1. 64188f1 crypto/evp: Add SHA3-384 by Xiangfei Ding · 10 days ago main
  2. 3082693 Const-correct X509_STORE_add_{cert,crl} by David Benjamin · 14 hours ago
  3. 487f196 Mark x509v3_cache_extensions as const by David Benjamin · 5 weeks ago
  4. 5b65202 Pass depth explicitly into CRL functions by David Benjamin · 5 weeks ago
  5. 998d879 Remove current_crl_issuer and current_crl_score by David Benjamin · 5 weeks ago
  6. 2118363 Remove X509_STORE_CTX_get0_current_crl by David Benjamin · 5 weeks ago
  7. c17463b Use UniquePtr some more in CRL handling by David Benjamin · 5 weeks ago
  8. 645d9d1 Make most verify sites fill in current_cert implicitly by David Benjamin · 5 weeks ago
  9. 06e9949 crypto/evp: Add SHA3-256 and SHA3-512 by Xiangfei Ding · 10 days ago
  10. f48a469 mem: Constify all APIs wherever it applies by Xiangfei Ding · 8 days ago
  11. 34ea210 crypto/asn1: Rectify the length type of ASN1_STRING by Xiangfei Ding · 3 days ago
  12. 437b75f crypto/asn1: Assert on negative length value by Xiangfei Ding · 4 days ago
  13. 5498026 Remove now unnecessary out-of-line ctors and dtors by David Benjamin · 2 days ago
  14. 301e779 Rewrite internal_verify by David Benjamin · 5 weeks ago
  15. e8a6293 No-op X509_V_FLAG_CHECK_SS_SIGNATURE by David Benjamin · 5 weeks ago
  16. 558e6ee Fold SSL_CTX_set_grease_sigalgs_enabled into SSL_CTX_set_grease_enabled by Lily Chen · 4 days ago
  17. e52f12b crypto/x509 MTC: Update to draft -07 by Lily Chen · 9 days ago
  18. 5b83e5d util/fipstools/inject_hash: Add -ignore-missing-symbols flag and tests by Xiangfei Ding · 3 weeks ago
  19. b4b1cee Make the other dup_ref functions take nullptr by David Benjamin · 5 weeks ago
  20. 3fed4f2 Sweep through the library and add `dup_ref` ref-counting by Xiangfei Ding · 9 days ago
  21. 3b39936 Test some behavior in X509_V_FLAG_CB_ISSUER_CHECK by David Benjamin · 5 weeks ago
  22. fbb876d rust: Retire bssl-macros by Xiangfei Ding · 11 days ago
  23. 44979b8 Add MTC draft plants-07 support (for pki/). by Matt Mueller · 9 days ago
  24. 464d605 Define V_ASN1_RELATIVE_OID tag number by Lily Chen · 9 days ago
  25. cee8984 entropy: Avoid volatile post-increment under C++20 by Tom Hughes · 10 days ago
  26. 0c8a01a crypto/x509 MTC: Tighten MTC subjectPublicKeyInfoHash length check by Lily Chen · 9 days ago
  27. 52808ad crypto/x509 MTC: Reject trailing data in MTC CA extension by Lily Chen · 9 days ago
  28. 4f3b183 EVP_HPKE_KEM: Move constants and serialization hooks to HpkeKeyMethod by Lily Chen · 4 weeks ago
  29. fdcd735 ssl/test/runner: use hash.Cloner when copying hash instances by qmuntal · 11 days ago
  30. 21ee259 EVP_KEM: Add an optional check_key hook by Lily Chen · 2 weeks ago
  31. 745a3c7 Speed up copy_from_prebuf by accumulating in registers by William Dauchy · 2 weeks ago
  32. f259e98 crypto: Remove redundant statics by Xiangfei Ding · 10 days ago
  33. f30064b EVP_KEM: Pass EVP_KEM* into function pointers by Lily Chen · 4 weeks ago
  34. 6f420a5 util: Report the line number where docgen failed by Xiangfei Ding · 10 days ago
  35. 5509db7 ssl: Move deprecated APIs out by Xiangfei Ding · 3 weeks ago
  36. 304dad3 Update trust anchor IDs for draft-06 by David Benjamin · 2 weeks ago
  37. 510d303 ssl: Allow multipart rule commutative by Xiangfei Ding · 2 weeks ago
  38. 161d87e curve25519: CPace implementation by Xiangfei Ding · 2 months ago
  39. d3cdaa4 Remove deprecated split handshakes support by David Benjamin · 11 days ago
  40. 66da97b ssl: Update SSL_CIPHER_get_min_version to reflect SSL 3.0 removal by Xiangfei Ding · 2 weeks ago
  41. 71766b8 CheckOCSP and CheckCRL: make delegate non-optional by Matt Mueller · 2 weeks ago
  42. dd73e69 Add X509CertificateBuilder to bssl-x509 by Antoine Desbois · 2 weeks ago
  43. fab96f8 Add PrivateKey::from_der to bssl-x509 by Antoine Desbois · 2 weeks ago
  44. 00270eb Add DTLS-SRTP extension APIs to bssl-tls by Antoine Desbois · 2 weeks ago
  45. 985989d Add FIPS break tests for the jitter RCT and APT. by Adam Langley · 2 weeks ago
  46. 5e1bfb4 Take delegate parameter in CheckCRL and CheckOCSP by Matt Mueller · 2 weeks ago
  47. 98df681 rust: bssl-tls: Remove pedantic to_string by Xiangfei Ding · 4 weeks ago
  48. e46ba01 rust: bssl-tls: Switch to write_ex method by Xiangfei Ding · 6 weeks ago
  49. fe8d898 rust: bssl-tls: De-customize unknown library errors by Xiangfei Ding · 4 weeks ago
  50. 27e9f82 rust: bssl-tls: Rename inherent I/O methods by Xiangfei Ding · 3 weeks ago
  51. 9aa7b97 rust: bssl-tls: Clean up the error classification by Xiangfei Ding · 8 weeks ago
  52. 12830f0 Do RFC5280 verification of OCSP Authorized Responders by Matt Mueller · 3 weeks ago
  53. 162f38a Add an advisory for 2026-09-29 by Lily Chen · 3 weeks ago
  54. 427ec40 Update version for Bazel Central Repository to 0.20260929.0 by Lily Chen · 3 weeks ago 0.20260929.0
  55. efc97a4 Don't export GENERAL_NAME_cmp from the shared library by Lily Chen · 3 weeks ago
  56. 40c39c5 rust: Improve wording to help unsafe code reviews by Xiangfei Ding · 3 weeks ago
  57. 04d9834 Remove idp_flags by Lily Chen · 3 weeks ago
  58. 638fa9a Clean up after nameRelativeToCRLIssuer removal by Lily Chen · 3 weeks ago
  59. 9b639f5 Remove nameRelativeToCRLIssuer support by Lily Chen · 3 weeks ago
  60. 29af437 Add some tests for CRL matching by Lily Chen · 3 weeks ago
  61. 1ac6cdd Add some more UniquePtr bridges for public types by Lily Chen · 3 weeks ago
  62. 697ee71 Update trust anchor IDs for draft-05 by David Benjamin · 5 weeks ago
  63. 2ea3200 Add EVP_HPKE_CTX_setup_recipient_with_shared_secret by Matt Etemad · 4 weeks ago
  64. 5112448 Revert "Work around a NASM bug" by David Benjamin · 2 months ago
  65. 37b2f51 rust: bssl-tls: Shut only the TLS write end down by Xiangfei Ding · 5 weeks ago
  66. e98a656 Add libssl to libraries that are checked for unprefixed symbols by David Benjamin · 3 weeks ago
  67. 8eb25be ssl: test: Record hint traces into JSON by Xiangfei Ding · 3 months ago
  68. 4dc6383 Turn SSL_SESSION into an opaque struct by Lily Chen · 3 weeks ago
  69. 83b18cd Avoid calling SSL_SESSION_dup from tests by David Benjamin · 3 weeks ago
  70. 5fbad22 Fix current_cert with X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY by David Benjamin · 5 weeks ago
  71. 62fb8ab pki: Check the length of good and unknown in CertStatus by David Benjamin · 5 weeks ago
  72. cff1385 Add Ed25519ph support. by Ricardo Ribalda · 4 weeks ago
  73. 81913f5 Reapply "Work around a NASM bug" by David Benjamin · 4 weeks ago
  74. b75f405 Fix OCSP has_version test by David Benjamin · 5 weeks ago
  75. e8c862c pki_test: Correctly encode RSA sigalg AlgIDs in test OCSP responses by David Benjamin · 4 weeks ago
  76. 1097261 Rewrite make_ocsp.py in Go with a handrolled encoder by David Benjamin · 5 weeks ago
  77. 8626998 Remove unused BIO_METHOD::name and clarify documentation by David Benjamin · 5 weeks ago
  78. ff8b467 Repoint some TODOs to newly-filed bug by David Benjamin · 4 weeks ago
  79. ac08bbd Rename `x` to `last` by David Benjamin · 5 weeks ago
  80. d83e36e Add a helper function sk_FOO_last by David Benjamin · 5 weeks ago
  81. 946c58e Remove a redundant and confusing 'i' variable by David Benjamin · 5 weeks ago
  82. 127f24b Use UniquePtr a little more in X509_verify_cert by David Benjamin · 5 weeks ago
  83. 0451b1f Use scopers instead of goto in X509_verify_cert by David Benjamin · 5 weeks ago
  84. b780f19 EVP_HPKE_KEM: Delegate seed_len to EVP_KEM by Lily Chen · 5 weeks ago
  85. ebd832c rust: bssl-tls: Retract accidental datagram trait implementation by Xiangfei Ding · 5 weeks ago
  86. c7b7d53 VerifyMTC: set more specific errors in two cases by Matt Mueller · 5 weeks ago
  87. 902518a ssl: Allow certificate selection callback to pick fatal alert by Xiangfei Ding · 8 weeks ago
  88. ed93666 rust: bssl-tls: Reset retry flags before I/O transactions by Xiangfei Ding · 5 weeks ago
  89. 2b60ed4 Call va_end even if OPENSSL_vasprintf_internal fails by David Benjamin · 5 weeks ago
  90. a2ad244 Revert "Make all non-asm-included BoringSSL headers at least include <openssl/base.h>." by Lily Chen · 5 weeks ago
  91. 4380e3c Add OID and NID definitions for SLH-DSA (RFC 9909). by Matt Etemad · 5 weeks ago
  92. ad89997 Fix typo in comment by David Benjamin · 5 weeks ago
  93. 4934bf7 Use pwd_seed to determine y parity for sae hunt-and-peck. by Dylan Swiggett · 6 weeks ago
  94. db1598d ML-KEM, ML-DSA: fix a -Wsign-compare warning. by Rudolf Polzer · 5 weeks ago
  95. ba26b4c Add ssl_compliance_policy_fips_202609 by Lily Chen · 5 weeks ago
  96. f00ee80 pki: Import accumulated test vectors for Merkle Trees by Lily Chen · 6 weeks ago
  97. 86101b7 Make all non-asm-included BoringSSL headers at least include <openssl/base.h>. by Rudolf Polzer · 3 months ago
  98. 4a92579 Start migrating HPKE to use EVP_KEM by Lily Chen · 3 months ago
  99. 876bb72 Make EVP_PKEY_dup_ref work for nullptr by Lily Chen · 6 weeks ago
  100. c35293f Provide `llvm-ranlib` to enable LTO on Linux/Clang. by Rudolf Polzer · 6 weeks ago