1. 90c6b37 crypto/bio: Don't call method->destroy if method->create failed by Xiangfei Ding · 23 hours ago upstream/main
  2. 9b684de crypto/x509 MTC: Strictly parse extensions in MTC verification by Lily Chen · 23 hours ago
  3. fdc425e Check extensions on the trust anchor too by David Benjamin · 24 hours ago
  4. d8394c5 Check extensions for X509_STORE certificates that aren't trust anchors by David Benjamin · 24 hours ago
  5. 1cd9d22 CI/CQ: Promote win64_clang_shared_compile builder by Lily Chen · 26 hours ago
  6. e5cb318 asn1,x509: Move statics into anonymous namespace by Xiangfei Ding · 26 hours ago
  7. bdb6028 clang-format: Always wrap namespace body with empty lines by Xiangfei Ding · 27 hours ago
  8. df82113 CI/CQ: Add a disabled win64_clang_shared CQ builder by Lily Chen · 28 hours ago
  9. c7eb007 Avoid Windows cross-dll constexpr issue in digest_test.cc by Lily Chen · 29 hours ago
  10. 2df72ed crypto: Move statics into anonymous namespace, Round 2 by Xiangfei Ding · 31 hours ago
  11. 0f156d6 crypto: Put more statics into anonymous namespace by Xiangfei Ding · 32 hours ago
  12. f4f4a40 crypto/evp: Export SHAKE256 and TurboSHAKE256 as EVP_MD by Xiangfei Ding · 34 hours ago
  13. af41e13 Precompute the PK.seed SHA-256 state in SLH-DSA-SHA2 by Jakub Patałuch · 2 days ago
  14. 1f2ee5e crypto/x509 MTC: Allow empty cosignature values in MTCProof by Lily Chen · 2 days ago
  15. 92b7c60 rust/bssl-tls: Allow libraries to pick alert when cert_cb fails by Xiangfei Ding · 2 days ago
  16. 99b9d64 Update presubmit.yml per review comments by David Benjamin · 3 days ago
  17. f456745 Remove odd special case around policy validation by David Benjamin · 3 days ago
  18. 1f05cb4 Report X509_V_ERR_CERT_CHAIN_TOO_LONG if the chain was too long by David Benjamin · 3 days ago
  19. b17e56b X509_V_FLAG_CRL_CHECK_ALL should skip the trust anchor by David Benjamin · 3 days ago
  20. fbbba8f Remove dead code for picking a CRL issuer by David Benjamin · 3 days ago
  21. bbbeba2 Rewrite the path builder by David Benjamin · 3 days ago
  22. a74aca0 Test X509_V_FLAG_CRL_CHECK_ALL by David Benjamin · 3 days ago
  23. d3bf479 Update MODULE.bazel for 0.20261020.0 by David Benjamin · 3 days ago 0.20261020.0
  24. dd68207 Block a handful of intermediate certificates by David Benjamin · 3 days ago
  25. 3059283 Rename "agents" directory (containing AI skills) to "_agents" by Lily Chen · 3 days ago
  26. bee4438 rand: Fix double-free on thread-local failure. by Tom Hughes · 3 days ago
  27. b50cad2 EVP_HPKE_KEM: Align HPKE error codes with EVP_KEM by Lily Chen · 4 days ago
  28. bcd557d EVP_HPKE_KEM: Clean up legacy KEM implementation hooks by Lily Chen · 4 days ago
  29. 2779dea Test various odd cases when the target certificate is in the trust store by David Benjamin · 4 days ago
  30. c537970 Test X509_verify_cert in two ways by David Benjamin · 4 days ago
  31. ba42c49 Test some special error codes when we cannot build a path by David Benjamin · 4 days ago
  32. 66195b4 Export EVP_KEMs corresponding to DHKEMs by Lily Chen · 4 days ago
  33. c49bb0c EVP_HPKE_KEM: Implement DHKEM(P256, HKDF-SHA256) using EVP_KEM_DHKEM by Lily Chen · 4 days ago
  34. 83687b7 EVP_HPKE_KEM: Implement DHKEM(X25519, HKDF-SHA256) using EVP_KEM_DHKEM by Lily Chen · 4 days ago
  35. 8a55a28 Also test that EVP_PKEY_from_ec_private_scalar rejects zero by David Benjamin · 4 days ago
  36. 52565fe SLH-DSA: SHAKE variants are not approved. by Adam Langley · 4 days ago
  37. fb64286 x509_test: Fix some style mishaps by David Benjamin · 4 days ago
  38. 890a85a rust/bssl-crypto: CPace support by Xiangfei Ding · 5 days ago
  39. b698111 Use lazy reduction and parallel ExpandMask in ML-DSA by Jakub Patałuch · 5 days ago
  40. cac4d9b rust: bssl-tls: Allow recognition of deprecated protocol version by Xiangfei Ding · 5 days ago
  41. 76bc63d Use lazy reduction in ML-KEM matrix-vector products by Jakub Patałuch · 5 days ago
  42. dc518c7 Make X509_check_trust and X509_check_purpose const by David Benjamin · 5 days ago
  43. 2752c13 ssl: Reset cert_cb back to unset by Xiangfei Ding · 5 days ago
  44. 594a442 Const-correct a bunch more functions by David Benjamin · 5 days ago
  45. 64188f1 crypto/evp: Add SHA3-384 by Xiangfei Ding · 6 days ago
  46. 3082693 Const-correct X509_STORE_add_{cert,crl} by David Benjamin · 6 days ago
  47. 487f196 Mark x509v3_cache_extensions as const by David Benjamin · 7 days ago
  48. 5b65202 Pass depth explicitly into CRL functions by David Benjamin · 7 days ago
  49. 998d879 Remove current_crl_issuer and current_crl_score by David Benjamin · 7 days ago
  50. 2118363 Remove X509_STORE_CTX_get0_current_crl by David Benjamin · 7 days ago
  51. c17463b Use UniquePtr some more in CRL handling by David Benjamin · 7 days ago
  52. 645d9d1 Make most verify sites fill in current_cert implicitly by David Benjamin · 7 days ago
  53. 06e9949 crypto/evp: Add SHA3-256 and SHA3-512 by Xiangfei Ding · 7 days ago
  54. f48a469 mem: Constify all APIs wherever it applies by Xiangfei Ding · 7 days ago
  55. 34ea210 crypto/asn1: Rectify the length type of ASN1_STRING by Xiangfei Ding · 7 days ago
  56. 437b75f crypto/asn1: Assert on negative length value by Xiangfei Ding · 8 days ago
  57. 5498026 Remove now unnecessary out-of-line ctors and dtors by David Benjamin · 8 days ago
  58. 301e779 Rewrite internal_verify by David Benjamin · 8 days ago
  59. e8a6293 No-op X509_V_FLAG_CHECK_SS_SIGNATURE by David Benjamin · 8 days ago
  60. 558e6ee Fold SSL_CTX_set_grease_sigalgs_enabled into SSL_CTX_set_grease_enabled by Lily Chen · 8 days ago
  61. e52f12b crypto/x509 MTC: Update to draft -07 by Lily Chen · 8 days ago
  62. 5b83e5d util/fipstools/inject_hash: Add -ignore-missing-symbols flag and tests by Xiangfei Ding · 12 days ago
  63. b4b1cee Make the other dup_ref functions take nullptr by David Benjamin · 12 days ago
  64. 3fed4f2 Sweep through the library and add `dup_ref` ref-counting by Xiangfei Ding · 13 days ago
  65. 3b39936 Test some behavior in X509_V_FLAG_CB_ISSUER_CHECK by David Benjamin · 2 weeks ago
  66. fbb876d rust: Retire bssl-macros by Xiangfei Ding · 2 weeks ago
  67. 44979b8 Add MTC draft plants-07 support (for pki/). by Matt Mueller · 2 weeks ago
  68. 464d605 Define V_ASN1_RELATIVE_OID tag number by Lily Chen · 2 weeks ago
  69. cee8984 entropy: Avoid volatile post-increment under C++20 by Tom Hughes · 2 weeks ago
  70. 0c8a01a crypto/x509 MTC: Tighten MTC subjectPublicKeyInfoHash length check by Lily Chen · 2 weeks ago
  71. 52808ad crypto/x509 MTC: Reject trailing data in MTC CA extension by Lily Chen · 2 weeks ago
  72. 4f3b183 EVP_HPKE_KEM: Move constants and serialization hooks to HpkeKeyMethod by Lily Chen · 2 weeks ago
  73. fdcd735 ssl/test/runner: use hash.Cloner when copying hash instances by qmuntal · 2 weeks ago
  74. 21ee259 EVP_KEM: Add an optional check_key hook by Lily Chen · 2 weeks ago
  75. 745a3c7 Speed up copy_from_prebuf by accumulating in registers by William Dauchy · 2 weeks ago
  76. f259e98 crypto: Remove redundant statics by Xiangfei Ding · 2 weeks ago
  77. f30064b EVP_KEM: Pass EVP_KEM* into function pointers by Lily Chen · 2 weeks ago
  78. 6f420a5 util: Report the line number where docgen failed by Xiangfei Ding · 2 weeks ago
  79. 5509db7 ssl: Move deprecated APIs out by Xiangfei Ding · 2 weeks ago
  80. 304dad3 Update trust anchor IDs for draft-06 by David Benjamin · 2 weeks ago
  81. 510d303 ssl: Allow multipart rule commutative by Xiangfei Ding · 2 weeks ago
  82. 161d87e curve25519: CPace implementation by Xiangfei Ding · 2 weeks ago
  83. d3cdaa4 Remove deprecated split handshakes support by David Benjamin · 2 weeks ago
  84. 66da97b ssl: Update SSL_CIPHER_get_min_version to reflect SSL 3.0 removal by Xiangfei Ding · 3 weeks ago
  85. 71766b8 CheckOCSP and CheckCRL: make delegate non-optional by Matt Mueller · 3 weeks ago
  86. dd73e69 Add X509CertificateBuilder to bssl-x509 by Antoine Desbois · 3 weeks ago
  87. fab96f8 Add PrivateKey::from_der to bssl-x509 by Antoine Desbois · 3 weeks ago
  88. 00270eb Add DTLS-SRTP extension APIs to bssl-tls by Antoine Desbois · 3 weeks ago
  89. 985989d Add FIPS break tests for the jitter RCT and APT. by Adam Langley · 3 weeks ago
  90. 5e1bfb4 Take delegate parameter in CheckCRL and CheckOCSP by Matt Mueller · 3 weeks ago
  91. 98df681 rust: bssl-tls: Remove pedantic to_string by Xiangfei Ding · 3 weeks ago
  92. e46ba01 rust: bssl-tls: Switch to write_ex method by Xiangfei Ding · 3 weeks ago
  93. fe8d898 rust: bssl-tls: De-customize unknown library errors by Xiangfei Ding · 3 weeks ago
  94. 27e9f82 rust: bssl-tls: Rename inherent I/O methods by Xiangfei Ding · 3 weeks ago
  95. 9aa7b97 rust: bssl-tls: Clean up the error classification by Xiangfei Ding · 3 weeks ago
  96. 12830f0 Do RFC5280 verification of OCSP Authorized Responders by Matt Mueller · 3 weeks ago
  97. 162f38a Add an advisory for 2026-09-29 by Lily Chen · 3 weeks ago
  98. 427ec40 Update version for Bazel Central Repository to 0.20260929.0 by Lily Chen · 3 weeks ago 0.20260929.0
  99. efc97a4 Don't export GENERAL_NAME_cmp from the shared library by Lily Chen · 3 weeks ago
  100. 40c39c5 rust: Improve wording to help unsafe code reviews by Xiangfei Ding · 3 weeks ago