- c947efa Add set1 versions of X509 timestamp setters. by David Benjamin · 4 years, 8 months ago
- edd4c5f Consistently sort generated build files. by David Benjamin · 4 years, 8 months ago
- 5630891 delocate: use 64-bit GOT offsets in the large memory model. by Adam Langley · 4 years, 8 months ago
- 430ccd6 Update HPKE implementation and test vectors to draft-irtf-cfrg-hpke-05. by Daniel McArdle · 4 years, 8 months ago
- d3a5b87 Handle NULL arguments in some i2d_* functions. by Adam Langley · 4 years, 8 months ago
- a0b49d6 aarch64: support BTI and pointer authentication in assembly by Tamas Petz · 4 years, 10 months ago
- dcd6e44 Support delegated credentials verison 06 by Watson Ladd · 4 years, 8 months ago
- 0cd846f delocation: large memory model support. by Adam Langley · 4 years, 9 months ago
- 74161f4 Enforce presence of ALPN when QUIC is in use. by Nick Harper · 4 years, 9 months ago
- 7d3a24d Fix the naming of alert error codes. by David Benjamin · 4 years, 9 months ago
- 70fee17 Use golang.org/x/crypto in runner. by David Benjamin · 4 years, 9 months ago
- 281a8f5 Disable ClientHello padding for QUIC. by Nick Harper · 4 years, 9 months ago
- db129f3 Add X509_SIG_get0 and X509_SIG_getm. by David Benjamin · 4 years, 9 months ago
- 8b601c8 Implement HPKE. by Daniel McArdle · 4 years, 9 months ago
- cac9392 Disallow TLS 1.3 compatibility mode in QUIC. by Nick Harper · 5 years ago
- 54858b6 Switch clang-format IncludeBlocks to Preserve. by David Benjamin · 4 years, 9 months ago
- d054e1b Fix unterminated clang-format off. by David Benjamin · 4 years, 9 months ago
- 1a63507 Add line number to doc.go error messages. by Daniel McArdle · 4 years, 9 months ago
- f0558c3 Kick the bots. by Adam Langley · 4 years, 9 months ago
- 8c0a6eb Add a JSON output to generate_build_files.py. by David Benjamin · 4 years, 9 months ago
- 83b74c6 Add details of 20190808 FIPS certification. by Adam Langley · 4 years, 9 months ago
- 8f88b27 Link to ws2_32 more consistently. by David Benjamin · 4 years, 9 months ago
- de19612 Allow explicitly-encoded X.509v1 versions for now. by David Benjamin · 4 years, 9 months ago
- eda849d Opaquify PKCS8_PRIV_KEY_INFO. by David Benjamin · 4 years, 10 months ago
- 5d7c2f8 Implement i2d_PUBKEY and friends without crypto/asn1. by David Benjamin · 4 years, 10 months ago
- d0637e9 Remove TRUST_TOKEN_experiment_v0. by Steven Valdez · 4 years, 11 months ago
- b9fbf40 Clarify in-place rules for low-level AES mode functions. by David Benjamin · 4 years, 10 months ago
- fb0c05c acvp: add CMAC-AES support. by Adam Langley · 4 years, 10 months ago
- c655065 acvp: add SP800-108 KDF support. by Adam Langley · 4 years, 10 months ago
- 25638f0 Remove x509->name. by David Benjamin · 4 years, 10 months ago
- 939d426 Maybe build for AArch64 Windows. by Adam Langley · 4 years, 10 months ago
- e2abade sha1-x86_64: fix CFI. by Adam Langley · 4 years, 10 months ago
- 5d74463 Use |crypto_word_t| and |size_t| more consistently in ECC scalar recoding. by Brian Smith · 4 years, 10 months ago
- 7361ee4 Enable shaext path for sha1. by Ilya Tokar · 4 years, 10 months ago
- 5fa22ed Avoid relying on SSL_get_session's behavior during the handshake. by David Benjamin · 4 years, 10 months ago
- b3c5ac5 Add a -wait-for-debugger flag to runner. by David Benjamin · 4 years, 10 months ago
- 86f86cb Add missing OPENSSL_EXPORT to X509_get_X509_PUBKEY. by David Benjamin · 4 years, 10 months ago
- 430a742 Const-correct various functions in crypto/asn1. by David Benjamin · 4 years, 10 months ago
- d1d8eee Remove uneeded switch statement. by Pete Bentley · 4 years, 10 months ago
- 33f8d33 Convert X.509 accessor macros to proper functions. by David Benjamin · 4 years, 10 months ago
- d206a11 Remove X509_CINF_get_issuer and X509_CINF_get_extensions. by David Benjamin · 4 years, 10 months ago
- beaf594 Remove X509_get_signature_type. by David Benjamin · 4 years, 10 months ago
- 991d31b clang-format x509.h and run comment converter. by David Benjamin · 4 years, 10 months ago
- 9dd9d4f Check AlgorithmIdentifier parameters for RSA and ECDSA signatures. by David Benjamin · 4 years, 10 months ago
- a3cc778 Remove some unimplemented prototypes. by David Benjamin · 4 years, 10 months ago
- dd86e75 Check the X.509 version when parsing. by David Benjamin · 4 years, 10 months ago
- fd86eaa Fix x509v3_cache_extensions error-handling. by David Benjamin · 4 years, 10 months ago
- cbac9c3 Work around Windows command-line limits in embed_test_data.go. by David Benjamin · 4 years, 10 months ago
- 5ddc5b1 Move crypto/x509 test data into its own directory. by David Benjamin · 4 years, 10 months ago
- 1b81947 Test resumability of same, different, and default ticket keys. by David Benjamin · 4 years, 10 months ago
- c179854 Fixes warning when redefining PATH_MAX when building with MINGW. by Jesko Jochum · 4 years, 10 months ago
- 8afdbf0 Abstract fd operations better in tool. by David Benjamin · 4 years, 10 months ago
- 884614c Use CMAKE_SIZEOF_VOID_P instead of CMAKE_CL_64 by David Benjamin · 4 years, 10 months ago
- cd8f3d3 Enforce the keyUsage extension in TLS 1.2 client certs. by David Benjamin · 4 years, 10 months ago
- 72b095d Reword some comments. by David Benjamin · 4 years, 10 months ago
- 7f90eda Add “Z Computation” KAT. by Adam Langley · 4 years, 10 months ago
- 9c256d1 acvptool: handle negative sizeConstraint. by Adam Langley · 4 years, 10 months ago
- 0313b59 Let memory hooks override the size prefix. by Adam Langley · 4 years, 10 months ago
- fbaf1c0 acvptool: go fmt by Adam Langley · 4 years, 10 months ago
- 251b516 Assert md_size > 0. by David Benjamin · 4 years, 10 months ago
- 88024df Remove -enable-ed25519 compat hack. by Adam Langley · 4 years, 11 months ago
- 53a17f5 Add a |SSL_process_tls13_new_session_ticket|. by Adam Langley · 5 years ago
- 2309f64 Use ctr32 optimizations for AES_ctr128_encrypt. by David Benjamin · 5 years ago
- 8819e0b Test AES mode wrappers. by David Benjamin · 5 years ago
- 81a998a Bump minimum CMake version. by David Benjamin · 5 years ago
- 8519432 Modify how QUIC 0-RTT go/no-go decision is made. by Nick Harper · 5 years ago
- 9701e84 Remove RAND_set_urandom_fd. by David Benjamin · 5 years ago
- 7b31d69 Document that getrandom support must be consistent. by David Benjamin · 5 years ago
- 8f12996 Fix docs link for SSL_CTX_load_verify_locations by Anna Sarai Rosenberg · 5 years ago
- 78b3337 Fix TRUST_TOKEN experiment_v1 SRR map. by Steven Valdez · 5 years ago
- 3e4dfbb Add CRYPTO_pre_sandbox_init. by David Benjamin · 5 years ago
- 9cf9d3e Still query getauxval if reading /proc/cpuinfo fails. by David Benjamin · 5 years ago
- be28dd6 Add missing header to ec/wnaf.c by Nick Harper · 5 years ago
- b7acfff Fix OPENSSL_TSAN typo. by David Benjamin · 5 years ago
- 49e95dc Fix p256-x86_64-table.h indentation. by David Benjamin · 5 years ago
- 1274d1d Enable avx2 implementation of sha1. by Ilya Tokar · 5 years ago
- d4d501c Trim Z coordinates from the OPENSSL_SMALL P-256 tables. by David Benjamin · 5 years ago
- a810d82 Use public multi-scalar mults in Trust Tokens where applicable. by David Benjamin · 5 years ago
- b55a8c1 Use batched DLEQ proofs for Trust Token. by Steven Valdez · 5 years ago
- 7c52299 Restrict when 0-RTT will be accepted in QUIC. by Nick Harper · 5 years ago
- e32549e Disable TLS 1.3 compatibility mode for QUIC. by Nick Harper · 5 years ago
- d4a97fa Use a 5-bit comb for some Trust Tokens multiplications. by David Benjamin · 5 years ago
- 5f43b12 Use a (mostly) constant-time multi-scalar mult for Trust Tokens. by David Benjamin · 5 years ago
- ce1665b Batch inversions in Trust Tokens. by David Benjamin · 5 years ago
- 54a59c6 Rearrange the DLEQ logic slightly. by David Benjamin · 5 years ago
- 5430473 Use token hash to encode private metadata for Trust Token Experiment V1. by Steven Valdez · 5 years ago
- 802523a Introduce an EC_AFFINE abstraction. by David Benjamin · 5 years ago
- 73e0401 Make the fuzzer PRNG thread-safe. by David Benjamin · 5 years ago
- cccfb9b Disable fork-detect tests under TSAN. by Adam Langley · 5 years ago
- aa764c4 Introduce TRUST_TOKENS_experiment_v1. by David Benjamin · 5 years ago
- 69402f3 Route PMBToken calls through TRUST_TOKEN_METHOD. by David Benjamin · 5 years ago
- 239634d Introduce a TRUST_TOKEN_METHOD hook to select TRUST_TOKEN variations. by David Benjamin · 5 years ago
- ad55829 fork_detect: be robust to qemu. by Adam Langley · 5 years ago
- 90bb72c Move serialization of points inside pmbtoken.c. by David Benjamin · 5 years ago
- 090ee96 Introduce PMBTOKENS key abstractions. by David Benjamin · 5 years ago
- 17078f2 Fix the types used in token counts. by David Benjamin · 5 years ago
- dc06e32 Remove unused code from ghash-x86_64.pl. by David Benjamin · 5 years ago
- eeb5bb35 Switch the P-384 hash-to-curve to draft-07. by David Benjamin · 5 years ago
- 6a71840 Add hash-to-curve code for P384. by Steven Valdez · 5 years ago
- b36f52d Write down the expressions for all the NIST primes. by David Benjamin · 5 years ago