aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2021-04-30Remove non-deterministic bits from ECDSA ACVP test.fips-20210429Adam Langley2-0/+0
2021-04-30Reference the newer ChaCha20-Poly1305 RFC.David Benjamin4-5/+5
2021-04-30Use passive entropy collection everywhere.Adam Langley4-23/+3
2021-04-28Rename X509V*_VERSION constants.David Benjamin7-26/+36
2021-04-23Const-correct ASN1_OBJECT_create.David Benjamin2-2/+3
2021-04-22Clarify OBJ_get0_data and OBJ_get_length.David Benjamin1-2/+8
2021-04-22avcp: SHA-1 for ECDSA _verification_ is still supported by NIST.Adam Langley3-1/+4
2021-04-22A couple of Aarch64 FIPS delocate fixes.Adam Langley6-2014/+2274
2021-04-22Use a placeholder for unknown errors in ERR_*_error_string.David Benjamin3-82/+100
2021-04-22Include assembly optimizations in Bazel builds on Linux-aarch64.Piotr Sikora1-0/+10
2021-04-22Remove some BoringSSL-only X509_CINF functions.David Benjamin3-39/+2
2021-04-21Document and test X509_ATTRIBUTE creation functions.David Benjamin5-33/+212
2021-04-21Revert handshaker fd numbers and make StartProcess more flexible.David Benjamin2-44/+64
2021-04-20Remove support for malformed X509_ATTRIBUTEs.David Benjamin3-41/+7
2021-04-20Make X509_ATTRIBUTE opaque.David Benjamin5-47/+24
2021-04-19acvptool: Fix typo hard-coding the HTTP method.Gurleen Grewal1-1/+1
2021-04-19Document a few more x509.h functions.David Benjamin3-3/+31
2021-04-19Make X509_PUBKEY opaque.David Benjamin6-6/+11
2021-04-16Always encode booleans as DER.David Benjamin3-2/+27
2021-04-16Fix issuerUID and subjectUID parsing in the key usage checker.David Benjamin2-20/+74
2021-04-15Add experimental handshake hints API.David Benjamin24-159/+1282
2021-04-15Make our Python scripts Python-3-compatible.David Benjamin5-27/+37
2021-04-15Export ssl_client_hello_init for fuzzers.David Benjamin1-2/+5
2021-04-15acvp: support GMAC as an algorithm.Adam Langley5-0/+17
2021-04-14Record a fuzzing corpus for the ClientHelloInner decoder.David Benjamin24-1/+33
2021-04-14Use a consistent plural for 'corpus'.David Benjamin2-2/+2
2021-04-14Add util/bot/libFuzzer to .gitignore.David Benjamin1-0/+1
2021-04-14acvp: support KAS-ECC-SSC staticUnified mode.Adam Langley3-18/+57
2021-04-13Check for invalid ALPN inputs in SSL_(CTX_)set_alpn_protos.David Benjamin6-27/+90
2021-04-13Don't duplicate ServerHello construction code.David Benjamin1-38/+31
2021-04-13Rearrange key share and early data logic.David Benjamin3-91/+78
2021-04-13Only skip early data with HRR when offered.David Benjamin2-1/+20
2021-04-12Add ECH server config API to ssl_ctx_api fuzzerDan McArdle1-0/+19
2021-04-12Fix ppc64le build.Adam Langley1-1/+1
2021-04-08Simplify the Lucky13 mitigation.David Benjamin4-198/+190
2021-04-08Add ECH server (draft-ietf-tls-esni-09).Daniel McArdle27-714/+3135
2021-04-08runner: Remove unused fieldDavid Benjamin1-3/+0
2021-04-08runner: Construct finishedHash earlier.David Benjamin1-180/+185
2021-04-08Simplify tls_cbc.c slightly.David Benjamin1-114/+29
2021-04-08Remove remnants of CBC SHA2 cipher suites.David Benjamin8-14243/+0
2021-04-08runner: Test different V2ClientHello challenge lengths.David Benjamin3-22/+47
2021-04-08runner: Ensure helloBytes is always the same as hello.marshal().David Benjamin2-80/+59
2021-04-06runner: Fix ECH confirmation calculation with PSKs in tests.David Benjamin2-5/+16
2021-04-06runner: Fix HPKE parameter order.David Benjamin2-6/+6
2021-04-06runner: UpdateForHelloRetryRequest cannot fail.David Benjamin3-12/+4
2021-04-06runner: Don't use the buffer in TLS 1.3.David Benjamin1-2/+26
2021-04-06runner: Don't maintain two copies of the same transcript hash.David Benjamin1-38/+29
2021-04-06runner: Remove remnants of SSL 3.0.David Benjamin8-291/+56
2021-04-06runner: Fix writeClientHash and writeRecord ordering.David Benjamin1-1/+1
2021-04-06runner: Remove CheckTLS13DowngradeRandom.David Benjamin2-5/+1