- b1f854d Merge pull request #602 from h2o/kazuho/loganaden-patch-memory_failure_aes_gcm by Kazuho Oku · 23 hours ago main
- 78448b4 add doc-comments to the algorithms exposed by lib/fusion.c by Kazuho Oku · 23 hours ago
- 817131c here also by Kazuho Oku · 24 hours ago
- 371ca8c for the purpose of detecting misuse, follow the precedence of using assert in fusion by Kazuho Oku · 24 hours ago
- 2d5934d abort() instead of returning in AES-GCM by Loganaden Velvindron · 24 hours ago
- e8ea612 Check for memory allocation failure in AES-GCM by Loganaden Velvindron · 28 hours ago
- cfe2ea9 Merge pull request #600 from robguima/robguima/increase_max_sign_algos by Kazuho Oku · 8 days ago
- 8f00e1c latest Erland/OTP RC 29.0-rc3 sends 34 signature algorithms which go over the current maximum allowed of 16. So bump that to 64 via new macro and add a test. by Roberto Guimaraes · 2 weeks ago
- bfa6787 Merge pull request #596 from h2o/topic/fix-grease-ech-0rtt by Kazuho Oku · 3 weeks ago
- a83ce98 skip ECH grease when client.ech.configs has NULL base by Kazuho Oku · 3 weeks ago
- e902898 add test that {NULL, 0} ech.configs does not trigger grease by Kazuho Oku · 3 weeks ago
- 61fd8f1 abort with illegal_parameter when SH rejects ECH after HRR accepted it by Kazuho Oku · 3 weeks ago
- ba911a8 add test for HRR-accept-SH-reject ECH abort path by Kazuho Oku · 3 weeks ago
- 5957a9a collapse ech offered/offered_grease/accepted flags into a state enum by Kazuho Oku · 3 weeks ago
- 4e5e357 Merge pull request #599 from dip-proto/aes-256-ctr-advertises-the-aes128-ctr-identifier by Kazuho Oku · 3 weeks ago
- 0208e20 replace get_test_ech_mode with direct ech.configs global by Kazuho Oku · 3 weeks ago
- 41a5e5e replace test_client_ech_mode global with grease_ciphers sentinel by Kazuho Oku · 3 weeks ago
- df71e07 deduplicate subtest lines in test_grease_resumption by Kazuho Oku · 3 weeks ago
- 97ae9fb cleanup: revert unnecessary scoping, fix EE handler coding pattern by Kazuho Oku · 3 weeks ago
- 5ea6379 extract update_ch_hash_and_binder to deduplicate binder computation by Kazuho Oku · 3 weeks ago
- 55ecc92 refactor grease ECH to share code path with real ECH by Kazuho Oku · 3 weeks ago
- f985d95 mbedtls: AES-256-CTR misadvertises as AES128-CTR by Frank Denis · 3 weeks ago
- 71fb2fc fix grease ECH 0-RTT resumption by Kazuho Oku · 3 weeks ago
- 955b0e0 add grease ECH resumption regression test by Kazuho Oku · 3 weeks ago
- b941609 Merge pull request #595 from h2o/codex/fix-ccs-alerts by Kazuho Oku · 3 weeks ago
- 47c9ba3 map MD5-related cert errors to bad_certificate by Kazuho Oku · 3 weeks ago
- b1d103e fix CCS alert codes by Kazuho Oku · 3 weeks ago
- 8bc9f36 Merge pull request #593 from dip-proto/decrypt-underflows-ciphertext-length-before-tag-split by Kazuho Oku · 3 weeks ago
- fe3940d Merge pull request #592 from dip-proto/rsa-key-bit-parser-reads-past-short-buffer by Kazuho Oku · 3 weeks ago
- 50c4798 Merge pull request #591 from dip-proto/tls-1-2-receive-path-suppresses-decryption-errors by Kazuho Oku · 3 weeks ago
- 0e54cc0 Reject undersized ciphertext in bcrypt AEAD decrypt by Frank Denis · 3 weeks ago
- 2146bd9 Add bounds checks in RSA key-bit parser by Frank Denis · 3 weeks ago
- be4ac87 Fix error propagation in TLS 1.2 receive path by Frank Denis · 3 weeks ago
- 3b4d709 Merge pull request #590 from h2o/kazuho/more-cert-types-when-verifiation-is-skipped by Kazuho Oku · 4 weeks ago
- 8e9b364 when peer verification is off, accept RSA-PSS-RSAE-SHA384 / ECDSA-SECP384R1-SHA384 too; the purpose of skipping verification is to test transport interop and therefore it is better to be lax by Kazuho Oku · 4 weeks ago
- 5568cf5 Merge pull request #589 from dip-proto/asn1fix by Kazuho Oku · 4 weeks ago
- b94f08f Fix out-of-bounds read in ASN.1 type-and-length parser by Frank Denis · 4 weeks ago
- bb37a17 Merge pull request #588 from h2o/kazuho/typesafe-getsni by Kazuho Oku · 5 weeks ago
- a22cafd Avoid UB by using a wrapper object to obtain SNI lazily. The cost of the wrapper is assumed to be negligible because, under many calling conventions, an object containing two pointers is passed using two registers, just like two separate pointer arguments. by Kazuho Oku · 5 weeks ago
- b84869f Merge pull request #587 from afrind/fix-brotli-link-dirs by Kazuho Oku · 8 weeks ago
- 3960696 Fix spurious ( ) in CORE_EXTRA_LIBS_DIRS when brotli is found by afrind · 9 weeks ago
- aef2262 Merge pull request #586 from h2o/kazuho/ci-centos-stream10 by Kazuho Oku · 10 weeks ago
- 721e9fa stop app-armor to avoid sudo errors by Kazuho Oku · 10 weeks ago
- 9bcaa87 add CentOS Stream 10 to the mix, renaming "Linux" to "Ubuntu" by Kazuho Oku · 10 weeks ago
- 946b4bd Merge pull request #585 from afrind/openssl-3.5-engine-fix by Kazuho Oku · 10 weeks ago
- 6ef3a43 Merge pull request #584 from Ramblurr/fix/libaegis-0.9 by Kazuho Oku · 10 weeks ago
- 31d156a Using just OPENSSL_NO_ENGINE is fine. by Kazuho Oku · 10 weeks ago
- 314a139 Fix build with OpenSSL 3.5+ where ENGINE API is removed by afrind · 2 months ago
- b1a50a1 fix aegis call sites after breaking changes in 0.9.0 by Casey Link · 4 months ago
- 34d4d64 Merge pull request #582 from h2o/kazuho/no-tcpip-in-headers by Kazuho Oku · 6 months ago
- ce442fb MSVC by Kazuho Oku · 6 months ago
- 565090a avoid dependency: picotls.h -> TCP/IP by Kazuho Oku · 6 months ago
- e68c72b Merge pull request #581 from HektikR/577-unconditionally-log-hexdump-length by Kazuho Oku · 7 months ago
- a2c3ac2 Log the hexdump length unconditionally by Marco Angerer · 7 months ago
- 4e443c1 Merge pull request #579 from h2o/kazuho/quiclb-oops by Kazuho Oku · 8 months ago
- 7c475fa clarify the default block size by Kazuho Oku · 8 months ago
- 55e9839 preserve `ctx->super.algo` already set by the caller by Kazuho Oku · 8 months ago
- 7d344ae Update README.md by Kazuho Oku · 8 months ago
- 3bcdd52 Merge pull request #578 from h2o/kazuho/aes64 by Kazuho Oku · 8 months ago
- fcb84f7 Fix the fusion tes project. by huitema · 8 months ago
- 445ba85 MSVC does not like returning void (here also) by Kazuho Oku · 8 months ago
- 7870ee9 on MSVC, bit operators cannot be used on _m128i by Kazuho Oku · 8 months ago
- 41e0f89 _m128i is part of SSE, and x86-64 always has SSE2 by Kazuho Oku · 8 months ago
- a31884c [MSVC] update project by Kazuho Oku · 8 months ago
- de056de MSVC does not like returning void by Kazuho Oku · 8 months ago
- a76d929 test ptls_fusion_quiclb by Kazuho Oku · 8 months ago
- c49d81c extract quiclb test by Kazuho Oku · 8 months ago
- 830cec4 ptls_fusion_quiclb by Kazuho Oku · 8 months ago
- 66cc1a0 only the core AES logic needs to be swappable by Kazuho Oku · 8 months ago
- b56d086 use xmm registers on x86-64 by Kazuho Oku · 8 months ago
- 3f0511a do_init can be shared by Kazuho Oku · 8 months ago
- bc77fd4 proper types by Kazuho Oku · 8 months ago
- 325fad8 extract the logic so that AES backend can be replaced by Kazuho Oku · 8 months ago
- a0c7205 use 16-byte vectors throughout to avoid partial stalls when the compiler vectorizes the insns by Kazuho Oku · 8 months ago
- 80a69cc localize by Kazuho Oku · 8 months ago
- a3211eb switch to one defined in draft-ietf-quic-load-balancers-21 S5.5.2 by Kazuho Oku · 8 months ago
- 5b1eb59 msvc compatibility by Kazuho Oku · 8 months ago
- c1fb4ea use different AES key for each round by Kazuho Oku · 8 months ago
- 940120d implement 64-bit block cipher based on AES by Kazuho Oku · 8 months ago
- f350eab Merge pull request #574 from h2o/kazuho/pr570 by Kazuho Oku · 10 months ago
- c515442 fix path by Kazuho Oku · 10 months ago
- 04feee0 add openssl 3.5 to the CI matrix by Kazuho Oku · 10 months ago
- 9ed9e1b bump to rerun CI by Kazuho Oku · 10 months ago
- a5d36d1 [cli] use defined names by Kazuho Oku · 10 months ago
- 66da7ed add comments regarding the behavior of the HAVE macros by Kazuho Oku · 10 months ago
- 8a0281d maybe we can call it just kem (key encapsulation mechanism), omitting key by Kazuho Oku · 10 months ago
- 6bf1485 no need to have init as a separate function by Kazuho Oku · 10 months ago
- 4b11301 wip by Kazuho Oku · 10 months ago
- 3189fea remove unnecessary invocation and empty lines by Kazuho Oku · 10 months ago
- 8bba561 fix names in tests by Kazuho Oku · 10 months ago
- 10a0a02 standardardized names omit underscores by Kazuho Oku · 10 months ago
- ffbe194 lint by Kazuho Oku · 10 months ago
- 228d390 supply algo from `data` using char * by Kazuho Oku · 10 months ago
- d324e2b dedupe x25519mlkem768 from the all list, while retaining hybrids and mlkems near the end by Kazuho Oku · 10 months ago
- c3599a1 we want to have PTLS_OPENSSL_HAVE_X25519MLKEM768 defined for !boringssl but the code must not be activated by Kazuho Oku · 10 months ago
- 97eedeb wip by Kazuho Oku · 10 months ago
- 0834f62 use names defined by the IANA registry by Kazuho Oku · 10 months ago
- 5fcc873 deduplicate declarations, PTLS_OPENSSL_HAVE_X25519MLKEM768 exposes x25519mlkem768 regardless of the backend by Kazuho Oku · 10 months ago
- 74956e1 Merge branch 'master' into kazuho/pr570 by Kazuho Oku · 10 months ago
- 05f1d21 Merge pull request #573 from h2o/kazuho/cmake-4.0 by Kazuho Oku · 10 months ago