- 06fb6e1 Make it plainly obvious this is experimental code. by Bob Beck · 12 months ago
- a56407d Revert "Add a Dilithium implementation." by Bob Beck · 12 months ago
- 9b34a32 Add a Dilithium implementation. by Guillaume Endignoux · 1 year, 4 months ago
- 2fb5cdb Move spx from internal to include/openssl/experimental by Bob Beck · 1 year ago
- 85c5d96 Make an include/openssl/experimental. Move kyber to it for now. by Bob Beck · 1 year ago
- 07cd196 Always use a 32-byte shared secret for Kyber by David Benjamin · 1 year, 3 months ago
- f714cb2 Add basic C implementation of SPHINCS+-SHA2-128s. by Stefan Koelbl · 1 year, 9 months ago
- 70be012 Use constant curve-specific groups whenever possible by David Benjamin · 2 years, 1 month ago
- a36ac0a Use std::make_unique when possible by David Benjamin · 1 year, 8 months ago
- 99ce1e0 Use sources.cmake for the bssl tool by David Benjamin · 1 year, 8 months ago
- d4553e0 Make RSA opaque by David Benjamin · 1 year, 9 months ago
- 335523a Align remaining TLS ECDH APIs on "group" terminology by David Benjamin · 1 year, 9 months ago
- c1f5d79 Add a multi-threaded mode to bssl speed by David Benjamin · 2 years ago
- 5e988c4 Rename EC_RAW_POINT to EC_JACOBIAN by David Benjamin · 1 year, 10 months ago
- 58472cc Adding a C implementation of Kyber. by Sophie Schmieg · 2 years ago
- 8c75ed0 Remove global_target from build. by David Benjamin · 2 years, 1 month ago
- e5f7266 Don't include custom builds of libc++ in CMake installs by David Benjamin · 2 years, 1 month ago
- 0e68520 Specify -Iinclude with the crypto target. by David Benjamin · 2 years, 1 month ago
- 3950d6c Implement P256_XMD:SHA-256_SSWU_RO_ and P384_XMD:SHA-384_SSWU_RO_ by David Benjamin · 2 years, 1 month ago
- 0586618 Trim unnecessary -lrt and ws2_32 deps in the build. by David Benjamin · 2 years, 1 month ago
- 80a243e Remove old Trust Token redeem API. by Steven Valdez · 2 years, 1 month ago
- df8a55b Const-correct sk_FOO_deep_copy's copy callback. by David Benjamin · 2 years, 2 months ago
- 1a46f8f Switch microsecond and iteration counts in bssl speed to uint64_t. by David Benjamin · 2 years, 3 months ago
- 1e7cb68 Replace malloc/memcpy pairs with memdup. by David Benjamin · 2 years, 4 months ago
- 7ac94aa More -Wshorten-64-to-32 fixes. by David Benjamin · 2 years, 4 months ago
- 48f7947 Fix build for older CMake versions. by Daniel Thornburgh · 2 years, 10 months ago
- f299342 [build] Fix build with HEAD clang. by Daniel Thornburgh · 2 years, 11 months ago
- 2fc6d38 Add CMake install rules. by Daniel Thornburgh · 2 years, 11 months ago
- 08970b3 Include the EKU extension in bssl server's self-signed certs. by David Benjamin · 3 years ago
- 345c86b Switch CRYPTO_BUFFER_POOL to SipHash-2-4. by David Benjamin · 3 years, 1 month ago
- 4f1fae3 Fix the easy -Wformat-signedness errors. by David Benjamin · 3 years, 3 months ago
- f958727 Speed up constant-time base64 decoding. by David Benjamin · 3 years, 5 months ago
- 41adb34 Ignore SIGPIPE in the bssl tool. by David Benjamin · 3 years, 6 months ago
- 417010f Benchmark RSA private key parsing. by David Benjamin · 3 years, 8 months ago
- 0768d42 generate_ech.cc: include needed headers by Adam Langley · 3 years, 7 months ago
- 7a817f4 Add 'generate-ech' command to bssl tool by Dan McArdle · 3 years, 8 months ago
- 17be387 Check strtoul return for overflow error in GetUnsigned() by Dan McArdle · 3 years, 8 months ago
- 7153013 hrss: use less stack space. by Adam Langley · 3 years, 8 months ago
- ecc301c Add a pointer alignment helper function. by David Benjamin · 3 years, 8 months ago
- e9c5d72 Add an option to permute ClientHello extension order. by David Benjamin · 3 years, 9 months ago
- 83a4993 Add most of an ECH client implementation. by David Benjamin · 3 years, 10 months ago
- c890ae5 Make ECH server APIs take EVP_HPKE_KEY. by David Benjamin · 3 years, 9 months ago
- c3b373b Rename SSL_ECH_SERVER_CONFIG_LIST to SSL_ECH_KEYS. by David Benjamin · 3 years, 9 months ago
- 3a036c7 Add SSL_ech_accepted API and ech_is_required alerts. by David Benjamin · 3 years, 9 months ago
- ef1d779 Don't try to write empty early data in the tool. by David Benjamin · 3 years, 10 months ago
- 00e434d Add ECH server (draft-ietf-tls-esni-09). by Daniel McArdle · 4 years ago
- ab5edbe Benchmark BORINGSSL_self_test in FIPS mode. by David Benjamin · 4 years, 1 month ago
- e133345 Add basic BLAKE2b-256 support. by Adam Langley · 4 years, 1 month ago
- 571c3e7 Use gai_strerrorA on Windows. by David Benjamin · 4 years, 2 months ago
- f2b2ef8 Update TrustTokenV2 to use VOPRFs and assemble RR. by Steven Valdez · 4 years, 5 months ago
- 8f88b27 Link to ws2_32 more consistently. by David Benjamin · 4 years, 8 months ago
- d0637e9 Remove TRUST_TOKEN_experiment_v0. by Steven Valdez · 4 years, 9 months ago
- c179854 Fixes warning when redefining PATH_MAX when building with MINGW. by Jesko Jochum · 4 years, 9 months ago
- 8afdbf0 Abstract fd operations better in tool. by David Benjamin · 4 years, 9 months ago
- aa764c4 Introduce TRUST_TOKENS_experiment_v1. by David Benjamin · 4 years, 10 months ago
- 239634d Introduce a TRUST_TOKEN_METHOD hook to select TRUST_TOKEN variations. by David Benjamin · 4 years, 10 months ago
- 17078f2 Fix the types used in token counts. by David Benjamin · 4 years, 10 months ago
- eeb5bb35 Switch the P-384 hash-to-curve to draft-07. by David Benjamin · 4 years, 10 months ago
- 6a71840 Add hash-to-curve code for P384. by Steven Valdez · 4 years, 10 months ago
- 21712d5 Benchmark ECDH slightly more accurately. by David Benjamin · 4 years, 11 months ago
- 188b65a Add bssl speed support for hashtocurve and trusttoken. by Steven Valdez · 4 years, 11 months ago
- 3c11bf5 Add SHA-512-256. by Adam Langley · 4 years, 11 months ago
- 1766935 Remove SSL_CTX_set_ed25519_enabled. by David Benjamin · 5 years ago
- bf17f4f Add a -sigalgs option to bssl client. by David Benjamin · 5 years ago
- 3e96cd4 Add bssl client option to load a hashed directory of cacerts. by Pete Bentley · 5 years ago
- 43890db Fix build warning if _SCL_SECURE_NO_WARNINGS is defined globally by David Benjamin · 5 years ago
- 7f02881 Drop CECPQ2b code. by Adam Langley · 5 years ago fips-android-20191020
- f10ea55 tool: add -json flag to |speed| by Zola Bridges · 5 years ago
- 25e36da Add benchmarks for AES block operations. by David Benjamin · 6 years ago
- bd2a8d6 Add a function to convert SSL_ERROR_* values to strings. by David Benjamin · 6 years ago
- 3c8ae0f Implements SIKE/p434 by Kris Kwiatkowski · 6 years ago
- 7922e5a Add support for SIKE/p503 post-quantum KEM by Kris Kwiatkowski · 6 years ago
- c12b7cd tool: fix speed tests. by Adam Langley · 6 years ago
- 5501a26 Add 16384 to the default bssl speed sizes. by David Benjamin · 6 years ago
- 6443173 Add an option to configure bssl speed chunk size. by David Benjamin · 6 years ago
- b84674b Delete the variants/draft code. by Steven Valdez · 7 years ago
- 9700b44 HRSS: omit reconstruction of ciphertext. by Adam Langley · 6 years ago
- 7b93593 Add initial HRSS support. by Adam Langley · 6 years ago
- 6965d25 Work around a JDK 11 TLS 1.3 bug. by David Benjamin · 6 years ago
- 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
- 6855e0a Switch the default TLS 1.3 variant to tls13_rfc. by David Benjamin · 7 years ago
- d451453 Implement final TLS 1.3 RFC!!! by Steven Valdez · 7 years ago
- e6fd125 Align on a single CMake style. by David Benjamin · 7 years ago
- 9bb15f5 Remove SSL 3.0 implementation. by David Benjamin · 7 years ago
- 7bf0bcc Add missing <condition_variable> include. by David Benjamin · 7 years ago
- c93724b Benchmark TLS AES-CBC ciphers in both directions. by David Benjamin · 7 years ago
- 56c4ed9 Allow enabling all TLS 1.3 variants by setting |tls13_default|. by Steven Valdez · 7 years ago
- 65359f0 Don't keep trying to read from stdin after EOF. by David Benjamin · 7 years ago
- 1d33955 Fix clang-cl build. by David Benjamin · 7 years ago
- 26aa7c8 Handle blocked writes in bssl client/server. by David Benjamin · 7 years ago
- 3d9705d Fix bssl handling of buffered read data. by David Benjamin · 7 years ago
- 28385db Fix bssl select loop on Windows. by David Benjamin · 7 years ago
- 3c37d0a Reland "Fix bssl client/server's error-handling." by David Benjamin · 7 years ago
- 0cdbc87 Revert "Fix bssl client/server's error-handling." by Steven Valdez · 7 years ago
- e7ca8a5 Fix bssl client/server's error-handling. by David Benjamin · 7 years ago
- 1414d86 tool: Move the RSA specific code from |Speed| to |SpeedRSA|. by Daniel Hirche · 7 years ago
- de20810 Fix return value in speed tool. by Daniel Hirche · 7 years ago
- f11ea19 Actually benchmark RSA verification with a fresh key. by David Benjamin · 7 years ago
- 861f384 Implement TLS 1.3 draft28. by Steven Valdez · 7 years ago
- 88b1a37 Include EC_POINT_oct2point in ECDH benchmarks. by David Benjamin · 7 years ago