1. ebd832c rust: bssl-tls: Retract accidental datagram trait implementation by Xiangfei Ding · 7 hours ago upstream/main
  2. c7b7d53 VerifyMTC: set more specific errors in two cases by Matt Mueller · 7 hours ago
  3. 902518a ssl: Allow certificate selection callback to pick fatal alert by Xiangfei Ding · 8 hours ago
  4. ed93666 rust: bssl-tls: Reset retry flags before I/O transactions by Xiangfei Ding · 9 hours ago
  5. 2b60ed4 Call va_end even if OPENSSL_vasprintf_internal fails by David Benjamin · 27 hours ago
  6. a2ad244 Revert "Make all non-asm-included BoringSSL headers at least include <openssl/base.h>." by Lily Chen · 30 hours ago
  7. 4380e3c Add OID and NID definitions for SLH-DSA (RFC 9909). by Matt Etemad · 31 hours ago
  8. ad89997 Fix typo in comment by David Benjamin · 33 hours ago
  9. 4934bf7 Use pwd_seed to determine y parity for sae hunt-and-peck. by Dylan Swiggett · 33 hours ago
  10. db1598d ML-KEM, ML-DSA: fix a -Wsign-compare warning. by Rudolf Polzer · 2 days ago
  11. ba26b4c Add ssl_compliance_policy_fips_202609 by Lily Chen · 2 days ago
  12. f00ee80 pki: Import accumulated test vectors for Merkle Trees by Lily Chen · 4 days ago
  13. 86101b7 Make all non-asm-included BoringSSL headers at least include <openssl/base.h>. by Rudolf Polzer · 5 days ago
  14. 4a92579 Start migrating HPKE to use EVP_KEM by Lily Chen · 7 days ago
  15. 876bb72 Make EVP_PKEY_dup_ref work for nullptr by Lily Chen · 7 days ago
  16. c35293f Provide `llvm-ranlib` to enable LTO on Linux/Clang. by Rudolf Polzer · 8 days ago
  17. bcc1137 `linux_clang_lto`: use the `lld` linker. by Rudolf Polzer · 8 days ago
  18. c5c273f Partial rollback of I79853ef115ee6c86bc58acc9adedf4c16a6a6964. by Rudolf Polzer · 8 days ago
  19. 4ae8cf5 Fix a bunch more tests that get an error but don't clear the error queue. by Rudolf Polzer · 8 days ago
  20. 1175b7e Enable Clang LTO builder (on mac_aarch64) on CI and CQ. by Rudolf Polzer · 8 days ago
  21. 3976bc8 Enable GCC LTO builder on CI and CQ. by Rudolf Polzer · 8 days ago
  22. 9bb13b0 Add a `mac_arm64_lto` builder too. by Rudolf Polzer · 8 days ago
  23. bd92406 pki: Allow Merkle subtrees of size 0 by Lily Chen · 8 days ago
  24. 4cabe8c EVP_KEM: Expose external entropy encap methods for testing only by Lily Chen · 8 days ago
  25. 5d6989e Fix some clang-tidy findings by Lily Chen · 8 days ago
  26. 0ce57bb Update version for Bazel Central Repository to 0.20260903.0 by Lily Chen · 9 days ago 0.20260903.0
  27. 278e883 Add includable-only builders for LTO. by Rudolf Polzer · 9 days ago
  28. 4ebe638 Test that SSL_write(0) does not write a record by David Benjamin · 9 days ago
  29. 88dcf4b Clarify the return values from SSL operations by David Benjamin · 9 days ago
  30. be70b80 Fix up some BIO documentation by David Benjamin · 9 days ago
  31. 850a037 ML-DSA: Add branchless pre-paths to `scalar_from_keccak_block_vartime`. by Rudolf Polzer · 9 days ago
  32. c66572a ML-DSA: Use fewer branches in `scalar_uniform_block`. by Rudolf Polzer · 9 days ago
  33. 36d3eb4 Use Unicode characters for math in code comments by Lily Chen · 10 days ago
  34. e1fa150 Import tests for large Merkle Tree inclusion and consistency proofs by Lily Chen · 10 days ago
  35. 01a3425 curve25519: Elligator 2 map_to_curve implementation by Xiangfei Ding · 10 days ago
  36. 79b7305 ML-DSA: add Keccak x4 support. by Rudolf Polzer · 10 days ago
  37. e9b9cf0 ML-KEM: Add a branchless pre-path to `scalar_from_keccak_block_vartime`. by Rudolf Polzer · 11 days ago
  38. f341ba4 Update to Go 1.27.0 by David Benjamin · 11 days ago
  39. 784fcaf runner: Replace redundant flagCurves and flagCertTypes functions by Lily Chen · 11 days ago
  40. 0fd9b5f Add APIs for configuring TLS 1.3 ciphers with equipreference groups by Lily Chen · 11 days ago
  41. 8791438 Remove stray temporary file by David Benjamin · 11 days ago
  42. ac39ea6 [MTCs] remove deprecated MTCAnchor constructor by Matt Mueller · 11 days ago
  43. 281fb6d Use SSLCipherPreferenceList for TLS 1.3 ciphers by Lily Chen · 11 days ago
  44. cf44c64 Leave intermediates partially reduced in ML-KEM NTT by Rudolf Polzer · 11 days ago
  45. 3c7d224 rust: bssl-tls: Gate all Apple platforms by Xiangfei Ding · 12 days ago
  46. a074f28 Leave intermediates partially reduced in ML-DSA NTT by David Benjamin · 12 days ago
  47. da02aac [MTCs] change MTCAnchor trusted_subtrees_ to a vector instead of map by Matt Mueller · 2 weeks ago
  48. 533902f Give SSL_CREDENTIAL an optional session ID context by David Benjamin · 2 weeks ago
  49. b110de1 runner: Clear remaining warnings from gopls by David Benjamin · 2 weeks ago
  50. b7698d1 runner: Remove the implicit session ticket behavior by David Benjamin · 2 weeks ago
  51. 193233b ACVP: test SLH-DSA-SHAKE-256f. by Moss Hsu · 2 weeks ago
  52. 997bafb Gate VAES codepaths on is_hwaes to fix a theoretical concern by David Benjamin · 2 weeks ago
  53. 9e1c472 Use traits structs for StackAllocated and StackAllocatedMovable by Lily Chen · 2 weeks ago
  54. 440b43a Constant-time validation for hash-to-curve, etc by David Benjamin · 2 weeks ago
  55. 0f07374 Implement EC_wpa3_sae_hunt_and_peck_p256 by David Benjamin · 2 weeks ago
  56. b8ea4d5 Move more of EC compressed coordinate handling to EC_FELEM by David Benjamin · 2 weeks ago
  57. 789ccba Const correct SSL{_CTX}_get_ciphers calls by Lily Chen · 2 weeks ago
  58. eb80152 CI console: Specify category and short_name explicitly for all builders by Lily Chen · 2 weeks ago
  59. 5178dcb rust: Allow panic! and expect() by Xiangfei Ding · 2 weeks ago
  60. 1672ef3 rust: bssl-tls: Unstage wants_data by Xiangfei Ding · 2 weeks ago
  61. c6ff8e4 Update some Go deps by David Benjamin · 2 weeks ago
  62. 7445deb OpenSSL Advisory: August 25th, 2026 (BoringSSL Not Affected) by David Benjamin · 2 weeks ago
  63. a199863 rust: bssl-tls: Drive handshake to completion by Xiangfei Ding · 3 weeks ago
  64. 385a112 Tighten up SSLCipherPreferenceList by Lily Chen · 3 weeks ago
  65. c5cbc0f Remove SSL{_CTX}_set_aes_hw_override_for_testing by Lily Chen · 3 weeks ago
  66. 269525e CI/CQ: Promote linux_clang_shared_{rel_}compile to CQ and CI by Lily Chen · 3 weeks ago
  67. 7496006 rust: bssl-tls: Call inherent flush when flushing through std io trait by Xiangfei Ding · 3 weeks ago
  68. fc3c79c rust: bssl-tls: parse_all_from_pem should recover from BIO failure by Xiangfei Ding · 3 weeks ago
  69. a0689af Add two compatibility headers for code written against current OpenSSL. by Rudolf Polzer · 3 weeks ago
  70. aebe361 rust: bssl-tls: Session attachment should only be possible in builder by Xiangfei Ding · 3 weeks ago
  71. 6b1d1d4 rust: bssl-tls: Drop the async private key task by Xiangfei Ding · 3 weeks ago
  72. f0e21a5 Reland "crypto/x509: Verify standalone Merkle Tree Certs (MTCs)" by Lily Chen · 3 weeks ago
  73. d4c457d CI/CQ: Test clang shared library builds on Linux by Lily Chen · 3 weeks ago
  74. c0e4419 ACVP: test non-canonical ML-KEM keys. by Moss Hsu · 3 weeks ago
  75. 91a7e30 rust: bssl-tls: Eliminate ambiguity on transport state by Xiangfei Ding · 3 weeks ago
  76. 17645ee rust: bssl-tls: Fix flush protocol by Xiangfei Ding · 3 weeks ago
  77. 179af5a CQ: enable `ios64_prefixed_compile` by default. by Rudolf Polzer · 3 weeks ago
  78. 96a007f Revert "crypto/x509: Verify standalone Merkle Tree Certs (MTCs)" by Lily Chen · 3 weeks ago
  79. 6f95ff3 [MTCs] add debug logs in VerifyMTC by Matt Mueller · 3 weeks ago
  80. f89068d crypto/x509: Verify standalone Merkle Tree Certs (MTCs) by Lily Chen · 3 weeks ago
  81. 42f9f5c Silence a false positive from audit_symbols.go by David Benjamin · 3 weeks ago
  82. 496f839 [MTCs] remove draft-davidben-08 support by Matt Mueller · 3 weeks ago
  83. da182b2 Add `X509_V_FLAG_ALLOW_TIMEZONE_OFFSET`. by Rudolf Polzer · 3 weeks ago
  84. 2bf5d45 Document ML-KEM key check wrapper commands by Moss Hsu · 3 weeks ago
  85. ca53eec5 compare_benchmark: fix ops/sec output. by Rudolf Polzer · 3 weeks ago
  86. d9cace2 Fix symbol prefixing audit for libdecrepit and libpki. by Rudolf Polzer · 3 weeks ago
  87. 962ef49 rust: bssl-tls-tokio: Hyper I/O traits by Xiangfei Ding · 3 weeks ago
  88. a918221 [MTCs] update some tests to draft-plants-04 by Matt Mueller · 3 weeks ago
  89. 51da97b rust: bssl-tls: Async polling I/Os and Datagrams by Xiangfei Ding · 3 weeks ago
  90. af1e417 Rename ECDH benchmark -> ECDHComputeKey and add ECDHKeyGen. by Rudolf Polzer · 3 weeks ago
  91. 19c562e Remove CRYPTO_IOVEC_MAX. by Rudolf Polzer · 4 weeks ago
  92. 4211977 crypto: format curve25519 internal header by Xiangfei Ding · 4 weeks ago
  93. bb2b317 CMake: move symbol prefixing check to the run_tests stage. by Rudolf Polzer · 4 weeks ago
  94. defe581 Always enable X509_V_FLAG_TRUSTED_FIRST by David Benjamin · 4 weeks ago
  95. da0976d Fix symbol prefixing issues on Windows. by Rudolf Polzer · 4 weeks ago
  96. 405168d Enable CI/CQ-based symbol prefixing verification on all Win shared builds. by Rudolf Polzer · 4 weeks ago
  97. 7cc6f8a Enable CI/CQ-based symbol prefixing verification on all Win static builds. by Rudolf Polzer · 4 weeks ago
  98. 90f8d9e audit_symbols.go: show the origin (library filename) of offending symbols. by Rudolf Polzer · 4 weeks ago
  99. d83fe5d Enable CI/CQ-based symbol prefixing verification on all Mac static builds. by Rudolf Polzer · 4 weeks ago
  100. 2541aa2 Enable CI/CQ-based symbol prefixing verification on all Linux static builds. by Rudolf Polzer · 4 weeks ago