)]}'
{
  "commit": "61a75eca5ff1abd4d1fda134cb67647dce4e343b",
  "tree": "ed65625886983692ce467e458bc04e4f914a91d6",
  "parents": [
    "2d66bfa038aa3e575ded86d50525f966a41cf4fa"
  ],
  "author": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Thu Aug 27 12:24:33 2026 +0100"
  },
  "committer": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Thu Aug 27 12:47:57 2026 +0100"
  },
  "message": "[crypto] Ensure that a closed channel is left with unusable ciphers\n\nWe currently protect against a consumer that erroneously uses values\ngenerated from the ephemeral master secret after closing a previously\nopened channel, by deliberately replacing the ephemeral master secret\nrather than zeroing it when the channel is closed.\n\nExtend this concept to protect against a consumer that erroneously\nuses the ciphers after closing a previously opened channel (or that\nerroneously uses the ciphers from a channel that failed to open\nsuccessfully), by using the dead ciphers by default and by enabling\nthe plaintext (null) ciphers when and only when the channel has been\nsuccessfully opened.\n\nSigned-off-by: Michael Brown \u003cmcb30@ipxe.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c2252cdc9c219fae87ed65daff483a5caf07ef3b",
      "old_mode": 33188,
      "old_path": "src/crypto/channel.c",
      "new_id": "36e225489b1117801b50c90a2b8432606e13e89c",
      "new_mode": 33188,
      "new_path": "src/crypto/channel.c"
    },
    {
      "type": "modify",
      "old_id": "fb90cf91233956dbf5cd75ec13a97e211b086f48",
      "old_mode": 33188,
      "old_path": "src/include/ipxe/channel.h",
      "new_id": "570ac2f0a36522fab59885930dca6ae0424f7828",
      "new_mode": 33188,
      "new_path": "src/include/ipxe/channel.h"
    }
  ]
}