1. 2e80157 Merge pull request #604 from h2o/kazuho/cross-layer-tracing by Kazuho Oku · 12 days ago main
  2. 50af069 optionally emit conn_id if supplied, to help cross-layer tracing by Kazuho Oku · 12 days ago
  3. 91ee0e7 Merge pull request #603 from h2o/kazuho/zero-len-sni by Kazuho Oku · 3 weeks ago
  4. c14231d Merge commit from fork by Kazuho Oku · 3 weeks ago
  5. 7c32032 Merge pull request #598 from dip-proto/rsa-pkcs8-import-slices-wrong-der-object by Kazuho Oku · 6 weeks ago
  6. 4068ea5 Merge pull request #597 from dip-proto/ed25519-algorithm-mapping-rejects-imported-keys by Kazuho Oku · 6 weeks ago
  7. 51ade60 add test by Kazuho Oku · 6 weeks ago
  8. 51580a5 limit max depth of ASN.1 to 32 by Kazuho Oku · 6 weeks ago
  9. b1f854d Merge pull request #602 from h2o/kazuho/loganaden-patch-memory_failure_aes_gcm by Kazuho Oku · 6 weeks ago
  10. 78448b4 add doc-comments to the algorithms exposed by lib/fusion.c by Kazuho Oku · 6 weeks ago
  11. 817131c here also by Kazuho Oku · 6 weeks ago
  12. 371ca8c for the purpose of detecting misuse, follow the precedence of using assert in fusion by Kazuho Oku · 6 weeks ago
  13. 2d5934d abort() instead of returning in AES-GCM by Loganaden Velvindron · 6 weeks ago
  14. e8ea612 Check for memory allocation failure in AES-GCM by Loganaden Velvindron · 6 weeks ago
  15. 5b7cf50 zero-length SNI is invalid per RFC 6066 by Kazuho Oku · 7 weeks ago
  16. cfe2ea9 Merge pull request #600 from robguima/robguima/increase_max_sign_algos by Kazuho Oku · 7 weeks ago
  17. 8f00e1c latest Erland/OTP RC 29.0-rc3 sends 34 signature algorithms which go over the current maximum allowed of 16. So bump that to 64 via new macro and add a test. by Roberto Guimaraes · 8 weeks ago
  18. bfa6787 Merge pull request #596 from h2o/topic/fix-grease-ech-0rtt by Kazuho Oku · 8 weeks ago
  19. a83ce98 skip ECH grease when client.ech.configs has NULL base by Kazuho Oku · 8 weeks ago
  20. e902898 add test that {NULL, 0} ech.configs does not trigger grease by Kazuho Oku · 8 weeks ago
  21. 61fd8f1 abort with illegal_parameter when SH rejects ECH after HRR accepted it by Kazuho Oku · 8 weeks ago
  22. ba911a8 add test for HRR-accept-SH-reject ECH abort path by Kazuho Oku · 8 weeks ago
  23. 5957a9a collapse ech offered/offered_grease/accepted flags into a state enum by Kazuho Oku · 8 weeks ago
  24. 4e5e357 Merge pull request #599 from dip-proto/aes-256-ctr-advertises-the-aes128-ctr-identifier by Kazuho Oku · 8 weeks ago
  25. 0208e20 replace get_test_ech_mode with direct ech.configs global by Kazuho Oku · 9 weeks ago
  26. 41a5e5e replace test_client_ech_mode global with grease_ciphers sentinel by Kazuho Oku · 9 weeks ago
  27. df71e07 deduplicate subtest lines in test_grease_resumption by Kazuho Oku · 9 weeks ago
  28. 97ae9fb cleanup: revert unnecessary scoping, fix EE handler coding pattern by Kazuho Oku · 9 weeks ago
  29. 5ea6379 extract update_ch_hash_and_binder to deduplicate binder computation by Kazuho Oku · 9 weeks ago
  30. 55ecc92 refactor grease ECH to share code path with real ECH by Kazuho Oku · 9 weeks ago
  31. f985d95 mbedtls: AES-256-CTR misadvertises as AES128-CTR by Frank Denis · 9 weeks ago
  32. 22b7b01 mbedtls: RSA PKCS8 import slices wrong DER object by Frank Denis · 9 weeks ago
  33. 22e1673 mbedtls: ED25519 algorithm mapping rejects imported keys by Frank Denis · 9 weeks ago
  34. 71fb2fc fix grease ECH 0-RTT resumption by Kazuho Oku · 9 weeks ago
  35. 955b0e0 add grease ECH resumption regression test by Kazuho Oku · 9 weeks ago
  36. b941609 Merge pull request #595 from h2o/codex/fix-ccs-alerts by Kazuho Oku · 9 weeks ago
  37. 47c9ba3 map MD5-related cert errors to bad_certificate by Kazuho Oku · 9 weeks ago
  38. b1d103e fix CCS alert codes by Kazuho Oku · 9 weeks ago
  39. 8bc9f36 Merge pull request #593 from dip-proto/decrypt-underflows-ciphertext-length-before-tag-split by Kazuho Oku · 9 weeks ago
  40. fe3940d Merge pull request #592 from dip-proto/rsa-key-bit-parser-reads-past-short-buffer by Kazuho Oku · 9 weeks ago
  41. 50c4798 Merge pull request #591 from dip-proto/tls-1-2-receive-path-suppresses-decryption-errors by Kazuho Oku · 9 weeks ago
  42. 0e54cc0 Reject undersized ciphertext in bcrypt AEAD decrypt by Frank Denis · 9 weeks ago
  43. 2146bd9 Add bounds checks in RSA key-bit parser by Frank Denis · 9 weeks ago
  44. be4ac87 Fix error propagation in TLS 1.2 receive path by Frank Denis · 9 weeks ago
  45. 3b4d709 Merge pull request #590 from h2o/kazuho/more-cert-types-when-verifiation-is-skipped by Kazuho Oku · 9 weeks ago
  46. 8e9b364 when peer verification is off, accept RSA-PSS-RSAE-SHA384 / ECDSA-SECP384R1-SHA384 too; the purpose of skipping verification is to test transport interop and therefore it is better to be lax by Kazuho Oku · 9 weeks ago
  47. 5568cf5 Merge pull request #589 from dip-proto/asn1fix by Kazuho Oku · 10 weeks ago
  48. b94f08f Fix out-of-bounds read in ASN.1 type-and-length parser by Frank Denis · 10 weeks ago
  49. bb37a17 Merge pull request #588 from h2o/kazuho/typesafe-getsni by Kazuho Oku · 3 months ago
  50. a22cafd Avoid UB by using a wrapper object to obtain SNI lazily. The cost of the wrapper is assumed to be negligible because, under many calling conventions, an object containing two pointers is passed using two registers, just like two separate pointer arguments. by Kazuho Oku · 3 months ago
  51. b84869f Merge pull request #587 from afrind/fix-brotli-link-dirs by Kazuho Oku · 3 months ago
  52. 3960696 Fix spurious ( ) in CORE_EXTRA_LIBS_DIRS when brotli is found by afrind · 3 months ago
  53. aef2262 Merge pull request #586 from h2o/kazuho/ci-centos-stream10 by Kazuho Oku · 4 months ago
  54. 721e9fa stop app-armor to avoid sudo errors by Kazuho Oku · 4 months ago
  55. 9bcaa87 add CentOS Stream 10 to the mix, renaming "Linux" to "Ubuntu" by Kazuho Oku · 4 months ago
  56. 946b4bd Merge pull request #585 from afrind/openssl-3.5-engine-fix by Kazuho Oku · 4 months ago
  57. 6ef3a43 Merge pull request #584 from Ramblurr/fix/libaegis-0.9 by Kazuho Oku · 4 months ago
  58. 31d156a Using just OPENSSL_NO_ENGINE is fine. by Kazuho Oku · 4 months ago
  59. 314a139 Fix build with OpenSSL 3.5+ where ENGINE API is removed by afrind · 4 months ago
  60. b1a50a1 fix aegis call sites after breaking changes in 0.9.0 by Casey Link · 5 months ago
  61. 34d4d64 Merge pull request #582 from h2o/kazuho/no-tcpip-in-headers by Kazuho Oku · 8 months ago
  62. ce442fb MSVC by Kazuho Oku · 8 months ago
  63. 565090a avoid dependency: picotls.h -> TCP/IP by Kazuho Oku · 8 months ago
  64. e68c72b Merge pull request #581 from HektikR/577-unconditionally-log-hexdump-length by Kazuho Oku · 8 months ago
  65. a2c3ac2 Log the hexdump length unconditionally by Marco Angerer · 8 months ago
  66. 4e443c1 Merge pull request #579 from h2o/kazuho/quiclb-oops by Kazuho Oku · 9 months ago
  67. 7c475fa clarify the default block size by Kazuho Oku · 9 months ago
  68. 55e9839 preserve `ctx->super.algo` already set by the caller by Kazuho Oku · 9 months ago
  69. 7d344ae Update README.md by Kazuho Oku · 9 months ago
  70. 3bcdd52 Merge pull request #578 from h2o/kazuho/aes64 by Kazuho Oku · 9 months ago
  71. fcb84f7 Fix the fusion tes project. by huitema · 9 months ago
  72. 445ba85 MSVC does not like returning void (here also) by Kazuho Oku · 9 months ago
  73. 7870ee9 on MSVC, bit operators cannot be used on _m128i by Kazuho Oku · 9 months ago
  74. 41e0f89 _m128i is part of SSE, and x86-64 always has SSE2 by Kazuho Oku · 9 months ago
  75. a31884c [MSVC] update project by Kazuho Oku · 9 months ago
  76. de056de MSVC does not like returning void by Kazuho Oku · 9 months ago
  77. a76d929 test ptls_fusion_quiclb by Kazuho Oku · 9 months ago
  78. c49d81c extract quiclb test by Kazuho Oku · 9 months ago
  79. 830cec4 ptls_fusion_quiclb by Kazuho Oku · 9 months ago
  80. 66cc1a0 only the core AES logic needs to be swappable by Kazuho Oku · 9 months ago
  81. b56d086 use xmm registers on x86-64 by Kazuho Oku · 9 months ago
  82. 3f0511a do_init can be shared by Kazuho Oku · 9 months ago
  83. bc77fd4 proper types by Kazuho Oku · 9 months ago
  84. 325fad8 extract the logic so that AES backend can be replaced by Kazuho Oku · 9 months ago
  85. a0c7205 use 16-byte vectors throughout to avoid partial stalls when the compiler vectorizes the insns by Kazuho Oku · 9 months ago
  86. 80a69cc localize by Kazuho Oku · 9 months ago
  87. a3211eb switch to one defined in draft-ietf-quic-load-balancers-21 S5.5.2 by Kazuho Oku · 9 months ago
  88. 5b1eb59 msvc compatibility by Kazuho Oku · 9 months ago
  89. c1fb4ea use different AES key for each round by Kazuho Oku · 9 months ago
  90. 940120d implement 64-bit block cipher based on AES by Kazuho Oku · 9 months ago
  91. f350eab Merge pull request #574 from h2o/kazuho/pr570 by Kazuho Oku · 11 months ago
  92. c515442 fix path by Kazuho Oku · 11 months ago
  93. 04feee0 add openssl 3.5 to the CI matrix by Kazuho Oku · 11 months ago
  94. 9ed9e1b bump to rerun CI by Kazuho Oku · 11 months ago
  95. a5d36d1 [cli] use defined names by Kazuho Oku · 11 months ago
  96. 66da7ed add comments regarding the behavior of the HAVE macros by Kazuho Oku · 11 months ago
  97. 8a0281d maybe we can call it just kem (key encapsulation mechanism), omitting key by Kazuho Oku · 11 months ago
  98. 6bf1485 no need to have init as a separate function by Kazuho Oku · 11 months ago
  99. 4b11301 wip by Kazuho Oku · 11 months ago
  100. 3189fea remove unnecessary invocation and empty lines by Kazuho Oku · 11 months ago