1. 8f77af2 Replace single-chars std::string::operator+= calls with the char version by David Benjamin · 9 days ago main
  2. 8e87e46 Update google.golang.org/grpc by David Benjamin · 2 weeks ago
  3. 90c6b37 crypto/bio: Don't call method->destroy if method->create failed by Xiangfei Ding · 11 days ago
  4. 9b684de crypto/x509 MTC: Strictly parse extensions in MTC verification by Lily Chen · 2 weeks ago
  5. fdc425e Check extensions on the trust anchor too by David Benjamin · 6 weeks ago
  6. d8394c5 Check extensions for X509_STORE certificates that aren't trust anchors by David Benjamin · 6 weeks ago
  7. 1cd9d22 CI/CQ: Promote win64_clang_shared_compile builder by Lily Chen · 2 days ago
  8. e5cb318 asn1,x509: Move statics into anonymous namespace by Xiangfei Ding · 5 days ago
  9. bdb6028 clang-format: Always wrap namespace body with empty lines by Xiangfei Ding · 2 days ago
  10. df82113 CI/CQ: Add a disabled win64_clang_shared CQ builder by Lily Chen · 2 days ago
  11. c7eb007 Avoid Windows cross-dll constexpr issue in digest_test.cc by Lily Chen · 2 days ago
  12. 2df72ed crypto: Move statics into anonymous namespace, Round 2 by Xiangfei Ding · 2 weeks ago
  13. 0f156d6 crypto: Put more statics into anonymous namespace by Xiangfei Ding · 2 weeks ago
  14. f4f4a40 crypto/evp: Export SHAKE256 and TurboSHAKE256 as EVP_MD by Xiangfei Ding · 2 weeks ago
  15. af41e13 Precompute the PK.seed SHA-256 state in SLH-DSA-SHA2 by Jakub Patałuch · 12 days ago
  16. 1f2ee5e crypto/x509 MTC: Allow empty cosignature values in MTCProof by Lily Chen · 2 weeks ago
  17. 92b7c60 rust/bssl-tls: Allow libraries to pick alert when cert_cb fails by Xiangfei Ding · 6 days ago
  18. 99b9d64 Update presubmit.yml per review comments by David Benjamin · 4 days ago
  19. f456745 Remove odd special case around policy validation by David Benjamin · 6 weeks ago
  20. 1f05cb4 Report X509_V_ERR_CERT_CHAIN_TOO_LONG if the chain was too long by David Benjamin · 6 weeks ago
  21. b17e56b X509_V_FLAG_CRL_CHECK_ALL should skip the trust anchor by David Benjamin · 6 weeks ago
  22. fbbba8f Remove dead code for picking a CRL issuer by David Benjamin · 6 weeks ago
  23. bbbeba2 Rewrite the path builder by David Benjamin · 6 weeks ago
  24. a74aca0 Test X509_V_FLAG_CRL_CHECK_ALL by David Benjamin · 2 weeks ago
  25. d3bf479 Update MODULE.bazel for 0.20261020.0 by David Benjamin · 4 days ago 0.20261020.0
  26. dd68207 Block a handful of intermediate certificates by David Benjamin · 4 days ago
  27. 3059283 Rename "agents" directory (containing AI skills) to "_agents" by Lily Chen · 4 days ago
  28. bee4438 rand: Fix double-free on thread-local failure. by Tom Hughes · 5 days ago
  29. b50cad2 EVP_HPKE_KEM: Align HPKE error codes with EVP_KEM by Lily Chen · 3 weeks ago
  30. bcd557d EVP_HPKE_KEM: Clean up legacy KEM implementation hooks by Lily Chen · 2 weeks ago
  31. 2779dea Test various odd cases when the target certificate is in the trust store by David Benjamin · 6 weeks ago
  32. c537970 Test X509_verify_cert in two ways by David Benjamin · 6 weeks ago
  33. ba42c49 Test some special error codes when we cannot build a path by David Benjamin · 6 weeks ago
  34. 66195b4 Export EVP_KEMs corresponding to DHKEMs by Lily Chen · 3 weeks ago
  35. c49bb0c EVP_HPKE_KEM: Implement DHKEM(P256, HKDF-SHA256) using EVP_KEM_DHKEM by Lily Chen · 3 weeks ago
  36. 83687b7 EVP_HPKE_KEM: Implement DHKEM(X25519, HKDF-SHA256) using EVP_KEM_DHKEM by Lily Chen · 5 weeks ago
  37. 8a55a28 Also test that EVP_PKEY_from_ec_private_scalar rejects zero by David Benjamin · 8 days ago
  38. 52565fe SLH-DSA: SHAKE variants are not approved. by Adam Langley · 6 days ago
  39. fb64286 x509_test: Fix some style mishaps by David Benjamin · 6 weeks ago
  40. 890a85a rust/bssl-crypto: CPace support by Xiangfei Ding · 3 weeks ago
  41. b698111 Use lazy reduction and parallel ExpandMask in ML-DSA by Jakub Patałuch · 11 days ago
  42. cac4d9b rust: bssl-tls: Allow recognition of deprecated protocol version by Xiangfei Ding · 9 weeks ago
  43. 76bc63d Use lazy reduction in ML-KEM matrix-vector products by Jakub Patałuch · 11 days ago
  44. dc518c7 Make X509_check_trust and X509_check_purpose const by David Benjamin · 6 weeks ago
  45. 2752c13 ssl: Reset cert_cb back to unset by Xiangfei Ding · 6 days ago
  46. 594a442 Const-correct a bunch more functions by David Benjamin · 7 days ago
  47. 64188f1 crypto/evp: Add SHA3-384 by Xiangfei Ding · 2 weeks ago
  48. 3082693 Const-correct X509_STORE_add_{cert,crl} by David Benjamin · 8 days ago
  49. 487f196 Mark x509v3_cache_extensions as const by David Benjamin · 6 weeks ago
  50. 5b65202 Pass depth explicitly into CRL functions by David Benjamin · 6 weeks ago
  51. 998d879 Remove current_crl_issuer and current_crl_score by David Benjamin · 6 weeks ago
  52. 2118363 Remove X509_STORE_CTX_get0_current_crl by David Benjamin · 6 weeks ago
  53. c17463b Use UniquePtr some more in CRL handling by David Benjamin · 6 weeks ago
  54. 645d9d1 Make most verify sites fill in current_cert implicitly by David Benjamin · 6 weeks ago
  55. 06e9949 crypto/evp: Add SHA3-256 and SHA3-512 by Xiangfei Ding · 2 weeks ago
  56. f48a469 mem: Constify all APIs wherever it applies by Xiangfei Ding · 2 weeks ago
  57. 34ea210 crypto/asn1: Rectify the length type of ASN1_STRING by Xiangfei Ding · 10 days ago
  58. 437b75f crypto/asn1: Assert on negative length value by Xiangfei Ding · 11 days ago
  59. 5498026 Remove now unnecessary out-of-line ctors and dtors by David Benjamin · 9 days ago
  60. 301e779 Rewrite internal_verify by David Benjamin · 6 weeks ago
  61. e8a6293 No-op X509_V_FLAG_CHECK_SS_SIGNATURE by David Benjamin · 6 weeks ago
  62. 558e6ee Fold SSL_CTX_set_grease_sigalgs_enabled into SSL_CTX_set_grease_enabled by Lily Chen · 11 days ago
  63. e52f12b crypto/x509 MTC: Update to draft -07 by Lily Chen · 2 weeks ago
  64. 5b83e5d util/fipstools/inject_hash: Add -ignore-missing-symbols flag and tests by Xiangfei Ding · 4 weeks ago
  65. b4b1cee Make the other dup_ref functions take nullptr by David Benjamin · 6 weeks ago
  66. 3fed4f2 Sweep through the library and add `dup_ref` ref-counting by Xiangfei Ding · 2 weeks ago
  67. 3b39936 Test some behavior in X509_V_FLAG_CB_ISSUER_CHECK by David Benjamin · 6 weeks ago
  68. fbb876d rust: Retire bssl-macros by Xiangfei Ding · 3 weeks ago
  69. 44979b8 Add MTC draft plants-07 support (for pki/). by Matt Mueller · 2 weeks ago
  70. 464d605 Define V_ASN1_RELATIVE_OID tag number by Lily Chen · 2 weeks ago
  71. cee8984 entropy: Avoid volatile post-increment under C++20 by Tom Hughes · 2 weeks ago
  72. 0c8a01a crypto/x509 MTC: Tighten MTC subjectPublicKeyInfoHash length check by Lily Chen · 2 weeks ago
  73. 52808ad crypto/x509 MTC: Reject trailing data in MTC CA extension by Lily Chen · 2 weeks ago
  74. 4f3b183 EVP_HPKE_KEM: Move constants and serialization hooks to HpkeKeyMethod by Lily Chen · 5 weeks ago
  75. fdcd735 ssl/test/runner: use hash.Cloner when copying hash instances by qmuntal · 3 weeks ago
  76. 21ee259 EVP_KEM: Add an optional check_key hook by Lily Chen · 3 weeks ago
  77. 745a3c7 Speed up copy_from_prebuf by accumulating in registers by William Dauchy · 3 weeks ago
  78. f259e98 crypto: Remove redundant statics by Xiangfei Ding · 2 weeks ago
  79. f30064b EVP_KEM: Pass EVP_KEM* into function pointers by Lily Chen · 5 weeks ago
  80. 6f420a5 util: Report the line number where docgen failed by Xiangfei Ding · 2 weeks ago
  81. 5509db7 ssl: Move deprecated APIs out by Xiangfei Ding · 4 weeks ago
  82. 304dad3 Update trust anchor IDs for draft-06 by David Benjamin · 3 weeks ago
  83. 510d303 ssl: Allow multipart rule commutative by Xiangfei Ding · 3 weeks ago
  84. 161d87e curve25519: CPace implementation by Xiangfei Ding · 3 months ago
  85. d3cdaa4 Remove deprecated split handshakes support by David Benjamin · 3 weeks ago
  86. 66da97b ssl: Update SSL_CIPHER_get_min_version to reflect SSL 3.0 removal by Xiangfei Ding · 3 weeks ago
  87. 71766b8 CheckOCSP and CheckCRL: make delegate non-optional by Matt Mueller · 3 weeks ago
  88. dd73e69 Add X509CertificateBuilder to bssl-x509 by Antoine Desbois · 3 weeks ago
  89. fab96f8 Add PrivateKey::from_der to bssl-x509 by Antoine Desbois · 3 weeks ago
  90. 00270eb Add DTLS-SRTP extension APIs to bssl-tls by Antoine Desbois · 3 weeks ago
  91. 985989d Add FIPS break tests for the jitter RCT and APT. by Adam Langley · 3 weeks ago
  92. 5e1bfb4 Take delegate parameter in CheckCRL and CheckOCSP by Matt Mueller · 3 weeks ago
  93. 98df681 rust: bssl-tls: Remove pedantic to_string by Xiangfei Ding · 5 weeks ago
  94. e46ba01 rust: bssl-tls: Switch to write_ex method by Xiangfei Ding · 7 weeks ago
  95. fe8d898 rust: bssl-tls: De-customize unknown library errors by Xiangfei Ding · 5 weeks ago
  96. 27e9f82 rust: bssl-tls: Rename inherent I/O methods by Xiangfei Ding · 4 weeks ago
  97. 9aa7b97 rust: bssl-tls: Clean up the error classification by Xiangfei Ding · 9 weeks ago
  98. 12830f0 Do RFC5280 verification of OCSP Authorized Responders by Matt Mueller · 4 weeks ago
  99. 162f38a Add an advisory for 2026-09-29 by Lily Chen · 4 weeks ago
  100. 427ec40 Update version for Bazel Central Repository to 0.20260929.0 by Lily Chen · 4 weeks ago 0.20260929.0