1. bf4bcdf Fix some stuttering. by David Benjamin · 6 years ago
  2. 2d10c36 Check in a copy of Project Wycheproof test vectors. by David Benjamin · 6 years ago
  3. b8546dd Update location of root certificates on Fuchsia by Joshua Liebow-Feeser · 6 years ago
  4. cece326 Add SHA256_TransformBlocks. by Adam Langley · 6 years ago
  5. ec4f0dd EC_GROUP_dup cannot fail. by David Benjamin · 6 years ago
  6. 32e0d10 Add EC_FELEM for EC_POINTs and related temporaries. by David Benjamin · 6 years ago
  7. 6a289b3 Remove EC_POINTs_make_affine and related logic. by David Benjamin · 6 years ago
  8. 06c28d8 Simplify shim timeout logic. by David Benjamin · 6 years ago
  9. 48b276d Give ssl_cipher_preference_list_st a destructor. by David Benjamin · 6 years ago
  10. 06d467c ghashv8-armx.pl: add Qualcomm Kryo results. by David Benjamin · 6 years ago
  11. a7c8f2b ghashv8-armvx.pl: Fix various typos. by David Benjamin · 6 years ago
  12. a63d0ad Require BN_mod_exp_mont* inputs be reduced. by David Benjamin · 6 years ago
  13. 52a68a9 Remove unused string.h include. by David Benjamin · 6 years ago
  14. 5c0e0ce Remove Z = 1 special-case in generic point_get_affine. by David Benjamin · 6 years ago
  15. f5858ca Remove unnecessary endian flip in p224-64.c. by David Benjamin · 6 years ago
  16. b8f14b7 Add dedicated scalar inversion code to p256-x86_64.c. by David Benjamin · 6 years ago
  17. 364a51e Abstract scalar inversion in EC_METHOD. by David Benjamin · 6 years ago
  18. b27b579 Add some tests for scalar operations. by David Benjamin · 6 years ago
  19. 3861ae6 p256-x86_64-asm.pl: add .cfi and SEH handlers to new functions. by David Benjamin · 6 years ago
  20. 5c30dab Import P-256 scalar multiplication assembly from OpenSSL. by David Benjamin · 6 years ago
  21. 7121fe2 Align ECDSA sign/verify scalar inversions. by David Benjamin · 6 years ago
  22. 941f535 Abstract away EC_SCALAR operations. by David Benjamin · 6 years ago
  23. 9291be5 Remove return values from bn_*_small. by David Benjamin · 6 years ago
  24. 3f8074c Fix the error on overly large group orders. by David Benjamin · 6 years ago
  25. cd01254 Explicitly guarantee BN_MONT_CTX::{RR,N} have the same width. by David Benjamin · 6 years ago
  26. e3aba37 Fix typo in ssl_cert_cache_chain_certs. by Adam Langley · 6 years ago
  27. a293871 Improve the RSA key generation failure probability. by David Benjamin · 6 years ago
  28. 9af9b94 Restore the BN_mod codepath for public Montgomery moduli. by David Benjamin · 6 years ago
  29. 7e2a8a3 Speed up variable windowed exponentation a bit. by David Benjamin · 6 years ago
  30. b1e6a85 Change OPENSSL_cpuid_setup to reserve more extended feature space. by Jesse Selover · 6 years ago
  31. 35e7c99 Remove files from Trusty which can't link because of Trusty libc. by Jesse Selover · 6 years ago
  32. 6f6a237 delocate: put emitted labels in a specific file. by Adam Langley · 6 years ago
  33. 56b1a8e Test the high-order bit in X25519. by David Benjamin · 6 years ago
  34. 56ea9e2 Fix bn_mod_exp_mont_small when exponentiating to zero. by David Benjamin · 6 years ago
  35. e0ae249 Remove a = 0 special-case in BN_mod_exp_mont. by David Benjamin · 6 years ago
  36. d319205 Deny CRT to unbalanced RSA keys. by David Benjamin · 6 years ago
  37. 024f5df Avoid some divisions in Lucky 13 fix. by David Benjamin · 6 years ago
  38. e325c3f Give CERT a destructor. by David Benjamin · 6 years ago
  39. fceca8e Move srtp_profile to ssl->s3. by David Benjamin · 6 years ago
  40. e28552d Add an API to disable RSA-PSS for certificates. by David Benjamin · 6 years ago
  41. c977532 Pretty-print TicketAEADMethod tests. by David Benjamin · 6 years ago
  42. 6879e19 Rename SSL_SIGN_RSA_PSS_SHA* constants. by David Benjamin · 6 years ago
  43. 5ad9476 Remove legacy SSL_CTX_sess_set_get_cb overload. by David Benjamin · 6 years ago
  44. 68478b7 Add runtime bounds checks to bssl::Span. by David Benjamin · 6 years ago
  45. 9f0e7cb Move TB state to ssl->s3. by David Benjamin · 6 years ago
  46. b8b1a9d Add SSL_SESSION_get0_cipher. by David Benjamin · 6 years ago
  47. 1414d86 tool: Move the RSA specific code from |Speed| to |SpeedRSA|. by Daniel Hirche · 6 years ago
  48. 27e4c3b Add an OPENSSL_malloc_init stub. by David Benjamin · 6 years ago
  49. de20810 Fix return value in speed tool. by Daniel Hirche · 6 years ago
  50. acddb8c Avoid modifying stack in sk_find. by Steven Valdez · 6 years ago
  51. c5154f7 SSL_serialize_handoff: serialize fewer things. by Matthew Braithwaite · 6 years ago
  52. 868ec73 SSL_apply_handback: check that |max_send_fragment| is nonzero. by Matthew Braithwaite · 6 years ago
  53. 98dd68f [util] Generate separate GN source sets for headers and sources by James Robinson · 6 years ago
  54. 5b2a51d Check for nullptr result of SSLKeyShare::Create(). by Matthew Braithwaite · 6 years ago
  55. e2ab21d Use the actual record header, rather than reassembling it. by David Benjamin · 6 years ago
  56. f11ea19 Actually benchmark RSA verification with a fresh key. by David Benjamin · 6 years ago
  57. bb2e1e1 No-op comment to kick the bots. by David Benjamin · 6 years ago
  58. 628b3c7 Don't write out a bad OID by David Benjamin · 6 years ago
  59. dcd862c No-op commit to kick the bots. by David Benjamin · 6 years ago
  60. b2eaeb0 Drop some trial-division primes for 1024-bit candidates. by Adam Langley · 6 years ago
  61. 861f384 Implement TLS 1.3 draft28. by Steven Valdez · 6 years ago
  62. eda47f5 Make generic point arithmetic slightly less variable-time. by David Benjamin · 6 years ago
  63. 56986f9 Hand back ECDHE split handshakes after the first server message. by Matthew Braithwaite · 6 years ago
  64. ba9da44 Tolerate a null BN_CTX in BN_primality_test. by David Benjamin · 6 years ago
  65. 7a62ab1 Clarify BN_prime_checks is only for random candidates. by David Benjamin · 6 years ago
  66. 5b05988 Implement field_{mul,sqr} in p224-64.c with p224_felems. by David Benjamin · 6 years ago
  67. c81ecf3 Add test coverage for the a != -3 case. by David Benjamin · 6 years ago
  68. 88b1a37 Include EC_POINT_oct2point in ECDH benchmarks. by David Benjamin · 6 years ago
  69. 04018c5 Remove EC_LOOSE_SCALAR. by David Benjamin · 6 years ago
  70. 9c1f8b4 Add tests for large digests. by David Benjamin · 6 years ago
  71. 2257e8f Use bn_rshift_words for the ECDSA bit-shift. by David Benjamin · 6 years ago
  72. 0645c05 Test the bit-shifting case in ECDSA. by David Benjamin · 6 years ago
  73. cbe7792 Extract the single-subtraction reduction into a helper function. by David Benjamin · 6 years ago
  74. 25f3d84 Rewrite BN_rand without an extra malloc. by David Benjamin · 6 years ago
  75. 85c2cd8 Fix up AUTHORITY_INFO_ACCESS/ACCESS_DESCRIPTION's deleter. by David Benjamin · 6 years ago
  76. eb7c300 Only do 16 iterations to blind the primality test. by Adam Langley · 6 years ago
  77. a0f1c8e Add RSA key generation to speed.cc by Adam Langley · 6 years ago
  78. 5833dd8 Limit the public exponent in RSA_generate_key_ex. by David Benjamin · 6 years ago
  79. c1c6eeb Check d is mostly-reduced in RSA_check_key. by David Benjamin · 6 years ago
  80. cba958f Make RSA_check_key constant-time and more meaningful. by David Benjamin · 6 years ago
  81. c4e4757 Make RSA key generation constant-time. by David Benjamin · 6 years ago
  82. a44dae7 Add a constant-time generic modular inverse function. by David Benjamin · 6 years ago
  83. 1044553 Add new GCD and related primitives. by David Benjamin · 6 years ago
  84. 23af438 Compute p - q in constant time. by David Benjamin · 6 years ago
  85. 8d9ee7d Replace rsa_greater_than_pow2 with BN_cmp. by David Benjamin · 6 years ago
  86. 97ac45e Change the order of GCD and trial division. by David Benjamin · 6 years ago
  87. 40729e3 Revert "Update SDE to 8.16.0." by David Benjamin · 6 years ago
  88. 21ef155 Update SDE to 8.16.0. by David Benjamin · 6 years ago
  89. 365e48c Update tools. by David Benjamin · 6 years ago
  90. 1902d81 Tighten and test name-checking functions. by Adam Langley · 6 years ago
  91. 56f5eb9 Name constant-time functions more consistently. by David Benjamin · 6 years ago
  92. e6f46e2 Blind the range check for finding a Rabin-Miller witness. by David Benjamin · 6 years ago
  93. 8eadca5 Don't leak |a| in the primality test. by David Benjamin · 6 years ago
  94. 9362ed9 Use a Barrett reduction variant for trial division. by David Benjamin · 6 years ago
  95. 232a6be Make primality testing mostly constant-time. by David Benjamin · 6 years ago
  96. 50418af Add some EC base point multiplication test vectors. by David Benjamin · 6 years ago
  97. 718c88c Fix a bug in p224-64.c. by David Benjamin · 6 years ago
  98. 72bc232 Note licenses for support code in the top-level LICENSE file. by Adam Langley · 6 years ago
  99. 2e16f6b Add a test for CRYPTO_memcmp. by David Benjamin · 6 years ago
  100. 2a19a17 Limit ASN.1 constructed types recursive definition depth by David Benjamin · 6 years ago