)]}'
{
  "commit": "be0fdf7fde7c96c54b463fa3e5033298201fde94",
  "tree": "05984df88eacbfdddab582f1364d6f4ab93dda97",
  "parents": [
    "55b069de8d3ed53fe578fde5c15499cc4c177af5"
  ],
  "author": {
    "name": "Andres Erbsen",
    "email": "andreser@google.com",
    "time": "Tue May 30 02:31:45 2023 +0000"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Thu Jun 01 19:31:29 2023 +0000"
  },
  "message": "Constant-time test that X25519 has a single path.\n\nAll inputs are marked as secret. This is not to support a use case for\ncalling X25519 with a secret *point* as the input, but rather to ensure\nthat the choice of the point cannot influence whether the scalar is\nleaked or not. Same for the initial contents of the output buffer.\n\nThis is a conservative choice and may be revised in the future.\n\nChange-Id: I595d454a8e1fdc409912aee751bb0b3cf46f5430\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/60186\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "381bd5b188a7f33a9ff40851f049164d9ed60b0f",
      "old_mode": 33188,
      "old_path": "crypto/curve25519/x25519_test.cc",
      "new_id": "f512d01ab1d1bf0b4b72d125d3371c580ba6ccf4",
      "new_mode": 33188,
      "new_path": "crypto/curve25519/x25519_test.cc"
    }
  ]
}
