)]}' { "log": [ { "commit": "8f77af2e983b73df4f018e2a141450d005f5587b", "tree": "f9dc0a5ebf07a942176033c50f7d677eafe93cfb", "parents": [ "8e87e467b47a70ab6f00e9989761cbea428e795e" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Thu Oct 15 10:55:59 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 23 15:16:47 2026 -0700" }, "message": "Replace single-chars std::string::operator+\u003d calls with the char version\n\nSomeone ran a clang-tidy to replace this in BoringSSL. Upstream that.\nAlso replace a few more that could be char literals.\n\nChange-Id: I6c1e1df9e531f4e35f536f4fac9dd94dfe379006\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104168\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "8e87e467b47a70ab6f00e9989761cbea428e795e", "tree": "7f47a8cc227c0e0c3bf450d1f8eff8d0c8ddf9e5", "parents": [ "90c6b370770adce64ff435789bfd1940067df415" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Thu Oct 08 11:34:39 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 23 15:11:38 2026 -0700" }, "message": "Update google.golang.org/grpc\n\nApparently they had a vuln. It\u0027s not really relevant to us because this\nis only an optional dependency in acvptool. But update these nonetheless\nto silence alerts.\n\nChange-Id: I6ff51dc9606a46f2696bbccbe532eb5be47b0e8b\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103929\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\nCommit-Queue: Adam Langley \u003cagl@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n" }, { "commit": "90c6b370770adce64ff435789bfd1940067df415", "tree": "5ec5b998bbb0c30d3bb823da92bdbfab99089e6d", "parents": [ "9b684de239a02f99a106927a70ceefcaeceb310a" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Tue Oct 13 09:35:05 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 12:58:31 2026 -0700" }, "message": "crypto/bio: Don\u0027t call method-\u003edestroy if method-\u003ecreate failed\n\nUpdate-Note: If create callback of BIO_METHOD fails, the destroy method will no\nlonger be called. This means:\n\n- The create method is responsible for cleaning up any state if it fails.\n\n- The destroy method no longer needs to consider partial states when create\n fails.\n\nThis is a slight behavior change to BIO_METHOD, but restores our previous\nbehavior and aligns with OpenSSL. This reverts a regression\nintroduced by\nhttps://boringssl-review.googlesource.com/c/boringssl/+/89189.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I0155df499ff6ed1169943d49d7300f4f6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104048\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "9b684de239a02f99a106927a70ceefcaeceb310a", "tree": "3a599855cc8d210832010358ea530be975dd583b", "parents": [ "fdc425e3eb90e220c55455f746975ff87ee8dc90" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 08 16:16:42 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 12:43:17 2026 -0700" }, "message": "crypto/x509 MTC: Strictly parse extensions in MTC verification\n\nAdd the missing check that the MTCProof\u0027s extensions field is a\nwell-formed list of MTCLogEntryExtension structures in strictly\nascending order by type, as required by section 5.2.1. Previously the\nfield was hashed wholesale as opaque bytes without being parsed. No\nextension types are defined, so well-formed extensions are otherwise\nstill ignored.\n\nBug: 571178555\nChange-Id: Ib25e7318ad9c27a4af5c972f34f93f3f6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104509\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "fdc425e3eb90e220c55455f746975ff87ee8dc90", "tree": "d537081e2ee07cca0261e7bc40b57cf6459ccbf4", "parents": [ "d8394c58b8d7e9497c7a3ad42756d5adf67e77c6" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sun Sep 13 20:05:19 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 12:11:57 2026 -0700" }, "message": "Check extensions on the trust anchor too\n\nThis gets most of trust anchor extension enforcement. I believe the only\nthing remaining is how much of policy validation should look at the\ntrust anchor. (I\u0027ll need to remind myself of the quirks of RFC 5937 and\nthe place libpki opted to diverge.)\n\nUpdate-Note: Critical extensions, EKU, and path length constraints are\nnow checked on the trust anchor, the same as if they were on an\nintermediate. This aligns with OpenSSL, except that OpenSSL has some\nextra quirks around the EKU check, that we for now do not replicate.\n\nBug: 525688038\nChange-Id: I0a3cf64a81e44c3637e8050cce97aefa4235c320\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104309\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "d8394c58b8d7e9497c7a3ad42756d5adf67e77c6", "tree": "4350b8eb0a4ee5a3e749c428c59a922c19cab9d8", "parents": [ "1cd9d22abadac16cdb53e58cf925019502463ead" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sun Sep 13 19:51:13 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 12:11:47 2026 -0700" }, "message": "Check extensions for X509_STORE certificates that aren\u0027t trust anchors\n\nOpenSSL\u0027s path builder is odd. Typically one builds a path with:\n\n- Target certificate\n- Intermediates\n- Trust anchor\n\nBut OpenSSL has:\n\n- Target certificate\n- \"Untrusted\" intermediates\n- \"Trusted\" intermediates\n- Trust anchor\n\n\"Trusted\" intermediates come from the X509_STORE, but are not trust\nanchors. They were functionally equivalent to \"untrusted\" intermediates,\nin that you still have to chain up to a trust anchor. But some checks\napply differently (the last_untrusted field). Historically, these\ncertificates didn\u0027t check critical extensions, key usage, etc.\n\nAs this is confusing and not a state supported by RFC 5280, stop\ntreating them funny. OpenSSL stopped doing this in 1.1.0 I believe. This\nremoves the need to track last_untrusted and removes the distinction\nbetween \"untrusted\" and \"trusted\" intermediates.\n\nUpdate-Note: Critical extensions, key usages, and path length\nconstraints will no longer be ignored for intermediate certificates\npicked up from the X509_STORE. This is not expected to impact anyone,\nand brings us closer to where upstream OpenSSL is now.\n\nFixed: 526486357\nChange-Id: Ie597d79e9eb2f716f49b846a5cea806d92d89c43\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104308\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "1cd9d22abadac16cdb53e58cf925019502463ead", "tree": "f6d3f2cc8dbb7409ce8b1e3b7664906c7f0e83c8", "parents": [ "e5cb31889be84598f622eb3ed61494cb082cfbee" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 22 15:57:11 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 09:54:59 2026 -0700" }, "message": "CI/CQ: Promote win64_clang_shared_compile builder\n\nConfirmed the configuration fails as expected on\nhttps://ci.chromium.org/ui/p/boringssl/builders/try/win64_clang_shared_compile/b8667230428523201793/overview\n\nA compile-only builder suffices for both CI and CQ.\n\nBug: 576643082\nChange-Id: I786bae48770a513afa820fde880e91946a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104649\nAuto-Submit: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n" }, { "commit": "e5cb31889be84598f622eb3ed61494cb082cfbee", "tree": "a7ba07e51025015220ecd2fdf24bd14e38c66c96", "parents": [ "bdb6028f66bb1059aa593f2ac7c8d90680840306" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Mon Oct 19 18:25:25 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 09:42:25 2026 -0700" }, "message": "asn1,x509: Move statics into anonymous namespace\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I2e0635e70e40b437b90844f7e06a18886a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104368\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "bdb6028f66bb1059aa593f2ac7c8d90680840306", "tree": "e3f4ac830155ef6ffabfb3255e60e88b0661f4e6", "parents": [ "df821137838169360f82f94fd39cebe803c7c2d6" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Thu Oct 22 08:30:02 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 09:05:31 2026 -0700" }, "message": "clang-format: Always wrap namespace body with empty lines\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I7c38b1121626be4862783637bcb1a6476a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104548\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "df821137838169360f82f94fd39cebe803c7c2d6", "tree": "f4dcc7a25ff58e682dab0a6345eb853673f04943", "parents": [ "c7eb007fd10627f1abb41a3e368b85e24cd20af9" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 22 13:36:53 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 07:48:50 2026 -0700" }, "message": "CI/CQ: Add a disabled win64_clang_shared CQ builder\n\nChromium\u0027s Windows component build uses clang-cl with BoringSSL as a\nshared library, but our Windows shared library builders all use MSVC.\nclang-cl rejects cross-DLL function addresses in constexpr\ninitializers, which has broken the Chromium roll twice:\n\nhttps://boringssl-review.googlesource.com/c/boringssl/+/91769\nhttps://boringssl-review.googlesource.com/c/boringssl/+/103727\n\nLeave the builder includable_only until it has been verified manually.\n\nBug: 576643082\nChange-Id: Ib7c6f8f6369820af5996c63308854ae36a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104628\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n" }, { "commit": "c7eb007fd10627f1abb41a3e368b85e24cd20af9", "tree": "d53f7bd4938619a488d161ee9471e7b57b30334a", "parents": [ "2df72eda79c0319a01024a52a9c1e46c2a8b790f" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 22 13:27:14 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 06:51:31 2026 -0700" }, "message": "Avoid Windows cross-dll constexpr issue in digest_test.cc\n\nAddresses of dllimport functions are not constant expressions in\nclang-cl, so kSqueezeVectors cannot be constexpr in Windows shared\nlibrary builds. Use dynamic initialization instead.\n\nThis should fix the Chromium roll. crrev.com/c/8628983\n\nChange-Id: I1a126d1c9cf30e8417b595de56086d476a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104609\nAuto-Submit: Lily Chen \u003cchlily@google.com\u003e\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: Xiangfei Ding \u003cxfding@google.com\u003e\n" }, { "commit": "2df72eda79c0319a01024a52a9c1e46c2a8b790f", "tree": "e243d424ef0d3a307a5acb4745c4324648207e06", "parents": [ "0f156d659fac5e3e57781132e62ce25f33ae38ae" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Thu Oct 08 07:08:31 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 05:33:55 2026 -0700" }, "message": "crypto: Move statics into anonymous namespace, Round 2\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I2ac8d6eb2bea248b7206f8e9cd6950e76a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103868\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "0f156d659fac5e3e57781132e62ce25f33ae38ae", "tree": "2a496692f06efcd6266ff3a7f1a7858f6e4347fb", "parents": [ "f4f4a405399eabe0e10a12db6dbae738f12ade02" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Wed Oct 07 09:34:36 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 04:27:27 2026 -0700" }, "message": "crypto: Put more statics into anonymous namespace\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: Id892f9057d9350c1428a5974d6a318c66a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103707\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "f4f4a405399eabe0e10a12db6dbae738f12ade02", "tree": "ed046b7e5056d8dac78dad67703ff062dc9823a6", "parents": [ "af41e135bc1714981fb8a791e9dda4fc6ff140c3" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Wed Oct 07 11:44:10 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 22 01:55:27 2026 -0700" }, "message": "crypto/evp: Export SHAKE256 and TurboSHAKE256 as EVP_MD\n\nWe would also assume 256 bit output by default and publish\nan XOF interface as well.\n\nBug: 462683293\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I35c9d358bcef79911882697ecd5bb4316a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103727\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "af41e135bc1714981fb8a791e9dda4fc6ff140c3", "tree": "68526bcae2a2ce95476c03ef546db87ab0a91ab0", "parents": [ "1f2ee5e97ae0a1718672ca5fcf904f3e6d462713" ], "author": { "name": "Jakub Patałuch", "email": "jjpat@google.com", "time": "Mon Oct 12 11:00:08 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 21 14:24:27 2026 -0700" }, "message": "Precompute the PK.seed SHA-256 state in SLH-DSA-SHA2\n\nIn the SHA2 instantiation of SLH-DSA (FIPS 205, section 11.2), every\ncall to F, H, T_l, T_k and PRF starts by hashing\nPK.seed || toByte(0, 64 - n). That is exactly one SHA-256 block, and it\nis the same for every call made with a given key. The SPHINCS+ round\n3.1 specification (section 8.1.6) pads PK.seed to a full block for this\nreason, so that implementations can compute the state after that block\nonce instead of on every call.\n\nCompute that state once per key generation, signing or verification\noperation and keep it, with PK.seed, in a new slhdsa_hash_ctx. The\ncontext replaces the raw PK.seed argument of the internal WOTS+, FORS,\nXMSS and thash functions.\n\nAfter the cached block, the rest of an F, H or PRF input (ADRSc and one\nor two n-byte values) fits in a single block together with the SHA-256\npadding. Build that block directly and process it with one call to\nBCM_sha256_transform_blocks, rather than going through SHA256_Update\nand SHA256_Final. For PRF calls the block contains SK.seed, and for F\ncalls it can contain secret WOTS+ or FORS values, so clear it with\nOPENSSL_cleanse afterwards. Previously, SHA256_Final cleared the\nequivalent buffer. T_l and T_k still use SHA256_Update and\nSHA256_Final, starting from the precomputed state.\n\nThe output is unchanged, and so are the self-test known-answer values.\nThe fast path does not call SHA256_Final, so it does not update the\nFIPS service indicator. Every SLH-DSA operation still calls\nSHA256_Final at least once (for T_l, and for H_msg when signing or\nverifying), so the indicator still moves during each operation, as it\ndid before. SLH-DSA-SHAKE-256f is not affected.\n\nSLH-DSA-SHA2-128s on an Intel Xeon at 2.0 GHz without SHA-NI, median\nof 15 runs:\n\n Before After Speedup\n keygen 158.3 ms 74.7 ms 2.12x\n sign 1204.6 ms 568.1 ms 2.12x\n verify 1.176 ms 0.565 ms 2.08x\n\nChange-Id: Ib57a2fd38a113d65f2e0b3bbf03b884b616941ae\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104029\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "1f2ee5e97ae0a1718672ca5fcf904f3e6d462713", "tree": "b4f7e94d2f54439880c7a91a4760204245681748", "parents": [ "92b7c608fbd33903584788dda466a0163aa5b977" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 08 16:14:48 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 21 12:36:22 2026 -0700" }, "message": "crypto/x509 MTC: Allow empty cosignature values in MTCProof\n\nThe MTCProof Cosignature structure defines the signature as\nopaque signature\u003c0..2^16-1\u003e, so an empty signature is syntactically\nvalid. We previously rejected empty signatures as a decode error, which\nwould cause verification to fail if, e.g., an unrecognized (GREASE)\ncosigner had an empty signature. The spec says unrecognized cosigners\nmust be ignored.\n\nBug: 571178555\nChange-Id: Ibcf428eeffd14633a354724a3534aefa6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104508\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "92b7c608fbd33903584788dda466a0163aa5b977", "tree": "0803afb1247acd32ce8438736e60f0d51551c1c7", "parents": [ "99b9d64ec02384c4c939f264b40e91d6cb5ca904" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Sun Oct 18 13:19:27 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 21 11:39:43 2026 -0700" }, "message": "rust/bssl-tls: Allow libraries to pick alert when cert_cb fails\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I53884095f9e6f434df3f26f6e4980bd26a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104209\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "99b9d64ec02384c4c939f264b40e91d6cb5ca904", "tree": "f8ddecf9af90886fb5c10c7cb59b6d14c2ae0d89", "parents": [ "f456745e82b68556f14ac4e1f117193f6b497a15" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Tue Oct 20 14:55:02 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 20 12:38:13 2026 -0700" }, "message": "Update presubmit.yml per review comments\n\nThis will be picked up in the next BCR release. Switch macos to\nmacos_arm64. Also add 9.x and drop 7.x from the testing matrix. (We\u0027re\nalready not testing 7.x on CI and 7.x is out of oss-policies-info.)\n\nChange-Id: I5d5a701034a5ba460b3eca5ee6d59bc857870dd8\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104448\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "f456745e82b68556f14ac4e1f117193f6b497a15", "tree": "539189b04531db1b83186c46f386572ea8d55757", "parents": [ "1f05cb491d2161c1bb86e69139fdcdd85f0720ff" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sun Sep 13 19:52:17 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 20 12:21:48 2026 -0700" }, "message": "Remove odd special case around policy validation\n\nThis once made sense when policy validation was a DoS concern. But after\nhttps://boringssl-review.googlesource.com/c/boringssl/+/56036, this\ndoesn\u0027t make sense.\n\nIt also is not much of a DoS protection. Either way, we run policy\nvalidation after all other checks have passed, so typically an invalid\nchain won\u0027t get this far. This check only matters if the caller\nsuppresses enough errors with the verify callback to proceed with an\ninvalid chain.\n\nChange-Id: I5845e1dc6d6ef6f80398f8c1e37cf9346658d777\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103867\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "1f05cb491d2161c1bb86e69139fdcdd85f0720ff", "tree": "3dc3c7398d2ca3d8823e3e68827dae5df98423a4", "parents": [ "b17e56ba158de9a132e5335438af71b40dedcd08" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sun Sep 13 19:45:46 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 20 12:21:42 2026 -0700" }, "message": "Report X509_V_ERR_CERT_CHAIN_TOO_LONG if the chain was too long\n\nThe error code existed, but we weren\u0027t surfacing it. This resolves a\nvery, very old TODO in the codebase.\nd9b8b89bec4480de3a10bdaf9425db371c19145b in upstream OpenSSL did\nsomething similar.\n\nUpdate-Note: If we hit the chain limit, X509_verify_cert will now fail\nwith X509_V_ERR_CERT_CHAIN_TOO_LONG instead of one of\nX509_V_ERR_UNABLE_TO_GET_ISSUER_CERT or\nX509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY.\n\nChange-Id: I02c0dcc7e437bc86417f9fb3520c4d73356c9101\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103866\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "b17e56ba158de9a132e5335438af71b40dedcd08", "tree": "8eee9fddf146bc6c5fa222c30840438a62ecb2f0", "parents": [ "fbbba8f3c5be47ffd19a85657e44b423c3998657" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Mon Sep 14 13:49:17 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 20 12:21:37 2026 -0700" }, "message": "X509_V_FLAG_CRL_CHECK_ALL should skip the trust anchor\n\nThe trust anchor is not formally part of RFC 5280 certification path\nand, without an issuer, we could not usefully process a CRL anyway. All\nthis does in practice is make X509_V_FLAG_CRL_CHECK_ALL and\nX509_V_FLAG_PARTIAL_CHAIN incompatible. See bug for details.\n\nFixed: 561609863\nChange-Id: I3407036d15e9c388d4f04ce4d07358e4d31c0ab4\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103865\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "fbbba8f3c5be47ffd19a85657e44b423c3998657", "tree": "51a6f27dd1c8c14cec585aab31db7f8fdfbf73e0", "parents": [ "bbbeba2e6676800b75d073c72ea8da5bacc9d7f8" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Mon Sep 14 12:37:03 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 20 12:21:29 2026 -0700" }, "message": "Remove dead code for picking a CRL issuer\n\nIf crl_akid_check succeeds, it always picks an issuer. If it fails, the\nCRL will never be used. (Score zero CRLs are discarded by get_crl_sk.)\nThis removes one of the callers of x509_check_issued_with_callback.\n\nBug: 42290549\nChange-Id: I960d933988075a769f418e7b3c59de0938d56925\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103864\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "bbbeba2e6676800b75d073c72ea8da5bacc9d7f8", "tree": "9417826140cd04080a041b77b530274d90ff3e4e", "parents": [ "a74aca089d08328744c3f22b240d160b44d40e02" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sun Sep 13 14:36:48 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 20 12:07:36 2026 -0700" }, "message": "Rewrite the path builder\n\nThe old path builder was a mess. It would collect certificates until it\nhit a self-signed certificate, or failed, and then it would go back and\ncheck after the fact if it found a trust anchor.\n\nThis meant that, in a variety of edge cases, the path would extend\nbeyond the trust anchor. Rework all this to match how X.509 is actually\nmeant to work. We append to the chain, evaluating trust in the\nnewly-appended certificate. If it\u0027s a trust anchor, we stop.\n\nMaintain the invariant from before where we will always append untrusted\ncertificates, followed by store certificates, and not interleave them.\n(Otherwise last_untrusted is broken. We also should remove the\nlast_untrusted variable, but that\u0027s a separate bug.)\n\nThis is still not a backtracking path-builder, but at least it doesn\u0027t\ngive incoherent answers.\n\nIn doing so, the function evaluating whether we have a trust anchor is\ncleaned up. This fixes some of the weird cases around the target\ncertificate being in the trust store. (See updated unit tests.)\n\nUpdate-Note: X509_verify_cert is reworked to have many downright buggy\nbehaviors fixed. In particular, it will now stop building the path at a\ntrust anchor. This matches modern OpenSSL behavior and how X.509 is\nmeant to work. We\u0027ve also qualified this against tests at Google. But if\nsomething breaks around certificate verification, let us know.\n\nFixed: 548461146\nChange-Id: I1b963f034d6b778d218bc736b1a2dc3e6bed4fa0\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103863\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "a74aca089d08328744c3f22b240d160b44d40e02", "tree": "60b99a2343759651674379787f5c4ac475888798", "parents": [ "d3bf4795ad5b79d646cddf2fec687da5b9b502db" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Wed Oct 07 21:27:28 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 20 11:56:17 2026 -0700" }, "message": "Test X509_V_FLAG_CRL_CHECK_ALL\n\nThis includes a test demonstrating why the behavior is broken and that\nchecking the revocation for the trust anchor cannot work.\n\nBug: 561609863\nChange-Id: I6067b849ba834734ccc76f3aa3b7951f6d802fab\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103862\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "d3bf4795ad5b79d646cddf2fec687da5b9b502db", "tree": "92ce790e497fe2b5989d9dab81d5301a1b594b68", "parents": [ "dd682072baab8029a83347e639d056c03e48d7e0" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Tue Oct 20 13:55:41 2026 -0400" }, "committer": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Tue Oct 20 10:57:16 2026 -0700" }, "message": "Update MODULE.bazel for 0.20261020.0\n\nChange-Id: I6ec4aa0c6ee040be825f2b9622f849348bd0bdfd\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104428\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "dd682072baab8029a83347e639d056c03e48d7e0", "tree": "e499088009b0a23e56686163f7f8c49331a5eb08", "parents": [ "30592837f2b08ce4c22af7258660d5840f9aa5ec" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Tue Oct 20 09:53:47 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 20 10:27:32 2026 -0700" }, "message": "Block a handful of intermediate certificates\n\nChange-Id: I16288fe9bc39b4994f5ee5115e05a954ea662ce6\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104388\nReviewed-by: Matt Mueller \u003cmattm@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "30592837f2b08ce4c22af7258660d5840f9aa5ec", "tree": "4927511d6898b049810b13220eda4d738d49e834", "parents": [ "bee44385a528bba66abe1af553113ed9a703bf0a" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Tue Oct 20 14:48:16 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 20 08:18:27 2026 -0700" }, "message": "Rename \"agents\" directory (containing AI skills) to \"_agents\"\n\nAs is apparently the convention.\n\nChange-Id: I94b94334366d26b167afee7977a5f84a6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104408\nAuto-Submit: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: Xiangfei Ding \u003cxfding@google.com\u003e\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\n" }, { "commit": "bee44385a528bba66abe1af553113ed9a703bf0a", "tree": "1065a1f1fed04a303c54bcfdac89f7a5c966f1a6", "parents": [ "b50cad27ee8013f241648ef6a7adf7f6f6b3d25b" ], "author": { "name": "Tom Hughes", "email": "tomhughes@chromium.org", "time": "Mon Oct 19 13:24:00 2026 -0700" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 20 08:16:50 2026 -0700" }, "message": "rand: Fix double-free on thread-local failure.\n\nCRYPTO_set_thread_local invokes the destructor callback on the value\nbefore returning zero on failure. In BCM_rand_bytes_with_additional_data\n(updated in commit 364eef1863bf11e80a3fd8a603ba69f14b910fdb), calling\nDelete(state) in the failure branch frees state a second time after\nrand_thread_state_free has already freed it.\n\nRemove the redundant Delete(state) call.\n\nBug: b/333039464\nChange-Id: I84a333be4a369aafb35d799f09997a9902a432b7\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104328\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nAuto-Submit: Tom Hughes \u003ctomhughes@chromium.org\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "b50cad27ee8013f241648ef6a7adf7f6f6b3d25b", "tree": "0734c853a843facb11a28e9052d8221f7966e1aa", "parents": [ "bcd557d2fb843e2af067038c45f1f8dba2b99956" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 01 16:28:38 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 19 12:47:07 2026 -0700" }, "message": "EVP_HPKE_KEM: Align HPKE error codes with EVP_KEM\n\nDuring the migration to EVP_KEM, the HPKE layer kept several length\nchecks whose only purpose was to preserve the legacy error codes. Remove\nthem and let errors come from the EVP_KEM and EVP_PKEY layers instead.\nAlso drop the P-256 private key deserialization wrapper whose only\ndifference from calling EVP_PKEY_from_ec_private_scalar directly was to\npreserve an error code.\n\nUpdate-Note: Some HPKE functions now report different error codes.\n\nBug: 535883377\nChange-Id: Ibde65bb7dda0091e3cd8e27e26102fc96a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103527\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "bcd557d2fb843e2af067038c45f1f8dba2b99956", "tree": "5a2b18c4f3d769e34a5625370f8ea9e3d8a19aa0", "parents": [ "2779deaa98280952a45f5ec53ff50a41783275d3" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Wed Oct 07 20:52:15 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 19 12:44:36 2026 -0700" }, "message": "EVP_HPKE_KEM: Clean up legacy KEM implementation hooks\n\nNow that every HPKE KEM is implemented by an EVP_KEM, remove the legacy\nfunction pointers and lengths from EVP_HPKE_KEM, the\nprivate_key/public_key buffers from EVP_HPKE_KEY, and the code paths\nthat used them.\n\nBug: 535883377\nChange-Id: I9aef06318f9eb941b1cd15c3b8559c106a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103807\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "2779deaa98280952a45f5ec53ff50a41783275d3", "tree": "4b101a4ed01a114a4105b8bf8c04c8d055efd8da", "parents": [ "c537970edf74cacacb815cc6e18d5e006f908df9" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sun Sep 13 15:42:31 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 19 11:54:13 2026 -0700" }, "message": "Test various odd cases when the target certificate is in the trust store\n\nOpenSSL\u0027s path building has two different places where it checks if the\ntarget certificate is in the trust store and doing something special.\nBoth places behave... unexpectedly. Test the behavior we have for now.\n\nIn doing so, this revealed an inconsistency between the two ways of\nusing X509_verify_cert. lookup_cert_match did not handle trusted_stack.\nSee also c864e7611f7bf0011fd0cb64b3fdfc42eb15e807 in upstream OpenSSL.\n\nChange-Id: Id559bfcfec7197ec7a2978a4815e2eac9f0f4454\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103861\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "c537970edf74cacacb815cc6e18d5e006f908df9", "tree": "f83135cc6054ef91d9ef58f484bcbd3642c8e160", "parents": [ "ba42c4903157ec74184b5e2b8a4d9d373e7ca752" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sun Sep 13 17:49:36 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 19 11:44:33 2026 -0700" }, "message": "Test X509_verify_cert in two ways\n\nThe trust store could be configured either via the X509_STORE or via\nAPIs like X509_STORE_CTX_set0_trusted_stack and\nX509_STORE_CTX_set0_crls. Convert all tests that call the Verify helper\nto a TEST_P.\n\nThis requires reworking the path length constraint tests slightly and\nmerging them into one test, which probably would have been better\nanyway.\n\nChange-Id: I9a892c67bfa1a14785782b75b842b70d1f659cc6\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103860\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\n" }, { "commit": "ba42c4903157ec74184b5e2b8a4d9d373e7ca752", "tree": "644c668069e3dba3a2fc7b0ba9b4498e95354fc3", "parents": [ "66195b4a9dcb625f62d0e37dfe2401c64b68c265" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sun Sep 13 15:41:15 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 19 11:44:26 2026 -0700" }, "message": "Test some special error codes when we cannot build a path\n\nOpenSSL has several different error codes for the same thing, that just\nsurface differently because of the convoluted way the X509_verify_cert\nworks. Capture these in tests in preparation for reworking the path\nbuilder.\n\nBug: 548461146\nChange-Id: I000d9fc2af0fc817604b984513c1923d4b9824a0\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103859\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "66195b4a9dcb625f62d0e37dfe2401c64b68c265", "tree": "de3515488fd520c6f8a39528e7af757d03dca4fc", "parents": [ "c49bb0ccb5bca7fecb58caae962438c88d8beac5" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 01 16:19:05 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 19 10:17:28 2026 -0700" }, "message": "Export EVP_KEMs corresponding to DHKEMs\n\nDHKEM(X25519, HKDF-SHA256) and DHKEM(P256, HKDF-SHA256) are publicly\nexported as EVP_kem_dhkem_x25519_hkdf_sha256() and\nEVP_kem_dhkem_p256_hkdf_sha256() in include/openssl/hpke.h.\n\nThese KEMs are only usable via the EVP_KEM APIs, and they do not\nimplement EVP_PKEY_encapsulate and EVP_PKEY_decapsulate.\n\nBug: 503758094\nChange-Id: If6ac96c1f90858f365a5760fb24d54b26a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103050\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "c49bb0ccb5bca7fecb58caae962438c88d8beac5", "tree": "b13839ea587ec8e2520e45b010d28c550de68445", "parents": [ "83687b75b2a884c128658f680965705709679576" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 01 16:16:16 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 19 10:17:22 2026 -0700" }, "message": "EVP_HPKE_KEM: Implement DHKEM(P256, HKDF-SHA256) using EVP_KEM_DHKEM\n\nImplement the other existing DHKEM as an EVP_KEM_DHKEM, reusing the\ngeneric DHKEM functions. P-256 keys are (de)serialized using the EC\nEVP_PKEY APIs, (for now) preserving HPKE\u0027s existing error code for\ninvalid private keys.\n\nBug: 535883377\nChange-Id: I0e10d4295283b7406ba42e2f018a1dac6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103049\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "83687b75b2a884c128658f680965705709679576", "tree": "0526459cd057ca1e2d9226cc3f72e334ccf0e271", "parents": [ "8a55a28d256014353b289778243d0ab554b53dc3" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Sep 17 14:45:12 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 19 09:48:15 2026 -0700" }, "message": "EVP_HPKE_KEM: Implement DHKEM(X25519, HKDF-SHA256) using EVP_KEM_DHKEM\n\nImplement DHKEM as EVP_KEM_DHKEM, a subclass of EVP_KEM that adds the\nDH- and KDF-specific parameters.\n\nAuthEncap and AuthDecap have no base EVP_KEM equivalent, so these hooks\nlive on EVP_HPKE_KEM.\n\nThis migrates the X25519-based DHKEM first. The P-256-based DHKEM will\nbe migrated in a future CL.\n\nBug: 535883377, 503758094\nChange-Id: I85bcbd8ef79fc51966ff922247d6a35b6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103048\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "8a55a28d256014353b289778243d0ab554b53dc3", "tree": "79acb83a27a8996533969b77df45dd63dfc90ce0", "parents": [ "52565fe587eadd3ac90a89463c1f93ab3c8b5dbf" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Fri Oct 16 17:54:21 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 19 09:43:50 2026 -0700" }, "message": "Also test that EVP_PKEY_from_ec_private_scalar rejects zero\n\nWe test this at the parser level and EC_KEY_set_private_key, but this\nseems prudent.\n\nChange-Id: I9827818fc93ff16c87fb99f90a99292b2c7f73e0\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104228\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "52565fe587eadd3ac90a89463c1f93ab3c8b5dbf", "tree": "99980141c4c7531514d658dddfbc96d1f1cda16c", "parents": [ "fb64286574ead3b13ff1dd1646f5e496b5d0cb85" ], "author": { "name": "Adam Langley", "email": "agl@imperialviolet.org", "time": "Sun Oct 18 13:18:04 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 19 09:19:37 2026 -0700" }, "message": "SLH-DSA: SHAKE variants are not approved.\n\nNIST requires a specific self-test for the SHAKE variants of SLH-DSA,\nwhich we don\u0027t have. Thus this CL switches their service indicator to\nnot_approved.\n\nChange-Id: I99c8f7e5efe6677bd653d0cc04b964b3e4d73019\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104288\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nAuto-Submit: Adam Langley \u003cagl@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "fb64286574ead3b13ff1dd1646f5e496b5d0cb85", "tree": "f3fa4b09a4a97ac684a8285531cf5b963a24cbbb", "parents": [ "890a85a274947ba27b386f1af8ddf183ac5947fa" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sun Sep 13 14:52:08 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 19 06:56:20 2026 -0700" }, "message": "x509_test: Fix some style mishaps\n\nWe generally keep initialisms capitalized as Go does.\n\nChange-Id: I84b446aff318f2fbb6daad1a20a6f96052160444\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103858\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "890a85a274947ba27b386f1af8ddf183ac5947fa", "tree": "5aa1762aa197309fdb6f6349df852a4c24685f2f", "parents": [ "b6981118a3f91da409956ea191dd020ead45d6e2" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Tue Oct 06 08:17:55 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sun Oct 18 13:57:05 2026 -0700" }, "message": "rust/bssl-crypto: CPace support\n\nBug: 543281154\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I4f4a0ca947bac09f06909fc5fa835b166a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103728\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "b6981118a3f91da409956ea191dd020ead45d6e2", "tree": "c55bc8bd7b3f4ad01c3f94fd22747a29cd6b741c", "parents": [ "cac4d9b973a583d1f00d5fadce5d03675da1ecd1" ], "author": { "name": "Jakub Patałuch", "email": "jjpat@google.com", "time": "Tue Oct 13 13:21:46 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sun Oct 18 12:30:10 2026 -0700" }, "message": "Use lazy reduction and parallel ExpandMask in ML-DSA\n\nmatrix_mult_montgomery Montgomery-reduced every product and then added\nit to the output with a conditional subtraction. The inputs are fully\nreduced, so for each coefficient the sum of the L products is at most\n7 * (8380417 - 1)^2, well within the range reduce_montgomery accepts.\nInstead, sum the 64-bit products and reduce once per coefficient. A\nstatic_assert checks the bound. This speeds up the matrix-vector product\nin key generation, signing and verification.\n\nvector_expand_mask sampled the L scalars of y one at a time, each a\nseparate SHAKE256 computation of about five Keccak permutations, on\nevery signing attempt. The scalars are independent, so sample them with\nthe parallel x4 and x2 Keccak implementations, as vector_expand_short\nalready does for s1 and s2. A shared helper sets up the SHAKE256 input,\nso every variant absorbs the same bytes.\n\nThe output is unchanged, as are the self-test known-answer values, and\nthe code remains constant-time.\n\nMedian of 15 runs on an Intel Xeon (Skylake-SP) at 2.0 GHz, in\nmicroseconds:\n\n Before After Speedup\n ML-DSA-44\n keygen 73.1 71.2 1.03x\n sign 274.8 224.2 1.23x\n verify 58.7 56.9 1.03x\n ML-DSA-65\n keygen 125.1 120.7 1.04x\n sign 424.7 371.3 1.14x\n verify 93.1 89.0 1.05x\n ML-DSA-87\n keygen 187.6 176.7 1.06x\n sign 502.7 421.9 1.19x\n verify 149.2 139.6 1.07x\n\nChange-Id: I9f50a41319acff3846af7021fc89670cddc83c65\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104088\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n" }, { "commit": "cac4d9b973a583d1f00d5fadce5d03675da1ecd1", "tree": "2e87451d5e9fb8eff453d04b5f25a0de4d32ef29", "parents": [ "76bc63d96cbf11f81d89be8d0fe0dff8238fec8f" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Thu Aug 20 07:22:46 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sun Oct 18 12:25:01 2026 -0700" }, "message": "rust: bssl-tls: Allow recognition of deprecated protocol version\n\nWe also gate it behind deprecation.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: If5edbbde7941be5b55c137c9992e31a16a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/101608\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "76bc63d96cbf11f81d89be8d0fe0dff8238fec8f", "tree": "b1706797df2137efbb964c9f1003f6f41fad0e20", "parents": [ "dc518c789ab79670ef471c3a5d9b3257680c2565" ], "author": { "name": "Jakub Patałuch", "email": "jjpat@google.com", "time": "Tue Oct 13 12:37:34 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sun Oct 18 12:16:29 2026 -0700" }, "message": "Use lazy reduction in ML-KEM matrix-vector products\n\nIn the NTT domain, a product of two ML-KEM polynomials consists of 128\nproducts in rings of the form GF(3329)[X]/(X^2 - zeta), each computing\na0*b0 + a1*b1*zeta and a0*b1 + a1*b0. scalar_mult reduced a1*b1 before\nmultiplying it by zeta, and then reduced both results, for three\nBarrett reductions per pair of coefficients. The matrix-vector and\ninner product functions then added each product to the running sum\nwith another conditional subtraction.\n\nThese products are only ever summed. Since the inputs are fully\nreduced, each term is below 2 * 3329^2, and a sum of up to four terms\nfits in 32 bits. Instead, accumulate the unreduced terms in a uint32_t\narray and reduce each coefficient once, at the end. A static_assert\nchecks the bound.\n\nAlso, b1*zeta only depends on the right-hand side, which is the same for\nevery row of a matrix-vector product. Compute it once per vector\nelement and pass it to the products. When encrypting, the\nmatrix-vector product and the inner product share the cache.\n\nBoth techniques are described for Kyber\u0027s matrix-vector product in\n\"Faster Kyber and Dilithium on the Cortex-M4\"\n(https://eprint.iacr.org/2022/112), as \"better accumulation\" and\n\"asymmetric multiplication\". The latter comes from \"Neon NTT\"\n(https://eprint.iacr.org/2021/986).\n\nFor one ML-KEM-768 matrix-vector product, this replaces 3,456 Barrett\nreductions and 2,304 conditional subtractions with 1,152 Barrett\nreductions.\n\nThe output is unchanged, as are the self-test known-answer values, and\nthe code remains constant-time. scalar_zero and vector_zero are no\nlonger used, so remove them.\n\nMedian of 15 runs on an Intel Xeon (Skylake-SP) at 2.0 GHz, in\nmicroseconds:\n\n ML-KEM-768 ML-KEM-1024\n Before After Speedup Before After Speedup\n keygen 35.1 32.5 1.08x 49.2 43.3 1.14x\n encap 24.4 20.8 1.17x 30.8 24.5 1.26x\n decap 37.0 33.1 1.12x 48.6 41.4 1.17x\n\nChange-Id: Ib8ff5c08d24bf4c8c02218ad270ba448e96fc5f8\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104068\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n" }, { "commit": "dc518c789ab79670ef471c3a5d9b3257680c2565", "tree": "ffc0feeb07d67cc693b6039ed6736845d3969fcb", "parents": [ "2752c13d111a7849d7396d964ecae9c4cda7f05b" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sat Sep 12 18:45:28 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sun Oct 18 11:09:53 2026 -0700" }, "message": "Make X509_check_trust and X509_check_purpose const\n\nChange-Id: Ia4ed176a8c66be3cee3e7d07c2b8c066b85de0c7\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103856\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\n" }, { "commit": "2752c13d111a7849d7396d964ecae9c4cda7f05b", "tree": "da6759a64833af26e3f253b96daf049f9598bf3c", "parents": [ "594a44291086dcc7cef06cabec4c0b47afd674c0" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Sun Oct 18 13:16:07 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sun Oct 18 10:54:59 2026 -0700" }, "message": "ssl: Reset cert_cb back to unset\n\nThe translation to std::variant is partly unfaithful. Setting this\ncallback to NULL should be interpreted as clearing the callback.\n\nBug: 574755573\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: Ic3cf0274c43b5a09e14956d25a6178e96a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104268\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "594a44291086dcc7cef06cabec4c0b47afd674c0", "tree": "9fc82a40ac1a9e0d19e0caa0141214819b773229", "parents": [ "64188f173d4bd19873db8a9d247470e9e1580ec2" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sun Oct 18 00:12:13 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sun Oct 18 05:05:03 2026 -0700" }, "message": "Const-correct a bunch more functions\n\nBetween up_ref, x509v3_cache_extensions, and X509_NAME a while back, a\nton more functions can be const-correct now.\n\nBug: 505090843\nChange-Id: Ib8d636e3accd66e2bdcc9e229672a06bcdb52925\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104248\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nCommit-Queue: Xiangfei Ding \u003cxfding@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "64188f173d4bd19873db8a9d247470e9e1580ec2", "tree": "1318d1f743a5fc20eb0dafcdfa4c6da44e816193", "parents": [ "308269340e47c780859dfc7efb03a2b538fe5cec" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Wed Oct 07 13:34:23 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sat Oct 17 02:13:19 2026 -0700" }, "message": "crypto/evp: Add SHA3-384\n\nBug: 462683293\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: If8416a55cb77f263aeb0f8400f335b606a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103747\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "308269340e47c780859dfc7efb03a2b538fe5cec", "tree": "9621a0d2c758ecb6a57af679472757266694dd4f", "parents": [ "487f196f7f561d5ee08cee968d1d4b4dd24d365f" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Fri Oct 16 18:54:09 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sat Oct 17 01:48:19 2026 -0700" }, "message": "Const-correct X509_STORE_add_{cert,crl}\n\nBug: 505090843\nChange-Id: I461fb1a7eafb1ace9926c096af2c55a9ac09e20f\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104229\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\nCommit-Queue: Xiangfei Ding \u003cxfding@google.com\u003e\n" }, { "commit": "487f196f7f561d5ee08cee968d1d4b4dd24d365f", "tree": "29c13b315a50c0bb02d3ed41a395423cc0348e03", "parents": [ "5b652027dccdc1dae72ffa2ff195444e5c0a59de" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sat Sep 12 18:42:27 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 16 14:58:30 2026 -0700" }, "message": "Mark x509v3_cache_extensions as const\n\nWhile it does mutate the X509 object, it is thread-safe and logically\nconst. When we fix this to instead fill in cached fields on parse, this\nwill be more obviously const-correct. In the meantime, mark this as\nconst so it doesn\u0027t get in the way of keeping other fields const.\n\nBug: 443261873\nChange-Id: Id1a819f0342d468f3e904cc97a7df9b009090482\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103855\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "5b652027dccdc1dae72ffa2ff195444e5c0a59de", "tree": "757b7e62481bd471c9e42f25384fd1c405fc9d5c", "parents": [ "998d879ec94a53eb27c0349472561bee6d5daf8a" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sat Sep 12 18:21:31 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 16 14:58:25 2026 -0700" }, "message": "Pass depth explicitly into CRL functions\n\nThis removes the places where CRL functions were silently reading from\nerror_depth and current_cert.\n\nBug: 42290549\nChange-Id: I4689d0bb807ccedf1a916d884ba7110ae447ea04\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103854\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "998d879ec94a53eb27c0349472561bee6d5daf8a", "tree": "8e1a4f3344856fccfe55f74cee79eabeed2ce7ca", "parents": [ "2118363e3901ef804d42ee90f4842e40a912bc2e" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sat Sep 12 17:19:49 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 16 14:52:43 2026 -0700" }, "message": "Remove current_crl_issuer and current_crl_score\n\nInstead of hidden state, just pass these in and out of the functions\nthat return or consume them.\n\nChange-Id: I18c3e4393c2a3a750c03e9060864e149f4dd4d90\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103853\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "2118363e3901ef804d42ee90f4842e40a912bc2e", "tree": "e89f675f84e92b6a011660ef6fb71e7a39cd2437", "parents": [ "c17463b11194d98d10aeb6d68669ba07c67a2898" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sat Sep 12 17:20:09 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 16 14:50:06 2026 -0700" }, "message": "Remove X509_STORE_CTX_get0_current_crl\n\nUpdate-Note: Nothing calls this. This removes one piece of state we need\nto track on X509_STORE_CTX.\n\n(If we need to restore this in the future, note that check_crl_time\u0027s\ninstances are redundant and buggy. It\u0027s redundant because\ncheck_revocation_for_cert already sets it. It\u0027s buggy because\ncheck_crl_time will actually unset it and cause later logic to lose the\nsetting! No one noticed this bug because nothing uses this fetaure.)\n\nChange-Id: I92e38253a6156f5b9dca038e47f150bd987c93d5\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103852\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "c17463b11194d98d10aeb6d68669ba07c67a2898", "tree": "c87630fa3571ecb20f5650a22d1418a148813a3c", "parents": [ "645d9d1710a665adb0ff4524033e21b088169297" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sat Sep 12 17:08:17 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 16 14:41:42 2026 -0700" }, "message": "Use UniquePtr some more in CRL handling\n\nThe calling convention still involves a lot of state on X509_STORE_CTX,\nbut at least cut down on gotos slightly.\n\nChange-Id: I77c86b4987fb50e215fab62ae53c6d43afbd3197\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103851\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "645d9d1710a665adb0ff4524033e21b088169297", "tree": "d0b0a43f707a963d594bce378b767b522c742847", "parents": [ "06e9949682aab1eace7995b47a4dc1db36474a45" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sat Sep 12 14:11:01 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 16 14:40:18 2026 -0700" }, "message": "Make most verify sites fill in current_cert implicitly\n\nThe remaining exceptions are:\n\n- CRL logic, which is fixable after\n https://boringssl-review.googlesource.com/c/boringssl/+/68387\n\n- x509_check_issued_with_callback, which is a huge trainwreck.\n\nBug: 42290549\nChange-Id: Id4cf51d1661b22883df4a805a5b92a9b229791ac\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103850\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "06e9949682aab1eace7995b47a4dc1db36474a45", "tree": "06885ea55e0a2cfe144bb863e12c22155ca62a62", "parents": [ "f48a469096bf26cbada437f2c4487ea1d9ff221b" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Wed Oct 07 07:40:06 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 16 12:16:23 2026 -0700" }, "message": "crypto/evp: Add SHA3-256 and SHA3-512\n\nBug: 462683293\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: Ibfb5587ab010f7d9e7ca2f42bad2e2c36a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103687\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "f48a469096bf26cbada437f2c4487ea1d9ff221b", "tree": "e1e806924315111c34d3b3b1cbef024cae819fe7", "parents": [ "34ea2105ef7034bc0f5da539480732f797623acb" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Fri Oct 09 19:25:29 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 16 08:39:26 2026 -0700" }, "message": "mem: Constify all APIs wherever it applies\n\nBug: 505090843\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: Idd24c82587533ade3bc348b0311f6f526a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104008\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "34ea2105ef7034bc0f5da539480732f797623acb", "tree": "87d708b988754de6351ec8a05f5bf5c5559e45d2", "parents": [ "437b75f34c3899230cb3f3fcf05543cb104faf2b" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Wed Oct 14 11:42:14 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 16 02:20:12 2026 -0700" }, "message": "crypto/asn1: Rectify the length type of ASN1_STRING\n\nWe are following OpenSSL on providing the correct typing of length\nvalues.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I6898c04b7f76f8d9e8bea50b04244aad6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104148\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "437b75f34c3899230cb3f3fcf05543cb104faf2b", "tree": "c425cda038d9bed8a14f3e80565ef176b67a92be", "parents": [ "5498026028eb907eb8fc7df3f025784f49ff5b85" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Tue Oct 13 15:21:31 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 15 14:27:23 2026 -0700" }, "message": "crypto/asn1: Assert on negative length value\n\nNegative span size does not make sense.\n\nUpdate-Note: We do not expect you to set the length of an ASN1_STRING to\nbe negative. To be safe, we will assert nonnegativity and abort if\notherwise in ASN1_STRING_set0.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: Ic87d43f598997a775d0b469413cbb02d6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104108\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "5498026028eb907eb8fc7df3f025784f49ff5b85", "tree": "74a8dad8f239453df3f42f610fdb229e69d75f61", "parents": [ "301e7797b0ad1d6a500d6e37285f750f6453f2d4" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Thu Oct 15 13:28:03 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 15 13:55:21 2026 -0700" }, "message": "Remove now unnecessary out-of-line ctors and dtors\n\nThis is a remnant of the code being in Chromium.\n\nChange-Id: I3af5bf2f511a1e3c104bf8a9fa8bf7338c2649f1\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104188\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Matt Mueller \u003cmattm@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nCommit-Queue: Matt Mueller \u003cmattm@google.com\u003e\n" }, { "commit": "301e7797b0ad1d6a500d6e37285f750f6453f2d4", "tree": "2cc3745bba640e78d4828fe2612fb2f8d3f3a3b5", "parents": [ "e8a62930a826a7e23fcc2210a29831fdec8f2529" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sat Sep 12 14:39:08 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 15 11:55:28 2026 -0700" }, "message": "Rewrite internal_verify\n\nThis function was incomprehensible. With X509_V_FLAG_CHECK_SS_SIGNATURE\ngone, it\u0027s actually pretty straightforward. ctx-\u003eerror_depth is still a\nmess. That will be fixed by the next CL.\n\nUpdate-Note: This does come with a behavior change. Due to quirks of how\nthe logic worked, if the caller used the callback to suppress\nX509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY and the leaf certificate\nhappened to not be self-signed, we\u0027d get one more error,\nX509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE. This is now removed.\n\nCode search suggests no one is doing anything special with\nX509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE. This cannot have any\nsecurity effect because if you\u0027re suppressing\nX509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY, you\u0027re already tolerating\na chain with no connection to any of your trust store. This one case\n(length one, non-self-issued chain) is no different from any other\ninvalid chain.\n\nUnlike the other behavior changes, I didn\u0027t stage this ahead of time\nbecause this function was too much of a mess. It\u0027s already much clearer\nto understand the new version and reverse engineer what the old bizarre\nversion was doing.\n\nWhile I\u0027m here, rename the function. internal_verify is a remnant of the\noldest versions of this function when:\n\n* The \"verify\" hook could be swapped out (and so \"internal\" meant the\n default one in the library).\n\n* The entirety of path verification fit in the \"verify\" hook.\n\nOpenSSL at some point forgot that\u0027s what the name meant and put most of\npath verification outside the function, and we\u0027ve since removed the\ncustomization point. The name has lost all meaning now.\n\nChange-Id: Idd8ec5586b7f88fd98b0637568ec3517b73a4da7\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103849\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\n" }, { "commit": "e8a62930a826a7e23fcc2210a29831fdec8f2529", "tree": "3794470b961723ac19ede904577e5013ee3e2713", "parents": [ "558e6eef5d7c9fc3cd1d8d464efb052ad50bbc21" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sat Sep 12 14:32:18 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 15 11:39:34 2026 -0700" }, "message": "No-op X509_V_FLAG_CHECK_SS_SIGNATURE\n\nThis provides no security benefit at all. We could remove it entirely,\nexcept that some projects (e.g. rust-openssl) foolishly exposed it, so\nwe have to turn it into a no-op.\n\nThis unnecessary flag is the main source of complexity in the signature\nverification loop.\n\nUpdate-Note: X509_V_FLAG_CHECK_SS_SIGNATURE no longer does anything.\nDon\u0027t set it.\n\nChange-Id: I1bd2a3510bbf87e29c08494f1fc009a768e88a49\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103848\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "558e6eef5d7c9fc3cd1d8d464efb052ad50bbc21", "tree": "613506270fb79d7dab8bfd2c563355d74c1d3619", "parents": [ "e52f12bcd1b4b2e423062ff3d1b4f1d3d3c9f797" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Tue Oct 13 17:47:14 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 15 11:00:28 2026 -0700" }, "message": "Fold SSL_CTX_set_grease_sigalgs_enabled into SSL_CTX_set_grease_enabled\n\nAbsorbs grease_sigalgs_enabled into the general grease_enabled toggle.\n\nIncrements BORINGSSL_API_VERSION to 44.\n\nUpdate-Note: GREASE for signature_algorithms extensions in ClientHello\nmessages can no longer be controlled independently of other uses of\nGREASE. Callers of SSL_CTX_set_grease_sigalgs_enabled should now call\nSSL_CTX_set_grease_enabled.\n\nBug: 526597789\nChange-Id: Ia6b354db4d58d2a94d6c9c4dab7acc176a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104128\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nAuto-Submit: Lily Chen \u003cchlily@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "e52f12bcd1b4b2e423062ff3d1b4f1d3d3c9f797", "tree": "285f495fd6e9402c5e83d5c6e7f5a69d41c1bc90", "parents": [ "5b83e5d1abf0ae0033ae52ab579d906b67633b2c" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 08 18:44:13 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 15 10:26:15 2026 -0700" }, "message": "crypto/x509 MTC: Update to draft -07\n\nUpdates standalone MTC implementation to -07 version of the spec draft:\nhttps://www.ietf.org/archive/id/draft-ietf-plants-merkle-tree-certs-07.html\n\n * Updates OIDs from experimental placeholders to proper allocated OIDs.\n * Removes logHash field from MTCCertificationAuthority parsing, and\n updates log hash to be determined by MTC CA extension OID (SHA256).\n * Updates minSerial and maxSerial acceptable range.\n * Updates CA ID attribute value to RELATIVE-OID type.\n * Widens length prefix for `signatures` in MTCProof to 24 bits.\n * Limits trust anchor ID size to 32 bytes.\n\nUpdate-Note: The flag X509_V_FLAG_USE_MTC_DRAFT_PLANTS_05 was renamed to\nX509_V_FLAG_USE_MTC_DRAFT_PLANTS_07, and it now enables the behavior of\ndraft-ietf-plants-merkle-tree-certs-07 rather than the earlier -05\nversion.\n\nBug: 571178555\nChange-Id: I80cddd1a2127ad5c517fc3fc1d8766936a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103948\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "5b83e5d1abf0ae0033ae52ab579d906b67633b2c", "tree": "42c05208f438fdecee49eea0fa1e128957193dd3", "parents": [ "b4b1cee6652af14ff36c1ee6f52caa25a7bd5eed" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Wed Sep 23 09:39:07 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sun Oct 11 12:11:41 2026 -0700" }, "message": "util/fipstools/inject_hash: Add -ignore-missing-symbols flag and tests\n\nBug: 545142241\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: Ic885c8c5db85be987ba08b79b44d61386a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103787\nSLSA-Policy-Verified: SLSA Policy Verification Service \u003cdevtools-gerritcodereview-exitgate@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "b4b1cee6652af14ff36c1ee6f52caa25a7bd5eed", "tree": "f73da4d17587bab0e92223f3c231d3dcb6cca879", "parents": [ "3fed4f207543470b3d639db6ed40737e30308b51" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sat Sep 12 18:48:25 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sun Oct 11 03:33:06 2026 -0700" }, "message": "Make the other dup_ref functions take nullptr\n\nMatches https://boringssl-review.googlesource.com/c/boringssl/+/102507\n\nChange-Id: I982e6b5476b1ad284d3e48d02b265df8df980f7b\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103857\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "3fed4f207543470b3d639db6ed40737e30308b51", "tree": "e3f547e6d7cad7f1a989dfb658c210343c34dbbd", "parents": [ "3b39936f376ed568431fd3f95c3421f5b0726e70" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Thu Oct 08 20:59:40 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sat Oct 10 10:48:29 2026 -0700" }, "message": "Sweep through the library and add `dup_ref` ref-counting\n\nBug: 505090843\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I5020cc612ac8b89d3f7c6d5d1717efdd6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103968\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "3b39936f376ed568431fd3f95c3421f5b0726e70", "tree": "ef97a559652188b959ecb1506ece7f145c23c992", "parents": [ "fbb876dcee91c83a78d930dc9fab79db0c12053e" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Sat Sep 12 16:43:27 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 09 10:39:19 2026 -0700" }, "message": "Test some behavior in X509_V_FLAG_CB_ISSUER_CHECK\n\nX509_V_FLAG_CB_ISSUER_CHECK is a bit problematic. It adds suppressible\nerrors in the middle of X509_check_issued, but X509_check_issued behaves\nvery differently from other checks because the checks aren\u0027t fatal to\nverification.\n\nOpenSSL has removed X509_V_FLAG_CB_ISSUER_CHECK, but we have a hard time\ndoing so, because some callers depend on the ability to suppress\nkeyCertSign checks and AKID/SKID matching.\n\nBug: 42290549\nChange-Id: I7cfd93eb47585f1e320b9043cdc3a287c56f9eb0\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103847\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "fbb876dcee91c83a78d930dc9fab79db0c12053e", "tree": "0c377cd6eef727287d317ee95f6744c68c7fa796", "parents": [ "44979b8a96e43671e1283fdfc6757724248978bc" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Tue Oct 06 08:43:33 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 09 00:27:37 2026 -0700" }, "message": "rust: Retire bssl-macros\n\nThis crate has been weird, we anticipated more macros to be added to\nthis crate but it turns out that we have just the right amount of them.\nSo this crate has lost most of its value.\n\nThe first step is to move the macro into bssl-sys. In the next\ninstallment we will drop the crate entirely.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I7be77994f66a4445b8bafa9a32f77a826a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103587\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "44979b8a96e43671e1283fdfc6757724248978bc", "tree": "a25be04220e415eb7e4202de478b5140cc3896ed", "parents": [ "464d605eda409bd623febb35e3a106eba8b3655d" ], "author": { "name": "Matt Mueller", "email": "mattm@google.com", "time": "Thu Oct 08 13:47:04 2026 -0700" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 08 14:20:47 2026 -0700" }, "message": "Add MTC draft plants-07 support (for pki/).\n\nBug: 452986180\nChange-Id: Ibb4ada5b22ff2f58eda58819d5301a1067474c97\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103827\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Matt Mueller \u003cmattm@google.com\u003e\n" }, { "commit": "464d605eda409bd623febb35e3a106eba8b3655d", "tree": "1eef6406550d181f24a6050f1cc04f32dcf15723", "parents": [ "cee89849ad5e88c1bc84177951950cbbb184f5d9" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 08 20:02:23 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 08 13:34:00 2026 -0700" }, "message": "Define V_ASN1_RELATIVE_OID tag number\n\nHook up ASN.1 tag 13 to existing functions.\n\nBug: 571178555\nChange-Id: I7af4e8dd88868dd0b8d02478f36557326a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103928\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nAuto-Submit: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "cee89849ad5e88c1bc84177951950cbbb184f5d9", "tree": "247dea04a3f4f40d2042ce972e742a4325cbf4fb", "parents": [ "0c8a01ade0e5349f5b0f9afd5e4de622599ae1da" ], "author": { "name": "Tom Hughes", "email": "tomhughes@chromium.org", "time": "Wed Oct 07 14:39:53 2026 -0700" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 08 13:22:44 2026 -0700" }, "message": "entropy: Avoid volatile post-increment under C++20\n\nC++20 deprecated pre- and post-increment on volatile lvalues, causing\nthe JITTER_APT FIPS break test path in MemoryAccessSampler::Next to fail\ncompilation with -Wdeprecated-volatile (Clang) and -Wvolatile (GCC) when\nbuilding BoringSSL consumers as C++20.\n\nUse compound assignment (which C++20 defect report P2327R1 un-deprecated\nwhen its result is discarded) to match the existing volatile memory\naccess in the same function.\n\nBug: b/333039464, b/491765858\nChange-Id: I2e233ce91c922441d744fb8ac084b9c35c4250e6\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103828\nAuto-Submit: Tom Hughes \u003ctomhughes@chromium.org\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n" }, { "commit": "0c8a01ade0e5349f5b0f9afd5e4de622599ae1da", "tree": "40b152b5f385b89561df33078bfc57d3ff94c34f", "parents": [ "52808ad8da7f55f3405a5195e0abea811f5136e3" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 08 16:13:52 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 08 12:35:43 2026 -0700" }, "message": "crypto/x509 MTC: Tighten MTC subjectPublicKeyInfoHash length check\n\nWhen computing the MTC entry hash, we write the subjectPublicKeyInfoHash\nOCTET STRING with a single short-form length byte. Lengths above 127\nrequire a long-form DER length. No EVP_MD outputs more than 127 bytes,\nso this is unreachable, but tighten the check rather than support the\nlong form.\n\nChange-Id: I877df064197c90a14689ec4244be7ba66a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103908\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nAuto-Submit: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "52808ad8da7f55f3405a5195e0abea811f5136e3", "tree": "7f3dba5d54d40aec7079d68db2b561147c01a8e2", "parents": [ "4f3b183c5d4a8f8fcaba4c0ab4435df181df6978" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 08 16:16:42 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 08 12:15:34 2026 -0700" }, "message": "crypto/x509 MTC: Reject trailing data in MTC CA extension\n\nA check for trailing data following the MTCCertificationAuthority\nSEQUENCE was missing.\n\nChange-Id: Ic6846ef935e7cf320edd9df859c198bc6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103888\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nAuto-Submit: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "4f3b183c5d4a8f8fcaba4c0ab4435df181df6978", "tree": "33e764b32bc6e96f1ecbe6e09224733ccff12e62", "parents": [ "fdcd735858aa112fa1c16e716465178a6fe2684a" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Sep 17 14:45:12 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 07 17:48:22 2026 -0700" }, "message": "EVP_HPKE_KEM: Move constants and serialization hooks to HpkeKeyMethod\n\nMoves size constants and serialization hooks for HPKE KEMs to a new\nstruct, HpkeKeyMethod. These hooks perform key operations listed in\nsection 4 of RFC 9180.\n\nBug: 535883377\nChange-Id: I26b8ef9462dfe3b03e63eea9ec6ba70d6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103047\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "fdcd735858aa112fa1c16e716465178a6fe2684a", "tree": "0ec91e1dc06dc299fd2f4a6aeda0e0091fd641c2", "parents": [ "21ee2592ac24d1ff2dec52c47a1349fe82dfa12e" ], "author": { "name": "qmuntal", "email": "quimmuntal@gmail.com", "time": "Tue Oct 06 15:53:35 2026 +0200" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 07 17:26:28 2026 -0700" }, "message": "ssl/test/runner: use hash.Cloner when copying hash instances\n\nhash.Cloner is available since Go 1.25. It is a more straightforward way\nto copy hash instances compared to duplicating their state.\n\nAlso, my team has a fork of Go that supports hash.Cloner, but not\nencoding.BinaryMarshaler, for hash implementations in the standard\nlibrary. Using hash.Cloner allows us to reenable the bogo tests.\n\nChange-Id: Iaef1a28e944d3d17e75cd3a3afeca46d645e2d85\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103607\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nAuto-Submit: Quim Muntal \u003cquimmuntal@gmail.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\nCommit-Queue: Adam Langley \u003cagl@google.com\u003e\n" }, { "commit": "21ee2592ac24d1ff2dec52c47a1349fe82dfa12e", "tree": "bee8d11939d5933c1744e215bf98212794c06b6f", "parents": [ "745a3c7bf8a435ab80829024a671ddd65c31463b" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Oct 01 17:16:49 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 07 14:51:33 2026 -0700" }, "message": "EVP_KEM: Add an optional check_key hook\n\nEVP_KEM matches keys on pkey_id, but that does not always determine\nwhether a key is usable with a KEM, such as for EC curves which all\nshare the same pkey_id.\n\nAdd an optional check_key hook to EVP_KEM. No EVP_KEM sets it yet.\n\nBug: 535883377\nChange-Id: Idf4b8a362ed6d9f05d146069b4ca05a16a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103467\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "745a3c7bf8a435ab80829024a671ddd65c31463b", "tree": "d5c5c117b021645042ef8873ee40ab6dbfe72a6a", "parents": [ "f259e982fc16afb87f3263ddd71203f29727aab5" ], "author": { "name": "William Dauchy", "email": "wdauchy@gmail.com", "time": "Fri Oct 02 21:03:38 2026 +0200" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 07 14:28:37 2026 -0700" }, "message": "Speed up copy_from_prebuf by accumulating in registers\n\ncopy_from_prebuf is the constant-time table lookup in\nBN_mod_exp_mont_consttime. It ORs each masked table entry into the\noutput with b-\u003ed[j] |\u003d table[j] \u0026 mask. Because b-\u003ed may alias table,\nthe compiler cannot keep the output in registers across table entries,\nso each of the 2^window passes reloads and stores every output limb\nand depends on the previous pass through a store-to-load round trip.\n\nInstead, compute the 2^window masks up front, still behind\nvalue_barrier_w, and build the output four limbs at a time in local\naccumulators, walking all table entries before storing each limb once.\nAs before, the memory access pattern does not depend on idx: every\nlimb of every table entry is read, and selection is done only with\nmasks. The window size macros move above the function so that\nBN_MAX_MOD_EXP_CTIME_WINDOW can size the mask array.\n\nOn x86_64, RSA uses the mont5 assembly and does not reach this code.\nOn aarch64 it is on the RSA private key path for 2048- to 4096-bit\nkeys. In an Envoy TLS-terminating proxy on AWS Graviton4, it was 18%\nof CPU time under an RSA-2048 handshake load. (AWS-LC replaced this\nfunction with an s2n-bignum assembly lookup on aarch64; this change\nstays in portable C.)\n\nbssl_bench BM_SpeedRSASign, single thread, signs/s:\n\nCPU RSA-2048 RSA-3072 RSA-4096\nNeoverse V2 (Graviton4) [1] 1061 -\u003e 1268 (+19.5%) +15% +12%\nNeoverse N1 (Graviton2) 282 -\u003e 304 (+7.8%) +5.5% +5.0%\nApple M4 Max 2645 -\u003e 3045 (+15.1%) +12.9% +9.7%\nXeon 8375C, NO_ASM [2] 740 -\u003e 794 (+7.2%) +3.9% +7.0%\n\n[1] Measured on BoringSSL 0.20260413.0 with this change applied. In\n Envoy with one TLS 1.3 handshake per request on an RSA-2048\n certificate, throughput went from 806 to 895 requests per\n CPU-second (+11%) and p99 latency from 4.6 to 3.5 ms.\n[2] OPENSSL_NO_ASM to exercise the C path on x86_64; median of 8 runs\n on a shared machine, so noisy. With assembly enabled, x86_64 RSA\n does not use this function and is unchanged within noise (Zen 5,\n ~2510 RSA-2048 signs/s either way).\n\nWith CONSTANT_TIME_VALIDATION, the BN and RSA tests in crypto_test\nreport no new valgrind errors on aarch64 (Neoverse N1) or on x86_64\nwith OPENSSL_NO_ASM. (On aarch64, valgrind flags the same two reads of\nan empty std::optional in the ErrorEquals test helper with and without\nthis change; nothing in the library.)\n\nChange-Id: Idabb8c6d515e9e577a58118da8ec2f964ee5d334\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103567\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "f259e982fc16afb87f3263ddd71203f29727aab5", "tree": "cff1180f3318abcf2733c0a847434345cf108aea", "parents": [ "f30064b949439c3109ae20c87a434a224afafe87" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Wed Oct 07 07:43:53 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 07 14:01:47 2026 -0700" }, "message": "crypto: Remove redundant statics\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: Ie215172107904236defca26cb850c6186a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103667\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "f30064b949439c3109ae20c87a434a224afafe87", "tree": "70f399db65ef4fe959598662417afc92437229e4", "parents": [ "6f420a5259f09ffc4b9b7f180cc393477767ce66" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Thu Sep 17 14:45:12 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 07 13:16:15 2026 -0700" }, "message": "EVP_KEM: Pass EVP_KEM* into function pointers\n\nMakes the EVP_KEM functions take an EVP_KEM* as the first argument to\nfacilitate subclassing.\n\nBug: 535883377\nChange-Id: I84e2f7eeaad4373ee4efa7da543044576a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103767\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nAuto-Submit: Lily Chen \u003cchlily@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "6f420a5259f09ffc4b9b7f180cc393477767ce66", "tree": "7f220ec79031d0b48239455e0221a917d0231e5a", "parents": [ "5509db769d720ab2d4d889deaa34fca53efc36cd" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Wed Oct 07 11:29:04 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 07 12:45:28 2026 -0700" }, "message": "util: Report the line number where docgen failed\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: If854cc39b6f70308b4662e6fa75b0ecf6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103708\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "5509db769d720ab2d4d889deaa34fca53efc36cd", "tree": "a45f9b8cef106a48e73db5999e97b35ca895ad9b", "parents": [ "304dad33464fb248512cab647b30b1c601c8d142" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Thu Sep 24 21:36:56 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 07 12:45:19 2026 -0700" }, "message": "ssl: Move deprecated APIs out\n\nThis helps delimiting precisely which APIs are still in use and which\nare not recommmended for use anymore.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: Idda69a5cdacf38ffa22f16c4de6416c46a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103207\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n" }, { "commit": "304dad33464fb248512cab647b30b1c601c8d142", "tree": "dba27ee8a50a24429d3c53a3cc542d0e46c2224a", "parents": [ "510d30392e404ccc77d01d118238d8588bfce860" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Wed Sep 30 22:42:59 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 06 14:19:51 2026 -0700" }, "message": "Update trust anchor IDs for draft-06\n\nThe maximum length is now 32 bytes. Also check that OID components are\ncorrect.\n\nUpdate-Note: This is technically not wire-compatible, if someone was\nusing an invalid or unreasonably long trust anchor ID, but TAI\ndeployment is minimal enough for now that I think we can safely do this.\nLet\u0027s get it enforced while we can.\n\nChange-Id: I3c1570d1afa0012dcbf7fd2cbf5a4cdf403931aa\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103427\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\n" }, { "commit": "510d30392e404ccc77d01d118238d8588bfce860", "tree": "6ae6ac8dcf148b169c2120c17d794032b0c52ef3", "parents": [ "161d87ee97cc2686c6a1203adf7bae6d12297f40" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Wed Sep 30 14:41:43 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 06 13:35:44 2026 -0700" }, "message": "ssl: Allow multipart rule commutative\n\nWe were not checking if the `min_version` of a matching alias is set.\nThis may cause a multipart rule to be skipped because a cipher alias\nwith minimum version requirement may come first and when a second cipher\nalias without version requirement is matched we incorrectly decide the\ncombination to be invalid.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: Ic127ab86051be3eceb1180250480f4806a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103547\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "161d87ee97cc2686c6a1203adf7bae6d12297f40", "tree": "dffec507bbb2bfdb59105432d76d1b02c9f7fb50", "parents": [ "d3cdaa476a187e078b9dbb2bf873d2d33b5c6ced" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Fri Aug 07 12:17:54 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 06 13:02:56 2026 -0700" }, "message": "curve25519: CPace implementation\n\nThis is an experimental implementation of CPACE Curve25519-SHA512\nvariant.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I40f2bbaf8622ea62fe263bae3c4b53886a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/102107\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "d3cdaa476a187e078b9dbb2bf873d2d33b5c6ced", "tree": "070294d6e5b2bea42964883455dc49620d4e61b7", "parents": [ "66da97b9420113c1cab4ca567b4f4d6f2aa2178c" ], "author": { "name": "David Benjamin", "email": "davidben@google.com", "time": "Tue Oct 06 13:07:03 2026 -0400" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 06 11:06:04 2026 -0700" }, "message": "Remove deprecated split handshakes support\n\nThis is largely just deleting code, but a couple enums can now be\nfile-local.\n\nUpdate-Note: The various handoff/handback APIs are removed. We believe\nall remaining callers of this are now gone.\n\nFixed: 376969215\nChange-Id: I26db9230cebb1ae21a49469bb301e63552e14633\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103627\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nCommit-Queue: Adam Langley \u003cagl@google.com\u003e\n" }, { "commit": "66da97b9420113c1cab4ca567b4f4d6f2aa2178c", "tree": "2c52aae1bc8a32e914b10f23207495819be0e5d5", "parents": [ "71766b8550ff0d950b3ff97249f33cc19ff73c03" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Wed Sep 30 14:41:43 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 05 23:59:49 2026 -0700" }, "message": "ssl: Update SSL_CIPHER_get_min_version to reflect SSL 3.0 removal\n\nWe have stopped supporting SSLv3 since 2018 and it is untenable for us\nto report ciphers as supported in SSLv3 as the minimum protocol version\nanymore. Therefore, we now bump their minimum version to TLS1_VERSION.\n\nSSLv3 stays as a cipher alias.\n\nUpdate-Note: SSL_CIPHER_get_min_version now returns TLS1_VERSION in any\ncase where it would previously report SSL3_VERSION.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I33eb8a77980cba1983911914ef96652e6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103367\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "71766b8550ff0d950b3ff97249f33cc19ff73c03", "tree": "0aede0c7e9ca7f6cd6ddd140bb24f22aeaeec1e1", "parents": [ "dd73e69a4e86fa178a4d19033c691e9b42cc1088" ], "author": { "name": "Matt Mueller", "email": "mattm@google.com", "time": "Wed Sep 30 10:20:32 2026 -0700" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 05 12:05:39 2026 -0700" }, "message": "CheckOCSP and CheckCRL: make delegate non-optional\n\nThe base implementation requires delegate to be passed in, with the\nwrapper functions now creating a delegate instead of passing nullptr.\n\nAlso remove the old wrapper that was only used by chromium, now that\nthe chromium side is updated to pass the delegate.\n\nChange-Id: Ie98781f2ea16bc02fd9469c2f2672f6c965c56d8\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103387\nCommit-Queue: Matt Mueller \u003cmattm@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "dd73e69a4e86fa178a4d19033c691e9b42cc1088", "tree": "3b8f47559e777b430e2755e70f47ad69f31431c1", "parents": [ "fab96f87245d7c6b941515201843665122650b88" ], "author": { "name": "Antoine Desbois", "email": "antoinedesbois@google.com", "time": "Fri Oct 02 13:50:28 2026 -0700" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sat Oct 03 01:03:48 2026 -0700" }, "message": "Add X509CertificateBuilder to bssl-x509\n\nAdd X509CertificateBuilder to construct and sign self-signed X.509v3 certificates with SHA-256 using an existing PrivateKey.\n\nBug: 549745797\nChange-Id: I823eb8b1e5fcd03412cb4b900cc88773d8eaa48d\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103249\nCommit-Queue: Xiangfei Ding \u003cxfding@google.com\u003e\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\n" }, { "commit": "fab96f87245d7c6b941515201843665122650b88", "tree": "a16866bdc4e178ed00488820888f3cab88b686cf", "parents": [ "00270eb68a620868b044a37e9f8d0cdb36bf078e" ], "author": { "name": "Antoine Desbois", "email": "antoinedesbois@google.com", "time": "Fri Oct 02 08:33:05 2026 -0700" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 02 10:16:43 2026 -0700" }, "message": "Add PrivateKey::from_der to bssl-x509\n\nBug: 549745797\nChange-Id: I867d65eb4679dc7da66a49cc5cdca5e7fc657b7f\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103248\nCommit-Queue: Antoine Desbois \u003cantoinedesbois@google.com\u003e\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\n" }, { "commit": "00270eb68a620868b044a37e9f8d0cdb36bf078e", "tree": "3b241ca1f5d17252e2eded56971526c756c90697", "parents": [ "985989d08df242268e006f1a67bee95905ed0ab4" ], "author": { "name": "Antoine Desbois", "email": "antoinedesbois@google.com", "time": "Fri Oct 02 08:33:04 2026 -0700" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 02 09:23:49 2026 -0700" }, "message": "Add DTLS-SRTP extension APIs to bssl-tls\n\n* SrtpProtectionProfile enum representing the DTLS-SRTP protection profiles supported by BoringSSL.\n* TlsContextBuilder::with_srtp_profiles (wrapping SSL_CTX_set_srtp_profiles) to configure offered SRTP protection profiles.\n* TlsConnection::selected_srtp_profile (wrapping SSL_get_selected_srtp_profile) to query the negotiated SRTP protection profile on datagram connections.\n\nBug: 549745797\nChange-Id: If896a0c9bec8593914f202561253824c0257813d\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103247\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\nCommit-Queue: Antoine Desbois \u003cantoinedesbois@google.com\u003e\n" }, { "commit": "985989d08df242268e006f1a67bee95905ed0ab4", "tree": "757bc4656f8ea8f472de2f581f5de428627c5618", "parents": [ "5e1bfb45c353b2bb36bdf26b006ea8f5566c82d5" ], "author": { "name": "Adam Langley", "email": "agl@imperialviolet.org", "time": "Wed Sep 30 22:03:56 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 01 09:01:26 2026 -0700" }, "message": "Add FIPS break tests for the jitter RCT and APT.\n\nNIST reportedly wishes to see these during CMVP testing now. This makes\na textual change to the jitter module, but all changes will be compiled\nout except in the case of specially built break testing binaries.\nTherefore, there is no pertinence change to the jitter module here.\n\nLogging is added to make it clear which of the jitter health tests is\nfailing, and because BoringSSL iterates the entropy source 100 times\nupon failure, the break tests will print one of those two messages 100\ntimes before aborting.\n\nChange-Id: I7bd8b739825a8c636381c30d23be576460f035fc\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103407\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: Adam Langley \u003cagl@google.com\u003e\n" }, { "commit": "5e1bfb45c353b2bb36bdf26b006ea8f5566c82d5", "tree": "b40180edaf6574071798417b8d2d29db9ce5b98e", "parents": [ "98df68178dcf8a75b230503951b8a3b4f5c51aa6" ], "author": { "name": "Matt Mueller", "email": "mattm@google.com", "time": "Wed Sep 30 09:50:05 2026 -0700" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Sep 30 10:15:39 2026 -0700" }, "message": "Take delegate parameter in CheckCRL and CheckOCSP\n\nBug: 504234693\nChange-Id: If789c68422d340b8fbc8dd255c80c467eaf8592a\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103227\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Matt Mueller \u003cmattm@google.com\u003e\n" }, { "commit": "98df68178dcf8a75b230503951b8a3b4f5c51aa6", "tree": "7f7dcb01b000f4a5950edcf71f1a47d04fce3e0f", "parents": [ "e46ba018b038a37440b130d05b619c366ae09d5b" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Mon Sep 21 19:29:45 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Sep 30 01:39:55 2026 -0700" }, "message": "rust: bssl-tls: Remove pedantic to_string\n\n`str` already implement essential error traits for our library.\nWe do not need additional allocation.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I44d716319e9b52edc149d5348e1837976a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103008\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n" }, { "commit": "e46ba018b038a37440b130d05b619c366ae09d5b", "tree": "56ddab8f48f2e2582ff86cca24f700549fa61afb", "parents": [ "fe8d898d6c2a0dd8cc01c9214f2f84873d6e3de6" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Fri Sep 04 11:25:16 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Sep 29 23:06:05 2026 -0700" }, "message": "rust: bssl-tls: Switch to write_ex method\n\nThis method has a better correctly typed interface for the\nnumber of committed bytes.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I8baf5fcca7500bf9b15932ff01b957e76a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/102447\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\nReviewed-by: Rudolf Polzer \u003crpolzer@google.com\u003e\n" }, { "commit": "fe8d898d6c2a0dd8cc01c9214f2f84873d6e3de6", "tree": "4566152e5fd9c53a67394c9161994e5439cc8f95", "parents": [ "27e9f8215333d7c880eca5448606c2815d05c677" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Tue Sep 22 07:51:31 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Sep 29 14:57:57 2026 -0700" }, "message": "rust: bssl-tls: De-customize unknown library errors\n\nWe have not find a use of parsing unrecognized library errors and the\nquality of such has been rather low.\nGiven that they are very marginal cases, we would like to make the error\ntype simpler.\n\nUpdate-Note: Error variant for Unknown is simplified. The only\nreasonable way to use it is through debug printing.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: I95229c4624c0517a9981f99b374078506a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103068\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "27e9f8215333d7c880eca5448606c2815d05c677", "tree": "3e9c12d82340368b0ee8a256460fd7f0b217bb96", "parents": [ "9aa7b975fd5190f39a3d9ac19c79bca8d508f124" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Wed Sep 23 19:11:58 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Sep 29 14:23:07 2026 -0700" }, "message": "rust: bssl-tls: Rename inherent I/O methods\n\n`sync_` prefix is misleading. We found out that `poll_` is better.\nWe also would like to avoid name clash with well-known trait methods.\n\nUpdate-Note: Rename `sync_read` to `poll_read`, `sync_write` to\n`poll_write`, `flush` to `poll_flush`.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: Ief3d5170ae7081e3b98e8e52f4c214cf6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103267\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\n" }, { "commit": "9aa7b975fd5190f39a3d9ac19c79bca8d508f124", "tree": "eb93dfca6344bdcab3315e60973eafca4d0e7e11", "parents": [ "12830f07b13ab7f7dc5e9c0bd4fee20cfae64abd" ], "author": { "name": "Xiangfei Ding", "email": "xfding@google.com", "time": "Thu Aug 20 07:22:46 2026 +0000" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Sep 29 14:21:19 2026 -0700" }, "message": "rust: bssl-tls: Clean up the error classification\n\nIn various context, there is no universal classification of return\nvalues of function calls when I/O might have suspended or failed.\n\nFor instance, we failed to correctly distinguish transport error and TLS\nerror/retry and it has created much difficulty in various internal functions\nto decide whether the operation is successful or the error should be\nbubbled up.\n\nWe are also improperly swallowing transport errors that would have been\nuseful. For DTLS, a failure to send a packet due to system resource\npressure is recoverable and the library should pretend that it was\nsuccessful and allow timeout mechanism to handle this case. Since we\nhave been misclassifying the errors, this has not been working reliably.\n\nThe best approach so far should have been context-aware, depending\non whether we are in a reading or writing or handshaking.\n\nSigned-off-by: Xiangfei Ding \u003cxfding@google.com\u003e\nChange-Id: Ia0092a8acb68bbce2cf7dfa29196d76a6a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/101607\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\n" }, { "commit": "12830f07b13ab7f7dc5e9c0bd4fee20cfae64abd", "tree": "93bd2423d5d292953f96490142e7147138caeaf8", "parents": [ "162f38a8df24e33011fc83b7ee342fe0a9e3ee73" ], "author": { "name": "Matt Mueller", "email": "mattm@google.com", "time": "Fri Sep 25 12:46:19 2026 -0700" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Sep 29 11:28:38 2026 -0700" }, "message": "Do RFC5280 verification of OCSP Authorized Responders\n\nFixed: 559116175, 559519580, 488394065\nChange-Id: Iaf25248864151c8512e9ca0c242b1feea6beb5c2\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103127\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Matt Mueller \u003cmattm@google.com\u003e\n" }, { "commit": "162f38a8df24e33011fc83b7ee342fe0a9e3ee73", "tree": "61adcdc5769aa4e4acdd29f6cfbe69cbc80a4e79", "parents": [ "427ec40cc8edc545253289232e885708c409e5ea" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Mon Sep 28 23:20:14 2026 +0000" }, "committer": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Tue Sep 29 10:24:43 2026 -0700" }, "message": "Add an advisory for 2026-09-29\n\nChange-Id: I0e8087d747ead119486e968e29017d766a6a6964\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103347\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\n" }, { "commit": "427ec40cc8edc545253289232e885708c409e5ea", "tree": "39c8b026b83e2fbc9d57f9a11d5e2590f5c47bcb", "parents": [ "efc97a4a25f15394984447eae629910887152592" ], "author": { "name": "Lily Chen", "email": "chlily@google.com", "time": "Tue Sep 29 09:03:20 2026 -0700" }, "committer": { "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Sep 29 09:24:54 2026 -0700" }, "message": "Update version for Bazel Central Repository to 0.20260929.0\n\nChange-Id: I3e64055665754c05b9246cf66def5117d5a59a63\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/103327\nReviewed-by: Xiangfei Ding \u003cxfding@google.com\u003e\nCommit-Queue: Xiangfei Ding \u003cxfding@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\n" } ], "next": "efc97a4a25f15394984447eae629910887152592" }