1. 7d0074c scrypt: fix panic on parameters <= 0 by Juergen Graf · 3 weeks ago master
  2. 506e022 go.mod: update golang.org/x dependencies by Gopher Robot · 5 days ago v0.47.0
  3. 7dacc38 chacha20poly1305: error out in fips140=only mode by Filippo Valsorda · 5 weeks ago
  4. 19acf81 go.mod: update golang.org/x dependencies by Gopher Robot · 5 weeks ago v0.46.0
  5. 3a1c6b4 x509roots/fallback: update bundle by Gopher Robot · 7 weeks ago
  6. f4602e4 ssh/agent: fix flaky test by ensuring a writeable home directory by Michael Stapelberg · 6 weeks ago
  7. 4e0068c go.mod: update golang.org/x dependencies by Gopher Robot · 8 weeks ago v0.45.0
  8. e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs by Neal Patel · 8 weeks ago
  9. f91f7a7 ssh/agent: prevent panic on malformed constraint by Neal Patel · 4 months ago
  10. 2df4153 acme/autocert: let automatic renewal work with short lifetime certs by Sean Liao · 9 weeks ago
  11. bcf6a84 acme: pass context to request by Sean Liao · 9 weeks ago
  12. b4f2b62 ssh: fix error message on unsupported cipher by Santhanam · 9 weeks ago
  13. 79ec3a5 ssh: allow to bind to a hostname in remote forwarding by Nicola Murino · 1 year, 6 months ago
  14. 122a78f go.mod: update golang.org/x dependencies by Gopher Robot · 9 weeks ago v0.44.0
  15. c0531f9 all: eliminate vet diagnostics by Sean Liao · 3 months ago
  16. 0997000 all: fix some comments by cuishuang · 3 months ago
  17. 017a1aa chacha20poly1305: panic on dst and additionalData overlap by Sean Liao · 3 months ago
  18. cf29fa9 sha3: make it mostly a wrapper around crypto/sha3 by Filippo Valsorda · 3 months ago
  19. 0b7aa0c ssh: use reflect.TypeFor instead of reflect.TypeOf by cuishuang · 3 months ago
  20. 1faea29 all: fix some typos in comment by cuishuang · 4 months ago
  21. 627cb89 go.mod: update golang.org/x dependencies by Gopher Robot · 3 months ago v0.43.0
  22. dca4914 acme: fix autocert TestHTTPHandlerDefaultFallback by Daniel McCarney · 3 months ago
  23. 1336e21 x509roots/fallback: update bundle by Gopher Robot · 3 months ago
  24. 2beaa59 ssh: add VerifiedPublicKeyCallback by Nicola Murino · 1 year, 1 month ago
  25. 66c3d8c ssh: add support for FIPS mode by Nicola Murino · 5 months ago
  26. ddb4e80 ssh: remove custom contains, use slices.Contains by Nicola Murino · 4 months ago
  27. f4d47b0 ssh: return clearer error when signature algorithm is used as key format by Nicola Murino · 5 months ago
  28. 96dc232 x509roots/fallback/bundle: add bundle package to export root certs by Michael Stapelberg · 6 months ago
  29. 8c9ba31 all: freeze and deprecate more packages by Filippo Valsorda · 4 months ago
  30. 559e062 ssh/agent: return an error for unexpected message types by Nicola Murino · 5 months ago
  31. 5307a0c go.mod: update golang.org/x dependencies by Gopher Robot · 4 months ago v0.42.0
  32. 9d77937 acme: include order problem in OrderError by Daniel McCarney · 7 months ago
  33. 8f580de ssh: remove Go 1.24 build tag for ML-KEM kex by Nicola Murino · 5 months ago
  34. a4d1237 ssh/knownhosts: improve IPv6 support in Normalize by Nicola Murino · 5 months ago
  35. b8d8dae curve25519: include potential fips140=only error in panic message by Filippo Valsorda · 5 months ago
  36. f5a2eab ssh: use curve25519.X25519 instead of curve25519.ScalarMult by Filippo Valsorda · 5 months ago
  37. 44ecf3a all: upgrade go directive to at least 1.24.0 [generated] by Gopher Robot · 5 months ago
  38. ef5341b go.mod: update golang.org/x dependencies by Gopher Robot · 5 months ago v0.41.0
  39. b999374 acme: fix pebble subprocess output data race by Daniel McCarney · 5 months ago
  40. c247dea x509roots/fallback: store bundle certs directly in DER by Mateusz Poliwczak · 8 months ago
  41. 1fda731 acme: increase pebble test waitForServer attempts by Daniel McCarney · 6 months ago
  42. 1b4c3d2 x509roots/fallback: update bundle by Gopher Robot · 6 months ago
  43. b903b53 acme: capture pebble test subprocess stdout/stderr by Daniel McCarney · 6 months ago
  44. 459a9db go.mod: update golang.org/x dependencies by Gopher Robot · 6 months ago v0.40.0
  45. 74e709a ssh: add AlgorithmNegotiationError by Nicola Murino · 2 years ago
  46. b3790b8 acme: fix TLSALPN01ChallengeCert for IP address identifiers by Daniel McCarney · 8 months ago
  47. 1dc4269 acme: add Pebble integration testing by Daniel McCarney · 8 months ago
  48. 97bf787 blake2b: implement hash.XOF by qiulaidongfeng · 12 months ago
  49. 952517d x509roots/fallback: update bundle by Gopher Robot · 7 months ago
  50. c6fce02 ssh: refuse to parse certificates that use a certificate as signing key by Nicola Murino · 7 months ago
  51. 0ae49b8 ssh: reject certificate keys used as signature keys for SSH certs by Nicola Murino · 7 months ago
  52. 3bf9d2a ssh/test: skip KEX test if unsupported by system SSH client by Nicola Murino · 7 months ago v0.39.0
  53. 9bab967 go.mod: update golang.org/x dependencies by Gopher Robot · 7 months ago
  54. 4f9f0ca x509roots/fallback: add init time benchmark by Mateusz Poliwczak · 8 months ago
  55. eac7cf0 x509roots/fallback: move parsing code to a non-generated file by Mateusz Poliwczak · 8 months ago
  56. 18228cd acme: return err from deprecated TLS-SNI-[01|02] functions by Daniel McCarney · 8 months ago
  57. 73f6362 acme: remove dead code by Daniel McCarney · 8 months ago
  58. ebc8e46 ssh: add server side support for Diffie Hellman Group Exchange by Nicola Murino · 2 years, 1 month ago
  59. e944286 ssh: expose negotiated algorithms by Nicola Murino · 2 years, 1 month ago
  60. 78a1fd7 ssh: automatically add curve25519-sha256@libssh.org KEX alias by Nicola Murino · 9 months ago
  61. ac58737 ssh: export supported algorithms by Nicola Murino · 9 months ago
  62. 9dbbcf0 bcrypt: update InvalidCostError message to describe cost range inclusive by redwrasse · 8 months ago
  63. 9f6bf84 x509roots/fallback: update bundle by Gopher Robot · 9 months ago
  64. aae6e61 go.mod: update golang.org/x dependencies by Gopher Robot · 8 months ago v0.38.0
  65. 9c1aa6a ssh/test: reset the random source before capturing a recording by Nicola Murino · 9 months ago
  66. 8819902 ssh/test: enable Diffie-Hellman key exchange algorithms by Nicola Murino · 9 months ago
  67. 3f311e4 acme: return error from pre-authorization when unsupported by Ian Stapleton Cordasco · 10 months ago
  68. 1f7c62c ssh/test: skip unsupported tests on js/wasm by Nicola Murino · 9 months ago
  69. a5f8048 acme/autocert: use standard functions to pick the cache directory by Alberto Bertogli · 3 years, 3 months ago
  70. 958cde8 Revert "chacha20: add loong64 SIMD implementation" by Michael Pratt · 9 months ago
  71. 51f005c Revert "salsa20: add loong64 SIMD implementation" by Michael Pratt · 9 months ago
  72. 7c35866 Revert "argon2: add loong64 SIMD implementation" by Michael Pratt · 9 months ago
  73. 0091fc8 Revert "blake2s: add loong64 SIMD implementation" by Michael Pratt · 9 months ago
  74. 388684e argon2: add loong64 SIMD implementation by Xiaolin Zhao · 10 months ago
  75. 953e809 chacha20: add loong64 SIMD implementation by Xiaolin Zhao · 1 year, 1 month ago
  76. 18f7707 salsa20: add loong64 SIMD implementation by Xiaolin Zhao · 9 months ago
  77. 2ebaafc blake2s: add loong64 SIMD implementation by Xiaolin Zhao · 10 months ago
  78. 4bc0711 acme: use built-in max/min to simplify the code by cuishuang · 9 months ago
  79. c96bba2 ssh: add mlkem768x25519-sha256 Key Exchange algorithm by Nicola Murino · 12 months ago
  80. 6b13eef ssh: add integration tests against a reference implementation by Nicola Murino · 12 months ago
  81. 959f8f3 go.mod: update golang.org/x dependencies by Gopher Robot · 9 months ago v0.37.0
  82. 769bcd6 ssh: use the configured rand in kex init by Nicola Murino · 12 months ago
  83. d0a798f cryptobyte: fix typo 'octects' into 'octets' for asn1.go by Simon Josefsson · 10 months ago
  84. acbcbef acme: remove unnecessary []byte conversion by Mateusz Poliwczak · 3 years, 1 month ago
  85. 376eb14 x509roots: support constrained roots by Roland Shoemaker · 11 months ago
  86. b369b72 crypto/internal/poly1305: implement function update in assembly on loong64 by Xiaolin Zhao · 1 year, 1 month ago
  87. 6b853fb ssh/knownhosts: check more than one key by Carlos A Becker · 11 months ago
  88. 49bf5b8 go.mod: update golang.org/x dependencies by Gopher Robot · 11 months ago v0.36.0
  89. 24852b6 ssh: add decode support for banners by Ilia Mirkin · 11 months ago
  90. bbc689c ssh: use a more straightforward return value by cuishuang · 11 months ago
  91. 7292932 ssh: limit the size of the internal packet queue while waiting for KEX by Nicola Murino · 1 year, 1 month ago v0.35.0
  92. f66f74b acme/autocert: check host policy before probing the cache by Roland Shoemaker · 11 months ago v0.34.0
  93. b0784b7 x509roots/fallback: drop obsolete build constraint by Dmitri Shuralyov · 11 months ago
  94. 911360c all: bump golang.org/x/crypto dependencies of asm generators by Roland Shoemaker · 11 months ago
  95. 89ff08d all: upgrade go directive to at least 1.23.0 [generated] by Gopher Robot · 11 months ago
  96. e47973b all: update certs for go1.24 by Sean Liao · 11 months ago
  97. 9290511 go.mod: update golang.org/x dependencies by Gopher Robot · 11 months ago v0.33.0
  98. fa5273e x509roots/fallback: update bundle by Gopher Robot · 12 months ago
  99. a8ea4be ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface by Brad Fitzpatrick · 1 year, 4 months ago
  100. 71d3a4c acme: support challenges that require the ACME client to send a non-empty JSON body in a response to the challenge. by Evgeny Shatokhin · 1 year, 5 months ago