summaryrefslogtreecommitdiff
path: root/src/lib (follow)
Commit message (Expand)AuthorAgeFilesLines
* Use a define based instruction separator in SHA assembly.jsing2026-05-079-191/+219
* Get rid of struct dtls1_retransmit_state.jsing2026-05-062-26/+10
* Avoid use of uninitialised decode_error variable.jsing2026-05-061-10/+14
* mlkem: also zero the failure_keytb2026-05-041-1/+2
* verifier: re-enable the callback override for depthtb2026-05-041-5/+3
* Refactor dtls1_do_write_handshake_message().jsing2026-04-301-43/+44
* Split dtls1_do_write() into handshake message and CCS handling.jsing2026-04-291-33/+59
* Avoid unnecessary lookups in dtls1_retransmit_message().jsing2026-04-291-37/+6
* Remove unused frag_off argument from dtls1_retransmit_message().jsing2026-04-291-4/+3
* Make dtls1_retransmit_message() static.jsing2026-04-292-78/+76
* Inline dtls1_fix_message_header().jsing2026-04-291-16/+5
* Convert DTLS code to ssl_msg_callback().jsing2026-04-291-14/+7
* make_addressRange: unused bits in max must be zerotb2026-04-261-6/+23
* Fix PKCS7_set_{un,}signed_attributes()tb2026-04-261-28/+35
* pkcs7: drop silly use of i in PKCS7_dataVerify()tb2026-04-251-4/+3
* pkcs7: don't use i, j for NIDs in PKCS7_dataFinal()tb2026-04-251-9/+7
* pkcs7: don't use i and j for NIDs in PKCS7_dataDecode()tb2026-04-251-6/+4
* pkcs7: avoid assignment to i in PKCS7_dataInit()tb2026-04-251-3/+2
* pkcs7: Simplify PKCS7_type_is_other()tb2026-04-251-12/+4
* Add FIPS 180-4 references for SHA-256 constants.jsing2026-04-251-1/+6
* Simplify PKCS7_get_issuer_and_serial()tb2026-04-241-9/+6
* mlkem: use <openssl/mlkem.h> instead of "mlkem.h"tb2026-04-201-2/+3
* tls_keypair: add missing <limits.h>tb2026-04-201-1/+3
* ec_pmeth: fix 20yo comment: *outlen -> *keylentb2026-04-201-2/+2
* libtls: consistently handle allocation failureslibressl-v4.3.1libressl-v4.3.0tb2026-04-162-6/+6
* libtls: use TLS_ERROR_OUT_OF_MEMORY after malloc failuretb2026-04-161-2/+2
* libtls: use tls_error_setx() after BIO_new_mem_buf()tb2026-04-161-2/+2
* libtls: prefer x version of error settingtb2026-04-165-17/+17
* libtls: add missing length checks before BIO_new_mem_buf()tb2026-04-162-2/+17
* Prior to this we substring matched and allowed a leading .beck2026-04-132-5/+26
* Bump LibreSSL version for the releasetb2026-04-081-3/+3
* Rename labellen to label_lentb2026-04-072-24/+24
* Fix NULL deref for malformed OAEP parameters in CMS decryptiontb2026-04-072-11/+22
* Refactor and fix ocsp_find_signer_sk()tb2026-04-071-12/+17
* Add a few to-do items to the crl_cb()tb2026-04-071-1/+6
* Stop Delta CRL processing if a CRL number is misssingtb2026-04-071-4/+8
* x509v3.h: remove pointless #ifdef HEADER_CONF_Htb2026-04-061-3/+1
* cms_local.h: remove #ifdef X509V3_HEADER_Htb2026-04-061-4/+3
* Remove lib/libssl/test.jsing2026-04-0353-4409/+0
* Remove workaround for SSL 3.0/TLS 1.0 CBC vulnerability.jsing2026-04-035-80/+8
* Ensure that we cannot negotiate TLSv1.1 or lower.jsing2026-04-033-13/+21
* Remove ssl_server_legacy_first_packet()jsing2026-04-033-97/+2
* Mop up mac_packet.jsing2026-04-034-15/+8
* Restore the previous behaviour with maximum verification depth.jsing2026-04-011-7/+7
* Fix an off-by-one error in the X.509 verifier depth checking.jsing2026-03-311-6/+11
* libssl: announce support for RSASSA-PSS signature schemestb2026-03-301-1/+7
* ssl_sigalg_pkey_ok: allow RSASSA-PSS with pubkey OID RSASSA-PSStb2026-03-301-5/+6
* ssl_sigalgs: whitespace tweaktb2026-03-301-1/+2
* ML-KEM: ensure that key_768 is only dereferenced with 768-bit keystb2026-03-291-3/+7
* Include crypto_assembly.h instead of manually ensuring _CET_ENDBR exists.jsing2026-03-286-36/+12