1. 3f62bf1 go.mod: update golang.org/x dependencies by Gopher Robot · 4 days ago master v0.57.0
  2. 86efde5 ssh: reject unexpected message types on established channels by Nicola Murino · 3 months ago v0.56.0
  3. a6cdac6 ssh: drop traffic on undecided channels by Nicola Murino · 3 months ago
  4. 39dc44e ssh: don't skip the source-address critical option in CheckCert by Nicola Murino · 4 weeks ago
  5. afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+ by Dmitri Shuralyov · 4 months ago
  6. 89f4e9b x509roots/fallback: update bundle by Gopher Robot · 3 weeks ago
  7. 71488c4 ssh/knownhosts: compare only public key portions for revocation by Nicola Murino · 4 weeks ago
  8. 82adefa ssh: synchronize unexpected response test by Daniel McCarney · 4 weeks ago
  9. c757c98 all: upgrade go directive to at least 1.26.0 [generated] by Gopher Robot · 3 weeks ago
  10. 593c81a ssh: correctly ignore pre-banner lines by Damien Miller · 5 weeks ago
  11. 46efc8b acme: add crypto.SignMessage test coverage by Daniel McCarney · 4 weeks ago
  12. e0a54fd acme: use crypto.SignMessage instead of calling (crypto.Signer).Sign by Daniel Tang · 4 weeks ago
  13. f44d03d go.mod: update golang.org/x dependencies by Gopher Robot · 5 weeks ago v0.55.0
  14. 5ed4944 crypto/internal/poly1305: provide optimised assembly for riscv64 by Julian Zhu · 8 months ago
  15. b07833c ssh: return window credit for discarded extended data by Nicola Murino · 8 weeks ago
  16. d701c51 acme: fix nil pointer dereference in pebble test error reporting by Brad Fitzpatrick · 8 weeks ago
  17. 999d053 ssh: fix parsing of GSSAPI payloads offering multiple mechanisms by Brad Fitzpatrick · 8 weeks ago
  18. 90f76b8 ssh: reject certificate signature keys before recursing by Nicola Murino · 8 weeks ago
  19. b53964a ssh: permit empty but non-nil HostKeyAlgorithms, KeyExchanges, Ciphers, MACs by database64128 · 9 weeks ago
  20. 626e40f ssh: drain stderr on forwarded TCP and Unix channels by Nicola Murino · 8 weeks ago
  21. 31914c6 x509roots/fallback: update bundle by Gopher Robot · 8 weeks ago
  22. f2135b8 all: clean up minor issues found by staticcheck by Brad Fitzpatrick · 8 weeks ago
  23. ff03daf ssh: report verified signature format to callback by Akira · 9 weeks ago
  24. 10b54ff ssh: raise the RSA modulus limit to 16384 bits by Nicola Murino · 3 months ago
  25. 0f039f3 ssh: sanitize various error messages by Nicholas S. Husin · 10 weeks ago
  26. b27e150 ssh: don't close the connection on an unparseable public key by Nicola Murino · 3 months ago
  27. c1a3b97 ssh: document and test source-address behavior for non-IP transports by Nicola Murino · 10 weeks ago
  28. b9229ec ssh: reject a present but empty source-address critical option by Nicola Murino · 10 weeks ago
  29. e557b08 ssh: enforce the source-address critical option for all auth callbacks by Nicola Murino · 10 weeks ago
  30. 4044611 ssh: fix data race in the doClientServerAuth test helper by Nicola Murino · 10 weeks ago
  31. e8ad5cb ssh: initialize new channels fully before adding them to chanList by Nicola Murino · 10 weeks ago
  32. fe1af3a ssh: make channel.close idempotent by Nicola Murino · 10 weeks ago
  33. 243e02a ocsp: update ParseRequest docs & error conditions by Daniel McCarney · 10 weeks ago
  34. cdce021 go.mod: update golang.org/x dependencies by Gopher Robot · 10 weeks ago v0.54.0
  35. d9474cc openpgp: make the deprecation message more explicit by Roland Shoemaker · 3 months ago
  36. 7626c50 ssh: verify declared key type matches decoded key in authorized_keys by Nicola Murino · 3 months ago
  37. 0471e79 ssh/agent: enforce strict limits on DSA key parameters by Nicola Murino · 3 months ago
  38. 6435c37 ssh: sanitize client disconnect messages by Neal Patel · 4 months ago
  39. 7d695da ssh/agent: drain channel stderr in agent forwarders by Nicola Murino · 4 months ago
  40. 5b7f841 acme/autocert: fix data race in Manager.createCert by Daniel McCarney · 3 months ago
  41. 0b316e7 argon2: update RFC 9106 parameter recommendations by harjoth · 3 months ago
  42. 55aec0a x509roots/fallback: update bundle by Gopher Robot · 3 months ago
  43. 5f2de1a internal: remove wycheproof tests by Daniel McCarney · 6 months ago
  44. 45460e0 go.mod: update golang.org/x dependencies by Gopher Robot · 3 months ago v0.53.0
  45. d37c95e pkcs12: limit PBKDF iteration count to prevent CPU exhaustion by mohammadmseet-hue · 5 months ago
  46. e2ffffe ssh: reject incomplete gssapi-with-mic configurations by povcfe · 4 months ago
  47. 60e158a ssh/test: isolate CLI tests from user SSH config and agent by Mike Nolta · 4 months ago
  48. 1b77d23 ssh/knownhosts: reject lines with multiple or unknown markers by Nicola Murino · 4 months ago
  49. 3872a2b ssh/knownhosts: verify declared key type matches decoded key by Nicola Murino · 4 months ago
  50. 9f72ecc ssh/knownhosts: treat only ASCII space and tab as whitespace by Nicola Murino · 4 months ago
  51. 8f405a4 ssh: validate ECDSA curve matches expected algorithm by Nicola Murino · 4 months ago
  52. bb41b3d ssh: improve DH GEX group selection using PreferredBits by Nicola Murino · 4 months ago
  53. e04e721 ssh/agent: validate ed25519 private key length in Add by Nicola Murino · 4 months ago
  54. b315afd ssh: limit bcrypt KDF rounds in OpenSSH private key decryption by Nicola Murino · 4 months ago
  55. d4a85f4 ssh/agent: limit RSA key size on Add requests by Nicola Murino · 4 months ago
  56. 6f39c52 ssh: limit RSA key size in OpenSSH private key parsing by Nicola Murino · 4 months ago
  57. 4c4d20b ssh: fix spinloop in mux SendRequest drain on closed channel by Nicola Murino · 4 months ago
  58. e3e62d9 ssh: fix spinloop in channel SendRequest drain on closed channel by Nicola Murino · 4 months ago
  59. 5adb68b ssh: cap total userauth attempts per server connection by Nicola Murino · 4 months ago
  60. 9beb694 ssh: prevent malformed exit-status panic by Neal Patel · 4 months ago
  61. e5306b2 ssh/agent: support parallel signing using request pipelining by Nicola Murino · 5 months ago
  62. d2fe592 ssh: add openssh controlmaster socket support by ding · 9 months ago
  63. d59570d ssh: add AuthCallback to ClientConfig by Nicola Murino · 6 months ago
  64. 4aab0d9 ssh: return partial success immediately from publickey auth by Nicola Murino · 6 months ago
  65. a1c0d99 go.mod: update golang.org/x dependencies by Gopher Robot · 4 months ago v0.52.0
  66. 3c7c869 ssh: fix deadlock on unexpected channel responses by Nicola · 5 months ago
  67. 533fb3f ssh: fix source-address critical option bypass by Neal Patel · 4 months ago
  68. abbc44d ssh: fix incorrect operator order by Neal Patel · 4 months ago
  69. e052873 ssh: fix infinite loop on large channel writes due to integer overflow by Nicola Murino · 9 months ago
  70. b61cf85 ssh: enforce user presence verification for security keys by Nicola Murino · 7 months ago
  71. 9c2cd33 ssh: enforce strict limits on DSA key parameters by Nicola Murino · 8 months ago
  72. 8907318 ssh: reject RSA keys with excessively large moduli by Nicola Murino · 7 months ago
  73. ffd87b4 ssh: fix panic when authority callbacks are nil by Nicola Murino · 8 months ago
  74. 4e7a738 ssh: fix deadlock on unexpected global responses by Nicola Murino · 8 months ago
  75. b25012b ssh: enforce nil Permissions when returning PartialSuccessError by Nicola Murino · 7 months ago
  76. 6c195c8 ssh: prevent memory leak when rejecting channels by Nicola Murino · 7 months ago
  77. f717e29 ssh/knownhosts: respect @revoked CA keys by Neal Patel · 4 months ago
  78. e7c36cc ssh/agent: prevent panic on pathological ed25519 inputs by Neal Patel · 4 months ago
  79. 0fb843a ssh/agent: reject keys with unsupported confirm constraint by Nicola · 7 months ago
  80. e3d1254 ssh/agent: don't accept keys with unsupported constraints by Nicola · 7 months ago
  81. a1ce0fe ssh/agent: preserve constraint extensions when adding keys by Nicola · 8 months ago
  82. a749d17 chacha20poly1305: remove usages of BYTE instr by Roland Shoemaker · 1 year, 4 months ago
  83. 7ee5970 chacha20poly1305: drop pre-AVX assembly impl by Roland Shoemaker · 1 year, 4 months ago
  84. 44decbf blake2b: merge go125.go into blake2b_test.go by Dmitri Shuralyov · 4 months ago
  85. b8a14a8 go.mod: update golang.org/x dependencies by Gopher Robot · 4 months ago v0.51.0
  86. 9d9d507 x509roots/fallback/bundle: fix bundle test with Go 1.27+ by Daniel McCarney · 4 months ago
  87. fd0b90d acme: include Problem in OrderError.Error by repon · 5 months ago
  88. b9e5359 pbkdf2: turn into a wrapper for crypto/pbkdf2 by Filippo Valsorda · 5 months ago
  89. cc0e4fc hkdf: forward Extract to the standard library by Filippo Valsorda · 5 months ago
  90. a8e9237 x509roots/fallback: update bundle by Gopher Robot · 5 months ago
  91. 03ca0dc go.mod: update golang.org/x dependencies by Gopher Robot · 5 months ago v0.50.0
  92. 8400f4a ssh: respect signer's algorithm preference in pickSignatureAlgorithm by Nicola Murino · 7 months ago
  93. 81c6cb3 ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength by Rob Picard · 6 months ago
  94. 982eaa6 go.mod: update golang.org/x dependencies by Gopher Robot · 6 months ago v0.49.0
  95. 159944f ssh,acme: clean up tautological/impossible nil conditions by Neal Patel · 8 months ago
  96. a408498 acme: only require prompt if server has terms of service by Sean Liao · 10 months ago
  97. cab0f71 all: upgrade go directive to at least 1.25.0 [generated] by Gopher Robot · 7 months ago
  98. 2f26647 x509roots/fallback: update bundle by Gopher Robot · 7 months ago
  99. e08b067 go.mod: update golang.org/x dependencies by Gopher Robot · 7 months ago v0.48.0
  100. 7d0074c scrypt: fix panic on parameters <= 0 by Juergen Graf · 9 months ago