1. 1ad43d6 Sync flags from `CMakeLists.txt` to `util/util.bzl`. by Rudolf Polzer · 7 days ago main
  2. 6ac7ca1 Update PRNG docs to reflect recent changes by David Benjamin · 2 days ago
  3. 2d3fbe0 Fix constant_time_conditional_memxor on some input lengths by David Benjamin · 3 days ago
  4. 63c8e81 Fix potential constant time issue by Lukas Zobernig · 3 days ago
  5. 58da9b0 Add an external mu variant of ML-DSA verification by Andrew Scull · 2 weeks ago
  6. 249d70e Bump android-18 to android-21 on CI by David Benjamin · 4 days ago
  7. b5e7698 Update Android NDK to r27d on CI by David Benjamin · 6 months ago
  8. 945f4a5 Spellcheck the codebase by David Benjamin · 6 days ago
  9. b929002 Ensuse self tests run for ML-DSA prehash signing by Andrew Scull · 2 weeks ago
  10. 5dd89f3 Run ML-DSA Wycheproof verify tests through EVP too by David Benjamin · 7 days ago
  11. a733dd8 Set `-fno-strict-aliasing` when building with bazel. by Rudolf Polzer · 8 days ago
  12. ea1b595 runner: Don't parse zero-length OCSP responses in tests by David Benjamin · 8 days ago
  13. aacd493 Add basic integration with ML-DSA and EVP by David Benjamin · 3 weeks ago
  14. 5b58c63 EVP_DecryptUpdate: fix comment about required buffer size. by Rudolf Polzer · 8 days ago
  15. 740744b Update Wycheproof test vectors by Xiangfei Ding · 12 days ago
  16. 718fcf9 Include the public key in ML-DSA private keys by David Benjamin · 3 weeks ago
  17. 14f481e Add constants in nid.h for encoded OIDs by David Benjamin · 3 weeks ago
  18. 79f6cd3 Make the EVP_PKEY_ASN1_METHOD tables static by David Benjamin · 3 weeks ago
  19. 94d7b7e Fold p_${alg}_asn1.cc into p_${alg}.cc by David Benjamin · 3 weeks ago
  20. b3d8b40 Fix error handling for invalid TLS 1.3 status_request extensions by David Benjamin · 8 days ago
  21. 815857b Fix some more NULLs by hand by David Benjamin · 9 days ago
  22. 8225e19 Also modernize-use-nullptr the BCM fragments by David Benjamin · 9 days ago
  23. fdd1e37 IWYU fixes by David Benjamin · 9 days ago
  24. 910636c Add an /* up to */ comment to all subspan calls that may truncate. by Rudolf Polzer · 2 weeks ago
  25. 10f78d0 Make constant-sized calls to Span::first/last/subspan compile-time sized. by Rudolf Polzer · 2 weeks ago
  26. ee63f28 Initialize last_sample_ to fix maybe-uninitialized warning. by Ioanna Tzialla · 9 days ago
  27. a1edddc Also fix nullptr in internal header files by David Benjamin · 10 days ago
  28. d3f41b1 Apply modernize-use-nullptr fixes in all .cc files by David Benjamin · 10 days ago
  29. 8cb07f5 Add some more notes to CONTRIBUTING.md by David Benjamin · 10 days ago
  30. c641d65 Take another pass at CONTRIBUTING.md by David Benjamin · 10 days ago
  31. d18c9f2 Remove some easy OPENSSL_EXPORTs by David Benjamin · 3 weeks ago
  32. 4f36cc9 Add an assert for a correct buffer size. by Rudolf Polzer · 2 weeks ago
  33. cb744f0 Elide storage of bssl::Span size if known at compile time. by Rudolf Polzer · 2 weeks ago
  34. 7cad421 Uprev the CIPD version of infra/3pp/tools/perl/windows-amd64 by Rachael Newitt · 2 weeks ago
  35. db1a845 Add a PRESUBMIT.py script to check pregenerated files by Lily Chen · 2 weeks ago
  36. 338f44a Fix a bug when BN_mod_sqrt is called on very annoying primes by David Benjamin · 3 weeks ago
  37. 2067eac Remove NID_MLKEM1024 alias by David Benjamin · 3 weeks ago
  38. bc81f38 Document how BN_mod_sqrt handles the `in` parameter by David Benjamin · 3 weeks ago
  39. eae76e0 Test bssl::InplaceVector with a move-only type by David Benjamin · 3 weeks ago
  40. feedab0 Rust wrappers for external mu variant of ML-DSA by David Drysdale · 8 weeks ago
  41. 1a08739 Document that ASN1_STRING_set_by_NID enforces the bounds on the string by David Benjamin · 3 weeks ago
  42. 08cca1f Also accept incorrectly-encoded X509 v1 version fields again by David Benjamin · 3 weeks ago
  43. bc0c840 Prevent false positive in constant time checks by Miriam Polzer · 8 weeks ago
  44. 559e8f9 Allow empty extension lists in X.509 by Lily Chen · 3 weeks ago
  45. ed44d6f Use a less verbose pattern to heap-allocate temporaries in ML-DSA by David Benjamin · 3 weeks ago
  46. 2599a52 Const-correct the internal/external pointer casts by David Benjamin · 3 weeks ago
  47. 09ae7fe Don't have separate BCM and ML-KEM and ML-DSA types by David Benjamin · 3 weeks ago
  48. 87dff58 Unwind <openssl/bcm_public.h> by David Benjamin · 3 weeks ago
  49. 08a77f3 Add SSWU_NU encode-to-curve functions from RFC 9380. by Kevin Yeo · 4 weeks ago
  50. acb9ad1 Unify the HPKE implementation for ML-KEM. by Adam Langley · 4 weeks ago
  51. 89d22ce Update Go on CI by David Benjamin · 3 weeks ago
  52. 27774a2 Bump the macOS versions on our CI to macOS 12 or 13 by David Benjamin · 3 weeks ago
  53. a269c92 Deprecate SSL_CIPHER_get_name by David Benjamin · 4 weeks ago
  54. 7b91298 Remove some unused constants by David Benjamin · 4 weeks ago
  55. e95b5f0 Order TLS1_TXT_* and TLS1_CK_* in the same order by David Benjamin · 4 weeks ago
  56. 11b43a7 Remove TLS1_TXT_* constants for unimplemented cipher suites by David Benjamin · 4 weeks ago
  57. ae36844 Add OIDs and NIDs for ML-DSA-{44,65,87} and ML-KEM-{768,1024} by David Benjamin · 4 weeks ago
  58. 1ae7468 Restore TLS 1.3 TLS1_CK_* constants by David Benjamin · 4 weeks ago
  59. 8aa95db Remove TLS1_CK_* constants for unimplemented cipher suites by David Benjamin · 5 weeks ago
  60. ff160a8 Add additional check, as contract of function by poliudian-iv · 4 weeks ago
  61. 88d0c0f Bump BORINGSSL_API_VERSION to 37 by Lily Chen · 4 weeks ago
  62. 19ec2a1 Add API for caller to hint server's preferred key shares by Lily Chen · 4 weeks ago
  63. caf5961 Update CI dependencies by David Benjamin · 4 weeks ago
  64. 52bb398 Update Bazel deps and bump version for BCR by David Benjamin · 4 weeks ago 0.20251002.0
  65. f6b9ddd Add newer HPKE configuration to Rust wrappers. by Adam Langley · 4 weeks ago
  66. 21544c5 Rework ML-DSA modular operations by David Benjamin · 4 weeks ago
  67. 706742e Add ML-KEM-1024 option for HPKE. by Ioanna Tzialla · 4 weeks ago
  68. 480148c entropy_modulewrapper: set batch mode. by Adam Langley · 4 weeks ago
  69. 29b9f0f Add some missing includes by David Benjamin · 4 weeks ago
  70. ab74c15 Define X-Wing constants as expressions. by Ioanna Tzialla · 5 weeks ago
  71. b887f19 Add ML-KEM-768 option for HPKE. by Ioanna Tzialla · 5 weeks ago
  72. 42d9a13 Put the legacy cipher constants back in tls1.h and ssl3.h by David Benjamin · 5 weeks ago
  73. b2a2955 Introduce cipher constants without the leading 0x03 by David Benjamin · 5 weeks ago
  74. 91f3df0 Update status of FIPS 20250728 by Adam Langley · 5 weeks ago
  75. db63823 Tolerate nullptr in i2d_X509_NAME by David Benjamin · 5 weeks ago
  76. 2375765 Add some missing includes by David Benjamin · 5 weeks ago
  77. 857ca8d Fix and test other self-assignment cases in crypto/x509 by David Benjamin · 5 weeks ago
  78. 00676c4 Const-correct all i2d_*_bio functions by Lily Chen · 5 weeks ago
  79. 83297c2 Add ACVP modulewrapper for the jitter entropy SHA-384 implementation. by Adam Langley · 5 weeks ago
  80. a6b93d1 Document that HMAC_Final can have a nullptr `out_len`. by Adam Langley · 5 weeks ago
  81. d5e9aa6 Add a missing note about the hashes in ssl_compliance_policy_fips_202205 docs by David Benjamin · 5 weeks ago
  82. f12212b Fix bugs found by clangsa by poliudian-iv · 5 weeks ago
  83. 95f0592 Make setting an X509_NAME to itself work by David Benjamin · 5 weeks ago
  84. d41763c Make the ASN1_TYPE-level type take precedence over the ASN1_STRING one by David Benjamin · 5 weeks ago
  85. a34ea4d Use CRYPTO_addc_w in bn_from_montgomery_in_place by David Benjamin · 7 weeks ago
  86. db41dc2 Use a simpler process to compute n0 by David Benjamin · 7 weeks ago
  87. a135fe1 Forbid setting EC public key to point at infinity by Lily Chen · 6 weeks ago
  88. fa47b1d Remove stale comment by David Benjamin · 6 weeks ago
  89. 63f42a0 Upgrade the opportunistic CRYPTO_sysrand calls to normal ones by David Benjamin · 6 weeks ago
  90. e8c1dc3 Remove some stale ifdefs from urandom.cc by David Benjamin · 6 weeks ago
  91. f875db3 Reject explicit default X.509 versions and empty extension lists by David Benjamin · 6 weeks ago
  92. 05ff000 Bump the minimum CMake version to 3.22 by David Benjamin · 6 weeks ago
  93. dcaedb5 Add API for configuring client key shares by Lily Chen · 6 weeks ago
  94. 413704b draft-ietf-lamps-x509-policy-graph is now RFC 9618 by David Benjamin · 8 weeks ago
  95. de49ac9 Test a few more unusual TBS certificates by David Benjamin · 8 weeks ago
  96. 49aa5bc Const-correct a bunch more of <openssl/x509.h> by David Benjamin · 8 weeks ago
  97. acd171c Unwind ASN1_ANY_AS_STRING by David Benjamin · 8 weeks ago
  98. 854867e Embed X509_NAME into X509 by David Benjamin · 8 weeks ago
  99. 59eaed6 Don't create partial X509 and X509_CRL objects to search the X509_STORE by David Benjamin · 8 weeks ago
  100. 0fc0e7a Const-correct X509_NAME and test thread-safety by David Benjamin · 8 weeks ago