 months ago
- fb0c05c acvp: add CMAC-AES support. by Adam Langley · 4 years, 10 months ago
- c655065 acvp: add SP800-108 KDF support. by Adam Langley · 4 years, 10 months ago
- 25638f0 Remove x509->name. by David Benjamin · 4 years, 10 months ago
- 939d426 Maybe build for AArch64 Windows. by Adam Langley · 4 years, 10 months ago
- e2abade sha1-x86_64: fix CFI. by Adam Langley · 4 years, 10 months ago
- 5d74463 Use |crypto_word_t| and |size_t| more consistently in ECC scalar recoding. by Brian Smith · 4 years, 10 months ago
- 7361ee4 Enable shaext path for sha1. by Ilya Tokar · 4 years, 10 months ago
- 5fa22ed Avoid relying on SSL_get_session's behavior during the handshake. by David Benjamin · 4 years, 10 months ago
- b3c5ac5 Add a -wait-for-debugger flag to runner. by David Benjamin · 4 years, 10 months ago
- 86f86cb Add missing OPENSSL_EXPORT to X509_get_X509_PUBKEY. by David Benjamin · 4 years, 10 months ago
- 430a742 Const-correct various functions in crypto/asn1. by David Benjamin · 4 years, 10 months ago
- d1d8eee Remove uneeded switch statement. by Pete Bentley · 4 years, 10 months ago
- 33f8d33 Convert X.509 accessor macros to proper functions. by David Benjamin · 4 years, 10 months ago
- d206a11 Remove X509_CINF_get_issuer and X509_CINF_get_extensions. by David Benjamin · 4 years, 10 months ago
- beaf594 Remove X509_get_signature_type. by David Benjamin · 4 years, 10 months ago
- 991d31b clang-format x509.h and run comment converter. by David Benjamin · 4 years, 10 months ago
- 9dd9d4f Check AlgorithmIdentifier parameters for RSA and ECDSA signatures. by David Benjamin · 4 years, 10 months ago
- a3cc778 Remove some unimplemented prototypes. by David Benjamin · 4 years, 10 months ago
- dd86e75 Check the X.509 version when parsing. by David Benjamin · 4 years, 10 months ago
- fd86eaa Fix x509v3_cache_extensions error-handling. by David Benjamin · 4 years, 10 months ago
- cbac9c3 Work around Windows command-line limits in embed_test_data.go. by David Benjamin · 4 years, 10 months ago
- 5ddc5b1 Move crypto/x509 test data into its own directory. by David Benjamin · 4 years, 10 months ago
- 1b81947 Test resumability of same, different, and default ticket keys. by David Benjamin · 4 years, 10 months ago
- c179854 Fixes warning when redefining PATH_MAX when building with MINGW. by Jesko Jochum · 4 years, 10 months ago
- 8afdbf0 Abstract fd operations better in tool. by David Benjamin · 4 years, 10 months ago
- 884614c Use CMAKE_SIZEOF_VOID_P instead of CMAKE_CL_64 by David Benjamin · 4 years, 10 months ago
- cd8f3d3 Enforce the keyUsage extension in TLS 1.2 client certs. by David Benjamin · 4 years, 10 months ago
- 72b095d Reword some comments. by David Benjamin · 4 years, 10 months ago
- 7f90eda Add “Z Computation” KAT. by Adam Langley · 4 years, 10 months ago
- 9c256d1 acvptool: handle negative sizeConstraint. by Adam Langley · 4 years, 10 months ago
- 0313b59 Let memory hooks override the size prefix. by Adam Langley · 4 years, 10 months ago
- fbaf1c0 acvptool: go fmt by Adam Langley · 4 years, 10 months ago
- 251b516 Assert md_size > 0. by David Benjamin · 4 years, 10 months ago
- 88024df Remove -enable-ed25519 compat hack. by Adam Langley · 4 years, 11 months ago
- 53a17f5 Add a |SSL_process_tls13_new_session_ticket|. by Adam Langley · 5 years ago
- 2309f64 Use ctr32 optimizations for AES_ctr128_encrypt. by David Benjamin · 5 years ago
- 8819e0b Test AES mode wrappers. by David Benjamin · 5 years ago
- 81a998a Bump minimum CMake version. by David Benjamin · 5 years ago
- 8519432 Modify how QUIC 0-RTT go/no-go decision is made. by Nick Harper · 5 years ago
- 9701e84 Remove RAND_set_urandom_fd. by David Benjamin · 5 years ago
- 7b31d69 Document that getrandom support must be consistent. by David Benjamin · 5 years ago
- 8f12996 Fix docs link for SSL_CTX_load_verify_locations by Anna Sarai Rosenberg · 5 years ago
- 78b3337 Fix TRUST_TOKEN experiment_v1 SRR map. by Steven Valdez · 5 years ago
- 3e4dfbb Add CRYPTO_pre_sandbox_init. by David Benjamin · 5 years ago
- 9cf9d3e Still query getauxval if reading /proc/cpuinfo fails. by David Benjamin · 5 years ago
- be28dd6 Add missing header to ec/wnaf.c by Nick Harper · 5 years ago
- b7acfff Fix OPENSSL_TSAN typo. by David Benjamin · 5 years ago
- 49e95dc Fix p256-x86_64-table.h indentation. by David Benjamin · 5 years ago
- 1274d1d Enable avx2 implementation of sha1. by Ilya Tokar · 5 years ago
- d4d501c Trim Z coordinates from the OPENSSL_SMALL P-256 tables. by David Benjamin · 5 years ago