<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openssl/AUTHORS.md, branch dependabot/github_actions/actions/setup-python-7</title>
<subtitle>TLS/SSL and crypto library.</subtitle>
<id>http://git.bktus.com/gpgfrontend/openssl/atom?h=dependabot%2Fgithub_actions%2Factions%2Fsetup-python-7</id>
<link rel='self' href='http://git.bktus.com/gpgfrontend/openssl/atom?h=dependabot%2Fgithub_actions%2Factions%2Fsetup-python-7'/>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/'/>
<updated>2025-02-27T17:38:57Z</updated>
<entry>
<title>EVP_DecodeUpdate() should not produce padding zeros to the decoded output (Fixes #26677)</title>
<updated>2025-02-27T17:38:57Z</updated>
<author>
<name>Valerii Krygin</name>
<email>5962274+definability@users.noreply.github.com</email>
</author>
<published>2025-02-25T15:57:26Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=f86acc9434e3b1ff8bc11bac6210dbef25cbb4b1'/>
<id>urn:sha1:f86acc9434e3b1ff8bc11bac6210dbef25cbb4b1</id>
<content type='text'>
EVP_DecodeUpdate() should not produce zeros for input padding `=` signs to avoid writing to non-allocated memory regions.

To achieve this:
- Add `eof` parameter to `evp_decodeblock_int` function in `openssl/crypto/evp`. The parameter should either contain the number of the input padding characters to ignore or `-1` if the function has to count them.
- Use precalculated `eof` in `EVP_DecodeUpdate` to fix its behaviour.
- Use `eof = -1` in `EVP_DecodeFinal` to count it in `evp_decodeblock_int`.
- Do not ignore padding in `EVP_DecodeBlock` (`eof = 0`) because it should write padding zeros according to the documentation.
- Add the HISTORY section to EVP_EncodeInit documentation to describe the fix.

Other changes:
- Update AUTHORS.md
- Update the copyright date in the documentation.

Reviewed-by: Tim Hudson &lt;tjh@openssl.org&gt;
Reviewed-by: Viktor Dukhovni &lt;viktor@openssl.org&gt;
(Merged from https://github.com/openssl/openssl/pull/26678)
</content>
</entry>
<entry>
<title>ML-KEM hybrids for TLS</title>
<updated>2025-02-14T09:50:58Z</updated>
<author>
<name>Viktor Dukhovni</name>
<email>openssl-users@dukhovni.org</email>
</author>
<published>2024-12-20T09:26:50Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=4b1c73d2dd748ec7dc8a82d517e1ff46db132e7b'/>
<id>urn:sha1:4b1c73d2dd748ec7dc8a82d517e1ff46db132e7b</id>
<content type='text'>
- When used as KEMs in TLS the ECDHE algorithms are NOT subjected to
  HPKE Extract/Expand key derivation.  Instead the TLS HKDF is used
  as usual.

- Consequently these KEMs are just the usual ECDHE key exchange
  operations, be it with the encap ECDH private key unavoidably
  ephemeral.

- A new "MLX" KEM provider is added that supports four hybrids of EC/ECX
  DH with ML-KEM:

    * ML-KEM-768 + X25519
    * ML-KEM-1024 + X448
    * P-256 + ML-KEM-768
    * P-384 + ML-KEM-1024

- Support listing of implemented TLS groups.

  The SSL_CTX_get0_implemented_groups() function and new
  `openssl list -tls-groups` and `openssl list -all-tls-groups`
  commands make it possible to determine which groups are
  implemented by the SSL library for a particular TLS version
  or range of versions matching an SSL_CTX.

Reviewed-by: Tomas Mraz &lt;tomas@openssl.org&gt;
Reviewed-by: Tim Hudson &lt;tjh@openssl.org&gt;
(Merged from https://github.com/openssl/openssl/pull/26220)
</content>
</entry>
<entry>
<title>Add some missing committers to the AUTHORS list</title>
<updated>2021-02-02T15:45:44Z</updated>
<author>
<name>Dr. Matthias St. Pierre</name>
<email>matthias.st.pierre@ncp-e.com</email>
</author>
<published>2021-01-31T21:08:33Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=af403db090ee66715e81f0062d1ef614e8d921b5'/>
<id>urn:sha1:af403db090ee66715e81f0062d1ef614e8d921b5</id>
<content type='text'>
Fixes #13815

Reviewed-by: Richard Levitte &lt;levitte@openssl.org&gt;
Reviewed-by: Paul Dale &lt;pauli@openssl.org&gt;
(Merged from https://github.com/openssl/openssl/pull/14029)
</content>
</entry>
<entry>
<title>Fix issues reported by markdownlint</title>
<updated>2020-05-08T14:22:02Z</updated>
<author>
<name>Rich Salz</name>
<email>rsalz@akamai.com</email>
</author>
<published>2020-05-07T11:44:01Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=257e9d03b028402089c9f98f3acb25ba668c09af'/>
<id>urn:sha1:257e9d03b028402089c9f98f3acb25ba668c09af</id>
<content type='text'>
Reviewed-by: Tomas Mraz &lt;tmraz@fedoraproject.org&gt;
Reviewed-by: Matthias St. Pierre &lt;Matthias.St.Pierre@ncp-e.com&gt;
(Merged from https://github.com/openssl/openssl/pull/11739)
</content>
</entry>
<entry>
<title>doc: introduce some minimalistic markdown without essential changes</title>
<updated>2020-02-26T20:04:38Z</updated>
<author>
<name>Dr. Matthias St. Pierre</name>
<email>Matthias.St.Pierre@ncp-e.com</email>
</author>
<published>2019-11-28T22:10:51Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=5f8e6c50bd862d6bb0bbd16b4c0b3be841d9cf32'/>
<id>urn:sha1:5f8e6c50bd862d6bb0bbd16b4c0b3be841d9cf32</id>
<content type='text'>
The goal is to transform the standard documents

    README, INSTALL, SUPPORT, CONTRIBUTING, ...

from a pure text format into markdown format, but in such a way
that the documentation remains nicely formatted an easy readable
when viewed with an normal text editor.

To achieve this goal, we use a special form of 'minimalistic' markdown
which interferes as little as possible with the reading flow.

 * avoid [ATX headings][] and use [setext headings][] instead
   (works for `&lt;h1&gt;` and `&lt;h2&gt;` headings only).
 * avoid [inline links][] and use [reference links][] instead.
 * avoid [fenced code blocks][], use [indented-code-blocks][] instead.

The transformation will take place in several steps. This commit
introduces mostly changes the formatting and does not chang the
content significantly.

[ATX headings]:         https://github.github.com/gfm/#atx-headings
[setext headings]:      https://github.github.com/gfm/#setext-headings
[inline links]:         https://github.github.com/gfm/#inline-link
[reference links]:      https://github.github.com/gfm/#reference-link
[fenced code blocks]:   https://github.github.com/gfm/#fenced-code-blocks
[indented code blocks]: https://github.github.com/gfm/#indented-code-blocks

Reviewed-by: Tomas Mraz &lt;tmraz@fedoraproject.org&gt;
(Merged from https://github.com/openssl/openssl/pull/10545)
</content>
</entry>
<entry>
<title>doc: convert standard project docs to markdown</title>
<updated>2020-02-26T20:04:38Z</updated>
<author>
<name>Dr. Matthias St. Pierre</name>
<email>Matthias.St.Pierre@ncp-e.com</email>
</author>
<published>2019-11-28T22:56:36Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=2e07506a12e126894cd820304465162bc0e732b4'/>
<id>urn:sha1:2e07506a12e126894cd820304465162bc0e732b4</id>
<content type='text'>
In the first step, we just add the .md extension and move some
files around, without changing any content. These changes will
occur in the following commits.

Reviewed-by: Tomas Mraz &lt;tmraz@fedoraproject.org&gt;
(Merged from https://github.com/openssl/openssl/pull/10545)
</content>
</entry>
</feed>
