openssl, branch feature/method-store-freeze

Add freeze functionality to EVP_SKEYMGMT_fetch

2026-04-17T11:12:08Z

Add unit tests to check functionality Reviewed-by: Neil Horman Reviewed-by: Norbert Pocs MergeDate: Fri Apr 17 11:12:10 2026 (Merged from https://github.com/openssl/openssl/pull/30642)

Add freeze functionality to EVP_KEYEXCH_fetch

2026-03-27T16:27:50Z

Add unit tests to check functionality Reviewed-by: Nikola Pajkovsky Reviewed-by: Saša Nedvědický MergeDate: Fri Mar 27 16:28:10 2026 (Merged from https://github.com/openssl/openssl/pull/30462)

Fix unit test with FIPS install

2026-03-17T09:54:29Z

Reviewed-by: Saša Nedvědický Reviewed-by: Nikola Pajkovsky MergeDate: Tue Mar 17 09:54:33 2026 (Merged from https://github.com/openssl/openssl/pull/30357)

Update test for EVP_ASYM_CIPHER freeze

2026-03-17T09:54:29Z

Reviewed-by: Saša Nedvědický Reviewed-by: Nikola Pajkovsky MergeDate: Tue Mar 17 09:54:32 2026 (Merged from https://github.com/openssl/openssl/pull/30357)

Add freeze functionality to EVP_ASYM_CIPHER_fetch

2026-03-11T16:09:53Z

Add unit tests to check functionality Fixes https://github.com/openssl/project/issues/1888 Reviewed-by: Saša Nedvědický Reviewed-by: Nikola Pajkovsky MergeDate: Tue Mar 17 09:54:30 2026 (Merged from https://github.com/openssl/openssl/pull/30357)

evp: freeze KDF fetch cache and expand KDF fetch tests

2026-03-06T13:26:49Z

Add frozen-method support for EVP_KDF fetches by wiring dup/free callbacks and populating KDF entries during OSSL_LIB_CTX_freeze(). perftools shows no performance gains $ ./evp_kdf -o evp_isolated 64 -f Average time per computation: 8181.213888us $ ./evp_kdf -o evp_isolated 64 Average time per computation: 8307.157135us Resolves https://github.com/openssl/project/issues/1834 Signed-off-by: Nikola Pajkovsky Reviewed-by: Saša Nedvědický Reviewed-by: Norbert Pocs MergeDate: Wed Mar 11 12:15:18 2026 (Merged from https://github.com/openssl/openssl/pull/30081)

evp: freeze KEM fetch cache and expand KEM fetch tests

2026-03-05T17:21:04Z

Add frozen-method support for EVP_KEM fetches by wiring dup/free callbacks and populating KEM entries during OSSL_LIB_CTX_freeze(). https://github.com/openssl/project/issues/1833 Signed-off-by: Nikola Pajkovsky Reviewed-by: Saša Nedvědický Reviewed-by: Norbert Pocs MergeDate: Thu Mar 5 17:21:25 2026 (Merged from https://github.com/openssl/openssl/pull/30078)

evp: freeze KEYMGMT fetch cache and expand kmgmt fetch tests

2026-03-05T17:21:04Z

Add frozen-method support for EVP_KEYMGMT fetches by wiring dup/free callbacks and populating KEYMGMT entries during OSSL_LIB_CTX_freeze(). Resolves https://github.com/openssl/project/issues/1876 Signed-off-by: Nikola Pajkovsky Reviewed-by: Saša Nedvědický Reviewed-by: Norbert Pocs MergeDate: Thu Mar 5 17:21:24 2026 (Merged from https://github.com/openssl/openssl/pull/30078)

Add operation_id to frozen method store cache key

2026-03-05T17:21:04Z

The frozen method store cache was keyed only by algorithm name and property query, which could cause incorrect cache hits when different operation types (e.g., KEM vs signature) share the same algorithm name. Include the operation_id in the FROZEN_CACHE_KEY and thread it through ossl_frozen_method_store_cache_get(), freeze_alg(), and alg_freeze() so that lookups correctly distinguish between operations on identically named algorithms. Signed-off-by: Nikola Pajkovsky Reviewed-by: Saša Nedvědický Reviewed-by: Norbert Pocs MergeDate: Thu Mar 5 17:21:22 2026 (Merged from https://github.com/openssl/openssl/pull/30078)

OSSL_LIB_CTX.pod: Tweak the docs for libcontext freeze

2026-03-04T17:39:36Z

Reviewed-by: Paul Dale Reviewed-by: Nikola Pajkovsky MergeDate: Wed Mar 4 17:40:10 2026 (Merged from https://github.com/openssl/openssl/pull/30168)