)]}'
{
  "commit": "5a3a1e22ceef5e9dbb9577ee2df3a766488ab4bc",
  "tree": "f860f41fdf149d1ef8712c0249658a56442aa0b6",
  "parents": [
    "5b6b14d9966383ae5240f659fd3ed2e7e9e09a91"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Wed Mar 26 12:47:28 2025 -0400"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Wed Mar 26 10:20:05 2025 -0700"
  },
  "message": "Revert \"Remove Karatsuba multiplication in BIGNUM\"\n\nThis reverts commit 89eb6ddbf52887631ca45ad2242862515cd698ab. Sadly,\nexactfloat, a decidedly non-cryptographic use case, uses BN_mul with\nlarge enough inputs that Karatsuba is actually a load-bearing\noptimization. (They\u0027re also why we need to support allocating giant\nBIGNUMs.)\n\nThis CL just reverts the change for now. We should revise thresholds and\nrearrange code so that this code is not reachable from any of the\ncryptographic code. From there, we can revert the work to make it\nconstant-time, which will be better from exactfloat and also remove some\ncomplexity.\n\nBug: 406497222\nChange-Id: I08b6d12e19c2a6ae741ac490d81cc534ba260145\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/78047\nCommit-Queue: Bob Beck \u003cbbe@google.com\u003e\nReviewed-by: Bob Beck \u003cbbe@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "f28e140764f8068459bfd0de993a5bbe5f2f4dbd",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/bn/mul.cc.inc",
      "new_id": "4d7a9190f65a4961516be0c0f6be08de6e7b33e3",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/bn/mul.cc.inc"
    }
  ]
}
