)]}'
{
  "log": [
    {
      "commit": "e185d7fd85499c8ce5ca2a54f5cf8fe7dbe3f8df",
      "tree": "715c482eea07022fc9ddf7670f53676855f607e7",
      "parents": [
        "299ce78166bbfc410d473953f33f84f1316c3f67",
        "b1db32061ccaf5428b2a7335f1bc377aa2ae93ce"
      ],
      "author": {
        "name": "minosgalanakis",
        "email": "30719586+minosgalanakis@users.noreply.github.com",
        "time": "Mon Oct 13 08:39:14 2025 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Oct 13 08:39:14 2025 +0100"
      },
      "message": "Merge pull request #1428 from Mbed-TLS/mbedtls-3.6.5rc0-pr\n\nMbedtls 3.6.5RC"
    },
    {
      "commit": "b1db32061ccaf5428b2a7335f1bc377aa2ae93ce",
      "tree": "715c482eea07022fc9ddf7670f53676855f607e7",
      "parents": [
        "335197e60cb78d330dc63479a685359578813192"
      ],
      "author": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Thu Oct 02 16:02:49 2025 +0100"
      },
      "committer": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Fri Oct 10 18:04:55 2025 +0100"
      },
      "message": "Update BRANCHES.md\n\nSigned-off-by: Minos Galanakis \u003cminos.galanakis@arm.com\u003e\n"
    },
    {
      "commit": "335197e60cb78d330dc63479a685359578813192",
      "tree": "5b0f33f5d4a6cc1b81925264d55c460e4ec2f8ca",
      "parents": [
        "2e1245171c0321802e2999ee8f42f302094a2dab"
      ],
      "author": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Mon Oct 06 15:26:18 2025 +0100"
      },
      "committer": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Fri Oct 10 18:04:55 2025 +0100"
      },
      "message": "Added generated files\n\nSigned-off-by: Minos Galanakis \u003cminos.galanakis@arm.com\u003e\n"
    },
    {
      "commit": "2e1245171c0321802e2999ee8f42f302094a2dab",
      "tree": "a914f23ffc554e5d61a8e201ecfea813ffc4a5a7",
      "parents": [
        "ad63800090408696d580f9521640d851c1166bc1"
      ],
      "author": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Mon Oct 06 13:56:58 2025 +0100"
      },
      "committer": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Fri Oct 10 18:04:55 2025 +0100"
      },
      "message": "Updated framework pointer\n\nSigned-off-by: Minos Galanakis \u003cminos.galanakis@arm.com\u003e\n"
    },
    {
      "commit": "ad63800090408696d580f9521640d851c1166bc1",
      "tree": "05cb5b6da0ae0c5de16f8489bdd73a1b88795338",
      "parents": [
        "369ea7a041b5a47c28dcf3cefbf5258794eb04df"
      ],
      "author": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Thu Oct 02 15:48:12 2025 +0100"
      },
      "committer": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Fri Oct 10 18:04:55 2025 +0100"
      },
      "message": "Version bump for mbedtls-3.5.6\n\n./scripts/bump_version.sh --version 3.6.5\n\nSigned-off-by: Minos Galanakis \u003cminos.galanakis@arm.com\u003e\n"
    },
    {
      "commit": "369ea7a041b5a47c28dcf3cefbf5258794eb04df",
      "tree": "a5fa48b5eaafeedfa211f6813353d29be79547d7",
      "parents": [
        "0c4a951b374206dc84ec4e2555fdf817ff61eb47"
      ],
      "author": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Thu Oct 02 15:43:02 2025 +0100"
      },
      "committer": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Fri Oct 10 18:04:55 2025 +0100"
      },
      "message": "Assemble ChangeLog\n\nSigned-off-by: Minos Galanakis \u003cminos.galanakis@arm.com\u003e\n"
    },
    {
      "commit": "0c4a951b374206dc84ec4e2555fdf817ff61eb47",
      "tree": "9cb4a82280bb50917f747227808f89dba3e331f6",
      "parents": [
        "7e81fe32d09d57e24faf3522e6d4cdb35608da4b"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Thu Oct 09 12:49:01 2025 +0200"
      },
      "committer": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Fri Oct 10 18:04:55 2025 +0100"
      },
      "message": "Be more precise about the user/peer ID limitation\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n(cherry picked from commit 84a9b26b88c81ec5abc3f7e156acdbcca2664f08)\nSigned-off-by: Minos Galanakis \u003cminos.galanakis@arm.com\u003e\n"
    },
    {
      "commit": "7e81fe32d09d57e24faf3522e6d4cdb35608da4b",
      "tree": "1d6d6958ab7d20ff619168b613c0cd772fb69c1d",
      "parents": [
        "90eac7fc7ad80d6f644961bea087ec064fd41fdd"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Wed Oct 08 17:19:02 2025 +0200"
      },
      "committer": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Fri Oct 10 18:04:55 2025 +0100"
      },
      "message": "Add storage format test case for JPAKE\n\nThe storage test generator doesn\u0027t support JPAKE at this time. So write a\ntest case manually.\n\nThe key is not exercised, since `psa_exercise_key()` doesn\u0027t support PAKE at\nthis time. But at least we can use this test case to ensure that we know how\nthe key is represented in storage.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n(cherry picked from commit 98a4029d5169e8f18f3a0c2864794000c9641876)\nSigned-off-by: Minos Galanakis \u003cminos.galanakis@arm.com\u003e\n"
    },
    {
      "commit": "90eac7fc7ad80d6f644961bea087ec064fd41fdd",
      "tree": "6cfe2be07314a8f72f112adbe2cb15835766598d",
      "parents": [
        "bafcf5bddf20afc3ee0535e725e02c05192af413"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Wed Oct 08 17:36:22 2025 +0200"
      },
      "committer": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Fri Oct 10 18:04:55 2025 +0100"
      },
      "message": "Document JPAKE limitations\n\nDocument limitations on the user ID, peer ID, primitive (elliptic curve) and\nhash for `PSA_ALG_JPAKE`.\n\nhttps://github.com/Mbed-TLS/TF-PSA-Crypto/issues/502\nhttps://github.com/Mbed-TLS/TF-PSA-Crypto/issues/503\nhttps://github.com/Mbed-TLS/TF-PSA-Crypto/issues/504\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n(cherry picked from commit 8ca2a5bf9502431e29d7338a3516bde53b8aa23d)\nSigned-off-by: Minos Galanakis \u003cminos.galanakis@arm.com\u003e\n"
    },
    {
      "commit": "bafcf5bddf20afc3ee0535e725e02c05192af413",
      "tree": "de1a5b1454f8be1c5de5d7b14ffdec45e39be257",
      "parents": [
        "299ce78166bbfc410d473953f33f84f1316c3f67",
        "70135847cdcd2acb0e57213ddb1e703670df5b5c"
      ],
      "author": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Thu Oct 02 15:37:04 2025 +0100"
      },
      "committer": {
        "name": "Minos Galanakis",
        "email": "minos.galanakis@arm.com",
        "time": "Thu Oct 02 15:37:04 2025 +0100"
      },
      "message": "Merge remote-tracking branch \u0027restricted/mbedtls-3.6-restricted\u0027 into mbedtls-3.6.5rc0-pr\n\nSigned-off-by: Minos Galanakis \u003cminos.galanakis@arm.com\u003e\n"
    },
    {
      "commit": "299ce78166bbfc410d473953f33f84f1316c3f67",
      "tree": "99c5c2a63b9c0726dd966a84f5e989fe6138976f",
      "parents": [
        "f2021e28c6e03e5394b1ab898bdaf496baa1eabe",
        "616f9fde62b89e45ff9b8c0a983855472ec37a8a"
      ],
      "author": {
        "name": "Bence Szépkúti",
        "email": "bence.szepkuti@arm.com",
        "time": "Tue Sep 30 09:41:11 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Sep 30 09:41:11 2025 +0000"
      },
      "message": "Merge pull request #10417 from bensze01/abicheck-worktree-submodules-3.6\n\n[3.6 backport] Use submodule work trees during ABI check\n"
    },
    {
      "commit": "f2021e28c6e03e5394b1ab898bdaf496baa1eabe",
      "tree": "bcaa2c911471270188707122c26127681aa217a6",
      "parents": [
        "3c5efcb61b1b2e04dc9b1ad1ff460606c577f468",
        "8701fddbc5413cc3f007e28f6aa23c5ff20560b2"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Sep 30 09:21:13 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Sep 30 09:21:13 2025 +0000"
      },
      "message": "Merge pull request #10421 from gilles-peskine-arm/psa-transition-guide-20250630-3.6\n\nUpdate PSA transition guide for 3.6.5\n"
    },
    {
      "commit": "3c5efcb61b1b2e04dc9b1ad1ff460606c577f468",
      "tree": "59e147d8165fe43092930dfcd698588836455a99",
      "parents": [
        "02b7707b1051c982d67cafd804ddbec4bd15b27f",
        "6e73b2f2fd96587894743b59e05e09881d10cf6f"
      ],
      "author": {
        "name": "David Horstmann",
        "email": "david.horstmann@arm.com",
        "time": "Mon Sep 29 19:35:11 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Sep 29 19:35:11 2025 +0000"
      },
      "message": "Merge pull request #10427 from bjwtaylor/time_t-backport\n\nBackport 3.6: Replace cases of time_t with mbedtls_time_t\n"
    },
    {
      "commit": "6e73b2f2fd96587894743b59e05e09881d10cf6f",
      "tree": "59e147d8165fe43092930dfcd698588836455a99",
      "parents": [
        "02b7707b1051c982d67cafd804ddbec4bd15b27f"
      ],
      "author": {
        "name": "Ben Taylor",
        "email": "ben.taylor@linaro.org",
        "time": "Mon Sep 29 15:35:28 2025 +0100"
      },
      "committer": {
        "name": "Ben Taylor",
        "email": "ben.taylor@linaro.org",
        "time": "Mon Sep 29 15:35:28 2025 +0100"
      },
      "message": "Backport time_t type conversions\n\nSigned-off-by: Ben Taylor \u003cben.taylor@linaro.org\u003e\n"
    },
    {
      "commit": "8701fddbc5413cc3f007e28f6aa23c5ff20560b2",
      "tree": "84c71e089a1f8b503893f76db6000f1e59ac851a",
      "parents": [
        "1e9efcc1ab37157f2a2568d936a29e99963a7c14"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 29 15:18:37 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 29 15:18:37 2025 +0200"
      },
      "message": "Remove sentence about 1.0 that should not have been backported\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "616f9fde62b89e45ff9b8c0a983855472ec37a8a",
      "tree": "520f9d119cbdd7c92809e34a3a5e958be5b49fca",
      "parents": [
        "e45e5046ba5b2cce5207a68a4378ee42c825f61b"
      ],
      "author": {
        "name": "Bence Szépkúti",
        "email": "bence.szepkuti@arm.com",
        "time": "Mon Sep 29 14:24:25 2025 +0200"
      },
      "committer": {
        "name": "Bence Szépkúti",
        "email": "bence.szepkuti@arm.com",
        "time": "Mon Sep 29 14:24:25 2025 +0200"
      },
      "message": "Fix comment too long for pylint\n\nSigned-off-by: Bence Szépkúti \u003cbence.szepkuti@arm.com\u003e\n"
    },
    {
      "commit": "02b7707b1051c982d67cafd804ddbec4bd15b27f",
      "tree": "b961a9d3f87fb0e4fcac74f5b4d55d91e70f662b",
      "parents": [
        "5cbbca45dd404bcfe68b7b7cd17c6b8d7e7c7354",
        "be407038bf37886a40c729f99bf5d524cbe7a37c"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Mon Sep 29 10:48:02 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Sep 29 10:48:02 2025 +0000"
      },
      "message": "Merge pull request #10419 from mpg/fix-udp-proxy-3.6\n\n[3.6] Fix includes in udp_proxy.c\n"
    },
    {
      "commit": "e45e5046ba5b2cce5207a68a4378ee42c825f61b",
      "tree": "6ab8fda91498876fda1f9a829337658b01130cf4",
      "parents": [
        "d040427111d868fe5b53aab9b5c7d4ac59f7f454"
      ],
      "author": {
        "name": "Bence Szépkúti",
        "email": "bence.szepkuti@arm.com",
        "time": "Fri Sep 26 20:10:04 2025 +0200"
      },
      "committer": {
        "name": "Bence Szépkúti",
        "email": "bence.szepkuti@arm.com",
        "time": "Fri Sep 26 20:28:25 2025 +0200"
      },
      "message": "Prevent unnecessary submodule fetches\n\nSigned-off-by: Bence Szépkúti \u003cbence.szepkuti@arm.com\u003e\n"
    },
    {
      "commit": "d040427111d868fe5b53aab9b5c7d4ac59f7f454",
      "tree": "6828828c9fb7b3a284c71a3e4e9f1dd3c005ad50",
      "parents": [
        "99fa0abc754fc6663cc2e1f0a6d2e71139c3c071"
      ],
      "author": {
        "name": "Bence Szépkúti",
        "email": "bence.szepkuti@arm.com",
        "time": "Fri Sep 26 15:44:11 2025 +0200"
      },
      "committer": {
        "name": "Bence Szépkúti",
        "email": "bence.szepkuti@arm.com",
        "time": "Fri Sep 26 15:47:01 2025 +0200"
      },
      "message": "Eliminate use of git worktree prune\n\nSigned-off-by: Bence Szépkúti \u003cbence.szepkuti@arm.com\u003e\n"
    },
    {
      "commit": "99fa0abc754fc6663cc2e1f0a6d2e71139c3c071",
      "tree": "77d9d4b84c936745666f1c3e0c07b6f94ac4ba55",
      "parents": [
        "cdd166274e1d1ba6de097a88d1bec3e4935f055a"
      ],
      "author": {
        "name": "Bence Szépkúti",
        "email": "bence.szepkuti@arm.com",
        "time": "Fri Sep 26 15:37:42 2025 +0200"
      },
      "committer": {
        "name": "Bence Szépkúti",
        "email": "bence.szepkuti@arm.com",
        "time": "Fri Sep 26 15:47:01 2025 +0200"
      },
      "message": "Use f-string literal\n\nThis makes path-construction a bit more readable\n\nSigned-off-by: Bence Szépkúti \u003cbence.szepkuti@arm.com\u003e\n"
    },
    {
      "commit": "1e9efcc1ab37157f2a2568d936a29e99963a7c14",
      "tree": "f49a19f4bdfe30e0b8d22f2104131b8a7697644b",
      "parents": [
        "106700481d14de07f478f8a51e176f28af99ebd4"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 15:15:13 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 15:15:13 2025 +0200"
      },
      "message": "Update some references to the future\n\nThe future is now.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "106700481d14de07f478f8a51e176f28af99ebd4",
      "tree": "dfdce716c42c877c0296e1944fc6f2f1b7e33efe",
      "parents": [
        "f6a7be0673ab04a0d857aaecc8015e7327d7ec79"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 13:15:58 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 15:11:02 2025 +0200"
      },
      "message": "Improve explanations of configuration translation\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "f6a7be0673ab04a0d857aaecc8015e7327d7ec79",
      "tree": "6b7199a24d1717f95ae05fc624005ddd4af7906e",
      "parents": [
        "4f9d6e9451955f44804b5defe3e5c093214a93c9"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 12:29:42 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 15:10:09 2025 +0200"
      },
      "message": "Copyediting\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "4f9d6e9451955f44804b5defe3e5c093214a93c9",
      "tree": "050255a92577d99d061d1cfcc90525b5ba0aaed7",
      "parents": [
        "b9eeace74a81be5f9b8c13446a61aed1d3e600db"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Thu Sep 25 19:20:01 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 15:05:17 2025 +0200"
      },
      "message": "update 1.0.0/4.0.0 release bullet point\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "b9eeace74a81be5f9b8c13446a61aed1d3e600db",
      "tree": "4ad95ddcd0b673b72f18a7c4739e3b78cf5cef31",
      "parents": [
        "223fd448ea7e00531a953ac7f3ba19765116d318"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 15:02:22 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 15:02:22 2025 +0200"
      },
      "message": "Update asymmetric cryptography\n\nMinor clarifications also done in the TF-PSA-Crypto 1.0 update.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "223fd448ea7e00531a953ac7f3ba19765116d318",
      "tree": "c32073895f4903b6d22a323bec05bca0d1d80e9a",
      "parents": [
        "e7a9546dfa019555316bde36804ac53db3b30cd3"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 14:57:33 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 14:57:33 2025 +0200"
      },
      "message": "Miscellaneous improvements\n\nPartial backport of \"Update all except \"Asymmetric cryptography\" for\nTF-PSA-Crypto\", including only clarifications and the extra information\nabout migrating to `MBEDTLS_PSA_CRYPTO_CONFIG` that are also relevant in\n3.6.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "e7a9546dfa019555316bde36804ac53db3b30cd3",
      "tree": "1b39df5a77b6477572f4b7d1704f54c6d39d715a",
      "parents": [
        "f7f3ec460ae4e5b03190a0fcac8210da69371ed3"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Jun 30 21:11:25 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 14:49:19 2025 +0200"
      },
      "message": "Fix section names\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "f7f3ec460ae4e5b03190a0fcac8210da69371ed3",
      "tree": "5287ba8d6aac3d1c616520c28a69b8df7cc6bb1e",
      "parents": [
        "5cbbca45dd404bcfe68b7b7cd17c6b8d7e7c7354"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Jun 30 20:56:22 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 26 14:49:19 2025 +0200"
      },
      "message": "A few updates for 3.6\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "be407038bf37886a40c729f99bf5d524cbe7a37c",
      "tree": "b961a9d3f87fb0e4fcac74f5b4d55d91e70f662b",
      "parents": [
        "5cbbca45dd404bcfe68b7b7cd17c6b8d7e7c7354"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Fri Sep 26 12:11:03 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Fri Sep 26 12:22:58 2025 +0200"
      },
      "message": "Fix includes in udp_proxy.c\n\nThe program uses atoi() unconditionally, so it should include stdlib.h\nunconditionally. Previously this happened to be indirectly included by\nsome other header (via pk.h via ssl.h) but we should not rely on that.\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "cdd166274e1d1ba6de097a88d1bec3e4935f055a",
      "tree": "f298e2a88b4a0b7476f29d27c26c3495af6ff912",
      "parents": [
        "5cbbca45dd404bcfe68b7b7cd17c6b8d7e7c7354"
      ],
      "author": {
        "name": "Bence Szépkúti",
        "email": "bence.szepkuti@arm.com",
        "time": "Thu Sep 25 15:51:07 2025 +0200"
      },
      "committer": {
        "name": "Bence Szépkúti",
        "email": "bence.szepkuti@arm.com",
        "time": "Thu Sep 25 17:41:27 2025 +0200"
      },
      "message": "Use worktrees instead of fetches for submodules\n\nSigned-off-by: Bence Szépkúti \u003cbence.szepkuti@arm.com\u003e\n"
    },
    {
      "commit": "5cbbca45dd404bcfe68b7b7cd17c6b8d7e7c7354",
      "tree": "39992597f0af01f9e7847c83f87ed0928cb8439d",
      "parents": [
        "c2b94d45d4ec8b2fefcd32724d2ba9256faac874",
        "b6bf893c70713d2892e4e914a87f772268421071"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Wed Sep 24 08:01:44 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Sep 24 08:01:44 2025 +0000"
      },
      "message": "Merge pull request #8197 from gilles-peskine-arm/readme-20230913\n\nBackport 3.6: Update README about PSA\n"
    },
    {
      "commit": "70135847cdcd2acb0e57213ddb1e703670df5b5c",
      "tree": "4187df90b3494f7dddd8f36368f2a946df06f09b",
      "parents": [
        "64d4c3675a702a10c93e000e6f1453536c894459",
        "aa611e4bef3d18d45f775ac25ab0c50e935107a9"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "gilles.peskine@arm.com",
        "time": "Wed Sep 17 21:05:31 2025 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Sep 17 21:05:31 2025 +0200"
      },
      "message": "Merge pull request #1425 from gilles-peskine-arm/restricted-3.6-merge-public-20250916\n\n3.6: : merge public into restricted 2025-09-16"
    },
    {
      "commit": "aa611e4bef3d18d45f775ac25ab0c50e935107a9",
      "tree": "269110c5ab91b05d4b4befb1099511bcbeb4ca08",
      "parents": [
        "334dfa8799805d18a2fb64823748dc0c94418f1f"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Wed Sep 17 18:22:30 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Wed Sep 17 18:22:30 2025 +0200"
      },
      "message": "Update framework to the merge of the merge PR\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "b6bf893c70713d2892e4e914a87f772268421071",
      "tree": "39992597f0af01f9e7847c83f87ed0928cb8439d",
      "parents": [
        "263b6925a26e8b011a5cff0c94d36047d8f3fcf9"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Wed Sep 13 13:19:41 2023 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Wed Sep 17 14:04:10 2025 +0200"
      },
      "message": "Qualify \"reference implementation\" wording\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "263b6925a26e8b011a5cff0c94d36047d8f3fcf9",
      "tree": "05919024e0a8814242d7056be4deee78237996f2",
      "parents": [
        "c2b94d45d4ec8b2fefcd32724d2ba9256faac874"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Wed Sep 13 13:14:43 2023 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Wed Sep 17 14:04:10 2025 +0200"
      },
      "message": "The PSA implementation is production-quality\n\nThis has been the case for a while, but we forgot to update the readme.\n\nDon\u0027t prominently label it a \"reference\" implementation. That implies that\nit\u0027s a complete implementation, but it isn\u0027t: we do not intend to implement\nevery mechanism that the PSA specification has an encoding for. That also\ntends to imply that it\u0027s for demonstration purposes and not ready for\nproduction, but Mbed TLS is intended to be used in production.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "334dfa8799805d18a2fb64823748dc0c94418f1f",
      "tree": "ce91012d0720b963d22cff15f5906dfb4b4684dd",
      "parents": [
        "3e59e0ae088829fd6b61a6331f2f921328cdfe16",
        "c2b94d45d4ec8b2fefcd32724d2ba9256faac874"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Tue Sep 16 16:16:53 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Tue Sep 16 16:16:53 2025 +0200"
      },
      "message": "Merge remote-tracking branch \u00273.6\u0027 into restricted-3.6-merge-public-20250916\n\nConflicts:\n\n* `framework`: update submodule to the merge of `main` and `main-restricted`.\n"
    },
    {
      "commit": "64d4c3675a702a10c93e000e6f1453536c894459",
      "tree": "e562a618bb952da10297f9dd7096eace0a8b6a83",
      "parents": [
        "3e59e0ae088829fd6b61a6331f2f921328cdfe16",
        "d1244932f11502e51a259cc9dfbcfb52200b8c8a"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "gilles.peskine@arm.com",
        "time": "Tue Sep 16 16:10:56 2025 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Sep 16 16:10:56 2025 +0200"
      },
      "message": "Merge pull request #1424 from gilles-peskine-arm/pkcs7-padding-error-timing-leak-cveid-3.6\n\nCVE ID for PKCS7 padding timing leak in psa_cipher_finish"
    },
    {
      "commit": "d1244932f11502e51a259cc9dfbcfb52200b8c8a",
      "tree": "e562a618bb952da10297f9dd7096eace0a8b6a83",
      "parents": [
        "3e59e0ae088829fd6b61a6331f2f921328cdfe16"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Tue Sep 16 10:39:29 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Tue Sep 16 10:39:29 2025 +0200"
      },
      "message": "We have a CVE ID\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "c2b94d45d4ec8b2fefcd32724d2ba9256faac874",
      "tree": "b9c1f7f2995e9c4a1f5a520db7f4ffa5bd11a80b",
      "parents": [
        "753036edb35867aa5e5355ff6a231c5cb42d2ec3",
        "9a5444a3b80d8f45c6943b8cd9722fe27da80a6a"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "gilles.peskine@arm.com",
        "time": "Mon Sep 15 12:02:50 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Sep 15 12:02:50 2025 +0000"
      },
      "message": "Merge pull request #10401 from gilles-peskine-arm/psa_can_do-declare-publicly-3.6\n\nBackport 3.6: Declare psa_can_do_cipher() publicly\n"
    },
    {
      "commit": "753036edb35867aa5e5355ff6a231c5cb42d2ec3",
      "tree": "4d2cf13a330edede8a3fa3a5d5c38eef73a77805",
      "parents": [
        "fb7eba06b0a6d3f0bad8edc9740a02133c96bf6d",
        "c2e9dac28f3ba4ca499513eaa18fa6e4c6525408"
      ],
      "author": {
        "name": "Janos Follath",
        "email": "janos.follath@arm.com",
        "time": "Fri Sep 12 13:27:26 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Sep 12 13:27:26 2025 +0000"
      },
      "message": "Merge pull request #10336 from gilles-peskine-arm/generated-files-lib-build-3.6\n\nBackport 3.6: fix `make lib GEN_FILES\u003d` sometimes requiring python\n"
    },
    {
      "commit": "9a5444a3b80d8f45c6943b8cd9722fe27da80a6a",
      "tree": "7be09b7be5999d08f497f2713d7d3e4740fb6601",
      "parents": [
        "6e1b66320a5cfd1c36c0caa86abed5dce896cc85"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 12 11:24:12 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 12 11:27:11 2025 +0200"
      },
      "message": "Fix copypasta\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "6e1b66320a5cfd1c36c0caa86abed5dce896cc85",
      "tree": "c46dd9d3229be2d9253bb96ed80c1410b46e6586",
      "parents": [
        "447134b704bb1589da054e8bfb9800217353f556"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Thu Sep 11 18:34:29 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 12 11:27:09 2025 +0200"
      },
      "message": "Improve documentation\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "447134b704bb1589da054e8bfb9800217353f556",
      "tree": "0540187dd199e53031c36690a7a9082a053c0401",
      "parents": [
        "3aee15b8e58ae223b3fe6f52134a6c067981b3b5"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Thu Sep 11 17:05:40 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 12 11:27:08 2025 +0200"
      },
      "message": "Announce psa_can_do_cipher()\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "3aee15b8e58ae223b3fe6f52134a6c067981b3b5",
      "tree": "98566f5997a3b2a0c6e7d917ea90cae504de94c4",
      "parents": [
        "fb7eba06b0a6d3f0bad8edc9740a02133c96bf6d"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Thu Sep 11 17:04:44 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 12 11:27:07 2025 +0200"
      },
      "message": "Declare psa_can_do_cipher() in a public header\n\nIntegrators in a client-server architecture need to provide this function on\nthe client side.\n\nFixes mbedtls/issues#10341.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "3e59e0ae088829fd6b61a6331f2f921328cdfe16",
      "tree": "b91c6c88adec67d1e2c6ceac30d1839dfed883d7",
      "parents": [
        "f46aee26033afa199f65bfb759ff193c7f9a19c1",
        "c6b28b31ef5ad106e34102bf084b5c81cedc61a4"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Sep 11 12:25:23 2025 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Sep 11 12:25:23 2025 +0200"
      },
      "message": "Merge pull request #1411 from mpg/bypass-wrappers\n\n[3.6] Bypass GCD/modinv wrappers when possible"
    },
    {
      "commit": "c6b28b31ef5ad106e34102bf084b5c81cedc61a4",
      "tree": "637c4faef48c1b21c5308c966a614c956a0a80bf",
      "parents": [
        "c18eea6d43bf5d24e3f83945245e9fe31139228e"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Sep 11 09:58:45 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Sep 11 09:58:45 2025 +0200"
      },
      "message": "Be explicit about modinv output range\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "f46aee26033afa199f65bfb759ff193c7f9a19c1",
      "tree": "88d8b7617b24414a4c699e40ea88a73a7bc04b74",
      "parents": [
        "9d7d0e63ae618a0a3e32bd5d44975759f9feaad5",
        "cc908ad04c388b50b81fa3b3a8b509cf62797fcf"
      ],
      "author": {
        "name": "Janos Follath",
        "email": "janos.follath@arm.com",
        "time": "Mon Sep 08 16:33:22 2025 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Sep 08 16:33:22 2025 +0100"
      },
      "message": "Merge pull request #1406 from gilles-peskine-arm/pkcs7-padding-error-timing-leak-3.6\n\nBackport 3.6: Fix timing leak in PSA CBC-PKCS7 decryption"
    },
    {
      "commit": "fb7eba06b0a6d3f0bad8edc9740a02133c96bf6d",
      "tree": "4f5f23c92b22fad923cfec6810fa79223aaa6ae7",
      "parents": [
        "943c291f59730c5c8be7fbbb9531a98e3d2b1120",
        "7f231a634b14a42299df05c654aee166bf5631e1"
      ],
      "author": {
        "name": "David Horstmann",
        "email": "david.horstmann@arm.com",
        "time": "Mon Sep 08 15:31:46 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Sep 08 15:31:46 2025 +0000"
      },
      "message": "Merge pull request #10387 from davidhorstmann-arm/upgrade-python-packages-3.6\n\n[Backport 3.6] Upgrade packages in requirements.txt\n"
    },
    {
      "commit": "cc908ad04c388b50b81fa3b3a8b509cf62797fcf",
      "tree": "88d8b7617b24414a4c699e40ea88a73a7bc04b74",
      "parents": [
        "2d666646bace4de2fce0f8dd9f95df560dd55f73"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Aug 25 17:01:34 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 08 12:22:39 2025 +0200"
      },
      "message": "Remove redundant memset on freshly initialized buffer\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "2d666646bace4de2fce0f8dd9f95df560dd55f73",
      "tree": "cd697dfdbdc3931688585c81e341dba0751efba3",
      "parents": [
        "04dfd704325a6dbc2a13eb7f418eaca9ae9ca549"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Thu Aug 07 23:07:31 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 08 12:22:39 2025 +0200"
      },
      "message": "Changelog entry for PSA CBC-PKCS7 padding oracle fix\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "04dfd704325a6dbc2a13eb7f418eaca9ae9ca549",
      "tree": "165d11dcf5614fb0884b143db1c1198ba565e9ab",
      "parents": [
        "3b380daedbce9fae3e7ed7e84f18e97876e7e6f3"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Thu Aug 07 22:27:26 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 08 12:22:39 2025 +0200"
      },
      "message": "psa_cipher_decrypt: treat status and output length as sensitive\n\nIn `psa_cipher_decrypt()` and in the corresponding function in our built-in\nimplementation `mbedtls_psa_cipher_decrypt()`, treat `status` and\n`*output_length` as sensitive variables whose value must not leak through a\ntiming side channel. This is important when doing decryption with unpadding,\nwhere leaking the validity or amount of padding can enable a padding oracle\nattack.\n\nWith this change, `psa_cipher_decrypt()` should be constant-time if the\nunderlying legacy function (including the cipher implementation) is.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "3b380daedbce9fae3e7ed7e84f18e97876e7e6f3",
      "tree": "9e7988120dae7b5e4d4ce4b3c14bc15ca3904f00",
      "parents": [
        "e74b42832e4af11606ef8aae2c9404b4acaa2c6d"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Thu Aug 07 21:59:07 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 08 12:22:39 2025 +0200"
      },
      "message": "psa_cipher_finish: treat status and output length as sensitive\n\nIn `psa_cipher_finish()` and in the corresponding function in our built-in\nimplementation `mbedtls_psa_cipher_finish()`, treat `status` and\n`*output_length` as sensitive variables whose value must not leak through a\ntiming side channel. This is important when doing decryption with unpadding,\nwhere leaking the validity or amount of padding can enable a padding oracle\nattack.\n\nWith this change, `psa_cipher_finish()` should be constant-time if the\nunderlying legacy function (including the cipher implementation) is.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "e74b42832e4af11606ef8aae2c9404b4acaa2c6d",
      "tree": "33355a7f84d1e7322ba65b1e1727c5a2a73c3f2f",
      "parents": [
        "d179dc80a5b13189c79fe4531eacb28698a7a0e9"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Sun Jul 27 21:29:40 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 08 12:22:39 2025 +0200"
      },
      "message": "Return PSA_ERROR_INVALID_PADDING in constant time\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "d179dc80a5b13189c79fe4531eacb28698a7a0e9",
      "tree": "c1bc78e7f01235941f6306c7eb81974d8e55ec9a",
      "parents": [
        "d3e182e7dac9619b3efd7fa3de3452a160e7d971"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Sun Jul 27 18:57:04 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 08 12:22:39 2025 +0200"
      },
      "message": "Use mbedtls_psa_cipher_finish() in PSA\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "d3e182e7dac9619b3efd7fa3de3452a160e7d971",
      "tree": "3c4e05375daff2a3f060689290a572dcefae8abc",
      "parents": [
        "b6b1a8299b666fb827093de24c54e5788e8075dc"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Thu Aug 07 21:25:23 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 08 12:22:39 2025 +0200"
      },
      "message": "Add BUFFER_TOO_SMALL testing\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "b6b1a8299b666fb827093de24c54e5788e8075dc",
      "tree": "31548867d10bacb663457ffbff422f5a1696b95f",
      "parents": [
        "bba5d7c439a35a4aa4244a1b69750e1c14dc9bed"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Thu Aug 07 20:28:34 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 08 12:22:39 2025 +0200"
      },
      "message": "Factor API calls into auxiliary functions\n\nFactor some common code for one-shot or multipart encryption/decryption into\nauxiliary functions. No behavior change.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "bba5d7c439a35a4aa4244a1b69750e1c14dc9bed",
      "tree": "d2e6c2e524d28558f3edc5cf1f2df41671148e9a",
      "parents": [
        "9d7d0e63ae618a0a3e32bd5d44975759f9feaad5"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Sun Jul 27 18:10:01 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 08 12:22:39 2025 +0200"
      },
      "message": "Add constant-time AES-CBC encrypt and decrypt tests through PSA\n\nThe main goal is to validate that unpadding is constant-time, including\nerror reporting.\n\nUse a separate test function, not annotations in the existing function, so\nthat the functional tests can run on any platform, and we know from test\noutcomes where we have run the constant-time tests.\n\nThe tests can only be actually constant-time if AES is constant time, since\nAES computations are part of what is checked. Thus this requires\nhardware-accelerated AES. We can\u0027t run our AESNI (or AESCE?) code under\nMsan (it doesn\u0027t detect when memory is written from assembly code), so these\ntests can only be run with Valgrind.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "9d7d0e63ae618a0a3e32bd5d44975759f9feaad5",
      "tree": "45140fffe9603d9705372513110287a20daa7ee3",
      "parents": [
        "89f7cdbbacce6591b5aa2e552f8000c886b2cad0",
        "44765c4b9b104ad390d3525626aa4e72320c423b"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "gilles.peskine@arm.com",
        "time": "Mon Sep 08 12:18:50 2025 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Sep 08 12:18:50 2025 +0200"
      },
      "message": "Merge pull request #1407 from gilles-peskine-arm/mbedtls_cipher_finish_padded-3.6\n\nBackport 3.6: Introduce mbedtls_cipher_finish_padded"
    },
    {
      "commit": "943c291f59730c5c8be7fbbb9531a98e3d2b1120",
      "tree": "942bf662db9bfc1bfc370f21e72d9e0947fbd320",
      "parents": [
        "c056b640421204e72232ac20119ef3e3291a93b9",
        "df13694ecd0f4a642f147f1efe7b2a32d4a9e7bd"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "gilles.peskine@arm.com",
        "time": "Mon Sep 08 09:50:16 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Sep 08 09:50:16 2025 +0000"
      },
      "message": "Merge pull request #10390 from gilles-peskine-arm/threading-3.6-alt-doc\n\nImprove documentation of MBEDTLS_THREADING_ALT\n"
    },
    {
      "commit": "df13694ecd0f4a642f147f1efe7b2a32d4a9e7bd",
      "tree": "942bf662db9bfc1bfc370f21e72d9e0947fbd320",
      "parents": [
        "fe00817fe71ec7803899a311fa948f0b71241fc6"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Sun Sep 07 14:45:15 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Sun Sep 07 14:45:15 2025 +0200"
      },
      "message": "Improve documentation of MBEDTLS_THREADING_ALT\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "fe00817fe71ec7803899a311fa948f0b71241fc6",
      "tree": "0b8beb1b6d1a255ad57f7bea781230118d8d4fb1",
      "parents": [
        "c056b640421204e72232ac20119ef3e3291a93b9"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Sun Sep 07 14:42:54 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Sun Sep 07 14:42:54 2025 +0200"
      },
      "message": "Improve documentation of mutex primitives\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "c056b640421204e72232ac20119ef3e3291a93b9",
      "tree": "3e5f13406daffb3e437a665209c71b93ac1a321b",
      "parents": [
        "e0ef179ea7f65aee312fcfdb311891aec208a471",
        "4c40f081486713e1b354ff7a63f1ff42bf0888c9"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "gilles.peskine@arm.com",
        "time": "Fri Sep 05 15:52:01 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Sep 05 15:52:01 2025 +0000"
      },
      "message": "Merge pull request #10378 from gilles-peskine-arm/threading-1.0-condition-3.6\n\nSmoke tests for threading\n"
    },
    {
      "commit": "4c40f081486713e1b354ff7a63f1ff42bf0888c9",
      "tree": "3e5f13406daffb3e437a665209c71b93ac1a321b",
      "parents": [
        "56c4dc12b805183e97adfc3e3120c3a4f4a9b7f1"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 01 00:55:59 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Sep 05 11:27:13 2025 +0200"
      },
      "message": "Update framework: support threading internal interface 4.0.0.0\n\n3.6 is still using the threading internal interface 3.6.0.0 for now.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "7f231a634b14a42299df05c654aee166bf5631e1",
      "tree": "599fc6d6522e05738b7613cf7d554c99e52babe5",
      "parents": [
        "e0ef179ea7f65aee312fcfdb311891aec208a471"
      ],
      "author": {
        "name": "David Horstmann",
        "email": "david.horstmann@arm.com",
        "time": "Fri Sep 05 09:34:15 2025 +0100"
      },
      "committer": {
        "name": "David Horstmann",
        "email": "david.horstmann@arm.com",
        "time": "Fri Sep 05 09:36:44 2025 +0100"
      },
      "message": "Upgrade packages in requirements.txt\n\nSigned-off-by: David Horstmann \u003cdavid.horstmann@arm.com\u003e\n"
    },
    {
      "commit": "89f7cdbbacce6591b5aa2e552f8000c886b2cad0",
      "tree": "305af94fdb528c135ab2f41cf404e3f6a0f93a6e",
      "parents": [
        "210f8bc4d7c28261f010b4cc580e1c351f9c0e4e",
        "07cbb33e761b5c1e995e41ac8327d0aaa59332ea"
      ],
      "author": {
        "name": "David Horstmann",
        "email": "david.horstmann@arm.com",
        "time": "Thu Sep 04 14:51:24 2025 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Sep 04 14:51:24 2025 +0100"
      },
      "message": "Merge pull request #1418 from mpg/ssbleed-mstep-changelog\n\n[3.6] Add ChangeLog entry for SSBleed and M-Step"
    },
    {
      "commit": "07cbb33e761b5c1e995e41ac8327d0aaa59332ea",
      "tree": "305af94fdb528c135ab2f41cf404e3f6a0f93a6e",
      "parents": [
        "210f8bc4d7c28261f010b4cc580e1c351f9c0e4e"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Sep 02 10:41:50 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Sep 02 10:41:50 2025 +0200"
      },
      "message": "Add ChangeLog entry for SSBleed and M-Step\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "56c4dc12b805183e97adfc3e3120c3a4f4a9b7f1",
      "tree": "983f62ead2b6025943a9e3141f804c412d2d99d8",
      "parents": [
        "e0ef179ea7f65aee312fcfdb311891aec208a471"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Sun Aug 31 18:13:23 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Sep 01 00:28:15 2025 +0200"
      },
      "message": "Single-threaded test of nominal mutex usage\n\nNo negative tests since all forbidden usage has undefined behavior.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "e0ef179ea7f65aee312fcfdb311891aec208a471",
      "tree": "2da04686f2610adcad004cfa432140b72610671e",
      "parents": [
        "54bf8addd7bc409a080c663363889cced337c8af",
        "9f7ac0371f5fa4e237b3f423704b6ad01a59e8d0"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Fri Aug 29 11:48:51 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 29 11:48:51 2025 +0000"
      },
      "message": "Merge pull request #10375 from gilles-peskine-arm/threading_internal.h-3.6\n\nBackport 3.6: Create threading_internal.h\n"
    },
    {
      "commit": "c2e9dac28f3ba4ca499513eaa18fa6e4c6525408",
      "tree": "32c35f9b6ddaa2d44a47a7844b2ecd2add071fd0",
      "parents": [
        "fd305341fc810ebd52f4b4df85a808261e39d320"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Aug 29 13:23:33 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Aug 29 13:23:33 2025 +0200"
      },
      "message": "Expand on why and how we bypass the quiet wrapper\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "9f7ac0371f5fa4e237b3f423704b6ad01a59e8d0",
      "tree": "2da04686f2610adcad004cfa432140b72610671e",
      "parents": [
        "7e43145bac0729e54dddb4b0ab1cd4995ecabde1"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Aug 29 10:46:52 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Aug 29 10:46:52 2025 +0200"
      },
      "message": "Fix code style\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "7e43145bac0729e54dddb4b0ab1cd4995ecabde1",
      "tree": "86dc4b7f47efcd35e7b1f2b3f73f0fc52728e457",
      "parents": [
        "2324a02602591efd48c6d11df86879061b2f1310"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Aug 29 09:35:29 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Aug 29 09:35:29 2025 +0200"
      },
      "message": "Typo\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "2324a02602591efd48c6d11df86879061b2f1310",
      "tree": "542f570cfe94317ff34e349c699067ac0fb332c1",
      "parents": [
        "54bf8addd7bc409a080c663363889cced337c8af"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Aug 29 08:51:00 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Fri Aug 29 08:59:27 2025 +0200"
      },
      "message": "Create threading_internal.h\n\nThis is meant to hold threading-related definitions that are not public, but\nare used in the test framework.\n\nTo be populated later.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "44765c4b9b104ad390d3525626aa4e72320c423b",
      "tree": "b50035c68e15a0cd8187f5466086b9ca05fa8b86",
      "parents": [
        "94e4e15748d7018c4a8aa6c63f554b21ab754b58"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Tue Aug 26 13:11:27 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Tue Aug 26 13:14:22 2025 +0200"
      },
      "message": "Test invalid_padding against all-bits-one\n\n`SIZE_MAX` and `~(size_t) 0` are the same, but since the documentation says\n\"all-bits-one\", write it that way in the test code.\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "c18eea6d43bf5d24e3f83945245e9fe31139228e",
      "tree": "5d487b8bd2365059ee4361bbad67a141f29a23f0",
      "parents": [
        "b46432930eb8ecc3ed8953df56c77952c99e8f3a"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Aug 26 11:34:45 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Aug 26 11:34:45 2025 +0200"
      },
      "message": "Minor grammar fix in comment\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "b46432930eb8ecc3ed8953df56c77952c99e8f3a",
      "tree": "a55a2c1647b131e3c8c1412574128dcf2e7cb9a0",
      "parents": [
        "6ab0f519b8c9ede36b034e93fc191b14e8843891"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Aug 26 11:33:12 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Aug 26 11:33:12 2025 +0200"
      },
      "message": "ecdsa: rm unused variable\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "6ab0f519b8c9ede36b034e93fc191b14e8843891",
      "tree": "ab2d96b167668d3ee51928e39b8abd1e1ff41cb4",
      "parents": [
        "9e1c532847af26ea6504720c6755b668b4b1d0da"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Aug 26 11:31:52 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Aug 26 11:31:52 2025 +0200"
      },
      "message": "dhm: remove unused variable (and improve comment)\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "94e4e15748d7018c4a8aa6c63f554b21ab754b58",
      "tree": "a7ad3bc08955ac553e357be7e1ae23027995db49",
      "parents": [
        "f845e9d1113c9459b3b313e1b0d71ddc66b130fb"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Aug 25 16:53:54 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Aug 25 16:56:44 2025 +0200"
      },
      "message": "Explain the near-duplication of test function for constant-flow tests\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "f845e9d1113c9459b3b313e1b0d71ddc66b130fb",
      "tree": "6eae7cd4eeab997f380537e1ded6545732b77f7c",
      "parents": [
        "b4b1920f7a7c36f7ea71d431e159f9a08be3102a"
      ],
      "author": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Aug 25 16:48:42 2025 +0200"
      },
      "committer": {
        "name": "Gilles Peskine",
        "email": "Gilles.Peskine@arm.com",
        "time": "Mon Aug 25 16:48:42 2025 +0200"
      },
      "message": "Minor documentation improvements\n\nSigned-off-by: Gilles Peskine \u003cGilles.Peskine@arm.com\u003e\n"
    },
    {
      "commit": "54bf8addd7bc409a080c663363889cced337c8af",
      "tree": "61fa4525aa09cb3c94fd4423ffc99bf1c1fa03ff",
      "parents": [
        "a53d8c5a335a47abcf04409f6da6e858501758fa",
        "8281e6a13b6768a480015951276ffb73fde83641"
      ],
      "author": {
        "name": "David Horstmann",
        "email": "david.horstmann@arm.com",
        "time": "Wed Aug 20 09:48:26 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 20 09:48:26 2025 +0000"
      },
      "message": "Merge pull request #10366 from davidhorstmann-arm/clarify-file-generation-cc-3.6\n\n[Backport 3.6] Clarify use of `CC` and friends for file generation\n"
    },
    {
      "commit": "8281e6a13b6768a480015951276ffb73fde83641",
      "tree": "61fa4525aa09cb3c94fd4423ffc99bf1c1fa03ff",
      "parents": [
        "a53d8c5a335a47abcf04409f6da6e858501758fa"
      ],
      "author": {
        "name": "David Horstmann",
        "email": "david.horstmann@arm.com",
        "time": "Tue Aug 19 16:56:25 2025 +0100"
      },
      "committer": {
        "name": "David Horstmann",
        "email": "david.horstmann@arm.com",
        "time": "Tue Aug 19 18:14:30 2025 +0100"
      },
      "message": "Clarify use of CC and friends for file generation\n\nAdd more detail around how generation of configuration-independent files\nchooses a C compiler. Mention that setting HOSTCC or CC is recommended\nwhere there are multiple toolchains.\n\nMention that the fallback location is the cc executable, which may help\nusers troubleshooting when the file generation picks up the wrong\ntoolchain (as in Mbed-TLS/mbedtls#10360).\n\nSigned-off-by: David Horstmann \u003cdavid.horstmann@arm.com\u003e\n"
    },
    {
      "commit": "9e1c532847af26ea6504720c6755b668b4b1d0da",
      "tree": "5c7038a5e4e91438b6d572238dfebffb9fcfda5e",
      "parents": [
        "a4bf680e92dc5be758a730daaad7bf6eac5d7353"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Wed Aug 13 14:14:19 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Aug 14 09:40:05 2025 +0200"
      },
      "message": "RSA: use CT gcd-modinv in deduce_private_exponent()\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "a4bf680e92dc5be758a730daaad7bf6eac5d7353",
      "tree": "e6b64c75b545135610da784cfae6944bfab077b8",
      "parents": [
        "630148e67f0cd3d337308321f72f444ca4ef1c35"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Jul 10 10:48:23 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Aug 14 09:40:05 2025 +0200"
      },
      "message": "RSA: refactor: avoid code duplication\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "630148e67f0cd3d337308321f72f444ca4ef1c35",
      "tree": "dd0e5f2193260738823b8d79dcc2bed85f312bfc",
      "parents": [
        "7dcfd7373170ef718863c0c61cda4ff3e5e25299"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Wed Aug 13 13:57:35 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Aug 14 09:40:05 2025 +0200"
      },
      "message": "RSA: use constant-time modinv in deduce_crt()\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "7dcfd7373170ef718863c0c61cda4ff3e5e25299",
      "tree": "0ad7550b041be79254fa5a1b7ffc498ce0c82ee5",
      "parents": [
        "0d73de5ee0ec65ff8b60d073b7d1d369ee0a00e6"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Jul 10 09:57:29 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Aug 14 09:18:52 2025 +0200"
      },
      "message": "RSA: use constant-time GCD in deduce_primes()\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "0d73de5ee0ec65ff8b60d073b7d1d369ee0a00e6",
      "tree": "1766b14ec9324054d0e99f02a4ade0eb30fcc900",
      "parents": [
        "f35d30799cc9ec07d46265d31384139a6bb6c09f"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Jul 10 22:59:39 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Aug 14 09:18:52 2025 +0200"
      },
      "message": "ecdsa: use CT modinv\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "f35d30799cc9ec07d46265d31384139a6bb6c09f",
      "tree": "74c6aa37b5ddd96ce8f6cbb78e53a337197d1c9a",
      "parents": [
        "c2d210ea0db99bb30bfc574537b223e8573df53f"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Jul 10 21:54:38 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Aug 14 09:18:52 2025 +0200"
      },
      "message": "ECP: use CT modinv\n\nA function that was previously called in multiple places is now called\nonly once, hence more susceptible to being inlined, hence the test fix.\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "c2d210ea0db99bb30bfc574537b223e8573df53f",
      "tree": "59bc7f0ad9f433340bca2f35ae81f8b51b0b334d",
      "parents": [
        "a56a05b0152f4f669d7f1ece9271ed23be34c944"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Jul 10 21:48:41 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Aug 14 09:18:52 2025 +0200"
      },
      "message": "DHM: use CT modinv for blinding\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "a56a05b0152f4f669d7f1ece9271ed23be34c944",
      "tree": "e285c8e08a7a4d00da89d72af881578bfa2cc88c",
      "parents": [
        "210f8bc4d7c28261f010b4cc580e1c351f9c0e4e"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Jul 10 21:40:15 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Aug 14 09:18:52 2025 +0200"
      },
      "message": "RSA: use CT gcd-modinv in prepare_blinding()\n\nWhile at it, draw the blinding value uniformly in the permissible range.\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "210f8bc4d7c28261f010b4cc580e1c351f9c0e4e",
      "tree": "259abbecd122296995e87222c7934bdb9179aba3",
      "parents": [
        "e4ca79c04fa62e6b1112b703ebae2d1899bb7014",
        "30f073236922fe4e528fdf82eb442babb50516fa"
      ],
      "author": {
        "name": "Janos Follath",
        "email": "janos.follath@arm.com",
        "time": "Wed Aug 13 19:44:57 2025 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 13 19:44:57 2025 +0100"
      },
      "message": "Merge pull request #1408 from mpg/improve-gcd-3.6\n\n[3.6] Make GCD (a lot) less leaky"
    },
    {
      "commit": "e4ca79c04fa62e6b1112b703ebae2d1899bb7014",
      "tree": "e82e517355949a5c7733f71cf82232d08f5b9bb7",
      "parents": [
        "246d86b941ef2d2bdeabd7035efe7200bc609b91",
        "a08faf90700e46f6aa2a6e3fee8a6a71ddb816ce"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Wed Aug 13 14:17:49 2025 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 13 14:17:49 2025 +0200"
      },
      "message": "Merge pull request #1409 from mpg/improve-inv-mod\n\n[3.6] Make `mpi_inv_mod()` (a lot) less leaky"
    },
    {
      "commit": "30f073236922fe4e528fdf82eb442babb50516fa",
      "tree": "717a3a207201bc8d2c0b5f773049fc7cfba2dea2",
      "parents": [
        "87e77d6516c6161e6cfe3043fefa22e62d32c885"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Wed Aug 13 08:42:45 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Wed Aug 13 09:01:55 2025 +0200"
      },
      "message": "bignum: gcd: improve comments\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "87e77d6516c6161e6cfe3043fefa22e62d32c885",
      "tree": "acdb90e55385234d8c646d579c2c58715862ba12",
      "parents": [
        "381d4ba03be79df1a3d2777aa74cdf11f5d0b5b5"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Mon Aug 11 10:45:41 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Wed Aug 13 09:01:55 2025 +0200"
      },
      "message": "bignum: fix memory leak in GCD with 0 as an input\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "381d4ba03be79df1a3d2777aa74cdf11f5d0b5b5",
      "tree": "6fec4d5e74a535df28cf8742a13064ebed9259e2",
      "parents": [
        "c6a9d845555e229d224d15b3f8a8370390e9ef6e"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Mon Aug 04 10:57:13 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Wed Aug 13 09:01:45 2025 +0200"
      },
      "message": "Make mbedtls_mpi_gcd() more consistent\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "c6a9d845555e229d224d15b3f8a8370390e9ef6e",
      "tree": "e0c0be46ad7f37608c2ba033cf8644e0d2fd2fd2",
      "parents": [
        "65b8011f7ece8e320c28369b0e04713d35400836"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Jul 10 23:28:50 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Wed Aug 13 09:01:45 2025 +0200"
      },
      "message": "bignum: use CT gcd for mbedtls_mpi_gcd()\n\nThe overall function is still not constant-time, but it just got a lot\nless leaky.\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "a08faf90700e46f6aa2a6e3fee8a6a71ddb816ce",
      "tree": "e82e517355949a5c7733f71cf82232d08f5b9bb7",
      "parents": [
        "7a5447ff65bb5d0092ca73bfc953c0e7445f1795"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Aug 12 09:24:15 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Aug 12 11:55:22 2025 +0200"
      },
      "message": "bignum: follow customs for ret initialisation\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "7a5447ff65bb5d0092ca73bfc953c0e7445f1795",
      "tree": "e9fda352ac6aafdaa074adc09bdd9aebc51944ce",
      "parents": [
        "40dfc811efe4c10b77333b4edcfc6805bb49beac"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Aug 12 09:18:28 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Tue Aug 12 11:55:15 2025 +0200"
      },
      "message": "Fix a few typos\n\nCo-authored-by: Felix Conway \u003cfelix.conway@arm.com\u003e\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "a53d8c5a335a47abcf04409f6da6e858501758fa",
      "tree": "6fc9e4bf2b9e0e664f537b0c15f9f00e86bd586e",
      "parents": [
        "8d524e8841c68c3e564f8e93caabec991dffe0e7",
        "45c781976c632ff54884126c84608905f15f7fbc"
      ],
      "author": {
        "name": "minosgalanakis",
        "email": "30719586+minosgalanakis@users.noreply.github.com",
        "time": "Mon Aug 11 15:04:24 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 11 15:04:24 2025 +0000"
      },
      "message": "Merge pull request #10350 from ariwo17/backport/add-pbes2-aes-testdata\n\n[BACKPORT] Issue #398: Add AES-CBC PBES2 test cases to match 3DES variants\n"
    },
    {
      "commit": "65b8011f7ece8e320c28369b0e04713d35400836",
      "tree": "22d8080e4eb531e06e1f9541a1325b2b46e2e6eb",
      "parents": [
        "246d86b941ef2d2bdeabd7035efe7200bc609b91"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Thu Jul 10 21:26:42 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Mon Aug 11 09:36:26 2025 +0200"
      },
      "message": "bignum: make mbedtls_mpi_lsb() less leaky\n\nThe path using builtin should be OK, as it should be using dedicated CPU\ninstructions which are constant time.\n\nThis fixes the no-builing path.\n\nGCC gained support for __has_builtin in version 10. We\u0027re still testing\nwith older GCC on the CI, so the non-builtin path is tested on the CI.\n\nhttps://gcc.gnu.org/gcc-10/changes.html\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "40dfc811efe4c10b77333b4edcfc6805bb49beac",
      "tree": "7ec871deefe3c576bd7f0d84e33c4b895503976f",
      "parents": [
        "1ac0a1e0714683a9dc2c87c2944d8e82d9bc87f9"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Fri Aug 08 09:27:29 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Mon Aug 11 09:35:28 2025 +0200"
      },
      "message": "bignum: remove dead variable-time inv_mod code\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    },
    {
      "commit": "1ac0a1e0714683a9dc2c87c2944d8e82d9bc87f9",
      "tree": "215a5b11429739c141a6ee25bf9f11a5582ac35e",
      "parents": [
        "e41709c17eb4be2cacbf77262f6746aa8c499958"
      ],
      "author": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Fri Aug 08 09:25:28 2025 +0200"
      },
      "committer": {
        "name": "Manuel Pégourié-Gonnard",
        "email": "manuel.pegourie-gonnard@arm.com",
        "time": "Mon Aug 11 09:35:28 2025 +0200"
      },
      "message": "bignum: use CT modinv when A is odd (any range)\n\nSigned-off-by: Manuel Pégourié-Gonnard \u003cmanuel.pegourie-gonnard@arm.com\u003e\n"
    }
  ],
  "next": "e41709c17eb4be2cacbf77262f6746aa8c499958"
}
