This specifically doesn't add support for X25519 certificates.
Refactored parsePublicKey not to ...

Fixes #56052

Change-Id: Icacba0ed0f77519bca2140c8af68407af97f9734
Reviewed-on: https://go-revie...

When PSSSaltLengthAuto is passed to SignPSS, and the key size is too
small to create a valid sal...

Should fix builds.

Change-Id: I309eccec8d08931b1ef8fee9327a08a97c6bf871
Reviewed-on: https://go...

Change-Id: I3fb4331c2b1b6adafbac3e76eaf66c79cd5ef56f
Reviewed-on: https://go-review.googlesource...

We already had some tests for special cases such as PSS with 513 bit
keys. The upcoming backend ...

Change-Id: Idee03a0c3e4bdb7d6b495f567db8bd644af480e5
Reviewed-on: https://go-review.googlesource...

As noticed in the review of the CRL RawIssuer updates (https://go-review.googlesource.com/c/go/+...

Fixes #26624

Change-Id: Ifab3fc2209d71b9a7de383eaa5786b7446de25fa
Reviewed-on: https://go-revie...

This loads the keys once per call, not once per block. This
has the effect of unrolling the inne...

We have been expanding our use of GODEBUG for compatibility,
and the current implementation forc...

FIPS-140 has been updated to allow 4096-bit RSA keys.
Allow them in certificate processing.

For...

Change-Id: Ib6ea1bd04d9b06542ed2b0f453c718115417c62c
Reviewed-on: https://go-review.googlesource...

Update crypto/ecdh to use boringcrypto when enabled.

Change-Id: Idd0ce06a22b1a62289b383c4689380...

This was the last piece of ref10 code, including the infamous "Christmas
tree" in scMulAdd, that...

crypto/rsa assumes RSA OAEP uses the same hash to be used for both the label
and the mask genera...

FIPS-140 has been updated to allow 4096-bit RSA keys.
Allow them in certificate processing.

Fix...

This allows programs that want SHA1 support to call os.Setenv at startup
instead of insisting th...

This allows programs that want SHA1 support to call os.Setenv at startup
instead of insisting th...

In verifyServerCertificate parse certificates using the global
certificate cache.

This should s...

Adds a BoringSSL CRYPTO_BUFFER_POOL style reference counted intern
table for x509.Certificates. ...

Change-Id: Ic16824482142d4de4d0b949459e36505ee944ff7
Reviewed-on: https://go-review.googlesource...

In following with Roland's TODO, switch TestDisableSHA1ForCertOnly to ParseRevocationList(...) o...

Per discussion with Roland Shoemaker, this updates
x509.CreateRevocationList to mirror the behav...

Two edge cases that were mentioned in the docs are actually impossible:

* For NIST curves, EC...

This allows programs that want SHA1 support to call os.Setenv at startup
instead of insisting th...

As of CL 443058, rand.Seed is not necessary to call,
nor is it a particular good idea.

For #548...

Change-Id: I73ace9f5b9481f3b88be0c5f6b9c5076d2f82c7f
Reviewed-on: https://go-review.googlesource...

Clarify documentation in cases where certificates returned from
various methods are not owned by...

Updates #31804

Change-Id: I5a48dfc57401576902674aff20b557e4a8ce8ab8
Reviewed-on: https://go-rev...

This minimizes addi usage inside vector heavy loops. This
results in a small performance uptick ...

The package doc included the copying header by mistake.

Change-Id: I37ac2d14b1b8a389e6b603fbb1c...

Change-Id: I375233dc700adbc58a6d4af995d07b352bf85b11
GitHub-Last-Rev: ef129205231b892f61b0135c87...

SecCreatePolicySSL returns null when called from a binary that has a
strange path. This seems to...

For #53821

Change-Id: I1b5c62288eca20ff50f6d8d979cf82df24d4545b
GitHub-Last-Rev: 266148570a6465...

Change-Id: I06f85f78c4c802142fc9207b100753decd568274
GitHub-Last-Rev: 4ad4c0f5e93df9ea83deb86b81...

Change-Id: I022a221e2d73cd8c70e8e04b7046c388748646a5
Reviewed-on: https://go-review.googlesource...

Change-Id: I92e110023739c6f8f7815c7e47ad7639c4e8812d
Reviewed-on: https://go-review.googlesource...

Fix the coversion between our sentinel salt length variables and the
BoringSSL versions in SignR...

Change-Id: I40fdfbd5cfb9f5ccb80d55bca28ff9ba1ec490f3
Reviewed-on: https://go-review.googlesource...

Change-Id: I5b063070a17bdeed57e73bfb76125b94268b3bc9
Reviewed-on: https://go-review.googlesource...

Replace custom append functions in the hash functions with the implementation of the encoding/bi...

Change-Id: Ib6196f01b1927ea8a84c095f445320f03a514dd1
Reviewed-on: https://go-review.googlesource...

Merge go1.18.6

See https://github.com/ooni/probe/issues/2256

See https://github.com/ooni/probe/issues/2256

Updates #54854

Change-Id: I8a64a1176cbe16489e1fd21c66a7abc7d8b8e9b3
Reviewed-on: https://go-rev...

Change-Id: I73081b85e763122be1f5c0dbab25cecc9cf809df
Reviewed-on: https://go-review.googlesource...

This CL enable sha512 for arm64 and ~390% performance
improvement.

Contributed under the Go Lic...

Updates #49126
Fixes #54643

Change-Id: I9d6f6392b1a6748bdac1d2c6371b22d75829a2b6
Reviewed-on: h...

Updates #49126
Fixes #54642

Change-Id: I9d6f6392b1a6748bdac1d2c6371b22d75829a2b6
Reviewed-on: h...

MarshalPKIXPublicKey, CreateCertificate, CreateCertificateRequest,
MarshalECPrivateKey, and Mars...

MarshalPKIXPublicKey, CreateCertificate, CreateCertificateRequest,
MarshalECPrivateKey, and Mars...

Fixes #49126

Change-Id: I9d6f6392b1a6748bdac1d2c6371b22d75829a2b6
Reviewed-on: https://go-revie...

fix: backport darwin/arm64 patches from main

This diff backports code to correctly handle darwin/arm64 from
`main` (see https://github.com/oo...

fix: ensure the conn we export implements NetConn

Part of https://github.com/ooni/probe/issue...

I am not sure there's any issue in _building_ against the latest
stable release of oocrypto (and...

Update the version of BoringCrypto to boringssl tag
fips-20210429, for which FIPS approval is "i...

This diff ensures we hardcode the capabilities of darwin/arm64.

While there, strive to make t...

Merged go1.19 src/crypto into ooni/oocrypto

See https://github.com/ooni/probe/issues/2211

This merge has been interesting. It took quite some time and I
realized that I could further sim...

Following CL 424454, using command

rg --multiline " the\s{1,}the " *
rg --multiline " the...

Generics lets us write Cache[K, V] instead of using unsafe.Pointer,
which lets us remove all the...

Export cipher.xorBytes as subtle.XORBytes, for proposal #53021,
to provide fast XOR to cryptogra...

This avoids an import conflict with crypto/subtle.
CL 424175 does the same for x/crypto.

Change...

Change-Id: I86af2508a31ea1e79d362c22ff4fac8900536761
GitHub-Last-Rev: d2a1ddccbd32499d7c379941da...

If a program only uses ecdh.P256(), the implementation of the other
curves shouldn't end up in t...

We use crypto/internal/edwards25519/field to implement X25519 directly,
so that golang.org/x/cry...

Change the type of Conn.handshakeStatus from an atomically
accessed uint32 to an atomic.Bool. Ch...

So we don't have to duplicate the logic to detect noopt builder in
multiple places.

Based on kh...

As it can't appear in user package paths.

There is a hack for handling "go:buildid" and "type:*...

Fixes #53198

Change-Id: I0c35fb278543bd487d19ae15c8175e88c45e2c1e
GitHub-Last-Rev: a3e29d2332ad...

Change-Id: I228a23754656b41843573bd4217de4df46c9df36
Reviewed-on: https://go-review.googlesource...

Similar to certificate serial numbers, RFC 5280 restricts the length of
the CRL number field to ...

When checking to see if a CRL entry has any extensions, attempt to read
them from the individual...

The x509.RevocationList type has two fields which correspond to
extensions, rather than native f...

There was a deprecation message on RevokedCertificate which was
intended to be on CertificateLis...

Adds documentation for a handful of RevocationList fields.

Updates #50674

Change-Id: I26b83855...

Requested by the maintainers of the OpenSSL-based fork of Go+BoringCrypto,
to make maintaining t...

This CL addresses the comments on CL 403154.

For #51940.

Change-Id: I99bb3530916d469077bfbd530...

Upgrade to go1.18.3

Conflicts:
rand/rand.go
rand/rand_batched.go
rand/rand_batched_test.go
rand/rand_getentropy....

The Read and Write methods of *tls.Conn call Handshake
unconditionally, every time they are call...

As required by RFC 8446, section 4.6.1, ticket_age_add now holds a
random 32-bit value. Before t...

Use the batched reader to chunk large Read calls on windows to a max of
1 << 31 - 1 bytes. This ...

feat(tls): NewClientConnStdlib should return oohttp.TLSConn like type

See https://github.com/...

By doing that, we can replace code in ooni/probe-cli that performs
the TLS handshake with code u...

feat(tls): add stdlib-aware Client-like factory

See https://github.com/ooni/probe/issues/2106

This commit adds a factory that works like tls.Client and, in
particular, takes in input a crypt...

chore: upgrade to go1.18.2