openssl/crypto/encode_decode, branch openssl-4.0.0

Copyright year updates

2026-03-24T15:11:25Z

Reviewed-by: Saša Nedvědický Reviewed-by: Tomas Mraz MergeDate: Tue Mar 24 15:11:27 2026 Release: yes

namemap: handle NULL names in name2num lookups

2026-03-10T18:31:40Z

Make ossl_namemap_name2num() return 0 when `name` is NULL, so callers can use a single lookup path without local NULL guards. Fixes: aec9e7fe1693 ("Allow core_namemap to limit hashtable key sizes") Resolves: https://scan5.scan.coverity.com/#/project-view/65138/10222?selectedIssue=1683247 Resolves: https://scan5.scan.coverity.com/#/project-view/65138/10222?selectedIssue=1683248 Resolves: https://scan5.scan.coverity.com/#/project-view/65138/10222?selectedIssue=1683249 Signed-off-by: Nikola Pajkovsky Reviewed-by: Eugene Syromiatnikov Reviewed-by: Neil Horman MergeDate: Tue Mar 10 18:29:00 2026 (Merged from https://github.com/openssl/openssl/pull/30286) (cherry picked from commit b0ba5c81e43053ae0b8a6cb3559e54b7f6d025d9)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

Added additional TRACE information to Decoders.

2026-02-27T14:39:57Z

This outputs the description field which is easier to understand than a pointer. Reviewed-by: Viktor Dukhovni Reviewed-by: Paul Dale Reviewed-by: Matt Caswell MergeDate: Fri Feb 27 14:40:27 2026 (Merged from https://github.com/openssl/openssl/pull/29381)

New -encopt option for pkey(1) and genpkey(1)

2025-12-17T12:40:17Z

This allows setting the ML-KEM and ML-DSA output formats. At the same fixing surprising lack of password encryption of PKCS#8 private keys in DER output form in the CLI apps. Reviewed-by: Dmitry Belyavskiy Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29324)

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

Clarify/fix encoder/decoder context docs and code

2025-12-04T23:07:51Z

In was premature to make OSSL_(EN|DE)CODER_CTX_[sg]et_finalized() be public interfaces. Forunately, these have not yet appeared outside the "master" branch, so we can still retract them. Also, in the case of decoders, the implementation failed to take into account that the context was duplicated before it was returned to the user, and the duplicated copy failed to copy the "finalized" field. This commit also renames "finalized" to "frozen", because finalisation is a misleading term in this context, it suggests resource reclamation during garbage collection or deallocation, not marking a structure partly immutable. Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov Reviewed-by: Neil Horman Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/29206)

Change hexdump width to a multiple of 8 bytes

2025-12-03T16:45:15Z

10, 15 and 18 seem quite unnatural byte counts in the context of hex dumps. Standardize on 24 bytes for signatures (to stay within the 80 characters limit) and 16 bytes for everything else. Adjust all test cert dumps to match the new output format. Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29266)

Remove extra leading '00:' when printing key material with highest byte >= 0x80

2025-11-25T08:09:33Z

Removed pseudo-DER encoding of (unsigned) BNs from output of ASN1_bn_print() and print_labeled_bignum() in providers/implementations/encode_decode/encode_key2text.c Also adapt test output reference files where needed. Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/8136)

Removed ossl_assert() calls from public OSSL_EN/DECODER_CTX_*() functions

2025-11-18T18:36:22Z

Reviewed-by: Richard Levitte Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29120)