Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: aws/aws-lc-rs
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.7.0
Choose a base ref
...
head repository: aws/aws-lc-rs
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.7.1
Choose a head ref
  • 10 commits
  • 83 files changed
  • 4 contributors

Commits on Apr 16, 2024

  1. Include s390x in CI (#393)

    justsmth authored Apr 16, 2024
    Configuration menu
    Copy the full SHA
    575f7d0 View commit details
    Browse the repository at this point in the history

Commits on Apr 25, 2024

  1. Configuration menu
    Copy the full SHA
    46582fd View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    3c9e90b View commit details
    Browse the repository at this point in the history

Commits on Apr 26, 2024

  1. ENV vars for OPENSSL_NO_ASM (#377)

    * ENV vars for OPENSSL_NO_ASM
    
    * Fix CI checks
    justsmth authored Apr 26, 2024
    Configuration menu
    Copy the full SHA
    de5c627 View commit details
    Browse the repository at this point in the history

Commits on Apr 29, 2024

  1. hkdf: increase MAX_HKDF_INFO_LEN (#411)

    * hkdf: increase MAX_HKDF_INFO_LEN
    
    Encrypted client hello (ECH) offer confirmation requires computing an 8 byte
    confirmation value:
    
    ```
       accept_confirmation = HKDF-Expand-Label(
          HKDF-Extract(0, ClientHelloInner.random),
          "ech accept confirmation",
          transcript_ech_conf,
          8)
    ```
    
    Similarly, in the hello-retry request confirmation case we compute:
    ```
       hrr_accept_confirmation = HKDF-Expand-Label(
          HKDF-Extract(0, ClientHelloInner1.random),
          "hrr ech accept confirmation",
          transcript_hrr_ech_conf,
          8)
    ```
    
    The HKDF-Expand-Label and HKDF-Extract algorithms are unmodified from RFC 8446.
    
    For a handshake using SHA-384, or SHA-512, as the digest algorithm it's
    possible for the `info` parameter to the HKDF expand step to exceed 80
    bytes.
    
    ```
      2 bytes for the output len
      1 byte for the label len
      6 bytes for the label prefix
     23 bytes for the ECH confirmation label (or 27 for HRR)
      1 byte for the context len
     48 bytes for the context (SHA-384), or 64 bytes (SHA-512)
    ------------------------------------------
    = 81 or 97 bytes total, SHA-384, non-hrr
    = 85 or 101 bytes total, SHA-512, hrr
    
    Both would exceed the existing `MAX_HKDF_INFO_LEN` limit of 80 bytes,
    and so produce `Unspecified` errors.
    
    This commit increase the limit to 102 bytes (it seemed a nicer value
    than 101), allowing the use of aws-lc-rs HKDF for ECH confirmation
    purposes without panic.
    
    * Improve docs on 'Prk::expand' errors
    
    ---------
    
    Co-authored-by: Justin Smith <justsmth@amazon.com>
    cpu and justsmth authored Apr 29, 2024
    Configuration menu
    Copy the full SHA
    c358484 View commit details
    Browse the repository at this point in the history

Commits on May 2, 2024

  1. Configuration menu
    Copy the full SHA
    29f1d9b View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    a9bc038 View commit details
    Browse the repository at this point in the history
  3. Updates for User Guide (#400)

    * Updates for User Guide
    
    * Note about AWS_LC_SYS_NO_ASM
    
    * Satisfy clippy
    
    * Per PR feedback
    justsmth authored May 2, 2024
    Configuration menu
    Copy the full SHA
    beaf5e2 View commit details
    Browse the repository at this point in the history
  4. Align aws-lc-sys v0.16.0 with AWS-LC 1.26.0 (#417)

    * Update to AWS-LC 1.26.0
    
    * Symbols from ubuntu-latest
    
    * Symbols from macos-13-xlarge
    
    * Symbols for aarch64-unknown-linux-gnu
    
    * Symbols for x86_64-unknown-linux-musl
    
    * Symbols for aarch64-unknown-linux-musl
    
    * Symbols for i686-unknown-linux-gnu
    
    * Symbols from macos-12
    
    * Generated headers
    
    * Generated bindings from macos-13-xlarge
    
    * Generated bindings from ubuntu-latest
    
    * Generated bindings for aarch64-unknown-linux-gnu
    
    * Generated bindings for i686-unknown-linux-gnu
    
    * Generated bindings for aarch64-unknown-linux-musl
    
    * Generated bindings for x86_64-unknown-linux-musl
    
    * Generated bindings from macos-12
    
    * Collected source files for x86_64-unknown-linux-musl
    
    * Collected source files from macos-13-xlarge
    
    * Collected source files from ubuntu-latest
    
    * Collected source files from macos-12
    
    * Collected source files for i686-unknown-linux-gnu
    
    * Collected source files for aarch64-unknown-linux-gnu
    
    * Collected source files for aarch64-unknown-linux-musl
    
    ---------
    
    Co-authored-by: aws-lc-sys-bindings-generator <aws-lc-github-bot@amazon.com>
    justsmth and aws-lc-sys-bindings-generator authored May 2, 2024
    Configuration menu
    Copy the full SHA
    a31328e View commit details
    Browse the repository at this point in the history

Commits on May 3, 2024

  1. Build/test with --release build for MinGW, iOS (#399)

    * Perform release build when cross-compiling
    
    * Also build/test with dev profile
    justsmth authored May 3, 2024
    Configuration menu
    Copy the full SHA
    05827f6 View commit details
    Browse the repository at this point in the history
Loading