1. b9e5359 pbkdf2: turn into a wrapper for crypto/pbkdf2 by Filippo Valsorda · 2 days ago master
  2. cc0e4fc hkdf: forward Extract to the standard library by Filippo Valsorda · 2 days ago
  3. a8e9237 x509roots/fallback: update bundle by Gopher Robot · 11 days ago
  4. 03ca0dc go.mod: update golang.org/x dependencies by Gopher Robot · 2 weeks ago v0.50.0
  5. 8400f4a ssh: respect signer's algorithm preference in pickSignatureAlgorithm by Nicola Murino · 10 weeks ago
  6. 81c6cb3 ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength by Rob Picard · 6 weeks ago
  7. 982eaa6 go.mod: update golang.org/x dependencies by Gopher Robot · 6 weeks ago v0.49.0
  8. 159944f ssh,acme: clean up tautological/impossible nil conditions by Neal Patel · 3 months ago
  9. a408498 acme: only require prompt if server has terms of service by Sean Liao · 6 months ago
  10. cab0f71 all: upgrade go directive to at least 1.25.0 [generated] by Gopher Robot · 2 months ago
  11. 2f26647 x509roots/fallback: update bundle by Gopher Robot · 2 months ago
  12. e08b067 go.mod: update golang.org/x dependencies by Gopher Robot · 2 months ago v0.48.0
  13. 7d0074c scrypt: fix panic on parameters <= 0 by Juergen Graf · 4 months ago
  14. 506e022 go.mod: update golang.org/x dependencies by Gopher Robot · 3 months ago v0.47.0
  15. 7dacc38 chacha20poly1305: error out in fips140=only mode by Filippo Valsorda · 5 months ago
  16. 19acf81 go.mod: update golang.org/x dependencies by Gopher Robot · 5 months ago v0.46.0
  17. 3a1c6b4 x509roots/fallback: update bundle by Gopher Robot · 5 months ago
  18. f4602e4 ssh/agent: fix flaky test by ensuring a writeable home directory by Michael Stapelberg · 5 months ago
  19. 4e0068c go.mod: update golang.org/x dependencies by Gopher Robot · 5 months ago v0.45.0
  20. e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs by Neal Patel · 5 months ago
  21. f91f7a7 ssh/agent: prevent panic on malformed constraint by Neal Patel · 8 months ago
  22. 2df4153 acme/autocert: let automatic renewal work with short lifetime certs by Sean Liao · 6 months ago
  23. bcf6a84 acme: pass context to request by Sean Liao · 6 months ago
  24. b4f2b62 ssh: fix error message on unsupported cipher by Santhanam · 6 months ago
  25. 79ec3a5 ssh: allow to bind to a hostname in remote forwarding by Nicola Murino · 1 year, 9 months ago
  26. 122a78f go.mod: update golang.org/x dependencies by Gopher Robot · 5 months ago v0.44.0
  27. c0531f9 all: eliminate vet diagnostics by Sean Liao · 6 months ago
  28. 0997000 all: fix some comments by cuishuang · 6 months ago
  29. 017a1aa chacha20poly1305: panic on dst and additionalData overlap by Sean Liao · 6 months ago
  30. cf29fa9 sha3: make it mostly a wrapper around crypto/sha3 by Filippo Valsorda · 7 months ago
  31. 0b7aa0c ssh: use reflect.TypeFor instead of reflect.TypeOf by cuishuang · 7 months ago
  32. 1faea29 all: fix some typos in comment by cuishuang · 7 months ago
  33. 627cb89 go.mod: update golang.org/x dependencies by Gopher Robot · 7 months ago v0.43.0
  34. dca4914 acme: fix autocert TestHTTPHandlerDefaultFallback by Daniel McCarney · 7 months ago
  35. 1336e21 x509roots/fallback: update bundle by Gopher Robot · 7 months ago
  36. 2beaa59 ssh: add VerifiedPublicKeyCallback by Nicola Murino · 1 year, 4 months ago
  37. 66c3d8c ssh: add support for FIPS mode by Nicola Murino · 8 months ago
  38. ddb4e80 ssh: remove custom contains, use slices.Contains by Nicola Murino · 7 months ago
  39. f4d47b0 ssh: return clearer error when signature algorithm is used as key format by Nicola Murino · 9 months ago
  40. 96dc232 x509roots/fallback/bundle: add bundle package to export root certs by Michael Stapelberg · 10 months ago
  41. 8c9ba31 all: freeze and deprecate more packages by Filippo Valsorda · 8 months ago
  42. 559e062 ssh/agent: return an error for unexpected message types by Nicola Murino · 8 months ago
  43. 5307a0c go.mod: update golang.org/x dependencies by Gopher Robot · 8 months ago v0.42.0
  44. 9d77937 acme: include order problem in OrderError by Daniel McCarney · 11 months ago
  45. 8f580de ssh: remove Go 1.24 build tag for ML-KEM kex by Nicola Murino · 8 months ago
  46. a4d1237 ssh/knownhosts: improve IPv6 support in Normalize by Nicola Murino · 9 months ago
  47. b8d8dae curve25519: include potential fips140=only error in panic message by Filippo Valsorda · 8 months ago
  48. f5a2eab ssh: use curve25519.X25519 instead of curve25519.ScalarMult by Filippo Valsorda · 8 months ago
  49. 44ecf3a all: upgrade go directive to at least 1.24.0 [generated] by Gopher Robot · 8 months ago
  50. ef5341b go.mod: update golang.org/x dependencies by Gopher Robot · 9 months ago v0.41.0
  51. b999374 acme: fix pebble subprocess output data race by Daniel McCarney · 9 months ago
  52. c247dea x509roots/fallback: store bundle certs directly in DER by Mateusz Poliwczak · 11 months ago
  53. 1fda731 acme: increase pebble test waitForServer attempts by Daniel McCarney · 9 months ago
  54. 1b4c3d2 x509roots/fallback: update bundle by Gopher Robot · 9 months ago
  55. b903b53 acme: capture pebble test subprocess stdout/stderr by Daniel McCarney · 10 months ago
  56. 459a9db go.mod: update golang.org/x dependencies by Gopher Robot · 10 months ago v0.40.0
  57. 74e709a ssh: add AlgorithmNegotiationError by Nicola Murino · 2 years, 3 months ago
  58. b3790b8 acme: fix TLSALPN01ChallengeCert for IP address identifiers by Daniel McCarney · 11 months ago
  59. 1dc4269 acme: add Pebble integration testing by Daniel McCarney · 11 months ago
  60. 97bf787 blake2b: implement hash.XOF by qiulaidongfeng · 1 year, 3 months ago
  61. 952517d x509roots/fallback: update bundle by Gopher Robot · 10 months ago
  62. c6fce02 ssh: refuse to parse certificates that use a certificate as signing key by Nicola Murino · 11 months ago
  63. 0ae49b8 ssh: reject certificate keys used as signature keys for SSH certs by Nicola Murino · 11 months ago
  64. 3bf9d2a ssh/test: skip KEX test if unsupported by system SSH client by Nicola Murino · 11 months ago v0.39.0
  65. 9bab967 go.mod: update golang.org/x dependencies by Gopher Robot · 11 months ago
  66. 4f9f0ca x509roots/fallback: add init time benchmark by Mateusz Poliwczak · 11 months ago
  67. eac7cf0 x509roots/fallback: move parsing code to a non-generated file by Mateusz Poliwczak · 11 months ago
  68. 18228cd acme: return err from deprecated TLS-SNI-[01|02] functions by Daniel McCarney · 11 months ago
  69. 73f6362 acme: remove dead code by Daniel McCarney · 11 months ago
  70. ebc8e46 ssh: add server side support for Diffie Hellman Group Exchange by Nicola Murino · 2 years, 5 months ago
  71. e944286 ssh: expose negotiated algorithms by Nicola Murino · 2 years, 5 months ago
  72. 78a1fd7 ssh: automatically add curve25519-sha256@libssh.org KEX alias by Nicola Murino · 12 months ago
  73. ac58737 ssh: export supported algorithms by Nicola Murino · 12 months ago
  74. 9dbbcf0 bcrypt: update InvalidCostError message to describe cost range inclusive by redwrasse · 12 months ago
  75. 9f6bf84 x509roots/fallback: update bundle by Gopher Robot · 12 months ago
  76. aae6e61 go.mod: update golang.org/x dependencies by Gopher Robot · 12 months ago v0.38.0
  77. 9c1aa6a ssh/test: reset the random source before capturing a recording by Nicola Murino · 1 year ago
  78. 8819902 ssh/test: enable Diffie-Hellman key exchange algorithms by Nicola Murino · 1 year ago
  79. 3f311e4 acme: return error from pre-authorization when unsupported by Ian Stapleton Cordasco · 1 year, 1 month ago
  80. 1f7c62c ssh/test: skip unsupported tests on js/wasm by Nicola Murino · 1 year ago
  81. a5f8048 acme/autocert: use standard functions to pick the cache directory by Alberto Bertogli · 3 years, 7 months ago
  82. 958cde8 Revert "chacha20: add loong64 SIMD implementation" by Michael Pratt · 1 year ago
  83. 51f005c Revert "salsa20: add loong64 SIMD implementation" by Michael Pratt · 1 year ago
  84. 7c35866 Revert "argon2: add loong64 SIMD implementation" by Michael Pratt · 1 year ago
  85. 0091fc8 Revert "blake2s: add loong64 SIMD implementation" by Michael Pratt · 1 year ago
  86. 388684e argon2: add loong64 SIMD implementation by Xiaolin Zhao · 1 year, 1 month ago
  87. 953e809 chacha20: add loong64 SIMD implementation by Xiaolin Zhao · 1 year, 4 months ago
  88. 18f7707 salsa20: add loong64 SIMD implementation by Xiaolin Zhao · 1 year, 1 month ago
  89. 2ebaafc blake2s: add loong64 SIMD implementation by Xiaolin Zhao · 1 year, 1 month ago
  90. 4bc0711 acme: use built-in max/min to simplify the code by cuishuang · 1 year ago
  91. c96bba2 ssh: add mlkem768x25519-sha256 Key Exchange algorithm by Nicola Murino · 1 year, 3 months ago
  92. 6b13eef ssh: add integration tests against a reference implementation by Nicola Murino · 1 year, 3 months ago
  93. 959f8f3 go.mod: update golang.org/x dependencies by Gopher Robot · 1 year, 1 month ago v0.37.0
  94. 769bcd6 ssh: use the configured rand in kex init by Nicola Murino · 1 year, 3 months ago
  95. d0a798f cryptobyte: fix typo 'octects' into 'octets' for asn1.go by Simon Josefsson · 1 year, 1 month ago
  96. acbcbef acme: remove unnecessary []byte conversion by Mateusz Poliwczak · 3 years, 4 months ago
  97. 376eb14 x509roots: support constrained roots by Roland Shoemaker · 1 year, 2 months ago
  98. b369b72 crypto/internal/poly1305: implement function update in assembly on loong64 by Xiaolin Zhao · 1 year, 4 months ago
  99. 6b853fb ssh/knownhosts: check more than one key by Carlos A Becker · 1 year, 2 months ago
  100. 49bf5b8 go.mod: update golang.org/x dependencies by Gopher Robot · 1 year, 2 months ago v0.36.0