- f07f1c8 Merge pull request #611 from h2o/kazuho/issue605 by Kazuho Oku · 13 days ago main
- 766c061 test the needed invariant (that secp256r1 is available) by Kazuho Oku · 13 days ago
- ab094f7 Merge branch 'master' into kazuho/issue605 by Kazuho Oku · 14 days ago
- d24069a test that the selected group of HRR matches that agreed in the 1st flight by Kazuho Oku · 14 days ago
- 97fe244 Merge pull request #610 from h2o/kazuho/ci-remove-macos-openssl1.1 by Kazuho Oku · 14 days ago
- 50f650f Merge pull request #609 from h2o/kazuho/fix-windows-warnings by Kazuho Oku · 14 days ago
- f20f5c8 ptls_send checks for misuse (e.g., called after ServerHello is received) by Kazuho Oku · 2 weeks ago
- efc06dc reject encrypted Alert/Handshake records with an empty payload (Section 5.4 of RFC 8446) by Kazuho Oku · 2 weeks ago
- 81da2da drop macOS/openssl1.1 from the CI matrix; the cask no longer exists in homebrew by Kazuho Oku · 2 weeks ago
- ca91df5 use intptr_t for file descriptor abstraction so that Win32 HANDLEs can be retained; fix other warnings too by Kazuho Oku · 2 weeks ago
- a06ca41 Merge pull request #608 from h2o/kazuho/reject-2nd-hrr-and-mismatched-post-hrr-cipher by Kazuho Oku · 4 weeks ago
- 44bc503 Merge pull request #607 from h2o/topic/ech-short-payload-test by Kazuho Oku · 5 weeks ago
- 7f8144f Avoid duplicating the ECH config in short payload test by Kazuho Oku · 5 weeks ago
- 5d0f79b Reject ECH payloads shorter than the AEAD tag by Kazuho Oku · 5 weeks ago
- 85fecaf Add ECH short payload regression test by Kazuho Oku · 5 weeks ago
- e32c4b9 Merge pull request #606 from h2o/kazuho/update-xcode-settings by Kazuho Oku · 5 weeks ago
- 88e5717 [xcode] update settings so that test-openssl and test-minicrypto can be built by Kazuho Oku · 5 weeks ago
- a743856 Reject second HRR and mismatched post-HRR cipher suite by Kazuho Oku · 6 weeks ago
- ea4f84c Add HRR cipher suite mismatch regression test by Kazuho Oku · 6 weeks ago
- 2e80157 Merge pull request #604 from h2o/kazuho/cross-layer-tracing by Kazuho Oku · 8 weeks ago
- 50af069 optionally emit conn_id if supplied, to help cross-layer tracing by Kazuho Oku · 8 weeks ago
- 91ee0e7 Merge pull request #603 from h2o/kazuho/zero-len-sni by Kazuho Oku · 9 weeks ago
- c14231d Merge commit from fork by Kazuho Oku · 9 weeks ago
- 7c32032 Merge pull request #598 from dip-proto/rsa-pkcs8-import-slices-wrong-der-object by Kazuho Oku · 3 months ago
- 4068ea5 Merge pull request #597 from dip-proto/ed25519-algorithm-mapping-rejects-imported-keys by Kazuho Oku · 3 months ago
- 51ade60 add test by Kazuho Oku · 3 months ago
- 51580a5 limit max depth of ASN.1 to 32 by Kazuho Oku · 3 months ago
- b1f854d Merge pull request #602 from h2o/kazuho/loganaden-patch-memory_failure_aes_gcm by Kazuho Oku · 3 months ago
- 78448b4 add doc-comments to the algorithms exposed by lib/fusion.c by Kazuho Oku · 3 months ago
- 817131c here also by Kazuho Oku · 3 months ago
- 371ca8c for the purpose of detecting misuse, follow the precedence of using assert in fusion by Kazuho Oku · 3 months ago
- 2d5934d abort() instead of returning in AES-GCM by Loganaden Velvindron · 3 months ago
- e8ea612 Check for memory allocation failure in AES-GCM by Loganaden Velvindron · 3 months ago
- 5b7cf50 zero-length SNI is invalid per RFC 6066 by Kazuho Oku · 3 months ago
- cfe2ea9 Merge pull request #600 from robguima/robguima/increase_max_sign_algos by Kazuho Oku · 3 months ago
- 8f00e1c latest Erland/OTP RC 29.0-rc3 sends 34 signature algorithms which go over the current maximum allowed of 16. So bump that to 64 via new macro and add a test. by Roberto Guimaraes · 3 months ago
- bfa6787 Merge pull request #596 from h2o/topic/fix-grease-ech-0rtt by Kazuho Oku · 3 months ago
- a83ce98 skip ECH grease when client.ech.configs has NULL base by Kazuho Oku · 3 months ago
- e902898 add test that {NULL, 0} ech.configs does not trigger grease by Kazuho Oku · 3 months ago
- 61fd8f1 abort with illegal_parameter when SH rejects ECH after HRR accepted it by Kazuho Oku · 3 months ago
- ba911a8 add test for HRR-accept-SH-reject ECH abort path by Kazuho Oku · 3 months ago
- 5957a9a collapse ech offered/offered_grease/accepted flags into a state enum by Kazuho Oku · 3 months ago
- 4e5e357 Merge pull request #599 from dip-proto/aes-256-ctr-advertises-the-aes128-ctr-identifier by Kazuho Oku · 3 months ago
- 0208e20 replace get_test_ech_mode with direct ech.configs global by Kazuho Oku · 3 months ago
- 41a5e5e replace test_client_ech_mode global with grease_ciphers sentinel by Kazuho Oku · 3 months ago
- df71e07 deduplicate subtest lines in test_grease_resumption by Kazuho Oku · 3 months ago
- 97ae9fb cleanup: revert unnecessary scoping, fix EE handler coding pattern by Kazuho Oku · 3 months ago
- 5ea6379 extract update_ch_hash_and_binder to deduplicate binder computation by Kazuho Oku · 3 months ago
- 55ecc92 refactor grease ECH to share code path with real ECH by Kazuho Oku · 3 months ago
- f985d95 mbedtls: AES-256-CTR misadvertises as AES128-CTR by Frank Denis · 3 months ago
- 22b7b01 mbedtls: RSA PKCS8 import slices wrong DER object by Frank Denis · 3 months ago
- 22e1673 mbedtls: ED25519 algorithm mapping rejects imported keys by Frank Denis · 3 months ago
- 71fb2fc fix grease ECH 0-RTT resumption by Kazuho Oku · 3 months ago
- 955b0e0 add grease ECH resumption regression test by Kazuho Oku · 3 months ago
- b941609 Merge pull request #595 from h2o/codex/fix-ccs-alerts by Kazuho Oku · 3 months ago
- 47c9ba3 map MD5-related cert errors to bad_certificate by Kazuho Oku · 3 months ago
- b1d103e fix CCS alert codes by Kazuho Oku · 3 months ago
- 8bc9f36 Merge pull request #593 from dip-proto/decrypt-underflows-ciphertext-length-before-tag-split by Kazuho Oku · 3 months ago
- fe3940d Merge pull request #592 from dip-proto/rsa-key-bit-parser-reads-past-short-buffer by Kazuho Oku · 3 months ago
- 50c4798 Merge pull request #591 from dip-proto/tls-1-2-receive-path-suppresses-decryption-errors by Kazuho Oku · 3 months ago
- 0e54cc0 Reject undersized ciphertext in bcrypt AEAD decrypt by Frank Denis · 3 months ago
- 2146bd9 Add bounds checks in RSA key-bit parser by Frank Denis · 3 months ago
- be4ac87 Fix error propagation in TLS 1.2 receive path by Frank Denis · 3 months ago
- 3b4d709 Merge pull request #590 from h2o/kazuho/more-cert-types-when-verifiation-is-skipped by Kazuho Oku · 4 months ago
- 8e9b364 when peer verification is off, accept RSA-PSS-RSAE-SHA384 / ECDSA-SECP384R1-SHA384 too; the purpose of skipping verification is to test transport interop and therefore it is better to be lax by Kazuho Oku · 4 months ago
- 5568cf5 Merge pull request #589 from dip-proto/asn1fix by Kazuho Oku · 4 months ago
- b94f08f Fix out-of-bounds read in ASN.1 type-and-length parser by Frank Denis · 4 months ago
- bb37a17 Merge pull request #588 from h2o/kazuho/typesafe-getsni by Kazuho Oku · 4 months ago
- a22cafd Avoid UB by using a wrapper object to obtain SNI lazily. The cost of the wrapper is assumed to be negligible because, under many calling conventions, an object containing two pointers is passed using two registers, just like two separate pointer arguments. by Kazuho Oku · 4 months ago
- b84869f Merge pull request #587 from afrind/fix-brotli-link-dirs by Kazuho Oku · 5 months ago
- 3960696 Fix spurious ( ) in CORE_EXTRA_LIBS_DIRS when brotli is found by afrind · 5 months ago
- aef2262 Merge pull request #586 from h2o/kazuho/ci-centos-stream10 by Kazuho Oku · 5 months ago
- 721e9fa stop app-armor to avoid sudo errors by Kazuho Oku · 5 months ago
- 9bcaa87 add CentOS Stream 10 to the mix, renaming "Linux" to "Ubuntu" by Kazuho Oku · 5 months ago
- 946b4bd Merge pull request #585 from afrind/openssl-3.5-engine-fix by Kazuho Oku · 5 months ago
- 6ef3a43 Merge pull request #584 from Ramblurr/fix/libaegis-0.9 by Kazuho Oku · 5 months ago
- 31d156a Using just OPENSSL_NO_ENGINE is fine. by Kazuho Oku · 5 months ago
- 314a139 Fix build with OpenSSL 3.5+ where ENGINE API is removed by afrind · 5 months ago
- b1a50a1 fix aegis call sites after breaking changes in 0.9.0 by Casey Link · 7 months ago
- 34d4d64 Merge pull request #582 from h2o/kazuho/no-tcpip-in-headers by Kazuho Oku · 9 months ago
- ce442fb MSVC by Kazuho Oku · 9 months ago
- 565090a avoid dependency: picotls.h -> TCP/IP by Kazuho Oku · 9 months ago
- e68c72b Merge pull request #581 from HektikR/577-unconditionally-log-hexdump-length by Kazuho Oku · 9 months ago
- a2c3ac2 Log the hexdump length unconditionally by Marco Angerer · 9 months ago
- 4e443c1 Merge pull request #579 from h2o/kazuho/quiclb-oops by Kazuho Oku · 11 months ago
- 7c475fa clarify the default block size by Kazuho Oku · 11 months ago
- 55e9839 preserve `ctx->super.algo` already set by the caller by Kazuho Oku · 11 months ago
- 7d344ae Update README.md by Kazuho Oku · 11 months ago
- 3bcdd52 Merge pull request #578 from h2o/kazuho/aes64 by Kazuho Oku · 11 months ago
- fcb84f7 Fix the fusion tes project. by huitema · 11 months ago
- 445ba85 MSVC does not like returning void (here also) by Kazuho Oku · 11 months ago
- 7870ee9 on MSVC, bit operators cannot be used on _m128i by Kazuho Oku · 11 months ago
- 41e0f89 _m128i is part of SSE, and x86-64 always has SSE2 by Kazuho Oku · 11 months ago
- a31884c [MSVC] update project by Kazuho Oku · 11 months ago
- de056de MSVC does not like returning void by Kazuho Oku · 11 months ago
- a76d929 test ptls_fusion_quiclb by Kazuho Oku · 11 months ago
- c49d81c extract quiclb test by Kazuho Oku · 11 months ago
- 830cec4 ptls_fusion_quiclb by Kazuho Oku · 11 months ago
- 66cc1a0 only the core AES logic needs to be swappable by Kazuho Oku · 11 months ago
- b56d086 use xmm registers on x86-64 by Kazuho Oku · 11 months ago