Merge BoringSSL through 4c8bcf0da2951cacd8ed8eaa7fd2df4b22fca23b#1658

Merged

briansmith merged 62 commits intomainfrom b/merge-boringssl-15

Sep 28, 2023

+4,097-813

Commits on Apr 12, 2023

Move RSA (en|de)cryption out of the FIPS module.

agl
authored and
Boringssl LUCI CQ
committed
Add Trust Token version using standardized hash2curve.

dvorak42
authored and
Boringssl LUCI CQ
committed
Fix up do_ext_i2d's error-handling

davidben
authored and
Boringssl LUCI CQ
committed
Add functions to allow the mocking of AES hw support for testing.

Bob Beck
authored and
Boringssl LUCI CQ
committed
Restore some default cases in tasn_dec.c and tasn_enc.c

davidben
authored and
Boringssl LUCI CQ
committed

Commits on Apr 13, 2023

Remove support for "old-style" X509V3_EXT_METHODs.

davidben
authored and
Boringssl LUCI CQ
committed
Remove X509V3_EXT_add_list and X509V3_EXT_cleanup

davidben
authored and
Boringssl LUCI CQ
committed
expose a reset API on hmac which resets the current instance back to its original state keeping the same key as initially used

Nabil Wadih
authored and
Boringssl LUCI CQ
committed

Commits on Apr 14, 2023

Drop CECPQ2 support.

agl
authored and
Boringssl LUCI CQ
committed
Move HKDF into the FIPS module.

agl
authored and
Boringssl LUCI CQ
committed

Commits on Apr 17, 2023

Move TLS 1.3 KDF functions into the FIPS module.

agl
authored and
Boringssl LUCI CQ
committed
Include bindgen generated file via a build time env var, this plays nicer with other build systems like Soong and Gn.

Nabil Wadih
authored and
Boringssl LUCI CQ
committed
add extra lints to align with Chromium rust toolchain

Nabil Wadih
authored and
Boringssl LUCI CQ
committed
Default SSL_set_enforce_rsa_key_usage to enabled.

davidben
authored and
Boringssl LUCI CQ
committed
Switch to new ACVP test for TLS 1.2 KDF.

agl
authored and
Boringssl LUCI CQ
committed
Skip some BIO_gets tests if tmpfile fails on Android

davidben
authored and
Boringssl LUCI CQ
committed

Commits on Apr 18, 2023

break-tests.sh: break run-time tests and use two test_fips binaries.

Adam Langley
authored and
Boringssl LUCI CQ
committed
Update test_fips.c with new functions added to FIPS module.

agl
authored and
Boringssl LUCI CQ
committed

Commits on Apr 19, 2023

Widen ASN1_mbstring_copy and ASN1_mbstring_ncopy to ossl_ssize_t

davidben
authored and
Boringssl LUCI CQ
committed
Generate 64-bit Curve25519 and P256 code for MSVC

andres-erbsen
authored and
Boringssl LUCI CQ
committed
Document a pile of X509 print functions

davidben
authored and
Boringssl LUCI CQ
committed
Organize X509_ATTRIBUTE functions into sections.

davidben
authored and
Boringssl LUCI CQ
committed
Remove the X509at_* functions

davidben
authored and
Boringssl LUCI CQ
committed
Move the X509 time functions under "Convenience functions"

davidben
authored and
Boringssl LUCI CQ
committed
Clarify in ssl.h documentation not to use the verify callback

davidben
authored and
Boringssl LUCI CQ
committed
Remove --size_t-is-usize from bindgen call

davidben
authored and
Boringssl LUCI CQ
committed
Trim some unused XN_FLAG_* values

davidben
authored and
Boringssl LUCI CQ
committed
Update docs to recommend a much more convenient CMake invocation

davidben
authored and
Boringssl LUCI CQ
committed
Fix allowlist regex in bindgen invocation

davidben
authored and
Boringssl LUCI CQ
committed
Replace sort.Sort with sort.Slice

davidben
authored and
Boringssl LUCI CQ
committed

Commits on Apr 21, 2023

Spell includes in wrapper.h like the rest of the project

davidben
authored and
Boringssl LUCI CQ
committed
Add mechanism for deprecated declarations.

Bob Beck
authored and
Boringssl LUCI CQ
committed
Only rerun bindgen when its dependencies change

davidben
authored and
Boringssl LUCI CQ
committed

Commits on Apr 24, 2023

Remove TLS_RSA_WITH_NULL_SHA

davidben
authored and
Boringssl LUCI CQ
committed

Commits on Apr 25, 2023

Allow passing extra flags to BoGo shim

rolandshoemaker
authored and
Boringssl LUCI CQ
committed
Move convert_wycheproof into its own package

davidben
authored and
Boringssl LUCI CQ
committed
Re-add go:build ignore lines

davidben
authored and
Boringssl LUCI CQ
committed
Align TRUST_TOKEN_pst_v1_voprf with draft-21 of VOPRF

dvorak42
authored and
Boringssl LUCI CQ
committed
Squeeze a block at a time when computing the matrix in Kyber

davidben
authored and
Boringssl LUCI CQ
committed

Commits on Apr 26, 2023

Specify the TLS cipher order more straightforwardly

davidben
authored and
Boringssl LUCI CQ
committed
Add some missing includes

davidben
authored and
Boringssl LUCI CQ
committed
X509_sign, etc., should return the length of the signature on success

davidben
authored and
Boringssl LUCI CQ
committed
Remove go:build ignore from convert_wycheproof

davidben
authored and
Boringssl LUCI CQ
committed
Don't copy all of bssl-sys into the CMake build directory

davidben
authored and
Boringssl LUCI CQ
committed
Remove unimplemented SSL BIO_ctrl values

davidben
authored and
Boringssl LUCI CQ
committed
Move the old SPKAC types to their own section

davidben
authored and
Boringssl LUCI CQ
committed
runner: Remove an unnecessary use of AllCurves

davidben
authored and
Boringssl LUCI CQ
committed

Commits on Apr 28, 2023

Support WPA 3.1 "enterprise" mode.

agl
authored and
Boringssl LUCI CQ
committed
Invalidated cached RSA, DH, and DSA state when changing keys

davidben
authored and
Boringssl LUCI CQ
committed

Commits on May 1, 2023

Add Kyber to runner tests

agl
authored and
Boringssl LUCI CQ
committed
Disable BlindingCacheConcurrency on FreeBSD.

davidben
authored and
Boringssl LUCI CQ
committed
Add new APIs for creating RSA keys

davidben
authored and
Boringssl LUCI CQ
committed

Commits on May 2, 2023

Replace interface{} with any

davidben
authored and
Boringssl LUCI CQ
committed
Update references to draft-irtf-cfrg-gcmsiv

davidben
authored and
Boringssl LUCI CQ
committed
Implement the AuthEncap/AuthDecap HPKE modes

davidben
authored and
Boringssl LUCI CQ
committed