1. 0676117 Add platform configuration for "Pythia". by Adam Langley · 11 hours ago upstream/main
  2. a024825 Fix comment typo by David Benjamin · 12 hours ago
  3. 9dd03e2 Avoid having a L label at the start of a section on macOS. by Rudolf Polzer · 20 hours ago
  4. 33c7116 ssl: return non-const RPK handle by Xiangfei Ding · 26 hours ago
  5. 85a291c Fix license header on p256_internal.h by David Benjamin · 32 hours ago
  6. 28950bf Make the SysV gates for fiat assembly more consistent by David Benjamin · 34 hours ago
  7. 6bec274 Disable fiat P-256 assembly on OPENSSL_NANOLIBC by David Benjamin · 2 days ago
  8. 8d3c20c OpenSSL Advisory: June 9th, 2026 (BoringSSL Not Affected) by David Benjamin · 2 days ago
  9. eada60b delocate: Support a few more aarch64 assembly variants by David Benjamin · 3 days ago
  10. 4d6b2f9 delocate: Treat BORINGSSL_bcm_text_hash as a synthesized symbol by David Benjamin · 3 days ago
  11. 16391ed xlate scripts: Use .subsections_via_symbols in apple assembly files. by Rudolf Polzer · 3 days ago
  12. ff43c4e Store ML-DSA's s1, s2, and t0 in NTT form by David Benjamin · 3 days ago
  13. d554990 Don't decode t0 twice in the testing-only ML-DSA format by David Benjamin · 3 days ago
  14. cdd30d5 runner: Unconditionally fill in our vendored ML-DSA public key by David Benjamin · 3 days ago
  15. d98ee3a Make Montgomery reduction clearer in ML-DSA by David Benjamin · 4 days ago
  16. a896da9 Add EVP_CIPHER_CTX_max_next_update and EVP_CIPHER_CTX_max_final by David Benjamin · 4 days ago
  17. f325f95 Fix compile-time assertion about sizing of AES-GCM-SIV data. by Rudolf Polzer · 4 days ago
  18. 40322eb Use the vectorized "double Keccak" for ML-DSA too. by Rudolf Polzer · 4 days ago
  19. 8a4a5bd Use templates to simplify ML-DSA's scalar_*code functions, making all dispatch compile-time. by Rudolf Polzer · 4 days ago
  20. 610dbdd delete extraneous test data file by Matt Mueller · 6 days ago
  21. d3841bf Update documentation about ASN.1 BIT STRING lengths by Lily Chen · 6 days ago
  22. c60b894 Implement MTC plants-04 CA cosignature verification. by Matt Mueller · 6 days ago
  23. 416b8ea Switch from select to poll in demo command-line tool by David Benjamin · 6 days ago
  24. fc012d8 Add a tool to update bazel dependencies by David Benjamin · 6 days ago
  25. 7ac4857 Update bazel dependencies by David Benjamin · 6 days ago
  26. e52d46f Fix build by David Benjamin · 6 days ago
  27. f2d2310 Touch up v2i_AUTHORITY_KEYID by David Benjamin · 6 days ago
  28. a04ecf5 Add some tests to exercise v2i_AUTHORITY_KEYID by David Benjamin · 6 days ago
  29. 7883578 Clarify that TLS-specific AEADs are not AEADs by David Benjamin · 7 days ago
  30. 0619772 rust: cargo update by David Benjamin · 7 days ago
  31. 4ca85e6 Use scopers in certificate policy conf logic by David Benjamin · 7 days ago
  32. 4663c9b Add tests for constructing certificate policies from strings by David Benjamin · 7 days ago
  33. 9542dfa util/ar: Fix integer conversion in bounds check by David Benjamin · 7 days ago
  34. 47c92e2 Update dependencies in go.mod by David Benjamin · 7 days ago
  35. 517b106 runner: Rewrite some ServerKeyExchange serializers with cryptobyte by David Benjamin · 7 days ago
  36. 8301126 Flip the sign on timezone offset calculation by David Benjamin · 7 days ago
  37. eaebd13 Update GitHub actions/checkout to version 6 by Christoph Grüninger · 7 days ago
  38. 1f70b5b Reject invalid IV lengths in EVP_CTRL_GCM_SET_IV_INV by David Benjamin · 7 days ago
  39. bc95e8d Include inline functions from BCM in the shared build's hashed region by David Benjamin · 7 days ago
  40. 60553ee draft-ietf-dnsop-svcb-https was also published by David Benjamin · 8 days ago
  41. 04eedeb draft-ietf-lamps-dilithium-certificates is now RFC 9881 by David Benjamin · 8 days ago
  42. ef8c8fc Restore the libcrypto C++ runtime dependency, but with a build flag by David Benjamin · 8 days ago
  43. b079cdc Fix error_depth in the name constraints common name check by David Benjamin · 8 days ago
  44. 2ea6a66 Add default SSL options to SSL_OP_ALL by Lily Chen · 8 days ago
  45. 6907a11 Unroll the ML-DSA NTT outer loops. by Rudolf Polzer · 9 days ago
  46. b01c505 In SSL_reset_early_data_reject, clear out unreported bytes written. by Rudolf Polzer · 9 days ago
  47. ae2a13c Update Wycheproof test vectors by David Benjamin · 9 days ago
  48. ba76be9 Replace most of P-256 assembly code with C by Andres Erbsen · 9 days ago
  49. 1fcfbfd For AES-GCM-SIV, also require PCLMUL instruction set. by Rudolf Polzer · 10 days ago
  50. d085e7b Add CMS_LIB to kLibraryNames. by Rudolf Polzer · 10 days ago
  51. 196854a Documentation: Change |...| to `...` for code references in comments 9/N by Lily Chen · 10 days ago
  52. d84317a Remove the size limits for AES-EAX. by Rudolf Polzer · 10 days ago
  53. 0ef36ca Documentation: Change |...| to `...` for code references in comments 15/15 by Lily Chen · 10 days ago
  54. 5940a37 Documentation: Change |...| to `...` for code references in comments 14/N by Lily Chen · 10 days ago
  55. 86ba139 Documentation: Change |...| to `...` for code references in comments 12/N by Lily Chen · 10 days ago
  56. fe966bf Remove unreachable checks in builtin BIO callbacks by David Benjamin · 10 days ago
  57. 40a9722 Convert built-in BIOs to write_ex by David Benjamin · 10 days ago
  58. 35d32f5 Switch some BIO_write calls to BIO_write_ex by David Benjamin · 10 days ago
  59. 48719d8 Documentation: Change |...| to `...` for code references in comments 13/N by Lily Chen · 10 days ago
  60. 1646daf Take another pass at EVP_MD_CTX and EVP_CIPHER_CTX documentation by David Benjamin · 10 days ago
  61. 2755eaa Implement plants-04 landmark relative MTC verification. by Matt Mueller · 10 days ago
  62. 01cee05 Implement BIO_write_ex by David Benjamin · 10 days ago
  63. 65f2ef0 Narrow BIO_read and BIO_write error values by David Benjamin · 10 days ago
  64. 93dc710 Fix BIOTest.SocketConnect on platforms where loopback is synchronous by David Benjamin · 10 days ago
  65. 208dce2 Fix non-blocking connect completion check in BIO. by David Benjamin · 10 days ago
  66. 3a9254f Fix EVP_MD_CTX reuse across EVP_PKEY algorithms by David Benjamin · 10 days ago
  67. b19c870 Use C++ destructors in by_dir.cc by David Benjamin · 10 days ago
  68. 3ab2c2e Clean up by_dir's get_cert_by_subject function by David Benjamin · 11 days ago
  69. 047c29f Documentation: Change |...| to `...` for code references in comments 11/N by Lily Chen · 11 days ago
  70. c2d40c3 Documentation: Change |...| to `...` for code references in comments 10/N by Lily Chen · 11 days ago
  71. 97e87b1 Documentation: Change |...| to `...` for code references in comments 8/N by Lily Chen · 11 days ago
  72. 9fea9b1 Documentation: Change |...| to `...` for code references in comments 7/N by Lily Chen · 11 days ago
  73. 3c64f7c Documentation: Change |...| to `...` for code references in comments 6/N by Lily Chen · 11 days ago
  74. 6ef68ac Documentation: Change |...| to `...` for code references in comments 5/N by Lily Chen · 11 days ago
  75. 34db38b Documentation: Change |...| to `...` for code references in comments 4/N by Lily Chen · 11 days ago
  76. 006b4d9 Documentation: Change |...| to `...` for code references in comments 3/N by Lily Chen · 11 days ago
  77. bef004a CI/CQ custom libc++: enable bounds checked containers. by Rudolf Polzer · 11 days ago
  78. 3010d20 CI/CQ custom libc++: enable unspecified sorting order randomization. by Rudolf Polzer · 11 days ago
  79. 10f12e8 armv8 assembly: do not branch to global symbols. by Rudolf Polzer · 11 days ago
  80. 8c78018 Rewrite add_cert_dir's directory string parsing by David Benjamin · 11 days ago
  81. e069cd7 Turn SSL_CTX into an opaque struct by David Benjamin · 11 days ago
  82. 02be8eb Test that X509_LOOKUP_hash_dir ignores duplicates by David Benjamin · 11 days ago
  83. e86beef Update style guide to change |...| to `...` for code in comments by Lily Chen · 12 days ago
  84. d671f42 Documentation: Change |...| to `...` for code references in comments 2/N by Lily Chen · 13 days ago
  85. d16fd05 Documentation: Change |...| to `...` for code references in comments 1/N by Lily Chen · 13 days ago
  86. aea2249 Fix SSL_OP_LEGACY_SERVER_CONNECT with TLS 1.3 by David Benjamin · 13 days ago
  87. ef4f3c2 Add some tests for file and fd BIOs by David Benjamin · 2 weeks ago
  88. f91f144 Add the proper limit to PKCS5_PBKDF2_HMAC. by Rudolf Polzer · 2 weeks ago
  89. 508f089 Fix limits for AES-GCM-SIV. by Rudolf Polzer · 2 weeks ago
  90. f4e4cca AES-CTR-HMAC: Apply the 64 GiB limit to open operations too. by Rudolf Polzer · 2 weeks ago
  91. b657d18 Release name_list if SSL_set0_client_CAs does nothing by David Benjamin · 2 weeks ago
  92. 9945d76 Fix OBJ_dup's handling of malloc failures by David Benjamin · 2 weeks ago
  93. 78a5f9c Restore the SSL_OP_LEGACY_SERVER_CONNECT option by David Benjamin · 2 weeks ago
  94. dc899e6 CBB_cleanup: null out the buffer pointer if it was freed. by Rudolf Polzer · 2 weeks ago
  95. d15aa29 Fix uninitialized data read by AES-GCM-SIV assembly. by Rudolf Polzer · 2 weeks ago
  96. e2a57cf EVP_CTRL_GCM_IV_GEN: reject if the IV length is <8. by Rudolf Polzer · 2 weeks ago
  97. f449f72 Reject legacy_cookie in DTLS 1.3 by David Benjamin · 2 weeks ago
  98. 364eef1 Switch away from being an entropy-injected FIPS module. by Adam Langley · 2 weeks ago
  99. 190fa71 Tag new BoringSSL release for Bazel. by Rudolf Polzer · 2 weeks ago 0.20260526.0
  100. 41e8190 RC2: fix RC2 heap overflow with _huge_ key lengths. by Rudolf Polzer · 2 weeks ago