aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* test/cmp_client_test.c: add RR tests with issuer or serialNumber missingHEADmasterDaniel Kubec18 hours1-0/+72
* apps/lib/cmp_mock_srv.c: Fix NULL dereference of ASN1_INTEGER in refcert_cmp()Daniel Kubec18 hours1-2/+5
* Migrate test_gcm_reinit from evp_extra_test.c to evp_aead_test.cDanny Nichols31 hours2-185/+185
* s390x: Display 'cex_min_bits' and 'nocex' as part of CPUINFOIngo Franzki36 hours1-2/+10
* s390x: Disable mod-expo offloading to a crypto card for small exponentsIngo Franzki36 hours7-7/+52
* QUIC: resend the whole ClientHello after a RetryNikolas Gauder39 hours5-103/+398
* QUIC: release pseudo-lost packets from the congestion controllerNikolas Gauder39 hours2-0/+103
* doc: RAND(7): a restore from a saved image is not detected; reseed after itYuxiang Ji39 hours1-0/+13
* poly1305-armv9-sve2.pl: close STDOUT before exitingt0kubetsu39 hours1-1/+1
* Document the OSSL_PARAM_merge() entry limitMartin Mirchev39 hours1-0/+2
* doc: replace DES-EDE3-CBC with AES-256-CBC in PEM examplesJWWTSL39 hours1-6/+6
* test: clear stale RADIX handshake injection selectorsMounir IDRASSI39 hours2-0/+7
* test: make RADIX QUIC objects nonblocking by defaultMounir IDRASSI39 hours3-3/+102
* Document DTLS 1.3 handshake ACK known issueRyan Hooper3 days1-0/+6
* Document DTLS listener error-reporting known issuesRyan Hooper3 days1-0/+12
* DTLS listener: do not drive idle pending connections every tickMatt Caswell3 days4-16/+867
* DTLS listener: free a pending connection that fails after HVRMatt Caswell3 days2-1/+103
* CI: install Debian 11 packages from archive.debian.orgDmitry Misharov3 days1-9/+4
* CI: inline the package install retry in os-zoo containersDmitry Misharov3 days1-1/+11
* DTLS 1.3: Fix WANT_READ while awaiting ServerHelloRyan Hooper3 days2-3/+207
* ci: bump actions/upload-artifact to v6Nikola Pajkovsky3 days12-33/+33
* Fix wrong alignment in tho allocator used in quic_stream test.rainerjung3 days1-2/+16
* CI: retry environment steps before failing the jobDmitry Misharov3 days10-69/+104
* Add test for an update with no inputTrust-Worthy3 days1-0/+90
* Reject a NULL input to update in the other AEADsTrust-Worthy3 days6-0/+31
* AES-OCB: reject a NULL input to updateTrust-Worthy3 days1-0/+5
* CI: run zero-yield jobs nightly instead of on every pushDmitry Misharov3 days7-180/+232
* CI: give the cross-compile matrix jobs stable namesDmitry Misharov3 days3-0/+37
* TLS: Generate the server random before processing ClientHello extensionsDaniel Kubec3 days6-24/+660
* Cache decoded certs on client in CTX to avoid multiple asn1 parsingNeil Horman3 days3-13/+143
* CHANGES.md: formatting fixesEugene Syromiatnikov3 days1-3/+3
* CHANGES.md, NEWS.md: 4.0.3 fixupsEugene Syromiatnikov3 days2-5/+17
* CHANGES.md, NEWS.md: update for 4.0.3Eugene Syromiatnikov3 days2-9/+404
* Add changes entry for AVX2 ML-KEM implementationPauli3 days1-0/+5
* ml_kem: add AVX2 base multiplication and accumulationPaul Dale3 days3-24/+241
* ml_kem: add AVX2 NTT and inverse NTTPaul Dale3 days3-2/+497
* Add updated Wycheproof test vectors to aes-gcm-siv test fileishamistry033 days1-0/+1767
* Fix TLS 1.3 alert for missing key_shareAnuj Ramesh3 days2-5/+37
* ssl: handle session ID cache lock failureMounir IDRASSI3 days6-11/+177
* Adds a test that tests missing integrity only ciphers effect on TLS cipher su...Frederik Wedel-Heinen3 days2-1/+91
* Removes clean DES and RC2 as encryption methods for TLS ciphersuites and refa...Frederik Wedel-Heinen3 days4-135/+85
* aes: fix riscv64 constant-time fallback selectionpeter9412213 days2-1712/+5
* aes: remove unused riscv64 assembly generationpeter9412213 days1-1/+0
* aes: make riscv64 no-Zkn fallback constant timepeter9412213 days1-2/+4
* x509: key the duplicate-extension hash with SipHash to resist floodingDaniel Kubec3 days2-13/+122
* DTLS 1.3: discard forbidden plaintext before replay checksMounir IDRASSI3 days2-7/+24
* Fix DTLS listener waiter cleanup in SSL_pollMounir IDRASSI3 days4-104/+860
* DTLS: Fix listener cleanup after failed SSL_clearRyan Hooper3 days3-43/+191
* CMS_get0_signers() returns only the signers that passed verificationIgor Ustinov3 days4-3/+21
* CMS_verify() stops at the first failure without CMS_VERIFY_PARTIALIgor Ustinov3 days2-4/+37