1. f00ee80 pki: Import accumulated test vectors for Merkle Trees by Lily Chen · 6 days ago main
  2. 86101b7 Make all non-asm-included BoringSSL headers at least include <openssl/base.h>. by Rudolf Polzer · 6 weeks ago
  3. 4a92579 Start migrating HPKE to use EVP_KEM by Lily Chen · 8 weeks ago
  4. 876bb72 Make EVP_PKEY_dup_ref work for nullptr by Lily Chen · 4 days ago
  5. c35293f Provide `llvm-ranlib` to enable LTO on Linux/Clang. by Rudolf Polzer · 4 days ago
  6. bcc1137 `linux_clang_lto`: use the `lld` linker. by Rudolf Polzer · 4 days ago
  7. c5c273f Partial rollback of I79853ef115ee6c86bc58acc9adedf4c16a6a6964. by Rudolf Polzer · 4 days ago
  8. 4ae8cf5 Fix a bunch more tests that get an error but don't clear the error queue. by Rudolf Polzer · 7 weeks ago
  9. 1175b7e Enable Clang LTO builder (on mac_aarch64) on CI and CQ. by Rudolf Polzer · 4 days ago
  10. 3976bc8 Enable GCC LTO builder on CI and CQ. by Rudolf Polzer · 5 days ago
  11. 9bb13b0 Add a `mac_arm64_lto` builder too. by Rudolf Polzer · 4 days ago
  12. bd92406 pki: Allow Merkle subtrees of size 0 by Lily Chen · 6 days ago
  13. 4cabe8c EVP_KEM: Expose external entropy encap methods for testing only by Lily Chen · 7 days ago
  14. 5d6989e Fix some clang-tidy findings by Lily Chen · 5 days ago
  15. 0ce57bb Update version for Bazel Central Repository to 0.20260903.0 by Lily Chen · 5 days ago 0.20260903.0
  16. 278e883 Add includable-only builders for LTO. by Rudolf Polzer · 5 days ago
  17. 4ebe638 Test that SSL_write(0) does not write a record by David Benjamin · 6 days ago
  18. 88dcf4b Clarify the return values from SSL operations by David Benjamin · 6 days ago
  19. be70b80 Fix up some BIO documentation by David Benjamin · 6 days ago
  20. 850a037 ML-DSA: Add branchless pre-paths to `scalar_from_keccak_block_vartime`. by Rudolf Polzer · 7 days ago
  21. c66572a ML-DSA: Use fewer branches in `scalar_uniform_block`. by Rudolf Polzer · 6 days ago
  22. 36d3eb4 Use Unicode characters for math in code comments by Lily Chen · 11 days ago
  23. e1fa150 Import tests for large Merkle Tree inclusion and consistency proofs by Lily Chen · 8 days ago
  24. 01a3425 curve25519: Elligator 2 map_to_curve implementation by Xiangfei Ding · 3 weeks ago
  25. 79b7305 ML-DSA: add Keccak x4 support. by Rudolf Polzer · 7 days ago
  26. e9b9cf0 ML-KEM: Add a branchless pre-path to `scalar_from_keccak_block_vartime`. by Rudolf Polzer · 8 days ago
  27. f341ba4 Update to Go 1.27.0 by David Benjamin · 8 days ago
  28. 784fcaf runner: Replace redundant flagCurves and flagCertTypes functions by Lily Chen · 8 days ago
  29. 0fd9b5f Add APIs for configuring TLS 1.3 ciphers with equipreference groups by Lily Chen · 4 weeks ago
  30. 8791438 Remove stray temporary file by David Benjamin · 8 days ago
  31. ac39ea6 [MTCs] remove deprecated MTCAnchor constructor by Matt Mueller · 11 days ago
  32. 281fb6d Use SSLCipherPreferenceList for TLS 1.3 ciphers by Lily Chen · 3 weeks ago
  33. cf44c64 Leave intermediates partially reduced in ML-KEM NTT by Rudolf Polzer · 8 days ago
  34. 3c7d224 rust: bssl-tls: Gate all Apple platforms by Xiangfei Ding · 9 days ago
  35. a074f28 Leave intermediates partially reduced in ML-DSA NTT by David Benjamin · 13 days ago
  36. da02aac [MTCs] change MTCAnchor trusted_subtrees_ to a vector instead of map by Matt Mueller · 13 days ago
  37. 533902f Give SSL_CREDENTIAL an optional session ID context by David Benjamin · 13 days ago
  38. b110de1 runner: Clear remaining warnings from gopls by David Benjamin · 12 days ago
  39. b7698d1 runner: Remove the implicit session ticket behavior by David Benjamin · 12 days ago
  40. 193233b ACVP: test SLH-DSA-SHAKE-256f. by Moss Hsu · 13 days ago
  41. 997bafb Gate VAES codepaths on is_hwaes to fix a theoretical concern by David Benjamin · 13 days ago
  42. 9e1c472 Use traits structs for StackAllocated and StackAllocatedMovable by Lily Chen · 3 weeks ago
  43. 440b43a Constant-time validation for hash-to-curve, etc by David Benjamin · 3 weeks ago
  44. 0f07374 Implement EC_wpa3_sae_hunt_and_peck_p256 by David Benjamin · 14 days ago
  45. b8ea4d5 Move more of EC compressed coordinate handling to EC_FELEM by David Benjamin · 3 weeks ago
  46. 789ccba Const correct SSL{_CTX}_get_ciphers calls by Lily Chen · 2 weeks ago
  47. eb80152 CI console: Specify category and short_name explicitly for all builders by Lily Chen · 2 weeks ago
  48. 5178dcb rust: Allow panic! and expect() by Xiangfei Ding · 2 weeks ago
  49. 1672ef3 rust: bssl-tls: Unstage wants_data by Xiangfei Ding · 2 weeks ago
  50. c6ff8e4 Update some Go deps by David Benjamin · 2 weeks ago
  51. 7445deb OpenSSL Advisory: August 25th, 2026 (BoringSSL Not Affected) by David Benjamin · 2 weeks ago
  52. a199863 rust: bssl-tls: Drive handshake to completion by Xiangfei Ding · 3 weeks ago
  53. 385a112 Tighten up SSLCipherPreferenceList by Lily Chen · 3 weeks ago
  54. c5cbc0f Remove SSL{_CTX}_set_aes_hw_override_for_testing by Lily Chen · 3 weeks ago
  55. 269525e CI/CQ: Promote linux_clang_shared_{rel_}compile to CQ and CI by Lily Chen · 3 weeks ago
  56. 7496006 rust: bssl-tls: Call inherent flush when flushing through std io trait by Xiangfei Ding · 3 weeks ago
  57. fc3c79c rust: bssl-tls: parse_all_from_pem should recover from BIO failure by Xiangfei Ding · 3 weeks ago
  58. a0689af Add two compatibility headers for code written against current OpenSSL. by Rudolf Polzer · 3 weeks ago
  59. aebe361 rust: bssl-tls: Session attachment should only be possible in builder by Xiangfei Ding · 3 weeks ago
  60. 6b1d1d4 rust: bssl-tls: Drop the async private key task by Xiangfei Ding · 3 weeks ago
  61. f0e21a5 Reland "crypto/x509: Verify standalone Merkle Tree Certs (MTCs)" by Lily Chen · 3 weeks ago
  62. d4c457d CI/CQ: Test clang shared library builds on Linux by Lily Chen · 3 weeks ago
  63. c0e4419 ACVP: test non-canonical ML-KEM keys. by Moss Hsu · 3 weeks ago
  64. 91a7e30 rust: bssl-tls: Eliminate ambiguity on transport state by Xiangfei Ding · 3 weeks ago
  65. 17645ee rust: bssl-tls: Fix flush protocol by Xiangfei Ding · 3 weeks ago
  66. 179af5a CQ: enable `ios64_prefixed_compile` by default. by Rudolf Polzer · 3 weeks ago
  67. 96a007f Revert "crypto/x509: Verify standalone Merkle Tree Certs (MTCs)" by Lily Chen · 3 weeks ago
  68. 6f95ff3 [MTCs] add debug logs in VerifyMTC by Matt Mueller · 3 weeks ago
  69. f89068d crypto/x509: Verify standalone Merkle Tree Certs (MTCs) by Lily Chen · 4 months ago
  70. 42f9f5c Silence a false positive from audit_symbols.go by David Benjamin · 3 weeks ago
  71. 496f839 [MTCs] remove draft-davidben-08 support by Matt Mueller · 3 weeks ago
  72. da182b2 Add `X509_V_FLAG_ALLOW_TIMEZONE_OFFSET`. by Rudolf Polzer · 3 weeks ago
  73. 2bf5d45 Document ML-KEM key check wrapper commands by Moss Hsu · 3 weeks ago
  74. ca53eec5 compare_benchmark: fix ops/sec output. by Rudolf Polzer · 3 weeks ago
  75. d9cace2 Fix symbol prefixing audit for libdecrepit and libpki. by Rudolf Polzer · 4 weeks ago
  76. 962ef49 rust: bssl-tls-tokio: Hyper I/O traits by Xiangfei Ding · 4 weeks ago
  77. a918221 [MTCs] update some tests to draft-plants-04 by Matt Mueller · 3 weeks ago
  78. 51da97b rust: bssl-tls: Async polling I/Os and Datagrams by Xiangfei Ding · 4 weeks ago
  79. af1e417 Rename ECDH benchmark -> ECDHComputeKey and add ECDHKeyGen. by Rudolf Polzer · 3 weeks ago
  80. 19c562e Remove CRYPTO_IOVEC_MAX. by Rudolf Polzer · 4 weeks ago
  81. 4211977 crypto: format curve25519 internal header by Xiangfei Ding · 3 weeks ago
  82. bb2b317 CMake: move symbol prefixing check to the run_tests stage. by Rudolf Polzer · 4 weeks ago
  83. defe581 Always enable X509_V_FLAG_TRUSTED_FIRST by David Benjamin · 4 weeks ago
  84. da0976d Fix symbol prefixing issues on Windows. by Rudolf Polzer · 3 weeks ago
  85. 405168d Enable CI/CQ-based symbol prefixing verification on all Win shared builds. by Rudolf Polzer · 4 weeks ago
  86. 7cc6f8a Enable CI/CQ-based symbol prefixing verification on all Win static builds. by Rudolf Polzer · 4 weeks ago
  87. 90f8d9e audit_symbols.go: show the origin (library filename) of offending symbols. by Rudolf Polzer · 4 weeks ago
  88. d83fe5d Enable CI/CQ-based symbol prefixing verification on all Mac static builds. by Rudolf Polzer · 4 weeks ago
  89. 2541aa2 Enable CI/CQ-based symbol prefixing verification on all Linux static builds. by Rudolf Polzer · 4 weeks ago
  90. b076083 crypto/bytestring: Add helper for relative OID from DER to text into CBB by Lily Chen · 4 weeks ago
  91. 30a18e7 Add ephemeral ECDH benchmark by Miriam Polzer · 4 weeks ago
  92. c9aaa83 Suppress X509{,_REQ}_get1_email fallback to subject for malformed SAN by Lily Chen · 4 weeks ago
  93. 5f1bc73 Fix some IWYU from clang-tidy by Lily Chen · 4 weeks ago
  94. eae46df Remove the old F5 padding workaround by David Benjamin · 4 weeks ago
  95. 3c31f33 Document the per-encoder method for fixing OpenSSL's broken defaults by David Benjamin · 7 weeks ago
  96. 017c345 crypto/x509: Add a helper to get cached TBS cert or else marshal it by Lily Chen · 10 weeks ago
  97. 3dd9238 OpenSSL Advisory: August 13th, 2026 (BoringSSL Not Affected) by David Benjamin · 4 weeks ago
  98. 7c1efd8 Update version for Bazel Central Repository to 0.20260813.0 by Lily Chen · 4 weeks ago 0.20260813.0
  99. 6a5f579 Bump BORINGSSL_API_VERSION by Stefano Duo · 4 weeks ago
  100. ef0c072 Fix ACVP RSA PSS. by Adam Langley · 4 weeks ago