)]}'
{
  "commit": "9f69f139ed1088daabb6525f0c9c34d1e89688f7",
  "tree": "f1c97457e4d77f0becc4a0a3076be645e67b92dd",
  "parents": [
    "664e99a6486c293728097c661332f92bf2d847c6"
  ],
  "author": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Mon Oct 30 15:19:08 2017 -0700"
  },
  "committer": {
    "name": "Adam Langley",
    "email": "agl@google.com",
    "time": "Thu Nov 16 08:19:54 2017 -0800"
  },
  "message": "Clear bottom three bits of password scalar in SPAKE2.\n\nDue to a copy-paste error, the call to |left_shift_3| is missing after\nreducing the password scalar in SPAKE2. This means that three bits of\nthe password leak in Alice\u0027s message. (Two in Bob\u0027s message as the point\nN happens to have order 4l, not 8l.)\n\nThe “correct” fix is to put in the missing call to |left_shift_3|, but\nthat would be a breaking change. In order to fix this in a unilateral\nway, we add points of small order to the masking point to bring it into\nprime-order subgroup.\n\nBUG\u003dchromium:778101\n\nChange-Id: I440931a3df7f009b324d2a3e3af2d893a101804f\nReviewed-on: https://boringssl-review.googlesource.com/22445\nReviewed-by: Adam Langley \u003cagl@google.com\u003e\nReviewed-by: David Benjamin \u003cdavidben@google.com\u003e\nCommit-Queue: Adam Langley \u003cagl@google.com\u003e\nCQ-Verified: CQ bot account: commit-bot@chromium.org \u003ccommit-bot@chromium.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9487a6c13607e07c7e975add47bf9d8839a93480",
      "old_mode": 33188,
      "old_path": "crypto/curve25519/internal.h",
      "new_id": "4d79cb9d4f00b21d63e1d3cd353e8d2ee2194415",
      "new_mode": 33188,
      "new_path": "crypto/curve25519/internal.h"
    },
    {
      "type": "modify",
      "old_id": "8ebedf99958225133ccf7aa7df80d2b012a22dbb",
      "old_mode": 33188,
      "old_path": "crypto/curve25519/spake25519.c",
      "new_id": "e17d510d7f3aff49551db7ead218d55107ac2192",
      "new_mode": 33188,
      "new_path": "crypto/curve25519/spake25519.c"
    },
    {
      "type": "modify",
      "old_id": "cdf4ff580ec010e59d0ce7a1cfabdf17bfdc85da",
      "old_mode": 33188,
      "old_path": "crypto/curve25519/spake25519_test.cc",
      "new_id": "3ebd0a9636a57bd62d6d135e5a3e56baf1b0e95c",
      "new_mode": 33188,
      "new_path": "crypto/curve25519/spake25519_test.cc"
    }
  ]
}