1. ff6e520 [crypto] Add AES acceleration using the Arm Cryptographic Extensions by Michael Brown · 5 days ago master
  2. 0214e43 [crypto] Add support for AES-NI hardware acceleration by Michael Brown · 7 days ago
  3. 7ada3e0 [crypto] Align AES round keys within the AES context by Michael Brown · 7 days ago
  4. c4023b9 [crypto] Allow for AES hardware acceleration by Michael Brown · 7 days ago
  5. d916dfc [librm] Enable the use of SSE instructions if supported by the CPU by Michael Brown · 6 days ago
  6. f582820 [librm] Preserve CR0 across virt_call() by Michael Brown · 6 days ago
  7. a69ad34 [librm] Preserve CR4 across virt_call() if FXSR is supported by Michael Brown · 7 days ago
  8. 8f334fd [librm] Skip runtime check for FXSR support in 64-bit builds by Michael Brown · 7 days ago
  9. af96045 [librm] Remove conditionalisation of the Tivoli VMM workaround by Michael Brown · 7 days ago
  10. aef505b [librm] Clarify layout of saved GDTR/IDTR by Michael Brown · 7 days ago
  11. b57bc76 [librm] Always disable paging when switching to protected mode by Michael Brown · 6 days ago
  12. 787ed93 [crypto] Treat high tag numbers as invalid by Michael Brown · 8 days ago
  13. d89765d [test] Add Project Wycheproof RSA-PSS signature verification tests by Michael Brown · 8 days ago
  14. 2061376 [test] Add a build target for slow self-tests by Michael Brown · 8 days ago
  15. 6935ca3 [test] Add Project Wycheproof ECDSA signature verification tests by Michael Brown · 8 days ago
  16. 1901e32 [crypto] Reject non-canonical ECDSA signature encodings by Michael Brown · 8 days ago
  17. 3a62e9d [crypto] Reject indefinite and unrepresentable length encodings by Michael Brown · 8 days ago
  18. de04e79 [crypto] Reject ASN.1 unsigned integers holding negative values by Michael Brown · 9 days ago
  19. 511dfd2 [crypto] Reject non-canonical ECDSA signature data structures by Michael Brown · 9 days ago
  20. 0a1d5fa [test] Simplify class hierarchy for Project Wycheproof import tool by Michael Brown · 10 days ago
  21. 2d2dd52 [test] Derive comment labels from Project Wycheproof input files by Michael Brown · 10 days ago
  22. ffa20bc [test] Derive algorithm names from Project Wycheproof input files by Michael Brown · 10 days ago
  23. d6032f0 [test] Use a single shared class for Project Wycheproof test flags by Michael Brown · 10 days ago
  24. b684d09 [test] Add Project Wycheproof RSA PKCS#1 signature verification tests by Michael Brown · 10 days ago
  25. d7226b9 [test] Add Project Wycheproof RSA PKCS#1 signature generation tests by Michael Brown · 10 days ago
  26. 7b46fa9 [test] Allow for invocation of individual Project Wycheproof tests by Michael Brown · 10 days ago
  27. 6e73f2a [crypto] Reject non-canonical RSA inputs by Michael Brown · 10 days ago
  28. c6bda17 [crypto] Add OID-identified algorithms for RSA with SHA512/224 and SHA512/256 by Michael Brown · 10 days ago
  29. 22727c6 [test] Add Project Wycheproof RSA PKCS#1 decryption tests by Michael Brown · 10 days ago
  30. 2b1eaff [crypto] Add missing padding length check in RSA decryption by Michael Brown · 10 days ago
  31. a2f979a [test] Allow for public-key algorithm tests with incomplete key pairs by Michael Brown · 11 days ago
  32. ef58461 [test] Allow for per-group definition code in Project Wycheproof tests by Michael Brown · 10 days ago
  33. d9df5d9 [test] Add schema and count validators in Project Wycheproof tests by Michael Brown · 10 days ago
  34. 35bd9a8 [test] Add Project Wycheproof AES-GCM tests by Michael Brown · 12 days ago
  35. e49e1db [crypto] Reject zero-length IVs for GCM ciphers by Michael Brown · 12 days ago
  36. 474abc9 [test] Add ability to test for cipher key and IV failures by Michael Brown · 12 days ago
  37. 5fe9965 [test] Add Project Wycheproof HKDF tests by Michael Brown · 12 days ago
  38. 6981f23 [test] Allow for HKDF tests without an expected PRK by Michael Brown · 12 days ago
  39. 16479af [test] Add Project Wycheproof HMAC tests by Michael Brown · 12 days ago
  40. a1c3847 [test] Allow for HMAC tests with partial expected output digest values by Michael Brown · 12 days ago
  41. 0a2a0ef [test] Reduce duplication in Project Wycheproof import tool by Michael Brown · 12 days ago
  42. d26e049 [test] Add Project Wycheproof import tool and key exchange tests by Michael Brown · 2 weeks ago
  43. 26f46a2 [tls] Reject a duplicate ServerHelloDone by Michael Brown · 2 weeks ago
  44. 61a75ec [crypto] Ensure that a closed channel is left with unusable ciphers by Michael Brown · 2 weeks ago
  45. 2d66bfa [crypto] Guard against mutation of certificate chain during validation by Michael Brown · 2 weeks ago
  46. 2ebc0d4 [tls] Add documentation to assist future code review by Michael Brown · 3 weeks ago
  47. 0167b5a [tls] Make certificate processing visibly safe at point of use by Michael Brown · 3 weeks ago
  48. 8ef91dd [tls] Make certificate sending visibly safe at point of use by Michael Brown · 3 weeks ago
  49. 11b793c [tls] Treat secure channel's cipher algorithm as definitive by Michael Brown · 3 weeks ago
  50. dc962df [tls] Ensure that ServerKeyExchange parsing method is always non-NULL by Michael Brown · 3 weeks ago
  51. c6e8c42 [tls] Use null key exchange algorithm as default for DHE and ECDHE by Michael Brown · 3 weeks ago
  52. 8383acf [tls] Ensure that broken cipher suites can never be selected by Michael Brown · 3 weeks ago
  53. cc87836 [tls] Remove redundant cipher suite name components in debug messages by Michael Brown · 3 weeks ago
  54. 202466d [tls] Use null handshake digest algorithm for the null cipher suite by Michael Brown · 3 weeks ago
  55. 7afbcac [tls] Use null MAC digest algorithm for AEAD ciphers by Michael Brown · 3 weeks ago
  56. d86e86d [tls] Guarantee that receive data buffer list is non-empty by Michael Brown · 3 weeks ago
  57. e97772c [tls] Use standalone secure channel and key schedule implementations by Michael Brown · 3 weeks ago
  58. 147ff45 [crypto] Add a standalone implementation of the TLS key schedules by Michael Brown · 3 weeks ago
  59. 2898206 [crypto] Add a generic implementation of a secure channel by Michael Brown · 7 weeks ago
  60. 53ac04e [tls] Clean up session management by Michael Brown · 3 weeks ago
  61. 5d40abe [tls] Clarify purpose of stored key exchange algorithm by Michael Brown · 3 weeks ago
  62. 8958a4a [tls] Separate the concepts of key schedule and secure channel by Michael Brown · 3 weeks ago
  63. 6322f50 [tls] Unify handling of ServerKeyExchange and ClientKeyExchange by Michael Brown · 3 weeks ago
  64. 350c4e2 [crypto] Avoid out-of-bounds read when using uninitialised AES context by Michael Brown · 3 weeks ago
  65. 0ab2277 [arm] Add missing condition code clobbers to inline assembly by Michael Brown · 3 weeks ago
  66. 87a2016 [s390x] Add missing condition code clobbers to inline assembly by Michael Brown · 3 weeks ago
  67. e6d0a97 [tls] Model classic RSA key transport as a key exchange algorithm by Michael Brown · 5 weeks ago
  68. c10c815 [dns] Add redundant explicit check for CNAME validity by Michael Brown · 5 weeks ago
  69. b65faae [bitmap] Avoid potential integer overflow when calculating block count by Michael Brown · 5 weeks ago
  70. 034ef2b [ata] Use data-transfer buffers for data-in and data-out by Michael Brown · 5 weeks ago
  71. 8baf1cd [crypto] Correct harmless arithmetic error in Weierstrass curve sizing by Michael Brown · 5 weeks ago
  72. 2fa9f8b [crypto] Add assertion on HKDF output length by Michael Brown · 5 weeks ago
  73. 719173a [crypto] Add redundant high-bit clamp to X25519 scalar multiple by Michael Brown · 5 weeks ago
  74. e7f0604 [crypto] Correct harmless arithmetic error in X25519 comments by Michael Brown · 5 weeks ago
  75. 257e8fa [test] Allow for key exchange tests without an expected public key by Michael Brown · 5 weeks ago
  76. 7e882b7 [crypto] Add a null key exchange algorithm by Michael Brown · 5 weeks ago
  77. e6e51cc [build] Move various pointer assignments after their length checks by Michael Brown · 5 weeks ago
  78. 6215a88 [usb] Guard against invalid descriptor lengths in USB configurations by Michael Brown · 5 weeks ago
  79. fe5f845 [vmbus] Check for packets shorter than their own header length by Michael Brown · 5 weeks ago
  80. bfc442a [ucode] Remove harmless read beyond end of malformed equivalence table by Michael Brown · 5 weeks ago
  81. 0f4a37b [doc] Add agent-facing instructions by Michael Brown · 5 weeks ago
  82. d00df08 [doc] Add security policy document by Michael Brown · 5 weeks ago
  83. d3f96b7 [ci] Add a workflow to trigger synchronisation in forks by Michael Brown · 5 weeks ago
  84. 6084600 [ci] Add a workflow to run in forks to synchronise from the upstream by Michael Brown · 5 weeks ago
  85. 36c2554 [settings] Fix limited out-of-bounds read in fetch_numeric_setting() by Michael Brown · 6 weeks ago
  86. 092ab54 [ipv4] Remove harmless but technically undefined left shift by Michael Brown · 6 weeks ago
  87. a1992fe [doc] Document the threat model relevant to iPXE by Michael Brown · 6 weeks ago
  88. 5e706ff [fcoe] Add assorted length checks by Michael Brown · 6 weeks ago
  89. 894a7e0 [efi] Avoid reading beyond end of command line by Michael Brown · 6 weeks ago
  90. ba98f2e [efi] Guard against invalid IpCnt values in the PXE IP address filter by Michael Brown · 6 weeks ago
  91. 45af75d [efi] Treat invalid device path components as ending the path by Michael Brown · 6 weeks ago
  92. 5de611b [efi] Fix check for well-formed device paths by Michael Brown · 6 weeks ago
  93. eaf9875 [elf] Avoid harmless integer overflows in image length checks by Michael Brown · 6 weeks ago
  94. 3812a69 [uhci] Fix descriptor count for zero-length stream transfers by Michael Brown · 6 weeks ago
  95. 897c87a [velocity] Correct direction of endianness conversion by Michael Brown · 6 weeks ago
  96. 3b06e41 [uhci] Add missing little-endian conversion by Michael Brown · 6 weeks ago
  97. 8cd4a0c [intelxl] Add missing little-endian conversions by Michael Brown · 6 weeks ago
  98. 1e8f4fe [build] Enable strict shift overflow warnings by Michael Brown · 6 weeks ago
  99. 07a0d64 [build] Fix technically undefined left shifts in disreputable code by Michael Brown · 6 weeks ago
  100. d2df712 [build] Fix technically undefined left shifts in reputable code by Michael Brown · 6 weeks ago