)]}'
{
  "commit": "a2eba23aceb2a05ddb96c3661596784fb1698b96",
  "tree": "10263d09398d3c815ecfbf900c321e120ba409d0",
  "parents": [
    "846686325c6681b648f02a2275e6eef1991c979e"
  ],
  "author": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Sat Jun 20 10:00:44 2026 +0100"
  },
  "committer": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Sat Jun 20 14:43:36 2026 +0100"
  },
  "message": "[crypto] Allow for input keying material to overlap output\n\nCalling hkdf_extract() with no salt and with the input keying material\nprovided in the same buffer that will hold the output pseudorandom key\nis a valid potential use case.  This will currently fail silently\nsince the input keying material would be overwritten by the\nconstructed all-zero salt before being consumed.\n\nFix by using a local buffer for the all-zero salt, rather than\nconstructing the salt in the output buffer.\n\nDocument the permitted behaviour in terms of overlapping input and\noutput buffers for both hkdf_extract() and hkdf_expand(), and extend\nthe test cases to verify this behaviour.\n\nSigned-off-by: Michael Brown \u003cmcb30@ipxe.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "97f856df34b8c2926465d495d13bcc8c62b3948e",
      "old_mode": 33188,
      "old_path": "src/crypto/hkdf.c",
      "new_id": "291eafe64e36a12808442d9f1c05b73de10b8ca5",
      "new_mode": 33188,
      "new_path": "src/crypto/hkdf.c"
    },
    {
      "type": "modify",
      "old_id": "95b19d10b7ab02f249f402709fd590eb40f60159",
      "old_mode": 33188,
      "old_path": "src/tests/hkdf_test.c",
      "new_id": "9acfa828ae5c697b56db97955d95846c4f4f5a53",
      "new_mode": 33188,
      "new_path": "src/tests/hkdf_test.c"
    }
  ]
}