1. f07f1c8 Merge pull request #611 from h2o/kazuho/issue605 by Kazuho Oku · 13 days ago main
  2. 766c061 test the needed invariant (that secp256r1 is available) by Kazuho Oku · 13 days ago
  3. ab094f7 Merge branch 'master' into kazuho/issue605 by Kazuho Oku · 14 days ago
  4. d24069a test that the selected group of HRR matches that agreed in the 1st flight by Kazuho Oku · 14 days ago
  5. 97fe244 Merge pull request #610 from h2o/kazuho/ci-remove-macos-openssl1.1 by Kazuho Oku · 14 days ago
  6. 50f650f Merge pull request #609 from h2o/kazuho/fix-windows-warnings by Kazuho Oku · 14 days ago
  7. f20f5c8 ptls_send checks for misuse (e.g., called after ServerHello is received) by Kazuho Oku · 2 weeks ago
  8. efc06dc reject encrypted Alert/Handshake records with an empty payload (Section 5.4 of RFC 8446) by Kazuho Oku · 2 weeks ago
  9. 81da2da drop macOS/openssl1.1 from the CI matrix; the cask no longer exists in homebrew by Kazuho Oku · 2 weeks ago
  10. ca91df5 use intptr_t for file descriptor abstraction so that Win32 HANDLEs can be retained; fix other warnings too by Kazuho Oku · 2 weeks ago
  11. a06ca41 Merge pull request #608 from h2o/kazuho/reject-2nd-hrr-and-mismatched-post-hrr-cipher by Kazuho Oku · 4 weeks ago
  12. 44bc503 Merge pull request #607 from h2o/topic/ech-short-payload-test by Kazuho Oku · 5 weeks ago
  13. 7f8144f Avoid duplicating the ECH config in short payload test by Kazuho Oku · 5 weeks ago
  14. 5d0f79b Reject ECH payloads shorter than the AEAD tag by Kazuho Oku · 5 weeks ago
  15. 85fecaf Add ECH short payload regression test by Kazuho Oku · 5 weeks ago
  16. e32c4b9 Merge pull request #606 from h2o/kazuho/update-xcode-settings by Kazuho Oku · 5 weeks ago
  17. 88e5717 [xcode] update settings so that test-openssl and test-minicrypto can be built by Kazuho Oku · 5 weeks ago
  18. a743856 Reject second HRR and mismatched post-HRR cipher suite by Kazuho Oku · 6 weeks ago
  19. ea4f84c Add HRR cipher suite mismatch regression test by Kazuho Oku · 6 weeks ago
  20. 2e80157 Merge pull request #604 from h2o/kazuho/cross-layer-tracing by Kazuho Oku · 8 weeks ago
  21. 50af069 optionally emit conn_id if supplied, to help cross-layer tracing by Kazuho Oku · 8 weeks ago
  22. 91ee0e7 Merge pull request #603 from h2o/kazuho/zero-len-sni by Kazuho Oku · 9 weeks ago
  23. c14231d Merge commit from fork by Kazuho Oku · 9 weeks ago
  24. 7c32032 Merge pull request #598 from dip-proto/rsa-pkcs8-import-slices-wrong-der-object by Kazuho Oku · 3 months ago
  25. 4068ea5 Merge pull request #597 from dip-proto/ed25519-algorithm-mapping-rejects-imported-keys by Kazuho Oku · 3 months ago
  26. 51ade60 add test by Kazuho Oku · 3 months ago
  27. 51580a5 limit max depth of ASN.1 to 32 by Kazuho Oku · 3 months ago
  28. b1f854d Merge pull request #602 from h2o/kazuho/loganaden-patch-memory_failure_aes_gcm by Kazuho Oku · 3 months ago
  29. 78448b4 add doc-comments to the algorithms exposed by lib/fusion.c by Kazuho Oku · 3 months ago
  30. 817131c here also by Kazuho Oku · 3 months ago
  31. 371ca8c for the purpose of detecting misuse, follow the precedence of using assert in fusion by Kazuho Oku · 3 months ago
  32. 2d5934d abort() instead of returning in AES-GCM by Loganaden Velvindron · 3 months ago
  33. e8ea612 Check for memory allocation failure in AES-GCM by Loganaden Velvindron · 3 months ago
  34. 5b7cf50 zero-length SNI is invalid per RFC 6066 by Kazuho Oku · 3 months ago
  35. cfe2ea9 Merge pull request #600 from robguima/robguima/increase_max_sign_algos by Kazuho Oku · 3 months ago
  36. 8f00e1c latest Erland/OTP RC 29.0-rc3 sends 34 signature algorithms which go over the current maximum allowed of 16. So bump that to 64 via new macro and add a test. by Roberto Guimaraes · 3 months ago
  37. bfa6787 Merge pull request #596 from h2o/topic/fix-grease-ech-0rtt by Kazuho Oku · 3 months ago
  38. a83ce98 skip ECH grease when client.ech.configs has NULL base by Kazuho Oku · 3 months ago
  39. e902898 add test that {NULL, 0} ech.configs does not trigger grease by Kazuho Oku · 3 months ago
  40. 61fd8f1 abort with illegal_parameter when SH rejects ECH after HRR accepted it by Kazuho Oku · 3 months ago
  41. ba911a8 add test for HRR-accept-SH-reject ECH abort path by Kazuho Oku · 3 months ago
  42. 5957a9a collapse ech offered/offered_grease/accepted flags into a state enum by Kazuho Oku · 3 months ago
  43. 4e5e357 Merge pull request #599 from dip-proto/aes-256-ctr-advertises-the-aes128-ctr-identifier by Kazuho Oku · 3 months ago
  44. 0208e20 replace get_test_ech_mode with direct ech.configs global by Kazuho Oku · 3 months ago
  45. 41a5e5e replace test_client_ech_mode global with grease_ciphers sentinel by Kazuho Oku · 3 months ago
  46. df71e07 deduplicate subtest lines in test_grease_resumption by Kazuho Oku · 3 months ago
  47. 97ae9fb cleanup: revert unnecessary scoping, fix EE handler coding pattern by Kazuho Oku · 3 months ago
  48. 5ea6379 extract update_ch_hash_and_binder to deduplicate binder computation by Kazuho Oku · 3 months ago
  49. 55ecc92 refactor grease ECH to share code path with real ECH by Kazuho Oku · 3 months ago
  50. f985d95 mbedtls: AES-256-CTR misadvertises as AES128-CTR by Frank Denis · 3 months ago
  51. 22b7b01 mbedtls: RSA PKCS8 import slices wrong DER object by Frank Denis · 3 months ago
  52. 22e1673 mbedtls: ED25519 algorithm mapping rejects imported keys by Frank Denis · 3 months ago
  53. 71fb2fc fix grease ECH 0-RTT resumption by Kazuho Oku · 3 months ago
  54. 955b0e0 add grease ECH resumption regression test by Kazuho Oku · 3 months ago
  55. b941609 Merge pull request #595 from h2o/codex/fix-ccs-alerts by Kazuho Oku · 3 months ago
  56. 47c9ba3 map MD5-related cert errors to bad_certificate by Kazuho Oku · 3 months ago
  57. b1d103e fix CCS alert codes by Kazuho Oku · 3 months ago
  58. 8bc9f36 Merge pull request #593 from dip-proto/decrypt-underflows-ciphertext-length-before-tag-split by Kazuho Oku · 3 months ago
  59. fe3940d Merge pull request #592 from dip-proto/rsa-key-bit-parser-reads-past-short-buffer by Kazuho Oku · 3 months ago
  60. 50c4798 Merge pull request #591 from dip-proto/tls-1-2-receive-path-suppresses-decryption-errors by Kazuho Oku · 3 months ago
  61. 0e54cc0 Reject undersized ciphertext in bcrypt AEAD decrypt by Frank Denis · 3 months ago
  62. 2146bd9 Add bounds checks in RSA key-bit parser by Frank Denis · 3 months ago
  63. be4ac87 Fix error propagation in TLS 1.2 receive path by Frank Denis · 3 months ago
  64. 3b4d709 Merge pull request #590 from h2o/kazuho/more-cert-types-when-verifiation-is-skipped by Kazuho Oku · 4 months ago
  65. 8e9b364 when peer verification is off, accept RSA-PSS-RSAE-SHA384 / ECDSA-SECP384R1-SHA384 too; the purpose of skipping verification is to test transport interop and therefore it is better to be lax by Kazuho Oku · 4 months ago
  66. 5568cf5 Merge pull request #589 from dip-proto/asn1fix by Kazuho Oku · 4 months ago
  67. b94f08f Fix out-of-bounds read in ASN.1 type-and-length parser by Frank Denis · 4 months ago
  68. bb37a17 Merge pull request #588 from h2o/kazuho/typesafe-getsni by Kazuho Oku · 4 months ago
  69. a22cafd Avoid UB by using a wrapper object to obtain SNI lazily. The cost of the wrapper is assumed to be negligible because, under many calling conventions, an object containing two pointers is passed using two registers, just like two separate pointer arguments. by Kazuho Oku · 4 months ago
  70. b84869f Merge pull request #587 from afrind/fix-brotli-link-dirs by Kazuho Oku · 5 months ago
  71. 3960696 Fix spurious ( ) in CORE_EXTRA_LIBS_DIRS when brotli is found by afrind · 5 months ago
  72. aef2262 Merge pull request #586 from h2o/kazuho/ci-centos-stream10 by Kazuho Oku · 5 months ago
  73. 721e9fa stop app-armor to avoid sudo errors by Kazuho Oku · 5 months ago
  74. 9bcaa87 add CentOS Stream 10 to the mix, renaming "Linux" to "Ubuntu" by Kazuho Oku · 5 months ago
  75. 946b4bd Merge pull request #585 from afrind/openssl-3.5-engine-fix by Kazuho Oku · 5 months ago
  76. 6ef3a43 Merge pull request #584 from Ramblurr/fix/libaegis-0.9 by Kazuho Oku · 5 months ago
  77. 31d156a Using just OPENSSL_NO_ENGINE is fine. by Kazuho Oku · 5 months ago
  78. 314a139 Fix build with OpenSSL 3.5+ where ENGINE API is removed by afrind · 5 months ago
  79. b1a50a1 fix aegis call sites after breaking changes in 0.9.0 by Casey Link · 7 months ago
  80. 34d4d64 Merge pull request #582 from h2o/kazuho/no-tcpip-in-headers by Kazuho Oku · 9 months ago
  81. ce442fb MSVC by Kazuho Oku · 9 months ago
  82. 565090a avoid dependency: picotls.h -> TCP/IP by Kazuho Oku · 9 months ago
  83. e68c72b Merge pull request #581 from HektikR/577-unconditionally-log-hexdump-length by Kazuho Oku · 9 months ago
  84. a2c3ac2 Log the hexdump length unconditionally by Marco Angerer · 9 months ago
  85. 4e443c1 Merge pull request #579 from h2o/kazuho/quiclb-oops by Kazuho Oku · 11 months ago
  86. 7c475fa clarify the default block size by Kazuho Oku · 11 months ago
  87. 55e9839 preserve `ctx->super.algo` already set by the caller by Kazuho Oku · 11 months ago
  88. 7d344ae Update README.md by Kazuho Oku · 11 months ago
  89. 3bcdd52 Merge pull request #578 from h2o/kazuho/aes64 by Kazuho Oku · 11 months ago
  90. fcb84f7 Fix the fusion tes project. by huitema · 11 months ago
  91. 445ba85 MSVC does not like returning void (here also) by Kazuho Oku · 11 months ago
  92. 7870ee9 on MSVC, bit operators cannot be used on _m128i by Kazuho Oku · 11 months ago
  93. 41e0f89 _m128i is part of SSE, and x86-64 always has SSE2 by Kazuho Oku · 11 months ago
  94. a31884c [MSVC] update project by Kazuho Oku · 11 months ago
  95. de056de MSVC does not like returning void by Kazuho Oku · 11 months ago
  96. a76d929 test ptls_fusion_quiclb by Kazuho Oku · 11 months ago
  97. c49d81c extract quiclb test by Kazuho Oku · 11 months ago
  98. 830cec4 ptls_fusion_quiclb by Kazuho Oku · 11 months ago
  99. 66cc1a0 only the core AES logic needs to be swappable by Kazuho Oku · 11 months ago
  100. b56d086 use xmm registers on x86-64 by Kazuho Oku · 11 months ago