1. 7e529d2 Add Trust Anchors extension by Bob Beck · 5 months ago
  2. b8291f8 Add ".git" hint to Go module name by Filippo Valsorda · 4 weeks ago
  3. 2b19cd3 Implement SPAKE2+ and its integration in TLS 1.3 by Chris Wood · 5 months ago
  4. 723b508 runner: Only require a curve match in TLS 1.3 when doing key shares by David Benjamin · 6 weeks ago
  5. afa405f Test that we reject Certificate or CertificateRequest in resumption by David Benjamin · 7 weeks ago
  6. f0a4948 runner: implement SecondHelloRetryRequest more straightforwardly by David Benjamin · 7 weeks ago
  7. 3418e56 Fix DTLS cross-version resumption tests by David Benjamin · 3 months ago
  8. 451626e runner: Move some test bugs into the callback by David Benjamin · 4 months ago
  9. 48417e1 Remove outdated DTLS 1.3 test suppression by David Benjamin · 4 months ago
  10. dfd4490 Schedule ACKs when we receive a partial flight by David Benjamin · 4 months ago
  11. f721d41 runner: Add a helper to read and downcast a message by David Benjamin · 4 months ago
  12. 6254482 runner: Rearrange 0-RTT code in server slightly by David Benjamin · 4 months ago
  13. 8c6db49 runner: Remove unused SendHalfRTTData option by David Benjamin · 4 months ago
  14. e6b800f Track SSL session types a bit better on the client by David Benjamin · 4 months ago
  15. d252906 Use DTLS 1.3 ACKs to avoid retransmitting ACKed fragments by David Benjamin · 5 months ago
  16. 5b03c8f Redo DTLS retransmit tests by David Benjamin · 5 months ago
  17. ea7a88f Stage new DTLS 1.3 read epochs until the first record comes in by David Benjamin · 5 months ago
  18. 6746e30 runner: Move epoch state into a separate structure by David Benjamin · 5 months ago
  19. fa2b8e9 Don't attempt to send early data in DTLS 1.3. by Nick Harper · 4 months ago
  20. fb5b271 Support resumption in DTLS 1.3. by Nick Harper · 5 months ago
  21. 23396fe runner: Use some new Go conveniences by David Benjamin · 5 months ago
  22. 0d9bb20 [DTLS 1.3] Use HelloRetryRequest in place of HelloVerifyRequest. by Nick Harper · 6 months ago
  23. 2c0cc6c runner: Remove block pool by David Benjamin · 6 months ago
  24. 8237469 DTLS 1.3 doesn't use EndOfEarlyData by David Benjamin · 6 months ago
  25. ed95627 Revamp test coverage for invalid key shares by David Benjamin · 6 months ago
  26. 7fb4d3d Implement X25519MLKEM768 for TLS by David Benjamin · 7 months ago
  27. cee4fe2 Disable compatibility mode for DTLS 1.3. by Nick Harper · 8 months ago
  28. 1b40d99 Add runner test support for DTLS 1.25 by Nick Harper · 9 months ago
  29. 66d274d Implement rsa_pkcs1_sha256_legacy. by David Benjamin · 4 years, 1 month ago
  30. fb1c75c Test various empty string cases with NPN callbacks by David Benjamin · 10 months ago
  31. 91a3f26 Add an SSL_CREDENTIAL API for ECDSA/RSA and delegated credentials by David Benjamin · 1 year, 1 month ago
  32. 6651948 runner: Configure all relevant fields from the Credential type by David Benjamin · 1 year ago
  33. f191838 runner: Rename CertificateChain to Credential by David Benjamin · 1 year ago
  34. e3af771 runner: Remove the ability to configure multiple certificates by David Benjamin · 1 year ago
  35. df3b58e Generate certs on the fly in runner, pass trusted cert to shim by Roland Shoemaker · 1 year, 7 months ago
  36. 558960d Add support for the new ALPS codepoint by Victor Tan · 1 year, 9 months ago
  37. 286ea21 Replace byteBuilder and byteReader with cryptobyte by David Benjamin · 1 year, 9 months ago
  38. 77b6f25 Replace interface{} with any by David Benjamin · 1 year, 11 months ago
  39. 4ae4fb7 Drop CECPQ2 support. by Adam Langley · 1 year, 11 months ago
  40. 08b1f38 Use KEM terminology in TLS ECDHE and key_share abstractions by David Benjamin · 2 years ago
  41. 361e3e0 Move the DTLS cookie to SSL_HANDSHAKE. by David Benjamin · 2 years, 6 months ago
  42. 18b6836 Update to draft-ietf-tls-esni-13. by David Benjamin · 3 years, 9 months ago
  43. 16c3e3a runner: Test session IDs over 32 bytes. by David Benjamin · 3 years, 9 months ago
  44. ba423c9 Implement ClientHelloOuter handshakes. by David Benjamin · 3 years, 9 months ago
  45. 83a4993 Add most of an ECH client implementation. by David Benjamin · 3 years, 10 months ago
  46. 26f186b Implement a handshake hint for certificate compression. by David Benjamin · 3 years, 9 months ago
  47. 7fffa46 runner: Implement ECH server for testing. by David Benjamin · 3 years, 9 months ago
  48. 5b7ec83 Reject the ECH extension in TLS 1.2 ServerHello. by David Benjamin · 3 years, 10 months ago
  49. aef0a88 runner: Reject all zero client and server randoms. by David Benjamin · 3 years, 10 months ago
  50. d89ec68 Remove draft tokbind implementation. by David Benjamin · 3 years, 10 months ago
  51. d791fbd runner: UpdateForHelloRetryRequest cannot fail. by David Benjamin · 4 years ago
  52. 99f6d4b runner: Remove remnants of SSL 3.0. by David Benjamin · 4 years ago
  53. 26a589e runner: Move writeHash to the finishedHash struct. by David Benjamin · 4 years ago
  54. e5fe31c Revert "Implement rsa_pkcs1_sha256_legacy." by David Benjamin · 4 years ago
  55. a3437c0 Implement rsa_pkcs1_sha256_legacy. by David Benjamin · 4 years, 1 month ago
  56. 0653147 runner: Rename 'masterSecret' on session objects to plain 'secret'. by David Benjamin · 4 years, 1 month ago
  57. c5e4538 Fix TLS13SessionID-TLS13 test. by David Benjamin · 4 years, 1 month ago
  58. ae2bb64 Use ID instead of Id in Go. by David Benjamin · 4 years, 2 months ago
  59. 3d8b8c3 Add support for the new QUIC TLS extension codepoint by David Schinazi · 4 years, 2 months ago
  60. 47d1274 Make QUIC tests work with early data. by David Benjamin · 4 years, 2 months ago
  61. f4a8829 runner: Allow tokbind without RI/EMS in TLS 1.3. by David Benjamin · 4 years, 2 months ago
  62. 1920c6f Implement GREASE for ECH (draft-ietf-tls-esni-08). by Dan McArdle · 5 years ago
  63. 51607f1 Implement draft-vvv-tls-alps-01. by Steven Valdez · 4 years, 7 months ago
  64. 974ac21 runner: Implement a more complete ClientHello consistency check. by David Benjamin · 4 years, 5 months ago
  65. e32549e Disable TLS 1.3 compatibility mode for QUIC. by Nick Harper · 4 years, 10 months ago
  66. af6bfbe Enable more runner tests for QUIC by Nick Harper · 5 years ago
  67. 83ea777 runner: Tidy up 0-RTT support. by David Benjamin · 5 years ago
  68. f9cc26f Require handshake flights end at record boundaries. by David Benjamin · 5 years ago
  69. f249840 Remove SSL_CTX_set_rsa_pss_rsae_certs_enabled. by David Benjamin · 5 years ago
  70. e0d95ad Remove post-quantum experiment signal extension. by David Benjamin · 5 years ago
  71. 7f02881 Drop CECPQ2b code. by Adam Langley · 5 years ago fips-android-20191020
  72. b82f945 Use the Go 1.13 standard library ed25519. by David Benjamin · 6 years ago
  73. 94b2871 Remove SSL_export_early_keying_material. by David Benjamin · 6 years ago
  74. a86c698 Add post-quantum experiment signal extension. by Adam Langley · 6 years ago
  75. 78c88c9 Integrate SIKE with TLS key exchange. by Kris Kwiatkowski · 6 years ago
  76. 73308b6 Avoid SCT/OCSP extensions in SH on {Omit|Empty}Extensions by Filippo Valsorda · 6 years ago
  77. 7b93593 Add initial HRSS support. by Adam Langley · 6 years ago
  78. 6965d25 Work around a JDK 11 TLS 1.3 bug. by David Benjamin · 6 years ago
  79. 0990a55 Set up Go modules. by David Benjamin · 7 years ago
  80. a130ce0 Update TLS 1.3 citations for the final RFC. by David Benjamin · 7 years ago
  81. f1af129 Implement TLS 1.3 anti-downgrade signal. by Steven Valdez · 7 years ago
  82. ae32239 Remove dummy PQ padding extension. by Adam Langley · 7 years ago
  83. 0080d83 Implement the client side of certificate compression. by Adam Langley · 7 years ago
  84. a307cb7 Preliminary support for compressed certificates. by Adam Langley · 7 years ago
  85. ed188fd Enforce supported_versions in the second ServerHello. by David Benjamin · 7 years ago
  86. e28552d Add an API to disable RSA-PSS for certificates. by David Benjamin · 7 years ago
  87. 8df8e64 Record whether dummy PQ padding was used. by Adam Langley · 7 years ago
  88. 1bf2337 Reject compressed ECDH coordinates in TLS. by David Benjamin · 7 years ago
  89. 7e5dd25 Remove draft22 and experiment2. by Steven Valdez · 7 years ago
  90. 3c034b2 Add support for QUIC transport params. by Nick Harper · 7 years ago
  91. 0ab3f0c Notice earlier if a server echoes the TLS 1.3 compatibility session ID. by David Benjamin · 7 years ago
  92. 36fcc4c Implement Token Binding by Nick Harper · 7 years ago
  93. 512a289 Add support for dummy PQ padding. by Adam Langley · 7 years ago
  94. 74666da Update key share extension number for draft23. by Steven Valdez · 7 years ago
  95. 6df6540 Add a draft TLS 1.3 anti-downgrade signal. by David Benjamin · 7 years ago
  96. 64cc121 Remove deprecated TLS 1.3 variants. by Steven Valdez · 7 years ago
  97. 650d8c3 Implement TLS 1.3 early exporters. by David Benjamin · 7 years ago
  98. c5c31ab Enforce compression_method in TLS 1.3 draft 22. by Steven Valdez · 7 years ago
  99. e7c95d9 Run TLS 1.3 tests at all variants and fix bugs. by David Benjamin · 7 years ago
  100. 964b237 Implement PR 1091 (TLS 1.3 draft '22'). by Steven Valdez · 7 years ago