)]}'
{
  "commit": "b0251b12956ed8e9e41f7bf0bbb02b337e17ad52",
  "tree": "27f8a4cfd913439ebb3eb9799e8be195da4db680",
  "parents": [
    "8abcb6fb41cbb29e93ed82048bb3d59bc8e6717f"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Fri Apr 21 17:56:08 2023 -0400"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Tue May 23 00:57:56 2023 +0000"
  },
  "message": "Disable TLS_RSA_WITH_3DES_EDE_CBC_SHA by default\n\n3DES has long been obsolete. It uses a small block size, making it\nvulnerable to attacks at sufficiently high volumes (see\nhttps://sweet32.info/, CVE-2016-6329). On top of this, it is slow even\nwithout constant-time protections, making it a DoS risk for server\noperators.\n\nSince the alias \"3DES\" has existed in OpenSSL for a long time, keep that\none working, to reduce the risk of breaking someone who specifically\nwanted 3DES enabled.\n\nUpdate-Note: This CL disables TLS_RSA_WITH_3DES_EDE_CBC_SHA by default.\nSpecifically, it will not be included unless explicitly listed in the\ncipher config, as \"TLS_RSA_WITH_3DES_EDE_CBC_SHA\", its legacy OpenSSL\nname \"DES-CBC3-SHA\", or the alias \"3DES\". To restore it, add one of the\nabove to your cipher config.\n\nBug: 599\nChange-Id: Ib94a2f149b3bfa240ef1008b9f3729a9c10368fb\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/59425\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Adam Langley \u003cagl@google.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "abf5e3d4aae6a9304fe1f8fa60ebae4b39076942",
      "old_mode": 33188,
      "old_path": "ssl/ssl_cipher.cc",
      "new_id": "23af474833c7f79822547eec9ecde8b1541997d9",
      "new_mode": 33188,
      "new_path": "ssl/ssl_cipher.cc"
    },
    {
      "type": "modify",
      "old_id": "be00e7c342759d3059d77cbfd938438df96b5c33",
      "old_mode": 33188,
      "old_path": "ssl/ssl_test.cc",
      "new_id": "4f6a0e6165d4a808592db42477f180edfa05d057",
      "new_mode": 33188,
      "new_path": "ssl/ssl_test.cc"
    },
    {
      "type": "modify",
      "old_id": "864c643e18e36687482e43fa5cb0595e711e6972",
      "old_mode": 33188,
      "old_path": "ssl/test/fuzzer.h",
      "new_id": "4888a39f810596cea4a711f3d84d22b93e33b6b1",
      "new_mode": 33188,
      "new_path": "ssl/test/fuzzer.h"
    },
    {
      "type": "modify",
      "old_id": "86daca2724aee907e99e117293ac688c4beee468",
      "old_mode": 33188,
      "old_path": "ssl/test/runner/runner.go",
      "new_id": "da0795bbb95159af4e4229be90a5e4217bba3967",
      "new_mode": 33188,
      "new_path": "ssl/test/runner/runner.go"
    }
  ]
}