1. c6ba99d Upgrade cryptography from 2.5 to 3.3 by Lucia Li · 2 years, 7 months ago
  2. af53f8c [LSC] Add LOCAL_LICENSE_KINDS to external/python/cryptography by Bob Badour · 3 years, 4 months ago
  3. 4db398a Merge commit '83aa36d' into import by Kevin Cheng · 5 years ago
  4. 83aa36d changelog and version bump for 2.5 (#4729) by Paul Kehrer · 5 years ago
  5. 2e9c7df allow asn1 times of 1950-01-01 and later. (#4728) by Paul Kehrer · 5 years ago
  6. 767fa85 allow 32-bit platforms to encode certs with dates > unix epoch (#4727) by Paul Kehrer · 5 years ago
  7. 5b3e735 bind EVP_R_MEMORY_LIMIT_EXCEEDED and update a test (#4726) by Paul Kehrer · 5 years ago
  8. 2de450a deprecate encode_point and migrate all internal callers (#4720) by Paul Kehrer · 5 years ago
  9. a07b1f5 add support for encoding compressed points (#4638) by Paul Kehrer · 5 years ago
  10. 5fe88ea shake128/256 support (#4611) by Paul Kehrer · 5 years ago
  11. fdc61a2 expose the ed448 nid (#4717) by Paul Kehrer · 5 years ago
  12. 7f8d9c0 support byteslike in KBKDFHMAC (#4711) by Paul Kehrer · 5 years ago
  13. a779944 support byteslike in ConcatKDF{HMAC,Hash}, Scrypt, and X963KDF (#4709) by Paul Kehrer · 5 years ago
  14. 62e22a5 Support byteslike in HKDF and PBKDF2HMAC (#4707) by Paul Kehrer · 5 years ago
  15. 7f63e5b support bytes-like for X25519PrivateKey.from_private_bytes (#4698) by Paul Kehrer · 5 years ago
  16. 5b4c81e x448 and x25519 should enforce key lengths in backend (#4703) by Paul Kehrer · 5 years ago
  17. 8d9ea52 support byteslike in hmac update (#4705) by Paul Kehrer · 5 years ago
  18. b480d2d support byteslike in hash updates (#4702) by Paul Kehrer · 5 years ago
  19. bfc6fae support bytes-like keys in CMAC and HMAC contexts (#4701) by Paul Kehrer · 5 years ago
  20. c6656af add support for byteslike password/data to load_{pem,der}_private_key (#4693) by Paul Kehrer · 5 years ago
  21. 82177c2 support byteslike in aead for key and nonce (#4695) by Paul Kehrer · 5 years ago
  22. 9c2f3d6 support byteslike in X448PrivateKey.from_private_bytes (#4694) by Paul Kehrer · 5 years ago
  23. 2f34994 add support for byteslike on password and data for pkcs12 loading (#4690) by Paul Kehrer · 5 years ago
  24. 9b49a87 Remove a dead assignment (#4692) by Alex Gaynor · 5 years ago
  25. c6c25c2 Serialization x25519 (#4688) by Paul Kehrer · 5 years ago
  26. dbcbffa support x448 public/private serialization both raw and pkcs8 (#4653) by Paul Kehrer · 5 years ago
  27. 9b19810 Fixes #4683 -- fixed linux kernel version that has getrandom (#4684) by Alex Gaynor · 5 years ago
  28. 19b5d24 Add bindings to get SRTP protection profile (#4679) by Jeremy Lainé · 5 years ago
  29. 60f264b add signature_hash_algorithm to OCSPResponse (#4681) by Paul Kehrer · 5 years ago
  30. f7567f6 HTTPS a bunch of links in random places (#4666) by Alex Gaynor · 5 years ago
  31. 8f75d07 Fixes #4645 -- poll() on /dev/random before reading from /dev/urandom on Linux (#4656) by Alex Gaynor · 5 years ago
  32. 815301a Improve error message for unsupported ciphers (#4650) by Alex Gaynor · 5 years ago
  33. 7deaf5a handle empty byte string in from_encoded_point (#4649) by Paul Kehrer · 5 years ago
  34. 8241557 Remove spaces from RFC 4514 strings for better compliance (#4643) (#4646) by Marti Raudsepp · 5 years ago
  35. 89e1e34 deprecate old from_encoded_point (#4640) by Paul Kehrer · 5 years ago
  36. 4c5740a Compressed point support (#4629) by Paul Kehrer · 5 years ago
  37. 75cce22 convert some asserts to function calls (#4636) by Paul Kehrer · 5 years ago
  38. 6214296 ec key creation by curve name refactored into a method (#4634) by Paul Kehrer · 5 years ago
  39. 3c68250 allow bytes-like for key/iv/data for symmetric encryption (#4621) by Paul Kehrer · 5 years ago
  40. 5bc3bf7 Adds a more descriptive error msg for wrong wrapping (#4504) by André Almeida · 5 years ago
  41. bddcd52 Updated BLAKE2s and BLAKE2b error messages from unsupportedalgorithm … (#4519) by Colin Metcalf · 5 years ago
  42. fbbd54f Raise MemoryError when backend.derive_scrypt can't malloc enough (#4592) by Tux · 5 years ago
  43. c3d38b5 Add RFC 4514 Distinguished Name formatting for Name, RDN and NameAttribute (#4304) by Marti Raudsepp · 5 years ago
  44. 7e42282 remove idna as a primary dependency (#4624) by Paul Kehrer · 5 years ago
  45. fec719b encode IssuingDistributionPoint (#4618) by Paul Kehrer · 6 years ago
  46. afaa4c6 centralize our bytes check (#4622) by Paul Kehrer · 6 years ago
  47. 3531439 switch osrandom engine to blocking mode when getting entropy (#4620) by Paul Kehrer · 6 years ago
  48. eb4e7b1 reuse the libressl branch for OpenSSL built with OPENSSL_NO_PSK (#4619) by Paul Kehrer · 6 years ago
  49. 76e92e6 refactor some code into separate functions in asn1 encode (#4617) by Paul Kehrer · 6 years ago
  50. a84c5cd allow multi-valued RDNs (#4616) by Paul Kehrer · 6 years ago
  51. eb3e2e0 IssuingDistributionPoint support (parse only) (#4552) by Paul Kehrer · 6 years ago
  52. e4e7b89 PKCS12 Basic Parsing (#4553) by Paul Kehrer · 6 years ago
  53. c8dd3c0 Move SSH serialization to it's own file (#4607) by Alex Gaynor · 6 years ago
  54. bf621ba refactor serialization module into package (#4606) by Paul Kehrer · 6 years ago
  55. 8ec59be Added comments reminding us to improve this code when we go 1.1.1+ only (#4605) by Alex Gaynor · 6 years ago
  56. 6f88e01 X448 support (#4580) by Paul Kehrer · 6 years ago
  57. 579dfcf refactor x25519 exchange into utils (#4603) by Paul Kehrer · 6 years ago
  58. eda8a41 Import idna lazily to reduce our memory consumption (#4601) by Alex Gaynor · 6 years ago
  59. 3065e16 add sha3 support (#4573) by Paul Kehrer · 6 years ago
  60. e7a6229 Adjust DTLS check (#4593) by Rosen Penev · 6 years ago
  61. d373466 add EVPDigestFinalXOF for extendable output functions (#4589) by Paul Kehrer · 6 years ago
  62. 0dc5e3c refactor x25519 keygen into evp_pkey_keygen (#4587) by Paul Kehrer · 6 years ago
  63. b5d07b7 Ed bindings (#4586) by Paul Kehrer · 6 years ago
  64. d3b1804 error if the key length for x25519 isn't 32 bytes (#4584) by Paul Kehrer · 6 years ago
  65. d67fa82 add SHA512/224 and SHA512/256 support (#4575) by Paul Kehrer · 6 years ago
  66. 13365ef add bindings for early data (#4582) by Paul Kehrer · 6 years ago
  67. bcd3e8c add a little bit of x25519 interface docs we missed (#4574) by Paul Kehrer · 6 years ago
  68. 7b57fe1 x448 bindings (#4577) by Paul Kehrer · 6 years ago
  69. 3666786 add EVP raw key bindings (#4578) by Paul Kehrer · 6 years ago
  70. a30013b add a few more EC OIDs (#4572) by Paul Kehrer · 6 years ago
  71. 6654329 Remove unnecessary use of six.binary_type (#4569) by Jon Dufresne · 6 years ago
  72. 5edac0c reopen master for 2.5 development (#4571) by Paul Kehrer · 6 years ago
  73. db08466 Revert O_CLOEXEC change to fix builds (#4570) by Alex Gaynor · 6 years ago
  74. 5e52fdc bump versions and update changelog for 2.4 release (#4568) by Paul Kehrer · 6 years ago
  75. ea34c1a add various new TLS bindings (#4555) by Paul Kehrer · 6 years ago
  76. 95af1e3 add EC OIDs (#4435) by Paul Kehrer · 6 years ago
  77. 8f24aef move ObjectIdentifier to break an upcoming import cycle (#4550) by Paul Kehrer · 6 years ago
  78. 74ce48c Add eq/ne/hash to PrecertificateSignedCertificateTimestamps (#4534) by Paul Kehrer · 6 years ago
  79. d91401d do not pass conversion on Solaris (#4545) by Bernát Gábor · 6 years ago
  80. 983b35e create & use _evp_md_from_algorithm and _evp_md_non_null_from_algorithm (#4542) by Paul Kehrer · 6 years ago
  81. d9451fb add SCT_get0_signature (#4540) by Paul Kehrer · 6 years ago
  82. e617c5a OCSP response builder (#4485) by Paul Kehrer · 6 years ago
  83. 6e756ae add IDP OID and docs (#4533) by Paul Kehrer · 6 years ago
  84. 44ccbf0 refactor _decode_dist_points (#4536) by Paul Kehrer · 6 years ago
  85. 38a3c41 add bindings for supporting the issuing distribution point CRL extension (#4532) by Paul Kehrer · 6 years ago
  86. dc30b8e add _create_asn1_time (#4524) by Paul Kehrer · 6 years ago
  87. 4b840d5 refactor set_asn1_time to take a datetime (#4516) by Paul Kehrer · 6 years ago
  88. 6345364 bind a constant for an error check (#4514) by Paul Kehrer · 6 years ago
  89. a9b4f86 next_update is not a required field on OCSP responses (#4513) by Paul Kehrer · 6 years ago
  90. a476453 Fixes #4500 -- use O_CLOEXEC when opening the /dev/urandom file descriptor (#4507) by Alex Gaynor · 6 years ago
  91. c07b5e7 Remove branch for old libressl versions that we don't support any more (#4505) by Alex Gaynor · 6 years ago
  92. ef18e61 Add definitions that help with hostname checking (#4492) by Kai Engert · 6 years ago
  93. 2a3c691 Use our cryptography-specific warning class (#4493) by Alex Gaynor · 6 years ago
  94. 788b859 OCSP response serialization (#4482) by Paul Kehrer · 6 years ago
  95. 0c07580 support extensions in the OCSP request builder (#4481) by Paul Kehrer · 6 years ago
  96. ff7e397 Cleanup _encode_asn1_str_gc: don't require the length as an argument (#4484) by Alex Gaynor · 6 years ago
  97. b8db668 add OCSP basic response extension parsing (#4479) by Paul Kehrer · 6 years ago
  98. 55c3310 consolidate the duplicate extension check (#4483) by Paul Kehrer · 6 years ago
  99. cdb7a2d additional OCSP bindings for the response builder (#4480) by Paul Kehrer · 6 years ago
  100. a07de31 support OCSP response parsing (#4452) by Paul Kehrer · 6 years ago