- 3e91d37 Clarify in ssl.h documentation not to use the verify callback by David Benjamin · 1 year ago
- 58a4094 Move the X509 time functions under "Convenience functions" by David Benjamin · 1 year ago
- 437ef4d Remove the X509at_* functions by David Benjamin · 1 year ago
- 787713b Organize X509_ATTRIBUTE functions into sections. by David Benjamin · 1 year ago
- d9f209b Document a pile of X509 print functions by David Benjamin · 1 year ago
- aa31748 Generate 64-bit Curve25519 and P256 code for MSVC by Andres Erbsen · 1 year, 2 months ago
- 32b5130 Widen ASN1_mbstring_copy and ASN1_mbstring_ncopy to ossl_ssize_t by David Benjamin · 1 year, 1 month ago
- 6776d5c Update test_fips.c with new functions added to FIPS module. by Adam Langley · 1 year ago
- a4593ce break-tests.sh: break run-time tests and use two test_fips binaries. by Adam Langley · 1 year, 9 months ago
- c466222 Skip some BIO_gets tests if tmpfile fails on Android by David Benjamin · 1 year ago
- 6e1e367 Switch to new ACVP test for TLS 1.2 KDF. by Adam Langley · 1 year ago
- cee2dbb Default SSL_set_enforce_rsa_key_usage to enabled. by David Benjamin · 1 year ago
- fa7afff add extra lints to align with Chromium rust toolchain by Nabil Wadih · 1 year ago
- 404d98b Include bindgen generated file via a build time env var, this plays nicer with other build systems like Soong and Gn. by Nabil Wadih · 1 year ago
- 480344d Move TLS 1.3 KDF functions into the FIPS module. by Adam Langley · 1 year, 1 month ago
- d3acd45 Move HKDF into the FIPS module. by Adam Langley · 1 year, 1 month ago
- 4ae4fb7 Drop CECPQ2 support. by Adam Langley · 1 year, 1 month ago
- 298e6c2 expose a reset API on hmac which resets the current instance back to its original state keeping the same key as initially used by Nabil Wadih · 1 year, 1 month ago
- 5fb362c Remove X509V3_EXT_add_list and X509V3_EXT_cleanup by David Benjamin · 1 year ago
- 8abd1b5 Remove support for "old-style" X509V3_EXT_METHODs. by David Benjamin · 1 year, 1 month ago
- abfd5eb Restore some default cases in tasn_dec.c and tasn_enc.c by David Benjamin · 1 year, 1 month ago
- 8cacbd9 Add functions to allow the mocking of AES hw support for testing. by Bob Beck · 1 year, 1 month ago
- 9423510 Fix up do_ext_i2d's error-handling by David Benjamin · 1 year, 1 month ago
- c5f762d Add Trust Token version using standardized hash2curve. by Steven Valdez · 1 year, 1 month ago
- 89de6e1 Move RSA (en|de)cryption out of the FIPS module. by Adam Langley · 1 year, 1 month ago
- 7b9b9ba leaked_storage in method POLICYQUALINFO *notice_section by wangjiale3 · 1 year, 1 month ago
- a438519 Fix miscellaneous size_t truncations by David Benjamin · 1 year, 1 month ago
- bf1b792 Remove SSL_CIPHER_get_rfc_name by David Benjamin · 1 year, 1 month ago
- fe7a067 Run `go fmt` in `ssl/test/runner`. by Adam Langley · 1 year, 1 month ago
- 8843d98 If the ret is not null, it needs to be released before return by wangjiale3 · 1 year, 1 month ago
- 0c069cb Don't consume the newline in BIO_gets for fds by David Benjamin · 1 year, 1 month ago
- 9a56503 RESOURCE_LEAK in method STACK_OF(TRUST_TOKEN) *voprf_unblind before return 0 by wangjiale3 · 1 year, 1 month ago
- 44a389a Tidy up some lengths in SSL_SESSION by David Benjamin · 1 year, 5 months ago
- e8b168d Fix size_t truncations in bio_mem.c by David Benjamin · 1 year, 1 month ago
- 6e723e5 Convert a few more ints to bools in libssl. by David Benjamin · 1 year, 1 month ago
- 502d24c Add various tests for memory BIOs. by David Benjamin · 1 year, 1 month ago
- d897027 Update X25519+Kyber ID. by Adam Langley · 1 year, 1 month ago
- bc49415 Add comment about regenerating peg files. by Adam Langley · 1 year, 1 month ago
- 58472cc Adding a C implementation of Kyber. by Sophie Schmieg · 1 year, 2 months ago
- 28226f5 Fix handling of critical X.509 policy constraints by David Benjamin · 1 year, 1 month ago
- fca688f Fix policy validation when the user policy set is NULL by David Benjamin · 1 year, 1 month ago
- 678bae4 Remove dynamic X509_VERIFY_PARAM registration by David Benjamin · 1 year, 1 month ago
- af0739f Const-correct sk_FOO_cmp_func by David Benjamin · 1 year, 4 months ago
- 97d48db Sort various X.509 global lists sooner by David Benjamin · 1 year, 1 month ago
- 0e8e3c6 Add a warning about OBJ_create and global state by David Benjamin · 1 year, 1 month ago
- 2e13e36 Fix parameter name for i2d_X509_EXTENSION by David Benjamin · 1 year, 1 month ago
- b6a50fd Give X509 an ASN1_ITEM again by David Benjamin · 1 year, 1 month ago
- 8ebfea7 Reject non-minimal lengths in ASN1_get_object by David Benjamin · 1 year, 1 month ago
- 2a52444 Reimplement X509 parsing without templates by David Benjamin · 1 year, 1 month ago
- 172b291 add bindings to RAND_bytes by Nabil Wadih · 1 year, 1 month ago
- 8c8629b Represent unknown universal types with V_ASN1_OTHER by David Benjamin · 1 year, 2 months ago
- 92de195 - remove dependency on hex-literal crate by Nabil Wadih · 1 year, 1 month ago
- 898de8d Rewrite c2i_ASN1_OBJECT by David Benjamin · 1 year, 2 months ago
- 173b639 Make ASN1_OBJECT_create size_t-clean. by David Benjamin · 1 year, 4 months ago
- 2cb7b33 Rewrite ASN1_OBJECT and ASN1_BOOLEAN d2i/i2d functions. by David Benjamin · 1 year, 4 months ago
- cc57542 add bindings for hkdf and update panic handler by Nabil Wadih · 1 year, 2 months ago
- 7b04d72 Get rid of the libc crate dependency in bssl-sys by Bob Beck · 1 year, 1 month ago
- 9ea4128 Set up cargo deny to deny new dependencies by default. by Bob Beck · 1 year, 1 month ago
- 860cc73 Reduce type-punning in ASN1_TYPE by David Benjamin · 1 year, 2 months ago
- 6a231e5 Add a test for OPTIONAL CHOICE values by David Benjamin · 1 year, 2 months ago
- 7464656 Add CTRDBG_STATE to bssl::UniquePtr by David Benjamin · 1 year, 1 month ago
- 3002573 Hmac should be able to take longer keys by Bob Beck · 1 year, 1 month ago
- 8c7aa6b Const-correct and document a few functions in x509v3.h. by David Benjamin · 1 year, 1 month ago
- d0cff63 Test that X509_NAMEs sort their RDNs when encoding. by David Benjamin · 1 year, 1 month ago
- 50bc2ea Tidy up HMAC_Init_ex slightly by David Benjamin · 1 year, 1 month ago
- 39da68f Rust bindings to boringssl plain AES implementation by Nabil Wadih · 1 year, 2 months ago
- 6f3e822 Rust build cleanup by Bob Beck · 1 year, 1 month ago
- be79283 initial setup for bssl crate with hmac and sha2 bindings by Nabil Wadih · 1 year, 2 months ago
- 8aa51dd Add OPENSSL_EXPORT to BN_mod_inverse_blinded by Robert Liu · 1 year, 2 months ago
- ecb722a Add prefetch to sha1_block_data_order_shaext by Ilya Tokar · 1 year, 2 months ago
- a925c22 Remove EVP_PKEY_ASN1_METHOD and EVP_PKEY_METHOD from public headers by David Benjamin · 1 year, 2 months ago
- 082e953 test_fips: flush stdout before aborting on failure. by Pete Bentley · 1 year, 8 months ago
- abb9af8 Work around a NASM bug by David Benjamin · 1 year, 2 months ago
- 3a7dfdb9 Plug a leak in ASN1_item_i2d() by Theo Buehler · 1 year, 2 months ago
- 93e8d44 Add a few more assertions to compiler_test.cc. by David Benjamin · 1 year, 2 months ago
- e06f172 Fix use of unitialized cbb on failure case. by Bob Beck · 1 year, 2 months ago
- 76cb7c5 urandom_test: force MADV_WIPEONFORK both ways. by Adam Langley · 1 year, 2 months ago
- 08b1f38 Use KEM terminology in TLS ECDHE and key_share abstractions by David Benjamin · 1 year, 2 months ago
- 028bae7 Define a NID for P-384 + Kyber768. by Adam Langley · 1 year, 2 months ago
- f88b7c8 Use the common location for CMake in the bots by David Benjamin · 1 year, 2 months ago
- e3a5fac Fix ninja run_tests by David Benjamin · 1 year, 2 months ago
- 3c6085b Workaround yet more NULL + 0 language bugs by David Benjamin · 1 year, 2 months ago
- 92859cc Fix the generated CMake build by David Benjamin · 1 year, 2 months ago
- 8c4ec3b Replace almost all instances of CMAKE_SOURCE_DIR and CMAKE_BINARY_DIR by David Benjamin · 1 year, 2 months ago
- 1b666dd Ignore elf.ErrNoSymbols in util/read_symbols.go by David Benjamin · 1 year, 2 months ago
- f53ca9f Run Go tests as part of run_tests by David Benjamin · 1 year, 2 months ago
- b3c2c75 Pick up a VS 2022 toolchain from Chromium by David Benjamin · 1 year, 2 months ago
- 55902f2 Switch to CIPD's copy of perl by David Benjamin · 1 year, 2 months ago
- 9cbff81 Simplify ECKeyShare slightly. by David Benjamin · 1 year, 3 months ago
- a5dcf35 Move the ASN.1-based SSLKeyShare serialization to handoff.cc. by David Benjamin · 1 year, 3 months ago
- 7fa0910 Create the SSLKeyShare object in TLS 1.2 client ECDHE slightly later by David Benjamin · 1 year, 3 months ago
- 6ab4f0a Require getauxval on 32-bit Arm Linux by David Benjamin · 1 year, 2 months ago
- 5eb9343 Go back to breaking syscalls with the syscall number by David Benjamin · 1 year, 2 months ago
- 8251dd8 Pass the full user_regs_struct to PTRACE_SETREGS by David Benjamin · 1 year, 2 months ago
- bffae8a Print the reason the child stopped in urandom_test by David Benjamin · 1 year, 2 months ago
- ebd43ef Move data from .text to .rodata on x86_64 by Theo Buehler · 1 year, 2 months ago
- 7864b14 Start a Kyber implementation with basic Keccak code. by Adam Langley · 1 year, 2 months ago
- 3cd7faa Tweak urandom_test for Android devices without getrandom. by Adam Langley · 1 year, 2 months ago
- 474ddf8 Cap the number of ECDSA and DSA sign iterations. by David Benjamin · 1 year, 3 months ago
- 788bf74 Add more DSA consistency checks. by David Benjamin · 1 year, 2 months ago