- 7d0074c scrypt: fix panic on parameters <= 0 by Juergen Graf · 3 weeks ago master
- 506e022 go.mod: update golang.org/x dependencies by Gopher Robot · 5 days ago v0.47.0
- 7dacc38 chacha20poly1305: error out in fips140=only mode by Filippo Valsorda · 5 weeks ago
- 19acf81 go.mod: update golang.org/x dependencies by Gopher Robot · 5 weeks ago v0.46.0
- 3a1c6b4 x509roots/fallback: update bundle by Gopher Robot · 7 weeks ago
- f4602e4 ssh/agent: fix flaky test by ensuring a writeable home directory by Michael Stapelberg · 6 weeks ago
- 4e0068c go.mod: update golang.org/x dependencies by Gopher Robot · 8 weeks ago v0.45.0
- e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs by Neal Patel · 8 weeks ago
- f91f7a7 ssh/agent: prevent panic on malformed constraint by Neal Patel · 4 months ago
- 2df4153 acme/autocert: let automatic renewal work with short lifetime certs by Sean Liao · 9 weeks ago
- bcf6a84 acme: pass context to request by Sean Liao · 9 weeks ago
- b4f2b62 ssh: fix error message on unsupported cipher by Santhanam · 9 weeks ago
- 79ec3a5 ssh: allow to bind to a hostname in remote forwarding by Nicola Murino · 1 year, 6 months ago
- 122a78f go.mod: update golang.org/x dependencies by Gopher Robot · 9 weeks ago v0.44.0
- c0531f9 all: eliminate vet diagnostics by Sean Liao · 3 months ago
- 0997000 all: fix some comments by cuishuang · 3 months ago
- 017a1aa chacha20poly1305: panic on dst and additionalData overlap by Sean Liao · 3 months ago
- cf29fa9 sha3: make it mostly a wrapper around crypto/sha3 by Filippo Valsorda · 3 months ago
- 0b7aa0c ssh: use reflect.TypeFor instead of reflect.TypeOf by cuishuang · 3 months ago
- 1faea29 all: fix some typos in comment by cuishuang · 4 months ago
- 627cb89 go.mod: update golang.org/x dependencies by Gopher Robot · 3 months ago v0.43.0
- dca4914 acme: fix autocert TestHTTPHandlerDefaultFallback by Daniel McCarney · 3 months ago
- 1336e21 x509roots/fallback: update bundle by Gopher Robot · 3 months ago
- 2beaa59 ssh: add VerifiedPublicKeyCallback by Nicola Murino · 1 year, 1 month ago
- 66c3d8c ssh: add support for FIPS mode by Nicola Murino · 5 months ago
- ddb4e80 ssh: remove custom contains, use slices.Contains by Nicola Murino · 4 months ago
- f4d47b0 ssh: return clearer error when signature algorithm is used as key format by Nicola Murino · 5 months ago
- 96dc232 x509roots/fallback/bundle: add bundle package to export root certs by Michael Stapelberg · 6 months ago
- 8c9ba31 all: freeze and deprecate more packages by Filippo Valsorda · 4 months ago
- 559e062 ssh/agent: return an error for unexpected message types by Nicola Murino · 5 months ago
- 5307a0c go.mod: update golang.org/x dependencies by Gopher Robot · 4 months ago v0.42.0
- 9d77937 acme: include order problem in OrderError by Daniel McCarney · 7 months ago
- 8f580de ssh: remove Go 1.24 build tag for ML-KEM kex by Nicola Murino · 5 months ago
- a4d1237 ssh/knownhosts: improve IPv6 support in Normalize by Nicola Murino · 5 months ago
- b8d8dae curve25519: include potential fips140=only error in panic message by Filippo Valsorda · 5 months ago
- f5a2eab ssh: use curve25519.X25519 instead of curve25519.ScalarMult by Filippo Valsorda · 5 months ago
- 44ecf3a all: upgrade go directive to at least 1.24.0 [generated] by Gopher Robot · 5 months ago
- ef5341b go.mod: update golang.org/x dependencies by Gopher Robot · 5 months ago v0.41.0
- b999374 acme: fix pebble subprocess output data race by Daniel McCarney · 5 months ago
- c247dea x509roots/fallback: store bundle certs directly in DER by Mateusz Poliwczak · 8 months ago
- 1fda731 acme: increase pebble test waitForServer attempts by Daniel McCarney · 6 months ago
- 1b4c3d2 x509roots/fallback: update bundle by Gopher Robot · 6 months ago
- b903b53 acme: capture pebble test subprocess stdout/stderr by Daniel McCarney · 6 months ago
- 459a9db go.mod: update golang.org/x dependencies by Gopher Robot · 6 months ago v0.40.0
- 74e709a ssh: add AlgorithmNegotiationError by Nicola Murino · 2 years ago
- b3790b8 acme: fix TLSALPN01ChallengeCert for IP address identifiers by Daniel McCarney · 8 months ago
- 1dc4269 acme: add Pebble integration testing by Daniel McCarney · 8 months ago
- 97bf787 blake2b: implement hash.XOF by qiulaidongfeng · 12 months ago
- 952517d x509roots/fallback: update bundle by Gopher Robot · 7 months ago
- c6fce02 ssh: refuse to parse certificates that use a certificate as signing key by Nicola Murino · 7 months ago
- 0ae49b8 ssh: reject certificate keys used as signature keys for SSH certs by Nicola Murino · 7 months ago
- 3bf9d2a ssh/test: skip KEX test if unsupported by system SSH client by Nicola Murino · 7 months ago v0.39.0
- 9bab967 go.mod: update golang.org/x dependencies by Gopher Robot · 7 months ago
- 4f9f0ca x509roots/fallback: add init time benchmark by Mateusz Poliwczak · 8 months ago
- eac7cf0 x509roots/fallback: move parsing code to a non-generated file by Mateusz Poliwczak · 8 months ago
- 18228cd acme: return err from deprecated TLS-SNI-[01|02] functions by Daniel McCarney · 8 months ago
- 73f6362 acme: remove dead code by Daniel McCarney · 8 months ago
- ebc8e46 ssh: add server side support for Diffie Hellman Group Exchange by Nicola Murino · 2 years, 1 month ago
- e944286 ssh: expose negotiated algorithms by Nicola Murino · 2 years, 1 month ago
- 78a1fd7 ssh: automatically add curve25519-sha256@libssh.org KEX alias by Nicola Murino · 9 months ago
- ac58737 ssh: export supported algorithms by Nicola Murino · 9 months ago
- 9dbbcf0 bcrypt: update InvalidCostError message to describe cost range inclusive by redwrasse · 8 months ago
- 9f6bf84 x509roots/fallback: update bundle by Gopher Robot · 9 months ago
- aae6e61 go.mod: update golang.org/x dependencies by Gopher Robot · 8 months ago v0.38.0
- 9c1aa6a ssh/test: reset the random source before capturing a recording by Nicola Murino · 9 months ago
- 8819902 ssh/test: enable Diffie-Hellman key exchange algorithms by Nicola Murino · 9 months ago
- 3f311e4 acme: return error from pre-authorization when unsupported by Ian Stapleton Cordasco · 10 months ago
- 1f7c62c ssh/test: skip unsupported tests on js/wasm by Nicola Murino · 9 months ago
- a5f8048 acme/autocert: use standard functions to pick the cache directory by Alberto Bertogli · 3 years, 3 months ago
- 958cde8 Revert "chacha20: add loong64 SIMD implementation" by Michael Pratt · 9 months ago
- 51f005c Revert "salsa20: add loong64 SIMD implementation" by Michael Pratt · 9 months ago
- 7c35866 Revert "argon2: add loong64 SIMD implementation" by Michael Pratt · 9 months ago
- 0091fc8 Revert "blake2s: add loong64 SIMD implementation" by Michael Pratt · 9 months ago
- 388684e argon2: add loong64 SIMD implementation by Xiaolin Zhao · 10 months ago
- 953e809 chacha20: add loong64 SIMD implementation by Xiaolin Zhao · 1 year, 1 month ago
- 18f7707 salsa20: add loong64 SIMD implementation by Xiaolin Zhao · 9 months ago
- 2ebaafc blake2s: add loong64 SIMD implementation by Xiaolin Zhao · 10 months ago
- 4bc0711 acme: use built-in max/min to simplify the code by cuishuang · 9 months ago
- c96bba2 ssh: add mlkem768x25519-sha256 Key Exchange algorithm by Nicola Murino · 12 months ago
- 6b13eef ssh: add integration tests against a reference implementation by Nicola Murino · 12 months ago
- 959f8f3 go.mod: update golang.org/x dependencies by Gopher Robot · 9 months ago v0.37.0
- 769bcd6 ssh: use the configured rand in kex init by Nicola Murino · 12 months ago
- d0a798f cryptobyte: fix typo 'octects' into 'octets' for asn1.go by Simon Josefsson · 10 months ago
- acbcbef acme: remove unnecessary []byte conversion by Mateusz Poliwczak · 3 years, 1 month ago
- 376eb14 x509roots: support constrained roots by Roland Shoemaker · 11 months ago
- b369b72 crypto/internal/poly1305: implement function update in assembly on loong64 by Xiaolin Zhao · 1 year, 1 month ago
- 6b853fb ssh/knownhosts: check more than one key by Carlos A Becker · 11 months ago
- 49bf5b8 go.mod: update golang.org/x dependencies by Gopher Robot · 11 months ago v0.36.0
- 24852b6 ssh: add decode support for banners by Ilia Mirkin · 11 months ago
- bbc689c ssh: use a more straightforward return value by cuishuang · 11 months ago
- 7292932 ssh: limit the size of the internal packet queue while waiting for KEX by Nicola Murino · 1 year, 1 month ago v0.35.0
- f66f74b acme/autocert: check host policy before probing the cache by Roland Shoemaker · 11 months ago v0.34.0
- b0784b7 x509roots/fallback: drop obsolete build constraint by Dmitri Shuralyov · 11 months ago
- 911360c all: bump golang.org/x/crypto dependencies of asm generators by Roland Shoemaker · 11 months ago
- 89ff08d all: upgrade go directive to at least 1.23.0 [generated] by Gopher Robot · 11 months ago
- e47973b all: update certs for go1.24 by Sean Liao · 11 months ago
- 9290511 go.mod: update golang.org/x dependencies by Gopher Robot · 11 months ago v0.33.0
- fa5273e x509roots/fallback: update bundle by Gopher Robot · 12 months ago
- a8ea4be ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface by Brad Fitzpatrick · 1 year, 4 months ago
- 71d3a4c acme: support challenges that require the ACME client to send a non-empty JSON body in a response to the challenge. by Evgeny Shatokhin · 1 year, 5 months ago