)]}'
{
  "commit": "63c8e81ace7f21269e482429860ca28537cafe3b",
  "tree": "a50b5fb49e8d24dc186a3d46befbec8055f6ae90",
  "parents": [
    "58da9b0d721fd807279f4e3898741c92cf43bdbd"
  ],
  "author": {
    "name": "Lukas Zobernig",
    "email": "zlukas@google.com",
    "time": "Tue Oct 28 14:15:27 2025 +0000"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Tue Oct 28 08:35:29 2025 -0700"
  },
  "message": "Fix potential constant time issue\n\nThe old code contained an explicit \"nibble % 5\", which could have\ngenerated a non-constant time division operation. This change\nreplaces it by an equivalent mul-shift-mul that is manifest\nconstant time.\n\nIt appears that Clang, GCC, and MSVC will all replace constant\ndivisions with such a construction with optimizations on, so this\nis unlikely to have caused a leak in practice. However, Clang and\nMSVC will emit division instructions with optimizations off.\n\nThanks to Filippo Valsorda for reporting this.\n\nBug: 455829614\nChange-Id: I7bffaaf4fc79196b27631de6edd8c97b0ec97a89\nSigned-off-by: Lukas Zobernig \u003czlukas@google.com\u003e\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/83348\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "abd9c97ca0b947a21c7f0dc3ddb2db1ce4544caa",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/mldsa/mldsa.cc.inc",
      "new_id": "08716187dce3417b5dd66a1050ebeec34425780a",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/mldsa/mldsa.cc.inc"
    }
  ]
}