All pull requests

Pull requests

• Backport 3.6: Add linkage guard to constant_time.h

  #10998·jan-bruckner opened Oct 8, 2026Contributor·

  ·

• Backport 4.1: Reject overflowing numeric OID components

  needs-cineeds-reviewneeds-reviewerpriority-mediumsize-s
  #10997·subotac opened Oct 6, 2026·7 tasks done·

  ·

• Backport 3.6: Reject overflowing numeric OID components

  needs-cineeds-reviewneeds-reviewerpriority-mediumsize-s
  #10996·subotac opened Oct 6, 2026·7 tasks done·

  ·

• Add tls12 sigalg policy tests 4.1

  needs-cineeds-reviewneeds-reviewerpriority-mediumsize-s
  #10995·v1rtu3x opened Oct 6, 2026·3 tasks done·

  ·

• [Backport 3.6] Fix the build when <sys/auxv.h> is not available on Linux

  bugcomponent-cryptocomponent-platformneeds-cineeds-reviewneeds-reviewerpriority-medium
  #10992·yegorich opened Oct 5, 2026·4 tasks done·

  ·
  4

• Accept a cookie extension in a TLS 1.3 HelloRetryRequest

  bugneeds-cineeds-reviewneeds-reviewerpriority-medium
  #10989·JC-000 opened Oct 4, 2026·1 of 6 tasks·

  ·
  1

• [4.1] Test the SHA-256 and SHA-512 crypto extensions with GCC and a fortified libc

  component-testneeds-cineeds-reviewneeds-reviewerpriority-medium
  #10988·JuliusBairaktaris opened Oct 3, 2026·6 tasks done·

  ·
  1

• Test the SHA-256 and SHA-512 crypto extensions with GCC and a fortified libc

  component-testneeds-cineeds-reviewneeds-reviewerpriority-medium
  #10987·JuliusBairaktaris opened Oct 3, 2026·6 tasks done·

  ·
  1

• [3.6] sha256, sha512: keep the target CPU when enabling the crypto extensions

  bugneeds-cineeds-reviewneeds-reviewerpriority-medium
  #10986·JuliusBairaktaris opened Oct 3, 2026·6 tasks done·

  ·
  1

• Backport 4.1: x509_crt: accept empty AuthorityKeyIdentifier sequence

  bugcomponent-x509needs-cineeds-reviewpriority-mediumsize-s
  #10985·MechatronikMonkey opened Oct 3, 2026·7 tasks done·

  ·
  2

• Backport 3.6: x509_crt: accept empty AuthorityKeyIdentifier sequence

  bugcomponent-x509priority-mediumsize-s
  #10984·MechatronikMonkey opened Oct 3, 2026·7 tasks done·

  ·
  1

• Reject a CSR whose CertificationRequestInfo is not fully consumed

  bugneeds-cineeds-reviewneeds-reviewerpriority-medium
  #10983·nvxbug opened Oct 2, 2026Contributor·6 of 8 tasks·

  ·

• Bind new TLS 1.3 tickets to the ALPN of the current connection

  bugcomponent-tlsneeds-reviewneeds-reviewerpriority-medium
  #10980·stanleys12 opened Oct 1, 2026·6 of 7 tasks·

  ·
  1

• Backport: Fix x509 profile pk sigalg 4.1

  needs-reviewneeds-reviewerpriority-low
  #10979·v1rtu3x opened Sep 29, 2026·2 of 6 tasks·

  ·
  1

• lms/lmots: apply the same output-buffer zeroization consistently

  bugcomponent-cryptoneeds-cineeds-workpriority-lowsize-s
  #10976·Johnsonajibi opened Sep 27, 2026·

  ·

• x509_crt: accept empty AuthorityKeyIdentifier sequence

  approvedbugcomponent-x509needs-backportspriority-mediumsize-s
  #10974·MechatronikMonkey opened Sep 26, 2026·7 tasks done·

  ·
  1

  4

• MLDSA support: pqcp include path and mldsa key slot component test

  needs-workpriority-highsize-xs
  #10972·rohankl-arm opened Sep 25, 2026·6 of 7 tasks·

  ·
  5

• [4.1] Parenthesize arguments of TLS 1.2 sig/hash alg macros

  bugneeds-backportsneeds-reviewneeds-reviewerpriority-mediumsize-xs
  #10970·barakgut opened Sep 24, 2026·5 tasks done·

  ·
  1

• [3.6] Parenthesize arguments of TLS 1.2 sig/hash alg macros

  bugneeds-backportsneeds-reviewneeds-reviewerpriority-mediumsize-xs
  #10969·barakgut opened Sep 24, 2026·4 tasks done·

  ·
  1

• Parenthesize arguments of TLS 1.2 sig/hash alg macros

  bugneeds-backportsneeds-reviewneeds-reviewerpriority-mediumsize-xs
  #10968·barakgut opened Sep 24, 2026·7 tasks done·

  ·
  1

  1

• Fix TLS 1.3 handshakes with opaque PSKs

  bugcomponent-tls13size-s
  #10967·v1rtu3x opened Sep 23, 2026·5 of 7 tasks·

  ·
  1

  1

• Backport 3.6: Fix resource leak in populate transform

  needs-reviewneeds-reviewerpriority-highsize-s
  #10966·bjwtaylor opened Sep 23, 2026Contributor·7 tasks·

  ·
  1

• Backport 4.1: Fix resource leak in populate transform

  needs-reviewneeds-reviewerpriority-highsize-s
  #10965·bjwtaylor opened Sep 23, 2026Contributor·7 tasks·

  ·
  1

• Validate timestamps in mbedtls_x509write_crt_set_validity

  component-x509enhancementneeds-cipriority-mediumsize-s
  #10959·nvxbug opened Sep 20, 2026Contributor·5 of 7 tasks·

  ·
  1

• Use relative URLs for the framework and tf-psa-crypto submodules

  needs-cineeds-design-approvalneeds-reviewneeds-reviewerpriority-lowsize-xs
  #10953·parmi93 opened Sep 15, 2026·

  ·
  2