Commit Graph

Select branches

Hide Pull Requests

acstest

aeshw

alitest

aqc1xx

awsmirror

awstest

awstester

bochsbios

cc

efivars

enadma

gcetest

hackesp

initrd

intelxvf

iscsiredir

libatomic

lineflush

master

mtureset

nosyslinux

peercache

peerstat

sbsign

snpdup

synctest

tls13

tlsfmt

tmp

utf8

vbox

virtio32

x25519

#1

#1

#10

#10

#100

#101

#1011

#102

#1024

#1024

#1028

#103

#1036

#104

#1047

#105

#1052

#106

#107

#107

#1073

#108

#1082

#109

#11

#11

#110

#1106

#111

#111

#1113

#1117

#112

#1128

#113

#1130

#1130

#1134

#1136

#114

#114

#1145

#1146

#1149

#115

#1152

#1158

#116

#1160

#1162

#1163

#1165

#1165

#1168

#117

#1171

#1174

#1177

#118

#1180

#1184

#119

#1193

#1193

#1194

#12

#12

#120

#1206

#121

#1223

#124

#1243

#1245

#1265

#1271

#1276

#128

#129

#1294

#1297

#1298

#13

#13

#1304

#1304

#1307

#1330

#134

#1341

#1351

#1354

#136

#137

#1386

#139

#14

#14

#140

#1403

#141

#141

#1411

#1413

#1417

#1417

#1418

#143

#1437

#1439

#1444

#1445

#1446

#1455

#1456

#1457

#1458

#146

#1464

#1471

#1473

#1476

#148

#1484

#1489

#1491

#1492

#15

#1500

#1501

#1502

#1505

#1507

#1508

#1509

#1511

#1521

#1535

#154

#1563

#1565

#1566

#1571

#1573

#1578

#158

#1581

#1582

#1584

#1587

#1588

#16

#1601

#1602

#1608

#1610

#1610

#1613

#1613

#1614

#1617

#1617

#1619

#1624

#1629

#1630

#1631

#1632

#1633

#1634

#1635

#1636

#1637

#1640

#1641

#1644

#1644

#1646

#1648

#1648

#1652

#1657

#1659

#1661

#1665

#1673

#1675

#1682

#1689

#1689

#1693

#1694

#1697

#1697

#1698

#1699

#17

#170

#1700

#1702

#1702

#1705

#171

#1712

#1712

#1713

#1718

#1718

#1722

#1725

#1727

#1735

#1739

#1740

#1743

#1745

#1752

#1753

#1755

#1758

#1762

#1763

#1764

#1765

#1766

#1767

#1768

#1769

#1770

#1772

#1773

#1774

#1775

#1777

#1778

#1779

#1780

#1781

#1782

#1783

#1784

#1785

#1786

#1787

#1788

#1789

#179

#1790

#1791

#1792

#1793

#1795

#1796

#1797

#1798

#1799

#18

#18

#1800

#1801

#1802

#1803

#1804

#1805

#1806

#1807

#1808

#1809

#181

#1810

#1811

#1812

#1813

#1815

#1815

#1817

#1818

#1819

#1819

#182

#1820

#1821

#1822

#1826

#1827

#1828

#1829

#1830

#1831

#1832

#1833

#1833

#1834

#1835

#1835

#1836

#1837

#1838

#1839

#1845

#1846

#1851

#1852

#1853

#1856

#1857

#186

#1861

#19

#19

#2

#20

#20

#204

#205

#21

#21

#211

#218

#22

#22

#224

#225

#226

#227

#228

#23

#23

#232

#232

#234

#24

#24

#242

#243

#244

#245

#25

#25

#252

#259

#26

#26

#265

#266

#267

#268

#27

#27

#279

#28

#28

#29

#29

#3

#30

#300

#300

#31

#31

#310

#311

#312

#313

#32

#328

#329

#33

#33

#331

#336

#34

#34

#343

#35

#35

#350

#350

#36

#36

#37

#37

#370

#373

#376

#378

#38

#38

#388

#39

#393

#393

#394

#397

#4

#40

#40

#406

#41

#41

#413

#415

#42

#43

#43

#44

#448

#45

#45

#455

#455

#46

#46

#463

#463

#467

#47

#47

#48

#49

#49

#5

#5

#50

#504

#504

#505

#51

#51

#516

#518

#52

#522

#53

#53

#530

#531

#534

#538

#539

#54

#54

#545

#546

#55

#55

#551

#555

#56

#57

#57

#571

#574

#575

#576

#58

#58

#580

#583

#583

#585

#586

#589

#59

#590

#591

#594

#594

#596

#596

#597

#598

#599

#6

#6

#60

#60

#61

#61

#612

#62

#62

#626

#63

#63

#631

#639

#639

#64

#647

#65

#65

#654

#66

#67

#67

#68

#68

#69

#69

#697

#698

#698

#7

#7

#70

#70

#71

#71

#72

#72

#723

#73

#73

#732

#74

#74

#75

#75

#755

#76

#77

#770

#78

#781

#785

#79

#794

#798

#8

#8

#80

#801

#81

#82

#820

#83

#838

#84

#844

#85

#852

#857

#858

#859

#86

#863

#87

#871

#872

#874

#875

#875

#878

#879

#88

#882

#888

#89

#892

#895

#897

#898

#899

#9

#9

#90

#905

#907

#91

#911

#914

#92

#924

#93

#930

#94

#94

#95

#96

#963

#964

#968

#969

#97

#970

#971

#976

#98

#98

#982

#986

#989

#99

#990

#992

#992

#993

secboot-ioactive-20200603

secboot-ioactive-20200925

secboot-ioactive-20221109

v0.9.3

v0.9.4

v0.9.5

v0.9.6

v0.9.7

v0.9.8

v0.9.9

v1.0.0

v1.0.0-rc1

v1.20.1

v1.21.1

v2.0.0

Mono Color

• 7ada3e0f04 [crypto] Align AES round keys within the AES context Michael Brown 2026-09-05 17:01:40 +01:00
• c4023b98e3 [crypto] Allow for AES hardware acceleration Michael Brown 2026-09-05 20:29:11 +01:00
• d916dfcfae [librm] Enable the use of SSE instructions if supported by the CPU Michael Brown 2026-09-06 14:39:12 +01:00
• f5828201ea [librm] Preserve CR0 across virt_call() Michael Brown 2026-09-06 14:30:52 +01:00
• a69ad34217 [librm] Preserve CR4 across virt_call() if FXSR is supported Michael Brown 2026-09-06 14:06:32 +01:00
• 8f334fd55d [librm] Skip runtime check for FXSR support in 64-bit builds Michael Brown 2026-09-06 14:18:40 +01:00
• af9604576d [librm] Remove conditionalisation of the Tivoli VMM workaround Michael Brown 2026-09-06 12:53:20 +01:00
• aef505b823 [librm] Clarify layout of saved GDTR/IDTR Michael Brown 2026-09-06 13:49:57 +01:00
• b57bc764a5 [librm] Always disable paging when switching to protected mode Michael Brown 2026-09-06 14:47:56 +01:00
• 787ed9397e [crypto] Treat high tag numbers as invalid Michael Brown 2026-09-04 22:42:40 +01:00
• d89765d5f0 [test] Add Project Wycheproof RSA-PSS signature verification tests Michael Brown 2026-09-04 21:48:06 +01:00
• 20613766c9 [test] Add a build target for slow self-tests Michael Brown 2026-09-04 17:35:05 +01:00
• 6935ca31e0 [test] Add Project Wycheproof ECDSA signature verification tests Michael Brown 2026-09-04 16:55:41 +01:00
• 1901e32240 [crypto] Reject non-canonical ECDSA signature encodings Michael Brown 2026-09-04 16:41:05 +01:00
• 3a62e9ded4 [crypto] Reject indefinite and unrepresentable length encodings Michael Brown 2026-09-04 15:45:50 +01:00
• de04e79ae5 [crypto] Reject ASN.1 unsigned integers holding negative values Michael Brown 2026-09-04 13:57:43 +01:00
• 511dfd2c4d [crypto] Reject non-canonical ECDSA signature data structures Michael Brown 2026-09-03 16:35:11 +01:00
• 0a1d5fae46 [test] Simplify class hierarchy for Project Wycheproof import tool Michael Brown 2026-09-03 13:50:23 +01:00
• 2d2dd525bd [test] Derive comment labels from Project Wycheproof input files Michael Brown 2026-09-03 13:15:44 +01:00
• ffa20bcb7e [test] Derive algorithm names from Project Wycheproof input files Michael Brown 2026-09-03 12:17:42 +01:00
• d6032f05e8 [test] Use a single shared class for Project Wycheproof test flags Michael Brown 2026-09-03 10:58:11 +01:00
• b684d09fd9 [test] Add Project Wycheproof RSA PKCS#1 signature verification tests Michael Brown 2026-09-02 23:01:20 +01:00
• d7226b9a99 [test] Add Project Wycheproof RSA PKCS#1 signature generation tests Michael Brown 2026-09-02 17:41:49 +01:00
• 7b46fa94a5 [test] Allow for invocation of individual Project Wycheproof tests Michael Brown 2026-09-02 23:00:42 +01:00
• 6e73f2aade [crypto] Reject non-canonical RSA inputs Michael Brown 2026-09-02 22:50:06 +01:00
• c6bda17e58 [crypto] Add OID-identified algorithms for RSA with SHA512/224 and SHA512/256 Michael Brown 2026-09-02 22:44:38 +01:00
• 22727c6ce3 [test] Add Project Wycheproof RSA PKCS#1 decryption tests Michael Brown 2026-09-02 15:29:19 +01:00
• 2b1eaff499 [crypto] Add missing padding length check in RSA decryption Michael Brown 2026-09-02 15:27:57 +01:00
• a2f979a300 [test] Allow for public-key algorithm tests with incomplete key pairs Michael Brown 2026-09-02 13:50:25 +01:00
• ef58461294 [test] Allow for per-group definition code in Project Wycheproof tests Michael Brown 2026-09-02 15:00:11 +01:00
• d9df5d9bdd [test] Add schema and count validators in Project Wycheproof tests Michael Brown 2026-09-02 14:58:16 +01:00
• 35bd9a8fd3 [test] Add Project Wycheproof AES-GCM tests Michael Brown 2026-09-01 12:55:43 +01:00
• e49e1db1c2 [crypto] Reject zero-length IVs for GCM ciphers Michael Brown 2026-09-01 12:57:16 +01:00
• 474abc95d9 [test] Add ability to test for cipher key and IV failures Michael Brown 2026-09-01 12:56:33 +01:00
• 5fe9965198 [test] Add Project Wycheproof HKDF tests Michael Brown 2026-08-31 20:44:58 +01:00
• 6981f2372f [test] Allow for HKDF tests without an expected PRK Michael Brown 2026-08-31 20:38:33 +01:00
• 16479af7f5 [test] Add Project Wycheproof HMAC tests Michael Brown 2026-08-31 20:42:21 +01:00
• a1c38478f2 [test] Allow for HMAC tests with partial expected output digest values Michael Brown 2026-08-31 20:59:20 +01:00
• 0a2a0ef50e [test] Reduce duplication in Project Wycheproof import tool Michael Brown 2026-08-31 20:46:23 +01:00
• d26e0496e7 [test] Add Project Wycheproof import tool and key exchange tests Michael Brown 2026-08-29 17:42:27 +01:00
• 26f46a2b4f [tls] Reject a duplicate ServerHelloDone Michael Brown 2026-08-27 13:08:39 +01:00
• 61a75eca5f [crypto] Ensure that a closed channel is left with unusable ciphers Michael Brown 2026-08-27 12:24:33 +01:00
• 2d66bfa038 [crypto] Guard against mutation of certificate chain during validation Michael Brown 2026-08-27 12:01:01 +01:00
• 2ebc0d49c6 [tls] Add documentation to assist future code review Michael Brown 2026-08-25 23:49:15 +01:00
• 0167b5a39f [tls] Make certificate processing visibly safe at point of use Michael Brown 2026-08-25 23:02:02 +01:00
• 8ef91ddc8d [tls] Make certificate sending visibly safe at point of use Michael Brown 2026-08-25 22:12:00 +01:00
• 11b793c586 [tls] Treat secure channel's cipher algorithm as definitive Michael Brown 2026-08-25 20:16:40 +01:00
• dc962df26f [tls] Ensure that ServerKeyExchange parsing method is always non-NULL Michael Brown 2026-08-25 20:00:00 +01:00
• c6e8c42238 [tls] Use null key exchange algorithm as default for DHE and ECDHE Michael Brown 2026-08-25 19:44:18 +01:00
• 8383acf487 [tls] Ensure that broken cipher suites can never be selected Michael Brown 2026-08-25 19:10:38 +01:00
• cc87836a00 [tls] Remove redundant cipher suite name components in debug messages Michael Brown 2026-08-25 18:52:27 +01:00
• 202466d8a6 [tls] Use null handshake digest algorithm for the null cipher suite Michael Brown 2026-08-25 18:07:55 +01:00
• 7afbcac103 [tls] Use null MAC digest algorithm for AEAD ciphers Michael Brown 2026-08-25 17:44:06 +01:00
• d86e86dff8 [tls] Guarantee that receive data buffer list is non-empty Michael Brown 2026-08-24 23:06:42 +01:00
• e97772c34a [tls] Use standalone secure channel and key schedule implementations Michael Brown 2026-08-24 13:53:46 +01:00
• 147ff45f41 [crypto] Add a standalone implementation of the TLS key schedules Michael Brown 2026-08-21 13:59:15 +01:00
• 2898206f28 [crypto] Add a generic implementation of a secure channel Michael Brown 2026-07-29 11:04:53 +01:00
• 53ac04e1ce [tls] Clean up session management Michael Brown 2026-08-24 10:35:34 +01:00
• 5d40abee8a [tls] Clarify purpose of stored key exchange algorithm Michael Brown 2026-08-24 09:00:38 +01:00
• 8958a4a660 [tls] Separate the concepts of key schedule and secure channel Michael Brown 2026-08-23 16:08:39 +01:00
• 6322f50cc8 [tls] Unify handling of ServerKeyExchange and ClientKeyExchange Michael Brown 2026-08-23 14:42:07 +01:00
• 350c4e27f5 [crypto] Avoid out-of-bounds read when using uninitialised AES context Michael Brown 2026-08-23 12:14:54 +01:00
• 0ab2277c40 [arm] Add missing condition code clobbers to inline assembly Michael Brown 2026-08-21 12:02:45 +01:00
• 87a2016ddd [s390x] Add missing condition code clobbers to inline assembly Michael Brown 2026-08-21 11:27:09 +01:00
• e6d0a97c05 [tls] Model classic RSA key transport as a key exchange algorithm Michael Brown 2026-08-11 10:37:11 +01:00
• c10c815181 [dns] Add redundant explicit check for CNAME validity Michael Brown 2026-08-10 14:28:15 +01:00
• b65faaed14 [bitmap] Avoid potential integer overflow when calculating block count Michael Brown 2026-08-10 12:54:22 +01:00
• 034ef2bd9a [ata] Use data-transfer buffers for data-in and data-out Michael Brown 2026-08-10 11:51:46 +01:00
• 8baf1cda77 [crypto] Correct harmless arithmetic error in Weierstrass curve sizing Michael Brown 2026-08-09 22:41:28 +01:00
• 2fa9f8b1e1 [crypto] Add assertion on HKDF output length Michael Brown 2026-08-09 10:50:21 +01:00
• 719173a3b1 [crypto] Add redundant high-bit clamp to X25519 scalar multiple Michael Brown 2026-08-09 10:17:04 +01:00
• e7f0604575 [crypto] Correct harmless arithmetic error in X25519 comments Michael Brown 2026-08-09 01:01:54 +01:00
• 257e8faf10 [test] Allow for key exchange tests without an expected public key Michael Brown 2026-08-08 23:05:28 +01:00
• 7e882b7925 [crypto] Add a null key exchange algorithm Michael Brown 2026-08-08 14:21:09 +01:00
• e6e51ccbf1 [build] Move various pointer assignments after their length checks Michael Brown 2026-08-07 15:48:14 +01:00
• 6215a886d2 [usb] Guard against invalid descriptor lengths in USB configurations Michael Brown 2026-08-07 13:48:26 +01:00
• fe5f845498 [vmbus] Check for packets shorter than their own header length Michael Brown 2026-08-06 16:39:36 +01:00
• bfc442ad18 [ucode] Remove harmless read beyond end of malformed equivalence table Michael Brown 2026-08-06 15:41:35 +01:00
• 0f4a37bc3a [doc] Add agent-facing instructions Michael Brown 2026-08-06 11:35:08 +01:00
• d00df0822b [doc] Add security policy document Michael Brown 2026-08-05 23:11:48 +01:00
• d3f96b7cad [ci] Add a workflow to trigger synchronisation in forks synctest Michael Brown 2026-08-05 16:29:27 +01:00
• 6084600b47 [ci] Add a workflow to run in forks to synchronise from the upstream Michael Brown 2026-08-05 14:50:19 +01:00
• 36c25549c8 [settings] Fix limited out-of-bounds read in fetch_numeric_setting() Michael Brown 2026-08-05 13:17:16 +01:00
• 092ab54ebc [ipv4] Remove harmless but technically undefined left shift Michael Brown 2026-08-04 18:37:12 +01:00
• a1992fedfa [doc] Document the threat model relevant to iPXE Michael Brown 2026-08-04 15:33:15 +01:00
• 5e706ff4c5 [fcoe] Add assorted length checks Michael Brown 2026-08-04 13:51:08 +01:00
• 894a7e04be [efi] Avoid reading beyond end of command line Michael Brown 2026-08-04 13:17:53 +01:00
• ba98f2e150 [efi] Guard against invalid IpCnt values in the PXE IP address filter Michael Brown 2026-08-04 12:32:07 +01:00
• 45af75d2af [efi] Treat invalid device path components as ending the path Michael Brown 2026-08-04 12:06:11 +01:00
• 5de611be4a [efi] Fix check for well-formed device paths Michael Brown 2026-08-04 11:52:48 +01:00
• eaf987535e [elf] Avoid harmless integer overflows in image length checks Michael Brown 2026-08-04 10:54:58 +01:00
• 3812a69c7f [uhci] Fix descriptor count for zero-length stream transfers Michael Brown 2026-08-04 09:16:55 +01:00
• 897c87a8fa [velocity] Correct direction of endianness conversion Michael Brown 2026-08-04 08:46:24 +01:00
• 3b06e419a9 [uhci] Add missing little-endian conversion Michael Brown 2026-08-04 08:42:01 +01:00
• 8cd4a0c6cd [intelxl] Add missing little-endian conversions Michael Brown 2026-08-04 08:38:10 +01:00
• 1e8f4fed41 [build] Enable strict shift overflow warnings Michael Brown 2026-08-03 23:52:01 +01:00
• 07a0d64fb6 [build] Fix technically undefined left shifts in disreputable code Michael Brown 2026-08-03 23:49:30 +01:00
• d2df712ce5 [build] Fix technically undefined left shifts in reputable code Michael Brown 2026-08-03 23:45:45 +01:00
• 354a7dd7e2 [ipv4] Make the IPV4() macro available to non-test code Michael Brown 2026-08-03 23:29:30 +01:00
• 1cfaada2c3 [iphone] Fix debug printing of received log messages Michael Brown 2026-08-03 22:32:25 +01:00