)]}'
{
  "commit": "9c9b2c219fc817940cb31cc0d055c61c5986e058",
  "tree": "30b2d4f0113d735af0ee8ec01c872d942403f825",
  "parents": [
    "ec64d7e01a7ca30957c8bce38f6ad989e0b8ced1"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Thu Feb 09 19:22:25 2023 -0500"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Tue Feb 14 15:12:45 2023 +0000"
  },
  "message": "Align the hash-to-curve formulation with draft-16.\n\ndraft-07 to draft-16 is mostly editorial, but there were a few notable\nchanges:\n\n- Empty DST values are forbidden.\n\n- The sample implementation for map_to_curve_simple_swu has completely\n  changed. The new formulation has the same performance (if not a smidge\n  faster), and aligning with the spec seems generally useful.\n\n- P-384 is now paired with SHA-384, not SHA-512. As this would be a\n  breaking change for the trust tokens code, I\u0027ve left that in. A\n  follow-up CL will add implementations of draft-16, which is expected\n  to match the final draft.\n\nBefore:\nDid 77000 hash-to-curve P384_XMD:SHA-512_SSWU_RO_ operations in 4025677us (19127.2 ops/sec)\nDid 7156000 hash-to-scalar P384_XMD:SHA-512 operations in 4000385us (1788827.8 ops/sec)\n\nAfter:\nDid 77000 hash-to-curve P384_XMD:SHA-512_SSWU_RO_ operations in 4009708us (19203.4 ops/sec) [+0.4%]\nDid 7327000 hash-to-scalar P384_XMD:SHA-512 operations in 4000477us (1831531.6 ops/sec) [+2.4%]\n\nBug: 1414562\nChange-Id: Ic3c37061e325250d5d8723fd9aa263930c6023cf\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/57146\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Steven Valdez \u003csvaldez@google.com\u003e\nCommit-Queue: Steven Valdez \u003csvaldez@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "fa7ff59097d9022f2eccf2a3729f30e1effaa8b3",
      "old_mode": 33188,
      "old_path": "crypto/ec_extra/hash_to_curve.c",
      "new_id": "dca4c24aa1834df4a09a28a2670d8a4672083d11",
      "new_mode": 33188,
      "new_path": "crypto/ec_extra/hash_to_curve.c"
    },
    {
      "type": "modify",
      "old_id": "55314ac7306797cf28ae2d6116ff619b37c8d7c0",
      "old_mode": 33188,
      "old_path": "crypto/ec_extra/internal.h",
      "new_id": "ef93b56ba8ad68fcc8abb5c90ee4c2036ba5e3fe",
      "new_mode": 33188,
      "new_path": "crypto/ec_extra/internal.h"
    },
    {
      "type": "modify",
      "old_id": "88665b2e464f198fb61b3618fe6da752a0de888a",
      "old_mode": 33188,
      "old_path": "crypto/fipsmodule/ec/ec_test.cc",
      "new_id": "bb93e55a8a88e7358c068ef8bd8f6007140f2ef6",
      "new_mode": 33188,
      "new_path": "crypto/fipsmodule/ec/ec_test.cc"
    }
  ]
}