)]}'
{
  "commit": "2e79498d3fbb3aadad6c57baf12134fef48f384b",
  "tree": "620cc9b2fe20bf1b99a7a63e93f88ab7fbd8421d",
  "parents": [
    "d939c1829b999fe62411a7c74b106275b5a19b7e"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Sat Jan 17 17:26:34 2026 -0500"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Sun Jan 25 14:17:40 2026 -0800"
  },
  "message": "Update ECDSA comments and logic for FIPS 186-5\n\nThe main consequence is that FIPS 186-5 now leaves the retry when\nrejection sampling fails as an exercise to the reader, and the minimum\ngroup order is 224 bits.\n\nAs part of this, move the group order check closer to where it is in\nFIPS 186-5 (the keygen and nonce generation algorithms). I think they\ngot moved around as the code evolved.\n\nUpdate-Note: Matching FIPS 186-5\u0027s new requirements, callers using the\nlegacy-only custom curves machinery will no longer be able to construct\ncurves less than 224 bits. This has no impact on the supported named\ncurves.\n\nChange-Id: I0539b54434f755d67102799a296b61ad737ed165\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/87809\nCommit-Queue: Adam Langley \u003cagl@google.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "fdfeb2982b04b604881c9d05c69690998be1e9e5",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/bn/random.cc.inc",
      "new_id": "591cb8fab2f4223e937dc336d81b29bb8561ab20",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/bn/random.cc.inc"
    },
    {
      "type": "modify",
      "old_id": "1dd2893c3f7842e1e3fdb801d4d58092f35ec88c",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/ec/ec_key.cc.inc",
      "new_id": "d5133a70c84a5958ea3ce0604e301c36597d10ea",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/ec/ec_key.cc.inc"
    },
    {
      "type": "modify",
      "old_id": "0ea0d1d515d9b1039d91c5a56d476ae3ec7bf920",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/ecdsa/ecdsa.cc.inc",
      "new_id": "7ff46f9efbbd0cb93c99e72e25b80d02b278102f",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/ecdsa/ecdsa.cc.inc"
    }
  ]
}