1. 46b9c9b Compute Composite ML-DSA message pre-hashes via EVP digest helpers. by Rudolf Polzer · 3 hours ago main upstream/main upstream/master
  2. c676d57 Add `GetRsaSsaPkcs1PublicKey` and `GetRsaSsaPkcs1PrivateKey` to `JwtRsaSsaPkcs1PublicKey` and `JwtRsaSsaPkcs1PrivateKey`. by Jérémy Prudhommeaux · 7 hours ago
  3. 77fe351 Store the underlying `RsaSsaPkcs1PublicKey` and `RsaSsaPkcs1PrivateKey` inside `JwtRsaSsaPkcs1PublicKey` and `JwtRsaSsaPkcs1PrivateKey`. by Jérémy Prudhommeaux · 8 hours ago
  4. 8d3623e Add unit test covering SHA-256 pre-hash in ComputeCompositeMlDsaMessagePrime for cl/1005528890. by Thomas Holenstein CA · 9 hours ago
  5. 2c4ecd3 Require the single key passed to `StreamingPrfWrapper::Wrap` to be primary. by Jérémy Prudhommeaux · 14 hours ago
  6. 15a0bb3 Migrate the legacy ECDSA sign and verify key managers to `EcdsaPrivateKey` / `EcdsaPublicKey`. by Jérémy Prudhommeaux · 30 hours ago
  7. 7a9be96 Reject non-empty output prefix in NewZeroCopyXAesGcmBoringSsl. by Rudolf Polzer · 32 hours ago
  8. cf47313 Add daead and key_derivation subdirectories to C++ examples CMake build by Rudolf Polzer · 35 hours ago
  9. 64d7e56 Avoid copying `Keyset::Key` by value in `KeysetManager::Delete`. by William Conner · 36 hours ago
  10. f00e3c9 Check the return values of `EC_KEY_set_group` and `EC_KEY_generate_key` in `NewEcKey`. by Jérémy Prudhommeaux · 2 days ago
  11. 781f30c Automated Code Change by Tink Team · 2 days ago
  12. 90dfe2c Add `ChunkedPrehash` API. by Liza Tretyakova · 2 days ago
  13. 4b7faa3 Internal change. by William Conner · 2 days ago
  14. 92ce5f9 Return an error in HPKE `SplitPayload` when the payload is shorter than the encapsulated key. by Jérémy Prudhommeaux · 2 days ago
  15. ab5edbc Propagate `StatefulMac::Update` errors in the streaming MAC output streams. by Jérémy Prudhommeaux · 3 days ago
  16. 59fce46 Remove deprecated CleartextKeysetHandle::GetKeyset. by Rudolf Polzer · 3 days ago
  17. deb1609 Use BoringSSL's EVP_AEAD API in AesEaxBoringSsl. by Moreno Ambrosin · 3 days ago
  18. ab8db5a Check the result of `GetSecretValueOfFixedLength` in JWT ECDSA `SerializePrivateKey`. by Jérémy Prudhommeaux · 3 days ago
  19. 9f45356 Refactor aes_eax_boringssl_test.cc to use a test fixture and direct SecretData construction. by Moreno Ambrosin · 3 days ago
  20. 25df7c0 Check for a null `EVP_PKEY` in `X25519KeyFromPrivateKey`. by Jérémy Prudhommeaux · 3 days ago
  21. 07b9621 Migrate `ecdsa_raw_sign_boringssl_test` to modern Tink `EcdsaPublicKey`. by Jérémy Prudhommeaux · 3 days ago
  22. 3c94644 Fail gracefully in `OstreamOutputStream` when given a null `ostream` or stream buffer. by Jérémy Prudhommeaux · 3 days ago
  23. 6655656 Migrate the ECDSA verify test and benchmark off the `SubtleUtilBoringSSL::EcKey` overloads. by Jérémy Prudhommeaux · 3 days ago
  24. 0e608cf Check `StatusOr` results before dereferencing them in `CordXAesGcmBoringSsl`. by Jérémy Prudhommeaux · 3 days ago
  25. 1e4675b Add conversion helpers between subtle and modern ECDSA parameters and EcPoint extraction. by Jérémy Prudhommeaux · 3 days ago
  26. 8ce67af Check the right status in PRF-based key derivation `ParseKey`. by Jérémy Prudhommeaux · 3 days ago
  27. 256288e Handle out-of-range values in `OutputPrefixTypeEnumName` and `KeyMaterialTypeEnumName`. by Jérémy Prudhommeaux · 3 days ago
  28. 67a3be2 Tink C++ CMake: unbreak benchmarks. by Rudolf Polzer · 4 days ago
  29. 3faf7e8 Migrate Tink C++ AEAD tests off deprecated SecretData APIs. by Thomas Holenstein · 4 days ago
  30. cb4716d Fix the bounds check in `CordWriter::Write`. by Jérémy Prudhommeaux · 4 days ago
  31. 8c25745 Fix the return value check of `EVP_PKEY_get_raw_private_key` in `SslNewKeyPairFromEcKey`. by Jérémy Prudhommeaux · 4 days ago
  32. c593e9d Ignore non-positive counts in the streaming MAC output streams `BackUp`. by Jérémy Prudhommeaux · 4 days ago
  33. c5fe4b0 Return an error status in `OstreamOutputStream::Next` when `sputn` fails to write any bytes. by Jérémy Prudhommeaux · 4 days ago
  34. 6517ff5 Check that `hmac_key_format().key_size()` is at most 32 bytes in `EciesAeadHkdfDemHelper::GetKeyParams`. by Jérémy Prudhommeaux · 4 days ago
  35. 1d78b96 Ensure `FileOutputStream::Close` always closes the file descriptor even after a write error. by Jérémy Prudhommeaux · 4 days ago
  36. 0490cd1 Add a .gitignore file for the Tink C++ repository by Rudolf Polzer · 4 days ago
  37. 485fc6c `err_util`: be more dynamic library friendly. by Rudolf Polzer · 4 days ago
  38. d458b6c Fix unsafe static variable initialization by Moreno Ambrosin · 4 days ago
  39. 571ced5 Replace CMake library aliases by source-less libraries in Tink C++ by Rudolf Polzer · 4 days ago
  40. 42193a8 Add PemToMlDsaPrivateKey to tink_pem. by Moreno Ambrosin · 4 days ago
  41. 9869e1f Use decryption status instead of BoringSSL error queue in AEAD tests by Rudolf Polzer · 4 days ago
  42. cf22e03 Do not compare pointers to BoringSSL method tables. by Rudolf Polzer · 5 days ago
  43. 1233e4d Remove CMake and Bazel targets pointing at nonexisting files. by Rudolf Polzer · 5 days ago
  44. f3e4f36 Remove unnecessary heap allocation and extra memory allocation in `ComputeHash` by Moreno Ambrosin · 7 days ago
  45. a66ac64 Remove OpenSSL #ifdef statements in Tink C++ JWT. by Jérémy Prudhommeaux · 7 days ago
  46. 51a6e33 Use minimal test configurations in some Tink C++ signature tests. by Jérémy Prudhommeaux · 7 days ago
  47. 4e965fc Avoid creating the primitive twice in `KeysetWrapperImpl::Wrap` by Moreno Ambrosin · 7 days ago
  48. b8c46f2 Remove some APIs from the (now internal) PrimitiveSet. by Thomas Holenstein · 7 days ago
  49. 7b8ebf0 Avoid BoringSSL allocations when computing the default RSA public exponent. by Moreno Ambrosin · 7 days ago
  50. 1d22a9c Add benchmarks for `KeysetHandle::GetPrimitive`. by Moreno Ambrosin · 7 days ago
  51. 3c41b81 Add microbenchmarks for RSA SSA (JWT) parameters builders. by Moreno Ambrosin · 7 days ago
  52. 990354a Automated rollback of commit 7a82e37ef31d807e0c0f1b81fc505b8b64ee8eca. by Tink Team · 7 days ago
  53. 3993c35 Avoid heap allocations in `SslGetEcPointFromCoordinates`. by Moreno Ambrosin · 7 days ago
  54. dc8d0a4 Add benchmarks for creating an `EcdsaVerifyBoringSsl`. by Moreno Ambrosin · 8 days ago
  55. 779e55d Move AesCtr128Crypt out of Tink C++ internal::aes_util. by Jérémy Prudhommeaux · 8 days ago
  56. 210d072 Migrate Tink C++ JWT module off deprecated SecretData APIs. by Thomas Holenstein · 8 days ago
  57. ea1b4bd Add benchmark for `EcdsaPublicKey::Create`. by Moreno Ambrosin · 8 days ago
  58. 7a82e37 Remove the OpenSSL implementation of Tink C++ SslOneShotAead. by Jérémy Prudhommeaux · 8 days ago
  59. d242ba7 Avoid unnecessary copies when building RSA keys by Moreno Ambrosin · 8 days ago
  60. a51c9f4 Use the generated hpke.tinkpb.h and hpke_proto_structs in hpke_proto_serialization_impl.cc instead of hand-written parser classes. by Fernando Lobato · 8 days ago
  61. 3ef3659 Add hybrid/internal:hpke_proto_structs with the HPKE proto enum conversions on the generated hpke.tinkpb.h types. by Fernando Lobato · 8 days ago
  62. f57f366 Use fake or signature key managers in the Tink C++ registry tests. by Jérémy Prudhommeaux · 8 days ago
  63. ef49b56 Add generated Tink C++ proto parser header for hpke.proto. by Fernando Lobato · 8 days ago
  64. b05c631 Use fake AEADs in Tink C++ key manager and keyset wrapper tests. by Jérémy Prudhommeaux · 8 days ago
  65. 7210fbc Remove OpenSSL #ifdef statements from includes in Tink C++ ECDSA and RSA keys. by Jérémy Prudhommeaux · 8 days ago
  66. 7742e2e Set CMAKE_LINK_LIBRARIES_STRATEGY to REORDER_FREELY. by Rudolf Polzer · 8 days ago
  67. c984036 Add key creator functions for X-AES-GCM by Moreno Ambrosin · 8 days ago
  68. 1958a88 Add key creator functions for AES-GCM-SIV by Moreno Ambrosin · 8 days ago
  69. b957871 Clean up and consolidate HPKE test vector keys by Rudolf Polzer · 8 days ago
  70. b5db01f Add key creator functions for XChaCha20Poly1305 by Moreno Ambrosin · 8 days ago
  71. 7e0f244 Migrate Tink C++ signature tests off deprecated SecretData APIs. by Thomas Holenstein · 8 days ago
  72. 7091e14 Update AeadConfig tests to check key serialization registry directly by Moreno Ambrosin · 8 days ago
  73. 6ad89d8 Remove OpenSSL-specific code in Tink C++ Hybrid. by Jérémy Prudhommeaux · 9 days ago
  74. b8cde08 Migrate Tink C++ signature primitives off deprecated SecretData APIs. by Thomas Holenstein · 9 days ago
  75. 5b1e554 Unwrap StatusOr value in lambda init-capture in hkdf.cc. by Thomas Holenstein · 9 days ago
  76. 5844cce Internal change. by Jérémy Prudhommeaux · 9 days ago
  77. cda14ed Add key creator functions for AES-EAX by Moreno Ambrosin · 9 days ago
  78. 016d8b7 Check StatusOr status before accessing values in Tink C++ primitives. by Thomas Holenstein · 9 days ago
  79. fdcd71d Fix two missing `TESTONLY`s in the CMake rules. by Rudolf Polzer · 9 days ago
  80. 5ee1de7 Check StatusOr status before accessing values in Tink C++ tests. by Thomas Holenstein · 9 days ago
  81. 93b968a Avoid unnecessary copies in key creator functions by Moreno Ambrosin · 9 days ago
  82. f29e6a6 Make Tink C++ internal RSA and BIGNUM utilities independent of the SSL library. by Jérémy Prudhommeaux · 9 days ago
  83. 6de9237 Add key creator function for AES-CTR-HMAC by Moreno Ambrosin · 9 days ago
  84. 2a05143 Unwrap StatusOr values in lambda init-captures to avoid clang-tidy warnings. by Thomas Holenstein · 9 days ago
  85. c87fd1f Move deriving EC keys from a seed out of Tink C++ internal::ec_util. by Jérémy Prudhommeaux · 10 days ago
  86. 24264e0 Use `CreateAesGcmKey` in aead/internal/key_gen_config_2026.cc by Moreno Ambrosin · 10 days ago
  87. be716a9 Internal change. by Jérémy Prudhommeaux · 10 days ago
  88. f6c0f85 Use d2i_ECDSA_SIG with both BoringSSL and OpenSSL in Tink C++ EcSignatureDerToIeee. by Jérémy Prudhommeaux · 10 days ago
  89. 478e7be Remove usages of TINK_USE_ONLY_FIPS and delete kUseOnlyFips by Moreno Ambrosin · 10 days ago
  90. 6c83ce5 Add internal key creator function for AES-GCM by Moreno Ambrosin · 10 days ago
  91. 6a7c361 Internal change. by Jérémy Prudhommeaux · 10 days ago
  92. ed5b352 Check `IsFipsModeEnabled()` instead of `kUseOnlyFips` in FIPS-related C++ tests. by Moreno Ambrosin · 10 days ago
  93. 995ff91 Do not use libprotobuf-lite in tink. by Rudolf Polzer · 10 days ago
  94. 9bd00e1 Migrate Tink C++ AEAD primitives off deprecated SecretData APIs. by Thomas Holenstein · 10 days ago
  95. 6ab0a4a Use the EVP_PKEY_HKDF interface in Tink C++ subtle HKDF. by Jérémy Prudhommeaux · 10 days ago
  96. 88ab913 Migrate Tink C++ subtle primitives off deprecated SecretData APIs. by Thomas Holenstein · 11 days ago
  97. 896ff80 Remove BORINGSSL_FIPS guard from CordAesGcmSivBoringSsl by Moreno Ambrosin · 11 days ago
  98. a955086 Remove OpenSSL #ifdef statements in Tink C++ PEM signature key parser. by Jérémy Prudhommeaux · 11 days ago
  99. 6759a7e Remove TINK_USE_ONLY_FIPS guard from CordAesGcmSivBoringSsl. by Moreno Ambrosin · 11 days ago
  100. 8234596 Always build Tink C++ against its own private, static, prefixed BoringSSL. by Jérémy Prudhommeaux · 11 days ago