openssl/.gitignore, branch dependabot/github_actions/actions/setup-python-7

Ignore memfail test binaries

2026-05-21T09:05:19Z

Reviewed-by: Eugene Syromiatnikov Reviewed-by: Nikola Pajkovsky MergeDate: Thu May 21 09:05:24 2026 (Merged from https://github.com/openssl/openssl/pull/31221)

FIPS: Add HMAC key size compliance check to the MAC legacy bridge.

2026-04-28T07:13:23Z

The hmac fips provider implementation used by the EVP_MAC API handles key size checks, but it only does the test for the internal case. Previously HMAC was implemented using EVP_DigestSign related functions, and these are implemented using a mac_legacy_sig bridge, because of this the MAC is external. For external cases the caller is responsible for doing any key checks, so a FIPS indicator has been added. Reported-by: https://github.com/taha2samy Fixes: #30012 Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale MergeDate: Tue Apr 28 07:13:24 2026 (Merged from https://github.com/openssl/openssl/pull/30150)

Add IKEV2KDF implementation

2026-03-24T17:21:19Z

In compliance with RFC7296 and SP800-135 Reviewed-by: Neil Horman Reviewed-by: Shane Lontis Reviewed-by: Paul Dale MergeDate: Tue Mar 24 17:21:21 2026 (Merged from https://github.com/openssl/openssl/pull/30121)

feat: Disabled features are generated during configure automatically

2026-03-13T15:52:12Z

Reviewed-by: Matt Caswell Reviewed-by: Paul Dale MergeDate: Fri Mar 13 15:50:43 2026 (Merged from https://github.com/openssl/openssl/pull/30212)

Generate FIPS parameter handling with Perl

2026-03-11T14:55:19Z

Replace the C preprocessor macros used for FIPS indicators and self-test parameters with a Perl-based code generation approach. This introduces `util/perl/OpenSSL/fipsparams.pm` and `providers/fips/fipsparams.inc.in` to generate the boilerplate code, simplifying `fipsprov.c` and reducing macro complexity. Co-authored-by: Gemini Signed-off-by: Simo Sorce Reviewed-by: Paul Dale Reviewed-by: Shane Lontis Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/30213)

Add tests and documentation and fix a couple of issues identified by added tests

2026-02-20T16:40:25Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell MergeDate: Mon Feb 16 15:41:15 2026 (Merged from https://github.com/openssl/openssl/pull/29200)

Keep kdfs together in .gitignore

2026-02-13T09:53:40Z

Signed-off-by: Simo Sorce Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/29222)

Add support for CSHAKE.

2026-01-23T14:07:51Z

Unlike SHAKE this has default values set for the xof length. CSHAKE uses either SHAKE or KECCAK[c] depending on whether custom strings are set or not. If either string is set, it encodes the strings and uses KECCAK[c], otherwise it behaves the same as SHAKE (without the default xof length problem). Reviewed-by: Paul Dale Reviewed-by: Norbert Pocs MergeDate: Fri Jan 23 14:07:53 2026 (Merged from https://github.com/openssl/openssl/pull/28432)

Add SRTPKDF implementation

2026-01-23T10:19:31Z

In compliance with RFC 3711, Section 4.3.3 Reviewed-by: Paul Dale Reviewed-by: Shane Lontis MergeDate: Fri Jan 23 10:19:32 2026 (Merged from https://github.com/openssl/openssl/pull/29435)

Rename test_base64_simdutf to base64_simdutf_test

2026-01-19T14:15:35Z

The new name is better for consistency with other tests. Reviewed-by: Saša Nedvědický Reviewed-by: Paul Dale Reviewed-by: Matt Caswell MergeDate: Mon Jan 19 14:20:35 2026 (Merged from https://github.com/openssl/openssl/pull/29550)