1. 5f2de1a internal: remove wycheproof tests by Daniel McCarney · 3 months ago master
  2. 45460e0 go.mod: update golang.org/x dependencies by Gopher Robot · 6 days ago v0.53.0
  3. d37c95e pkcs12: limit PBKDF iteration count to prevent CPU exhaustion by mohammadmseet-hue · 10 weeks ago
  4. e2ffffe ssh: reject incomplete gssapi-with-mic configurations by povcfe · 6 weeks ago
  5. 60e158a ssh/test: isolate CLI tests from user SSH config and agent by Mike Nolta · 4 weeks ago
  6. 1b77d23 ssh/knownhosts: reject lines with multiple or unknown markers by Nicola Murino · 3 weeks ago
  7. 3872a2b ssh/knownhosts: verify declared key type matches decoded key by Nicola Murino · 3 weeks ago
  8. 9f72ecc ssh/knownhosts: treat only ASCII space and tab as whitespace by Nicola Murino · 3 weeks ago
  9. 8f405a4 ssh: validate ECDSA curve matches expected algorithm by Nicola Murino · 3 weeks ago
  10. bb41b3d ssh: improve DH GEX group selection using PreferredBits by Nicola Murino · 3 weeks ago
  11. e04e721 ssh/agent: validate ed25519 private key length in Add by Nicola Murino · 3 weeks ago
  12. b315afd ssh: limit bcrypt KDF rounds in OpenSSH private key decryption by Nicola Murino · 3 weeks ago
  13. d4a85f4 ssh/agent: limit RSA key size on Add requests by Nicola Murino · 3 weeks ago
  14. 6f39c52 ssh: limit RSA key size in OpenSSH private key parsing by Nicola Murino · 3 weeks ago
  15. 4c4d20b ssh: fix spinloop in mux SendRequest drain on closed channel by Nicola Murino · 3 weeks ago
  16. e3e62d9 ssh: fix spinloop in channel SendRequest drain on closed channel by Nicola Murino · 3 weeks ago
  17. 5adb68b ssh: cap total userauth attempts per server connection by Nicola Murino · 3 weeks ago
  18. 9beb694 ssh: prevent malformed exit-status panic by Neal Patel · 4 weeks ago
  19. e5306b2 ssh/agent: support parallel signing using request pipelining by Nicola Murino · 8 weeks ago
  20. d2fe592 ssh: add openssh controlmaster socket support by ding · 6 months ago
  21. d59570d ssh: add AuthCallback to ClientConfig by Nicola Murino · 3 months ago
  22. 4aab0d9 ssh: return partial success immediately from publickey auth by Nicola Murino · 3 months ago
  23. a1c0d99 go.mod: update golang.org/x dependencies by Gopher Robot · 3 weeks ago v0.52.0
  24. 3c7c869 ssh: fix deadlock on unexpected channel responses by Nicola · 8 weeks ago
  25. 533fb3f ssh: fix source-address critical option bypass by Neal Patel · 4 weeks ago
  26. abbc44d ssh: fix incorrect operator order by Neal Patel · 4 weeks ago
  27. e052873 ssh: fix infinite loop on large channel writes due to integer overflow by Nicola Murino · 6 months ago
  28. b61cf85 ssh: enforce user presence verification for security keys by Nicola Murino · 4 months ago
  29. 9c2cd33 ssh: enforce strict limits on DSA key parameters by Nicola Murino · 5 months ago
  30. 8907318 ssh: reject RSA keys with excessively large moduli by Nicola Murino · 4 months ago
  31. ffd87b4 ssh: fix panic when authority callbacks are nil by Nicola Murino · 5 months ago
  32. 4e7a738 ssh: fix deadlock on unexpected global responses by Nicola Murino · 5 months ago
  33. b25012b ssh: enforce nil Permissions when returning PartialSuccessError by Nicola Murino · 4 months ago
  34. 6c195c8 ssh: prevent memory leak when rejecting channels by Nicola Murino · 4 months ago
  35. f717e29 ssh/knownhosts: respect @revoked CA keys by Neal Patel · 3 weeks ago
  36. e7c36cc ssh/agent: prevent panic on pathological ed25519 inputs by Neal Patel · 3 weeks ago
  37. 0fb843a ssh/agent: reject keys with unsupported confirm constraint by Nicola · 4 months ago
  38. e3d1254 ssh/agent: don't accept keys with unsupported constraints by Nicola · 4 months ago
  39. a1ce0fe ssh/agent: preserve constraint extensions when adding keys by Nicola · 5 months ago
  40. a749d17 chacha20poly1305: remove usages of BYTE instr by Roland Shoemaker · 1 year, 1 month ago
  41. 7ee5970 chacha20poly1305: drop pre-AVX assembly impl by Roland Shoemaker · 1 year, 1 month ago
  42. 44decbf blake2b: merge go125.go into blake2b_test.go by Dmitri Shuralyov · 5 weeks ago
  43. b8a14a8 go.mod: update golang.org/x dependencies by Gopher Robot · 5 weeks ago v0.51.0
  44. 9d9d507 x509roots/fallback/bundle: fix bundle test with Go 1.27+ by Daniel McCarney · 5 weeks ago
  45. fd0b90d acme: include Problem in OrderError.Error by repon · 8 weeks ago
  46. b9e5359 pbkdf2: turn into a wrapper for crypto/pbkdf2 by Filippo Valsorda · 8 weeks ago
  47. cc0e4fc hkdf: forward Extract to the standard library by Filippo Valsorda · 8 weeks ago
  48. a8e9237 x509roots/fallback: update bundle by Gopher Robot · 9 weeks ago
  49. 03ca0dc go.mod: update golang.org/x dependencies by Gopher Robot · 9 weeks ago v0.50.0
  50. 8400f4a ssh: respect signer's algorithm preference in pickSignatureAlgorithm by Nicola Murino · 4 months ago
  51. 81c6cb3 ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength by Rob Picard · 3 months ago
  52. 982eaa6 go.mod: update golang.org/x dependencies by Gopher Robot · 3 months ago v0.49.0
  53. 159944f ssh,acme: clean up tautological/impossible nil conditions by Neal Patel · 5 months ago
  54. a408498 acme: only require prompt if server has terms of service by Sean Liao · 7 months ago
  55. cab0f71 all: upgrade go directive to at least 1.25.0 [generated] by Gopher Robot · 4 months ago
  56. 2f26647 x509roots/fallback: update bundle by Gopher Robot · 4 months ago
  57. e08b067 go.mod: update golang.org/x dependencies by Gopher Robot · 4 months ago v0.48.0
  58. 7d0074c scrypt: fix panic on parameters <= 0 by Juergen Graf · 6 months ago
  59. 506e022 go.mod: update golang.org/x dependencies by Gopher Robot · 5 months ago v0.47.0
  60. 7dacc38 chacha20poly1305: error out in fips140=only mode by Filippo Valsorda · 6 months ago
  61. 19acf81 go.mod: update golang.org/x dependencies by Gopher Robot · 6 months ago v0.46.0
  62. 3a1c6b4 x509roots/fallback: update bundle by Gopher Robot · 7 months ago
  63. f4602e4 ssh/agent: fix flaky test by ensuring a writeable home directory by Michael Stapelberg · 6 months ago
  64. 4e0068c go.mod: update golang.org/x dependencies by Gopher Robot · 7 months ago v0.45.0
  65. e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs by Neal Patel · 7 months ago
  66. f91f7a7 ssh/agent: prevent panic on malformed constraint by Neal Patel · 9 months ago
  67. 2df4153 acme/autocert: let automatic renewal work with short lifetime certs by Sean Liao · 7 months ago
  68. bcf6a84 acme: pass context to request by Sean Liao · 7 months ago
  69. b4f2b62 ssh: fix error message on unsupported cipher by Santhanam · 7 months ago
  70. 79ec3a5 ssh: allow to bind to a hostname in remote forwarding by Nicola Murino · 1 year, 11 months ago
  71. 122a78f go.mod: update golang.org/x dependencies by Gopher Robot · 7 months ago v0.44.0
  72. c0531f9 all: eliminate vet diagnostics by Sean Liao · 8 months ago
  73. 0997000 all: fix some comments by cuishuang · 8 months ago
  74. 017a1aa chacha20poly1305: panic on dst and additionalData overlap by Sean Liao · 8 months ago
  75. cf29fa9 sha3: make it mostly a wrapper around crypto/sha3 by Filippo Valsorda · 8 months ago
  76. 0b7aa0c ssh: use reflect.TypeFor instead of reflect.TypeOf by cuishuang · 8 months ago
  77. 1faea29 all: fix some typos in comment by cuishuang · 9 months ago
  78. 627cb89 go.mod: update golang.org/x dependencies by Gopher Robot · 8 months ago v0.43.0
  79. dca4914 acme: fix autocert TestHTTPHandlerDefaultFallback by Daniel McCarney · 8 months ago
  80. 1336e21 x509roots/fallback: update bundle by Gopher Robot · 8 months ago
  81. 2beaa59 ssh: add VerifiedPublicKeyCallback by Nicola Murino · 1 year, 6 months ago
  82. 66c3d8c ssh: add support for FIPS mode by Nicola Murino · 10 months ago
  83. ddb4e80 ssh: remove custom contains, use slices.Contains by Nicola Murino · 9 months ago
  84. f4d47b0 ssh: return clearer error when signature algorithm is used as key format by Nicola Murino · 10 months ago
  85. 96dc232 x509roots/fallback/bundle: add bundle package to export root certs by Michael Stapelberg · 11 months ago
  86. 8c9ba31 all: freeze and deprecate more packages by Filippo Valsorda · 9 months ago
  87. 559e062 ssh/agent: return an error for unexpected message types by Nicola Murino · 10 months ago
  88. 5307a0c go.mod: update golang.org/x dependencies by Gopher Robot · 9 months ago v0.42.0
  89. 9d77937 acme: include order problem in OrderError by Daniel McCarney · 1 year ago
  90. 8f580de ssh: remove Go 1.24 build tag for ML-KEM kex by Nicola Murino · 10 months ago
  91. a4d1237 ssh/knownhosts: improve IPv6 support in Normalize by Nicola Murino · 10 months ago
  92. b8d8dae curve25519: include potential fips140=only error in panic message by Filippo Valsorda · 10 months ago
  93. f5a2eab ssh: use curve25519.X25519 instead of curve25519.ScalarMult by Filippo Valsorda · 10 months ago
  94. 44ecf3a all: upgrade go directive to at least 1.24.0 [generated] by Gopher Robot · 10 months ago
  95. ef5341b go.mod: update golang.org/x dependencies by Gopher Robot · 10 months ago v0.41.0
  96. b999374 acme: fix pebble subprocess output data race by Daniel McCarney · 10 months ago
  97. c247dea x509roots/fallback: store bundle certs directly in DER by Mateusz Poliwczak · 1 year, 1 month ago
  98. 1fda731 acme: increase pebble test waitForServer attempts by Daniel McCarney · 11 months ago
  99. 1b4c3d2 x509roots/fallback: update bundle by Gopher Robot · 11 months ago
  100. b903b53 acme: capture pebble test subprocess stdout/stderr by Daniel McCarney · 11 months ago