- 782d9b6 Const-correct ASN1_OBJECT_create. by David Benjamin · 3 years, 1 month ago
- 354cd48 Clarify OBJ_get0_data and OBJ_get_length. by David Benjamin · 3 years, 1 month ago
- c5dc278 avcp: SHA-1 for ECDSA _verification_ is still supported by NIST. by Adam Langley · 3 years, 1 month ago
- 2e54edf A couple of Aarch64 FIPS delocate fixes. by Adam Langley · 3 years, 1 month ago
- eec7f32 Use a placeholder for unknown errors in ERR_*_error_string. by David Benjamin · 3 years, 1 month ago
- 16c76ac Include assembly optimizations in Bazel builds on Linux-aarch64. by Piotr Sikora · 3 years, 1 month ago
- fcec391 Remove some BoringSSL-only X509_CINF functions. by David Benjamin · 3 years, 1 month ago
- ab7811e Document and test X509_ATTRIBUTE creation functions. by David Benjamin · 3 years, 1 month ago
- daf1aca Revert handshaker fd numbers and make StartProcess more flexible. by David Benjamin · 3 years, 1 month ago
- b173d91 Remove support for malformed X509_ATTRIBUTEs. by David Benjamin · 3 years, 1 month ago
- 575d112 Make X509_ATTRIBUTE opaque. by David Benjamin · 3 years, 1 month ago
- 68a799a acvptool: Fix typo hard-coding the HTTP method. by Gurleen Grewal · 3 years, 1 month ago
- f0e6490 Document a few more x509.h functions. by David Benjamin · 3 years, 1 month ago
- e60893c Make X509_PUBKEY opaque. by David Benjamin · 3 years, 1 month ago
- 468cde9 Always encode booleans as DER. by David Benjamin · 3 years, 1 month ago
- 2f3958a Fix issuerUID and subjectUID parsing in the key usage checker. by David Benjamin · 3 years, 1 month ago
- b571e77 Add experimental handshake hints API. by David Benjamin · 3 years, 2 months ago
- 666f2ab Make our Python scripts Python-3-compatible. by David Benjamin · 3 years, 2 months ago
- 1596137 Export ssl_client_hello_init for fuzzers. by David Benjamin · 3 years, 1 month ago
- 7a1986c acvp: support GMAC as an algorithm. by Adam Langley · 3 years, 1 month ago
- 94b477c Record a fuzzing corpus for the ClientHelloInner decoder. by David Benjamin · 3 years, 1 month ago
- 5545b61 Use a consistent plural for 'corpus'. by David Benjamin · 3 years, 1 month ago
- 4382899 Add util/bot/libFuzzer to .gitignore. by David Benjamin · 3 years, 1 month ago
- 09f71c1 acvp: support KAS-ECC-SSC staticUnified mode. by Adam Langley · 3 years, 1 month ago
- 12a3e7e Check for invalid ALPN inputs in SSL_(CTX_)set_alpn_protos. by David Benjamin · 3 years, 1 month ago
- e4c1917 Don't duplicate ServerHello construction code. by David Benjamin · 3 years, 1 month ago
- 3b8c5ec Rearrange key share and early data logic. by David Benjamin · 3 years, 1 month ago
- e2b7bb7 Only skip early data with HRR when offered. by David Benjamin · 3 years, 1 month ago
- 2de33c6 Add ECH server config API to ssl_ctx_api fuzzer by Dan McArdle · 3 years, 1 month ago
- 3af8854 Fix ppc64le build. by Adam Langley · 3 years, 1 month ago
- 669ffe6 Simplify the Lucky13 mitigation. by David Benjamin · 3 years, 1 month ago
- 00e434d Add ECH server (draft-ietf-tls-esni-09). by Daniel McArdle · 3 years, 3 months ago
- 61d5aab runner: Remove unused field by David Benjamin · 3 years, 1 month ago
- ca65bff runner: Construct finishedHash earlier. by David Benjamin · 3 years, 1 month ago
- c31fb79 Simplify tls_cbc.c slightly. by David Benjamin · 3 years, 1 month ago
- 7a0834b Remove remnants of CBC SHA2 cipher suites. by David Benjamin · 3 years, 1 month ago
- bff8834 runner: Test different V2ClientHello challenge lengths. by David Benjamin · 3 years, 1 month ago
- 6810f0e runner: Ensure helloBytes is always the same as hello.marshal(). by David Benjamin · 3 years, 1 month ago
- fa2d3d5 runner: Fix ECH confirmation calculation with PSKs in tests. by David Benjamin · 3 years, 1 month ago
- 7d2ddd2 runner: Fix HPKE parameter order. by David Benjamin · 3 years, 1 month ago
- d791fbd runner: UpdateForHelloRetryRequest cannot fail. by David Benjamin · 3 years, 1 month ago
- 4151b9f runner: Don't use the buffer in TLS 1.3. by David Benjamin · 3 years, 1 month ago
- 4b854a6 runner: Don't maintain two copies of the same transcript hash. by David Benjamin · 3 years, 1 month ago
- 99f6d4b runner: Remove remnants of SSL 3.0. by David Benjamin · 3 years, 1 month ago
- 5f757bc runner: Fix writeClientHash and writeRecord ordering. by David Benjamin · 3 years, 1 month ago
- 7a15a70 runner: Remove CheckTLS13DowngradeRandom. by David Benjamin · 3 years, 1 month ago
- f225516 runner: Remove remnants of the separate HelloRetryRequest message. by David Benjamin · 3 years, 1 month ago
- 0508271 runner: Store a cipherSuite in ClientSessionState. by David Benjamin · 3 years, 1 month ago
- 26a589e runner: Move writeHash to the finishedHash struct. by David Benjamin · 3 years, 1 month ago
- fd73985 Fix the spelling of HPKE AEAD constants. by David Benjamin · 3 years, 1 month ago
- dfde04f Don't reset server callback expectations on new handshake. by David Benjamin · 3 years, 1 month ago
- 8501579 Fix MockQuicTransport::Flush error handling. by David Benjamin · 3 years, 1 month ago
- 15e0f67 Fold ripemd/internal.h into ripemd.c. by David Benjamin · 3 years, 1 month ago
- ca45987 Move load/store helpers to crypto/internal.h. by David Benjamin · 3 years, 1 month ago
- 8d4c8fc Make words in crypto/fipsmodule/modes actually words. by David Benjamin · 3 years, 1 month ago
- 6b9c012 Handle EINTR more in handshaker.cc. by David Benjamin · 3 years, 1 month ago
- 084064b Add a few missing SSL_R_BIO_NOT_SET cases. by David Benjamin · 3 years, 1 month ago
- 9bcf307 Fix some unreachable code in the QUIC handshaker driver. by David Benjamin · 3 years, 1 month ago
- 0a6c3fc Rearrange SSLKeyShare::Serialize. by David Benjamin · 3 years, 1 month ago
- 08b1729 Fix ssl/internal.h sectioning. by David Benjamin · 3 years, 1 month ago
- b62a48f Remove some now unnecessary test exclusions from split handshakes. by David Benjamin · 3 years, 1 month ago
- 60a78dc Remove tls13-split-handshakes flag. by David Benjamin · 3 years, 1 month ago
- 953650c Define HANDSHAKER_SUPPORTED in once place. by David Benjamin · 3 years, 2 months ago
- b9b0363 Tidy up handshaker tester. by David Benjamin · 3 years, 2 months ago
- 1a93f4f modulewrapper: add option to print build information. by Adam Langley · 3 years, 1 month ago
- 0da75f3 FIPS counters for AES-CTR. by Adam Langley · 3 years, 1 month ago
- 3af6226 Enforce that pre_shared_key must come with psk_key_exchange_modes. by David Benjamin · 3 years, 1 month ago
- 4aef687 Zero out FIPS counters. by Adam Langley · 3 years, 1 month ago
- da890de Remove is_resume field on TestState. by David Benjamin · 3 years, 2 months ago
- 04c44d9 Remove OPENSSL_DANGEROUS_RELEASE_PTHREAD_KEY build flag. by David Benjamin · 3 years, 2 months ago
- 20f7bba Add some warnings on how to use OPENSSL_memory_* functions. by David Benjamin · 3 years, 2 months ago
- a24ab54 Use an unsized helper for truncated SHA-512 variants. by David Benjamin · 3 years, 2 months ago
- 139adff Fix mismatch between header and implementation of bn_sqr_comba8. by David Benjamin · 3 years, 2 months ago
- 49f0329 Remove GCC 4.8.99 check. by David Benjamin · 3 years, 2 months ago
- d0b66c7 Bump minimum CMake version. by David Benjamin · 3 years, 2 months ago
- edfe413 Automatically enable C11 atomics when available. by David Benjamin · 3 years, 2 months ago
- 5650816 Make generate_build_files.py python3 compatible. by Yoshisato Yanagisawa · 3 years, 2 months ago
- 9be3252 Remove X509_REQ_set_extension_nids and document related functions. by David Benjamin · 3 years, 2 months ago
- a99d3a8 Document a few more functions in x509.h. by David Benjamin · 3 years, 2 months ago
- ac85c03 Do not access value.ptr with V_ASN1_BOOLEAN. by David Benjamin · 3 years, 2 months ago
- 477b309 Add X509_PUBKEY_get0_public_key. by David Benjamin · 3 years, 2 months ago
- 502fcee Test empty EVP_CIPHER inputs and fix exact memcpy overlap. by David Benjamin · 3 years, 2 months ago
- e5fe31c Revert "Implement rsa_pkcs1_sha256_legacy." by David Benjamin · 3 years, 2 months ago
- 8c31179 Fix unnecessarily direction-specific tests in cipher_tests.txt by David Benjamin · 3 years, 2 months ago
- d9ee55a Refactor HPKE API to include explicit length parameters. by Dan McArdle · 3 years, 2 months ago
- c9d3265 Generalize make_errors.go to allow EVP covering multiple directories. by David Benjamin · 3 years, 2 months ago
- b09f283 Add a Windows no-op impl of BORINGSSL_self_test by Bradley Hess · 3 years, 2 months ago
- b214741 Only pass -handshaker-path in split handshakes tests. by David Benjamin · 3 years, 2 months ago
- c953ee4 Add RNG support for FreeBSD. by Bradley Hess · 3 years, 2 months ago
- fb855a2 Move fips.c into a subdirectory. by David Benjamin · 3 years, 2 months ago
- a3437c0 Implement rsa_pkcs1_sha256_legacy. by David Benjamin · 3 years, 3 months ago
- 2c1c9fa Better document nullable X.509 getters. by David Benjamin · 3 years, 2 months ago
- 1eae297 runner: Remove redundant -enable-all-curves shim flag. by David Benjamin · 3 years, 2 months ago
- 87aafb6 Initialize nonce in PerAEADTest.ABI. by David Benjamin · 3 years, 2 months ago
- 3d15a94 Document ASN1_TYPE and related functions. by David Benjamin · 3 years, 2 months ago
- f7b87c8 fips: add counters. by Adam Langley · 3 years, 2 months ago
- acf6149 Align with OpenSSL on constness of static ASN1_OBJECTs. by David Benjamin · 3 years, 2 months ago
- 6b48efa Add -rr-record flag to runner.go. by Dan McArdle · 3 years, 2 months ago
- 04b3213 Register NAME_CONSTRAINTS with bssl::UniquePtr. by David Benjamin · 3 years, 2 months ago
- 215f4a0 Register POLICY_MAPPING with bssl::UniquePtr. by David Benjamin · 3 years, 2 months ago
