)]}' { "log": [ { "commit": "46b9c9b6fb95192039cedcaf42d9c05df4499055", "tree": "4fac694e5a68f2d745d14a02a9eaaebe4e39bc19", "parents": [ "c676d5702dd180700f6bc5dafa853f04708ed41f" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Fri Oct 23 12:33:13 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 23 12:34:13 2026 -0700" }, "message": "Compute Composite ML-DSA message pre-hashes via EVP digest helpers.\n\nDirect calls to BoringSSL\u0027s raw `SHA256` and `SHA512` functions collide with Tink\u0027s `HashType` enum enumerators on platforms such as MSVC where BoringSSL defines symbol-prefixing macros instead of `#pragma redefine_extname`. Getting rid of the use of those functions opens an opportunity to unbreak the MSVC build.\n\nPlus, this refactor makes the code a bit more readable.\n\nPiperOrigin-RevId: 1005785485\nChange-Id: Ia2cf56803c7cfca57aa48574d1b68c6e687dc08e\n" }, { "commit": "c676d5702dd180700f6bc5dafa853f04708ed41f", "tree": "6cf23fa9ec299521a5d4fdf48cec2adb1c1eb767", "parents": [ "77fe351fa51e36b5db4165d4515238ca6d69c9e4" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Oct 23 09:03:19 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 23 09:04:25 2026 -0700" }, "message": "Add `GetRsaSsaPkcs1PublicKey` and `GetRsaSsaPkcs1PrivateKey` to `JwtRsaSsaPkcs1PublicKey` and `JwtRsaSsaPkcs1PrivateKey`.\n\nPiperOrigin-RevId: 1005641895\nChange-Id: Ib626e647582f91e082e59ab9fd69df7b3536cd7f\n" }, { "commit": "77fe351fa51e36b5db4165d4515238ca6d69c9e4", "tree": "00f3f0ee4fa4068ba41cb979d22afc47fd8d75d4", "parents": [ "8d3623e48c6ef7bca426c8a71276859e461a5b3a" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Oct 23 07:26:22 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 23 07:27:19 2026 -0700" }, "message": "Store the underlying `RsaSsaPkcs1PublicKey` and `RsaSsaPkcs1PrivateKey` inside `JwtRsaSsaPkcs1PublicKey` and `JwtRsaSsaPkcs1PrivateKey`.\n\nPiperOrigin-RevId: 1005583760\nChange-Id: I7cf81f4dc09c68b6e1a54d3fb93cc05d70429665\n" }, { "commit": "8d3623e48c6ef7bca426c8a71276859e461a5b3a", "tree": "32a6fe0abbebb91c9ceb7bf4f8b96b7cf07b143b", "parents": [ "2c4ecd30918adaca601f95823a4a0e23fad1eed9" ], "author": { "name": "Thomas Holenstein CA", "email": "tholenst@google.com", "time": "Fri Oct 23 06:56:57 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 23 06:57:54 2026 -0700" }, "message": "Add unit test covering SHA-256 pre-hash in ComputeCompositeMlDsaMessagePrime for cl/1005528890.\n\nPiperOrigin-RevId: 1005567315\nChange-Id: Ia6b8de3da9dd6eccc4dbba4fcce116df470f9ab3\n" }, { "commit": "2c4ecd30918adaca601f95823a4a0e23fad1eed9", "tree": "b17c84cd4559f2f9e5b72df0364623f0c09e4140", "parents": [ "15a0bb30062c7042dade555637541f08f0977052" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Oct 23 02:05:05 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 23 02:05:59 2026 -0700" }, "message": "Require the single key passed to `StreamingPrfWrapper::Wrap` to be primary.\n\nPiperOrigin-RevId: 1005418905\nChange-Id: I8b686dc1de88414c3a271b4bfac8d48ea553fa9c\n" }, { "commit": "15a0bb30062c7042dade555637541f08f0977052", "tree": "8ad0c5fa1715d85ac8594ce9423cb80d5acdb226", "parents": [ "7a9be96b63d928a0bb06f9d5ba785ca53b6f27df" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Oct 22 09:23:09 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 22 09:24:07 2026 -0700" }, "message": "Migrate the legacy ECDSA sign and verify key managers to `EcdsaPrivateKey` / `EcdsaPublicKey`.\n\nPiperOrigin-RevId: 1004830513\nChange-Id: Ibe781866ce1d2fb0ab8c60e51a41a2be237d5ac0\n" }, { "commit": "7a9be96b63d928a0bb06f9d5ba785ca53b6f27df", "tree": "b70f7545ad3ca2f8b567194b6bfc32350758de51", "parents": [ "cf47313f718784bd472eba93da548692d70495db" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Thu Oct 22 08:00:37 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 22 08:01:37 2026 -0700" }, "message": "Reject non-empty output prefix in NewZeroCopyXAesGcmBoringSsl.\n\nIt hasn\u0027t been implemented yet, and the lack of this is a serious specification bug of this function.\n\nBefore actually fixing it, let\u0027s make it fail in this case just so we can see what breaks, if anything.\n\n(Likely nothing, as no caller could be located that sets a nonempty output prefix, and this function is internal)\n\nPiperOrigin-RevId: 1004777471\nChange-Id: I19d36eb5f2b75895170db94f7555fbc4c698a7d6\n" }, { "commit": "cf47313f718784bd472eba93da548692d70495db", "tree": "616768213bff4498ef9a9c88f826e02d04876e86", "parents": [ "64d7e56fa9eaaab8ca10b37cbe18fbd54bb80bff" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Thu Oct 22 04:57:46 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 22 04:58:45 2026 -0700" }, "message": "Add daead and key_derivation subdirectories to C++ examples CMake build\n\nAdds the daead and key_derivation subdirectories to the top-level C++ examples CMakeLists.txt. In addition, adds missing key derivation dependencies to key_derivation_cli and fixes the test command definition.\n\nPiperOrigin-RevId: 1004682751\nChange-Id: I162849d5d5c7946c76a11567ad7ac169dfbc4b7d\n" }, { "commit": "64d7e56fa9eaaab8ca10b37cbe18fbd54bb80bff", "tree": "7f981e37a82d7da8b39617de18a9c7a65cdbf52b", "parents": [ "f00e3c99a704ea24032f841609d81946d4903a61" ], "author": { "name": "William Conner", "email": "wconner@google.com", "time": "Thu Oct 22 03:57:48 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 22 03:59:10 2026 -0700" }, "message": "Avoid copying `Keyset::Key` by value in `KeysetManager::Delete`.\n\nPiperOrigin-RevId: 1004655397\nChange-Id: I871004fc9039d4a4d0a8bc6db736954c15ed79d3\n" }, { "commit": "f00e3c99a704ea24032f841609d81946d4903a61", "tree": "5566498c828a5f7b6aaa97e7aa54be71bd3028ab", "parents": [ "781f30c6edad8b6c90c75adf7c4dddf404efdd09" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Oct 21 23:43:59 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 23:44:37 2026 -0700" }, "message": "Check the return values of `EC_KEY_set_group` and `EC_KEY_generate_key` in `NewEcKey`.\n\nPiperOrigin-RevId: 1004528350\nChange-Id: I8d04d66a1a8e8336c70e9efc2916f9df343f3d57\n" }, { "commit": "781f30c6edad8b6c90c75adf7c4dddf404efdd09", "tree": "31c55c863d0908c2b382542f87abd9e63d264fbd", "parents": [ "90dfe2cc6ea1251f3cf01f3f6e898788c0bed1cb" ], "author": { "name": "Tink Team", "email": "tink-dev@google.com", "time": "Wed Oct 21 10:36:10 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 10:37:20 2026 -0700" }, "message": "Automated Code Change\n\nPiperOrigin-RevId: 1004052022\nChange-Id: If5422677649bc19e1592abb82c4157e9e4dfc7cc\n" }, { "commit": "90dfe2cc6ea1251f3cf01f3f6e898788c0bed1cb", "tree": "30a79dfd23e2b562f6cedd5604d1f42c11052e39", "parents": [ "4b7faa3bfa69c020256f361ec008f3591ceb503d" ], "author": { "name": "Liza Tretyakova", "email": "lizatretyakova@google.com", "time": "Wed Oct 21 07:38:40 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 07:39:50 2026 -0700" }, "message": "Add `ChunkedPrehash` API.\n\n`ChunkedPrehash` is the streaming counterpart of `Prehash`: it computes the same\nprehash value, but the data can be passed in arbitrarily sized chunks.\n\nPiperOrigin-RevId: 1003929635\nChange-Id: If39b6d7392ae8c80dc43fe893dd3a8a5d9ab529e\n" }, { "commit": "4b7faa3bfa69c020256f361ec008f3591ceb503d", "tree": "233307e5e466c464c4278d7eba94f3000abc0c9e", "parents": [ "92ce5f91d467cd44a4460e59f63700b1f2c7a67c" ], "author": { "name": "William Conner", "email": "wconner@google.com", "time": "Wed Oct 21 05:41:16 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 05:42:29 2026 -0700" }, "message": "Internal change.\n\nPiperOrigin-RevId: 1003867852\nChange-Id: I040f655cae468a3ed932acc379f952d8baea102c\n" }, { "commit": "92ce5f91d467cd44a4460e59f63700b1f2c7a67c", "tree": "80538db1ccf75d62a361c98dd13c7d22ebb06b93", "parents": [ "ab5edbc355f6f8c63d3f632280b8c67786c85193" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Oct 21 04:52:43 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 04:53:41 2026 -0700" }, "message": "Return an error in HPKE `SplitPayload` when the payload is shorter than the encapsulated key.\n\nPiperOrigin-RevId: 1003843427\nChange-Id: Ib886a73426f1eabfafa9edac94408049462cdd87\n" }, { "commit": "ab5edbc355f6f8c63d3f632280b8c67786c85193", "tree": "e5d71d7de979cc90962c93e449bfbb31a7c8b723", "parents": [ "59fce46ebec222ca73fc7070957a197699d92975" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Oct 21 03:04:02 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 03:05:14 2026 -0700" }, "message": "Propagate `StatefulMac::Update` errors in the streaming MAC output streams.\n\nPiperOrigin-RevId: 1003791895\nChange-Id: I574bc86b6d4479bc41e7d25caad919837daedd1f\n" }, { "commit": "59fce46ebec222ca73fc7070957a197699d92975", "tree": "37302b9d9a0f569c98f83fa1a1384620c5cddda6", "parents": [ "deb16096035e76e0b4f989bf7b7d88b0392522ca" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Wed Oct 21 02:58:34 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 02:59:18 2026 -0700" }, "message": "Remove deprecated CleartextKeysetHandle::GetKeyset.\n\nCallers should use CleartextKeysetHandle::GetKeysetOrError instead. Also removes tests for the deprecated method and updates existing test names.\n\nPiperOrigin-RevId: 1003788587\nChange-Id: I1118628804b6016f6929499b906165e830c22d3a\n" }, { "commit": "deb16096035e76e0b4f989bf7b7d88b0392522ca", "tree": "a087c0d5f30c65e54d4821175817e1f2bfe67da0", "parents": [ "ab8db5a07643b5ad1e6a456981a828d52ef8328d" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Wed Oct 21 02:32:39 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 02:33:15 2026 -0700" }, "message": "Use BoringSSL\u0027s EVP_AEAD API in AesEaxBoringSsl.\n\nTink no longer supports OpenSSL in open source.\n\nPiperOrigin-RevId: 1003775704\nChange-Id: I24f6a857045ab0c6069f7ccf22900edc1b4bc2c0\n" }, { "commit": "ab8db5a07643b5ad1e6a456981a828d52ef8328d", "tree": "863b4a972372cb8e7d08bb32d11b959790b6cd91", "parents": [ "9f45356521addcae0dc2e9e1df2df73d404e3ba9" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Oct 21 02:28:33 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 02:29:22 2026 -0700" }, "message": "Check the result of `GetSecretValueOfFixedLength` in JWT ECDSA `SerializePrivateKey`.\n\nPiperOrigin-RevId: 1003773714\nChange-Id: Ic937e58276f88e3672f6e6286f19556d1a378710\n" }, { "commit": "9f45356521addcae0dc2e9e1df2df73d404e3ba9", "tree": "1acc8e94e290692f61b78cf75966c9d233a398b9", "parents": [ "25df7c05810942f8b38845a56c23f51564037198" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Wed Oct 21 01:58:49 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 02:00:02 2026 -0700" }, "message": "Refactor aes_eax_boringssl_test.cc to use a test fixture and direct SecretData construction.\n\nPiperOrigin-RevId: 1003759360\nChange-Id: I8533a0236a27c764af0aaead4461242f3b927c0b\n" }, { "commit": "25df7c05810942f8b38845a56c23f51564037198", "tree": "e475e0dc1e656473cc8a612cde4ebb76f43320e6", "parents": [ "07b9621f7c5d2c0ca5b0fb98f81c5bb4f4a58b21" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Oct 21 01:30:22 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 01:31:34 2026 -0700" }, "message": "Check for a null `EVP_PKEY` in `X25519KeyFromPrivateKey`.\n\nPiperOrigin-RevId: 1003745832\nChange-Id: I6da45298a6939adc63549b10918374c65d7db9b2\n" }, { "commit": "07b9621f7c5d2c0ca5b0fb98f81c5bb4f4a58b21", "tree": "0d6793949752709619cc4185b54170087a9548bd", "parents": [ "3c94644e5b2dffacd66764da13083a97ee782d15" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Oct 21 01:20:48 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 21 01:21:51 2026 -0700" }, "message": "Migrate `ecdsa_raw_sign_boringssl_test` to modern Tink `EcdsaPublicKey`.\n\nPiperOrigin-RevId: 1003741359\nChange-Id: Ib1069816e48439cb3e840ffdf5be32133ed5804f\n" }, { "commit": "3c94644e5b2dffacd66764da13083a97ee782d15", "tree": "0579207b583d4c9690789dbbbaca73a36b5f7277", "parents": [ "66556569fb368e7ec047bdcf169fe7e2ac46b43e" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 20 11:08:54 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 11:10:12 2026 -0700" }, "message": "Fail gracefully in `OstreamOutputStream` when given a null `ostream` or stream buffer.\n\nPiperOrigin-RevId: 1003241349\nChange-Id: I2a1fe9f34f4b7d149936ccd5292111a4302a5fb6\n" }, { "commit": "66556569fb368e7ec047bdcf169fe7e2ac46b43e", "tree": "3c3132ff05264b8c1790a755f792ca946fbb230f", "parents": [ "0e608cfc89012474bdf1f33c63cd265874c63f82" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 20 11:05:01 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 11:06:20 2026 -0700" }, "message": "Migrate the ECDSA verify test and benchmark off the `SubtleUtilBoringSSL::EcKey` overloads.\n\nPiperOrigin-RevId: 1003237975\nChange-Id: Ic3fe70694a90c7846b4f8aa5747c22aa1fc5b37e\n" }, { "commit": "0e608cfc89012474bdf1f33c63cd265874c63f82", "tree": "2645cb314aa91076bb296de3a1c26f7cd15a7ced", "parents": [ "1e4675be7ba3ae98680c6948c418bdd6ed5a9423" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 20 08:13:10 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 08:14:32 2026 -0700" }, "message": "Check `StatusOr` results before dereferencing them in `CordXAesGcmBoringSsl`.\n\nPiperOrigin-RevId: 1003115508\nChange-Id: Id56de33efedb38061bc3d9be928e613d6c299dec\n" }, { "commit": "1e4675be7ba3ae98680c6948c418bdd6ed5a9423", "tree": "3277b5bee9c04ddb0d0f67dd7f9f1d294fd7d07b", "parents": [ "8ce67af840a4f803afc9fee3ee34477e7877c1ff" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 20 07:56:31 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 07:57:39 2026 -0700" }, "message": "Add conversion helpers between subtle and modern ECDSA parameters and EcPoint extraction.\n\nPiperOrigin-RevId: 1003105063\nChange-Id: I3c72376b8cc1c9aa2a8998373fcf0146d30e2e5b\n" }, { "commit": "8ce67af840a4f803afc9fee3ee34477e7877c1ff", "tree": "69a5b62cf6629a3f96a447076c200950bb1b1f90", "parents": [ "256288ea6eee6f0e1dfc18fee8bdceef6e8f590b" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 20 06:56:44 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 06:57:41 2026 -0700" }, "message": "Check the right status in PRF-based key derivation `ParseKey`.\n\nPiperOrigin-RevId: 1003071996\nChange-Id: I299df83bdc31a63fbf15eb522bcd85ab977de415\n" }, { "commit": "256288ea6eee6f0e1dfc18fee8bdceef6e8f590b", "tree": "ef2f3db20f9d53986a951412737e255600516780", "parents": [ "67a3be2d03764a79adec4ed8edfdc4fc01b37c67" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 20 06:35:27 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 06:36:54 2026 -0700" }, "message": "Handle out-of-range values in `OutputPrefixTypeEnumName` and `KeyMaterialTypeEnumName`.\n\nPiperOrigin-RevId: 1003061131\nChange-Id: Ifec92c0bd2f913c22857b47571c347e7cd2ef38e\n" }, { "commit": "67a3be2d03764a79adec4ed8edfdc4fc01b37c67", "tree": "a6cf6f590cf6eeac3fd9810cdb4bbeb8840a84e7", "parents": [ "3faf7e81667677955a0b1d5a4b315c915df844f0" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Tue Oct 20 03:28:53 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 03:29:50 2026 -0700" }, "message": "Tink C++ CMake: unbreak benchmarks.\n\nThey now link to `benchmark_main` instead of `gtest_main`, thus actually can run.\n\nAlso, default them to run only 0.01s per test, so that regular `ctest` use for unit testing runs in acceptable time. Feel free to override when actually benchmarking.\n\nPiperOrigin-RevId: 1002974671\nChange-Id: I99eaf52e048de8a0c08be5548fd9aa54c83027fc\n" }, { "commit": "3faf7e81667677955a0b1d5a4b315c915df844f0", "tree": "fe34a430bc4a00a2077b6c6d6c5b7427dee50f8d", "parents": [ "cb4716dafb4ab64b0c97d5d8a209c78f79f6c394" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Tue Oct 20 03:17:06 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 03:18:21 2026 -0700" }, "message": "Migrate Tink C++ AEAD tests off deprecated SecretData APIs.\n\nRecent deprecations of the legacy `crypto::tink::util::SecretData*` helper functions (`SecretDataFromStringView`, `SecretDataAsStringView`, `SecretDataEquals`, `AsSecretData`, and `AsSecretBuffer`) generate `-Wdeprecated-declarations` compiler warnings during Bazel builds of Tink C++.\n\nReplace calls to the deprecated `util::SecretData*` helpers across Tink C++ `aead` unit tests with direct `SecretData` constructors, `.AsStringView()`, `.AsSecretBuffer()`, `operator\u003d\u003d`, and `RestrictedData::Get()`.\n\nPiperOrigin-RevId: 1002969277\nChange-Id: I6e98226450ad0cbf5f7607e2a76feaef1afb6ec6\n" }, { "commit": "cb4716dafb4ab64b0c97d5d8a209c78f79f6c394", "tree": "f26bf2c29d281eee7ba6a5161ab51595ad9ce552", "parents": [ "8c257455010235d94b2de52567e19a43509aab14" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 20 01:51:44 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 01:52:50 2026 -0700" }, "message": "Fix the bounds check in `CordWriter::Write`.\n\nPiperOrigin-RevId: 1002928550\nChange-Id: Icaf62485375d3ad2dc7b8327ac62327b816218c5\n" }, { "commit": "8c257455010235d94b2de52567e19a43509aab14", "tree": "ec5d860d33634a00ab08133881a7f14f0eeeb49e", "parents": [ "c593e9d461e19694e515d8716d389a8fcb9892fa" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 20 01:16:32 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 01:18:17 2026 -0700" }, "message": "Fix the return value check of `EVP_PKEY_get_raw_private_key` in `SslNewKeyPairFromEcKey`.\n\nPiperOrigin-RevId: 1002911018\nChange-Id: I1b412ad74c3219c6379b67bc3c63077219bffa22\n" }, { "commit": "c593e9d461e19694e515d8716d389a8fcb9892fa", "tree": "124e75e3f09fb954338983b712638f4bdb8b74cd", "parents": [ "c5fe4b0817cd0fd85c3007df3d4fe0374f69f8d0" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 20 00:44:02 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 00:44:40 2026 -0700" }, "message": "Ignore non-positive counts in the streaming MAC output streams `BackUp`.\n\nPiperOrigin-RevId: 1002895857\nChange-Id: Iafe5d90a31d194b7d14b72fcd5e8776509c7bc33\n" }, { "commit": "c5fe4b0817cd0fd85c3007df3d4fe0374f69f8d0", "tree": "4e8e50c13b6a55a0f0ab93b981d180564cc5dae0", "parents": [ "6517ff50b6f37d1f0d52676cf7485ee470df7143" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 20 00:35:19 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 20 00:36:19 2026 -0700" }, "message": "Return an error status in `OstreamOutputStream::Next` when `sputn` fails to write any bytes.\n\nPiperOrigin-RevId: 1002891867\nChange-Id: I272a456d07c9c39e6729f7c78445c010b24cc084\n" }, { "commit": "6517ff50b6f37d1f0d52676cf7485ee470df7143", "tree": "5bf3df7561bc10c7aa0a4f37f84cef964bd53d7b", "parents": [ "1d78b9688b9c510b219233d41bd463151c53bc21" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Oct 19 23:23:42 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Oct 19 23:24:27 2026 -0700" }, "message": "Check that `hmac_key_format().key_size()` is at most 32 bytes in `EciesAeadHkdfDemHelper::GetKeyParams`.\n\nPiperOrigin-RevId: 1002859502\nChange-Id: Id873032a6fb7b52ea0d06693945eef96bd29a6c3\n" }, { "commit": "1d78b9688b9c510b219233d41bd463151c53bc21", "tree": "a9139c2f2a102ab7e8de0ae60e08f7c4b49478f2", "parents": [ "0490cd1a20510bc305fde2584f0271720ab3085e" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Oct 19 10:19:41 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Oct 19 10:20:29 2026 -0700" }, "message": "Ensure `FileOutputStream::Close` always closes the file descriptor even after a write error.\n\nPiperOrigin-RevId: 1002426257\nChange-Id: I9cafc07745e3b649f7a9771e16725c46095a7d43\n" }, { "commit": "0490cd1a20510bc305fde2584f0271720ab3085e", "tree": "3cd343d33cc57b37157f7be1f7fad6a48a8b846a", "parents": [ "485fc6c0722bfdcb4b7c4cb0b9e7cb1d56685016" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Mon Oct 19 08:03:57 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Oct 19 08:05:04 2026 -0700" }, "message": "Add a .gitignore file for the Tink C++ repository\n\nFor now prefilled with what CMake and Bazel like to generate.\n\nPiperOrigin-RevId: 1002343047\nChange-Id: If1b83f6361d576b8c5159f9e0d1445a83521530c\n" }, { "commit": "485fc6c0722bfdcb4b7c4cb0b9e7cb1d56685016", "tree": "98152a4b6f7f18fc5fe6bc772cb624996bce47d1", "parents": [ "d458b6c0b4bb1371c8849b4e81b1001c569ac1de" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Mon Oct 19 07:08:49 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Oct 19 07:10:40 2026 -0700" }, "message": "`err_util`: be more dynamic library friendly.\n\nIf Tink and BoringSSL are dynamically linked, then on macOS and Windows, there is the possibility that different compilation units see different builds of BoringSSL.\n\nThis works mostly fine, but in particular the error queue is a separate one per library instance. However, the usual pattern in Tink is to call `GetSslErrors()` right after a BoringSSL call, so as long as that function is inline (preferably statically inline), it will read from the exact error queue the caller expects.\n\nPiperOrigin-RevId: 1002314382\nChange-Id: Ib6689c478633522cfdb770fee196e50910afb84d\n" }, { "commit": "d458b6c0b4bb1371c8849b4e81b1001c569ac1de", "tree": "1b7281673b7124c0413e6815fe131a28c9314a5d", "parents": [ "571ced531b45e985aa36f82422e154f15d874bb6" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Mon Oct 19 07:07:14 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Oct 19 07:09:06 2026 -0700" }, "message": "Fix unsafe static variable initialization\n\nPiperOrigin-RevId: 1002313554\nChange-Id: Iaeaecce82f547e943a2b1164fcea030cfb572859\n" }, { "commit": "571ced531b45e985aa36f82422e154f15d874bb6", "tree": "1ba25e494297ed063f9e2404b2e8ef2d73dfedf5", "parents": [ "42193a8747e5f98a78079c860b668dcb038fc16c" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Mon Oct 19 06:56:16 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Oct 19 06:57:26 2026 -0700" }, "message": "Replace CMake library aliases by source-less libraries in Tink C++\n\nThat way, they include their internal target aliases as well, and can specify their name and dependencies normally.\n\nPiperOrigin-RevId: 1002307895\nChange-Id: I645e61a5775405a57bc84161aeedf455aab7f9eb\n" }, { "commit": "42193a8747e5f98a78079c860b668dcb038fc16c", "tree": "55c67d0e4d0e399727610e3178c496f782ff1f4b", "parents": [ "9869e1fa9924ca4999c53ecfda4c0fca327f5454" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Mon Oct 19 05:23:46 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Oct 19 05:24:50 2026 -0700" }, "message": "Add PemToMlDsaPrivateKey to tink_pem.\n\nSupports parsing RFC 9881 Section 6 [1] \"seed-only\" PEM-encoded ML-DSA private keys into `crypto::tink::MlDsaPrivateKey`.\n\n[1] https://www.rfc-editor.org/info/rfc9881/#priv-key\nNOKEYCHECK\n\nPiperOrigin-RevId: 1002267801\nChange-Id: I8306974464c43295bfe65423b7489b69ecf3f420\n" }, { "commit": "9869e1fa9924ca4999c53ecfda4c0fca327f5454", "tree": "40d8b190e554ec988f5f31552b9652736fcd1e4d", "parents": [ "cf22e039578a194ec2f6a68bf01233c711612fe6" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Mon Oct 19 04:51:58 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Oct 19 04:52:48 2026 -0700" }, "message": "Use decryption status instead of BoringSSL error queue in AEAD tests\n\nRemoves custom GetError() helper functions that inspected BoringSSL\u0027s error stack and logs result.status() directly upon decryption failures.\n\nDecryption status already contains sufficient information about the error that occurred (and often the only information at all, as there are lots of cases how it can fail that do not even write to the error queue).\n\nRemoves some cross-library-boundary BoringSSL use.\n\nPiperOrigin-RevId: 1002252776\nChange-Id: I49713fa1b65bc2771ded65f29140c8b92541747e\n" }, { "commit": "cf22e039578a194ec2f6a68bf01233c711612fe6", "tree": "b0a8618c3d0354223091d82f07caf21083789138", "parents": [ "1233e4d34cbede720f356adf615b8a429b2699be" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Mon Oct 19 03:24:36 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Oct 19 03:25:53 2026 -0700" }, "message": "Do not compare pointers to BoringSSL method tables.\n\nInstead query object NIDs and compare those, or - in case of AEAD tests - check the properties of the AEAD instead of its identity.\n\nThis resolves issues that can happen with dynamic linking on macOS and Windows.\n\nPiperOrigin-RevId: 1002215494\nChange-Id: I1ae82b1a2d3e5f2e4af6015ada48ee29c982f920\n" }, { "commit": "1233e4d34cbede720f356adf615b8a429b2699be", "tree": "9e023c3cb5a3f26a04b279d1510519c312d1491f", "parents": [ "f3e4f36e06e63520b54124d3fcb21f70e06ed9b8" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Mon Oct 19 00:42:37 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Oct 19 00:43:55 2026 -0700" }, "message": "Remove CMake and Bazel targets pointing at nonexisting files.\n\nPiperOrigin-RevId: 1002141123\nChange-Id: Id072ec4057b3342884f22e729232721eb74f8f6a\n" }, { "commit": "f3e4f36e06e63520b54124d3fcb21f70e06ed9b8", "tree": "e3cc857b8f2a827eff1c15836fb373e84a57b58f", "parents": [ "a66ac64813cda86bec5a97551c5678ca4c312b53" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Fri Oct 16 08:37:44 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 08:38:33 2026 -0700" }, "message": "Remove unnecessary heap allocation and extra memory allocation in `ComputeHash`\n\nPiperOrigin-RevId: 1000877253\nChange-Id: Ic42b2b414cacbf98147fdfcfa4a7bc5fef0352b7\n" }, { "commit": "a66ac64813cda86bec5a97551c5678ca4c312b53", "tree": "e0cccfa24c628628509a6682ebd7c6b39c6edc1d", "parents": [ "51a6e33962d55427c5fccf9970afa3ff8dd1759e" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Oct 16 07:13:13 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 07:14:49 2026 -0700" }, "message": "Remove OpenSSL #ifdef statements in Tink C++ JWT.\n\nPiperOrigin-RevId: 1000835457\nChange-Id: Ib7dff9d799aef46d6f21ce2b8f2d492c2fbdeb3d\n" }, { "commit": "51a6e33962d55427c5fccf9970afa3ff8dd1759e", "tree": "6624ef724b8c3b4c742b8e81ae00daae02273360", "parents": [ "4e965fce05956171ab71de858eea66fe111f51ca" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Oct 16 07:12:26 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 07:13:21 2026 -0700" }, "message": "Use minimal test configurations in some Tink C++ signature tests.\n\nPiperOrigin-RevId: 1000835083\nChange-Id: I3060c28574fa619795cc7c514a0427ddc4e28da6\n" }, { "commit": "4e965fce05956171ab71de858eea66fe111f51ca", "tree": "7d3a5c64b29130b146c80629d06b09f307bc17e2", "parents": [ "b8c46f2b7b2ef584c234e0e989e0f2f0e523ab3d" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Fri Oct 16 06:57:47 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 06:59:03 2026 -0700" }, "message": "Avoid creating the primitive twice in `KeysetWrapperImpl::Wrap`\n\nAvoids running `primitive_getter_from_key_` twice when a primitive getter is available.\n\nPiperOrigin-RevId: 1000828691\nChange-Id: Ia121b2d76609023dcf654e0ce846e15d299b94f5\n" }, { "commit": "b8c46f2b7b2ef584c234e0e989e0f2f0e523ab3d", "tree": "3453e93010183f72ca5a6fe950ea24077d82ed70", "parents": [ "7b8ebf001580a76c2adbf74283d76b9b1c9d1436" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Fri Oct 16 06:27:50 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 06:28:38 2026 -0700" }, "message": "Remove some APIs from the (now internal) PrimitiveSet.\n\nPiperOrigin-RevId: 1000815681\nChange-Id: I538c4706e9a2645f3a4fa496f61650f55ef53aa1\n" }, { "commit": "7b8ebf001580a76c2adbf74283d76b9b1c9d1436", "tree": "41b7e0bd4194fa3dc4d27eed88e4962d35938e1c", "parents": [ "1d22a9ce833ac623d1b3c27ffe2baec8bd803617" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Fri Oct 16 05:23:29 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 05:24:20 2026 -0700" }, "message": "Avoid BoringSSL allocations when computing the default RSA public exponent.\n\nAdd `internal::GetRsaDefaultPublicExponent()`, which returns a static F4\n(65537) `BigInteger`. `RsaSsaPkcs1Parameters`, `RsaSsaPssParameters`,\n`JwtRsaSsaPkcs1Parameters` and `JwtRsaSsaPssParameters` builders now use it\ninstead of computing F4 with `BN_new` + `BN_set_word` + `BignumToString` on\nevery `Builder` construction.\n\nPiperOrigin-RevId: 1000789955\nChange-Id: Iaa4a980152ff51e5a24baa8888788e0013d678d9\n" }, { "commit": "1d22a9ce833ac623d1b3c27ffe2baec8bd803617", "tree": "247acfa71ec89003383d6a1e3cc364a7fa80a935", "parents": [ "3c41b813b16e25575ff081cfc4d5fce73d1cd9e2" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Fri Oct 16 04:41:52 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 04:44:19 2026 -0700" }, "message": "Add benchmarks for `KeysetHandle::GetPrimitive`.\n\nPiperOrigin-RevId: 1000773296\nChange-Id: I6c624c59a27fefdec4db2afed6720b1ebce9cb6a\n" }, { "commit": "3c41b813b16e25575ff081cfc4d5fce73d1cd9e2", "tree": "ea2c6510baaef57507ffb64db3625ac2d7b52dde", "parents": [ "990354a781a7e83dc31a7a1a178c678c21f8a829" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Fri Oct 16 04:41:29 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 04:42:33 2026 -0700" }, "message": "Add microbenchmarks for RSA SSA (JWT) parameters builders.\n\nPiperOrigin-RevId: 1000773158\nChange-Id: Ibb5fced936b247b480d4fd9f277a60bf1192c813\n" }, { "commit": "990354a781a7e83dc31a7a1a178c678c21f8a829", "tree": "d0ecec5bc5ebff07b1010bc8089c92ce407fc5f8", "parents": [ "3993c351839da86e01c829e88d4c7bda1291ba44" ], "author": { "name": "Tink Team", "email": "tink-dev@google.com", "time": "Fri Oct 16 04:31:41 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 04:32:35 2026 -0700" }, "message": "Automated rollback of commit 7a82e37ef31d807e0c0f1b81fc505b8b64ee8eca.\n\nPiperOrigin-RevId: 1000769373\nChange-Id: I6e2487134e2a9d2a65f12aa5e229bf7cbf573010\n" }, { "commit": "3993c351839da86e01c829e88d4c7bda1291ba44", "tree": "a0d5928806c48c3e4cd0b244bfd415052835884a", "parents": [ "dc8d0a44b9929cb6d1487dd1fbdcd7d2c2e67753" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Fri Oct 16 04:10:35 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 04:11:22 2026 -0700" }, "message": "Avoid heap allocations in `SslGetEcPointFromCoordinates`.\n\nInstead of converting the coordinates into two heap-allocated `BIGNUM`s and calling `EC_POINT_set_affine_coordinates_GFp`, build the uncompressed encoding `0x04 || X || Y` in a fixed-size stack buffer and decode it with `EC_POINT_oct2point`. Leading zeros in the coordinates are stripped to preserve the previous behavior. Both BoringSSL and OpenSSL check that the decoded point is on the curve.\n\nPiperOrigin-RevId: 1000760583\nChange-Id: I4f36cf78d431a1d252aece5adb8572fdee9639bb\n" }, { "commit": "dc8d0a44b9929cb6d1487dd1fbdcd7d2c2e67753", "tree": "bc74d034f1c9f0e2bff43f58609c840c5296a20f", "parents": [ "779e55d5af51f0b66ec98a4cd046cfd39d5a61ac" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Fri Oct 16 02:48:21 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 02:49:17 2026 -0700" }, "message": "Add benchmarks for creating an `EcdsaVerifyBoringSsl`.\n\nPiperOrigin-RevId: 1000723714\nChange-Id: I3edeeceaff34421ceac07bee34b7aef5d242b975\n" }, { "commit": "779e55d5af51f0b66ec98a4cd046cfd39d5a61ac", "tree": "adb3d80484e9775dcadb5d8425fe42dedc6d728c", "parents": [ "210d0728b7bd3ccc773938fc4d2658161928fa41" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Oct 16 02:06:09 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 02:06:58 2026 -0700" }, "message": "Move AesCtr128Crypt out of Tink C++ internal::aes_util.\n\nPiperOrigin-RevId: 1000705263\nChange-Id: If1a4a9efe46646a21452075e9a8e28ac61739f70\n" }, { "commit": "210d0728b7bd3ccc773938fc4d2658161928fa41", "tree": "d3b8188bacf32a462384b069e232fa0a04ddec40", "parents": [ "ea1b4bd62bbba9492b20d442fdbce4b7f3387e27" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Fri Oct 16 01:25:49 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 01:26:31 2026 -0700" }, "message": "Migrate Tink C++ JWT module off deprecated SecretData APIs.\n\nRecent deprecations of the legacy `crypto::tink::util::SecretData*` helper functions (`SecretDataFromStringView`, `SecretDataAsStringView`, `SecretDataEquals`, `AsSecretData`, and `AsSecretBuffer`) generate `-Wdeprecated-declarations` compiler warnings during Bazel builds of Tink C++.\n\nReplace calls to the deprecated `util::SecretData*` helpers across Tink C++ `jwt` primitives, key managers, serialization implementations, and unit tests with direct `SecretData` constructors, `.AsStringView()`, `.AsSecretBuffer()`, `operator\u003d\u003d`, and `RestrictedData::Get()`.\n\nPiperOrigin-RevId: 1000686282\nChange-Id: Idffa8a7a51102ffbb3953a62728ce76df2f5d2cd\n" }, { "commit": "ea1b4bd62bbba9492b20d442fdbce4b7f3387e27", "tree": "d8054b68dde14662e55523df3a9608f3cb130b32", "parents": [ "7a82e37ef31d807e0c0f1b81fc505b8b64ee8eca" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Fri Oct 16 00:43:30 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 00:45:37 2026 -0700" }, "message": "Add benchmark for `EcdsaPublicKey::Create`.\n\nPiperOrigin-RevId: 1000669250\nChange-Id: I2af93b4003bca9101135e525069e80506a633639\n" }, { "commit": "7a82e37ef31d807e0c0f1b81fc505b8b64ee8eca", "tree": "ce7d1aeb3633a372e641b8bafa95695184f9f66c", "parents": [ "d242ba71c5bbd24b907bba5109167fcf24c2a2b6" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Oct 16 00:43:07 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Oct 16 00:44:07 2026 -0700" }, "message": "Remove the OpenSSL implementation of Tink C++ SslOneShotAead.\n\nPiperOrigin-RevId: 1000669105\nChange-Id: Id4b648d0dbde61cadfb99d247ea3c40a34d1f35d\n" }, { "commit": "d242ba71c5bbd24b907bba5109167fcf24c2a2b6", "tree": "15fd25a78de33e5f4ecf52ba011930b6e65eb3dc", "parents": [ "a51c9f4dbbc1b6ed47673769a39fb404a8fa37c0" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Thu Oct 15 13:12:36 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 13:14:43 2026 -0700" }, "message": "Avoid unnecessary copies when building RSA keys\n\nPiperOrigin-RevId: 1000342101\nChange-Id: If1d2fba2b233fe11eae240d45aaffe65af856424\n" }, { "commit": "a51c9f4dbbc1b6ed47673769a39fb404a8fa37c0", "tree": "ee350278a816277e9362686e381ba711c530d9bf", "parents": [ "3ef36595c52c788b6cafa09b4d0ed0c643833ea6" ], "author": { "name": "Fernando Lobato", "email": "felobato@google.com", "time": "Thu Oct 15 12:21:25 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 12:22:44 2026 -0700" }, "message": "Use the generated hpke.tinkpb.h and hpke_proto_structs in hpke_proto_serialization_impl.cc instead of hand-written parser classes.\n\nPiperOrigin-RevId: 1000309837\nChange-Id: I70bf1c485f22935f5b3563930a6258d14067cc96\n" }, { "commit": "3ef36595c52c788b6cafa09b4d0ed0c643833ea6", "tree": "718f0fe12c04ad6ca87dc5b36b9d8923895a29c4", "parents": [ "f57f366104980b12d78b100b5c5844c03a73dda2" ], "author": { "name": "Fernando Lobato", "email": "felobato@google.com", "time": "Thu Oct 15 11:41:34 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 11:42:38 2026 -0700" }, "message": "Add hybrid/internal:hpke_proto_structs with the HPKE proto enum conversions on the generated hpke.tinkpb.h types.\n\nPiperOrigin-RevId: 1000282891\nChange-Id: I826e0192e9e1f656e49493e69944ceeadd5f156b\n" }, { "commit": "f57f366104980b12d78b100b5c5844c03a73dda2", "tree": "35c933c3439e174ccc2ba49c31d2bfd44fd47269", "parents": [ "ef49b562ccf6310b28f51e338802a9c88f535ad7" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Oct 15 11:25:35 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 11:26:48 2026 -0700" }, "message": "Use fake or signature key managers in the Tink C++ registry tests.\n\nThe GetPublicKeyData test now uses the RSA SSA PKCS1 key managers instead of\nthe ECIES ones.\n\nPiperOrigin-RevId: 1000270883\nChange-Id: I6e3dcfc57447c8b78dd10b8c540a0f26f00474e6\n" }, { "commit": "ef49b562ccf6310b28f51e338802a9c88f535ad7", "tree": "cd77545bcaec434045df895037ca69044f365cbf", "parents": [ "b05c6312b97db87b48c2689c6efba0ad49fc2c7e" ], "author": { "name": "Fernando Lobato", "email": "felobato@google.com", "time": "Thu Oct 15 11:07:51 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 11:08:34 2026 -0700" }, "message": "Add generated Tink C++ proto parser header for hpke.proto.\n\nGenerated with tink_proto_generator and kept in sync by tink_proto_generator_sync_test.\n\nPiperOrigin-RevId: 1000258232\nChange-Id: I072d7101559b7da89d8ee6cf844483b071b60de4\n" }, { "commit": "b05c6312b97db87b48c2689c6efba0ad49fc2c7e", "tree": "ad0416703fcdcb1c0f7fef513c1bc966db687e6f", "parents": [ "7210fbc851c434aca1cca8a848d3aa68b676e382" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Oct 15 10:27:11 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 10:28:03 2026 -0700" }, "message": "Use fake AEADs in Tink C++ key manager and keyset wrapper tests.\n\nPiperOrigin-RevId: 1000228543\nChange-Id: Icdf2567dfe9f91250bc9ad76e9ad4742d78f8db0\n" }, { "commit": "7210fbc851c434aca1cca8a848d3aa68b676e382", "tree": "9f2a0d731425d25bc8882090fc4f5c7338942bc6", "parents": [ "7742e2ed73e67c15a8f6ee2511452a82ab3c28ff" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Oct 15 08:19:19 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 08:20:09 2026 -0700" }, "message": "Remove OpenSSL #ifdef statements from includes in Tink C++ ECDSA and RSA keys.\n\nPiperOrigin-RevId: 1000150687\nChange-Id: I4753f9ab5af477186d9be980d7d117ec6fe013f6\n" }, { "commit": "7742e2ed73e67c15a8f6ee2511452a82ab3c28ff", "tree": "64f77fedd798dba57488b26db8039a9c10c8a0d5", "parents": [ "c984036926cf1b759b36f0d9bb03d0f2f6365e56" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Thu Oct 15 07:05:58 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 07:07:03 2026 -0700" }, "message": "Set CMAKE_LINK_LIBRARIES_STRATEGY to REORDER_FREELY.\n\nThis allows CMake to reorder and deduplicate libraries in linker command lines to eliminate duplicate library warnings on macOS:\n\n ld: warning: ignoring duplicate libraries: \u0027_deps/abseil-build/absl/base/libabsl_base.a\u0027, ...\n\nPiperOrigin-RevId: 1000111578\nChange-Id: I742142b0b4237527751bd32ca2d8a42290262f41\n" }, { "commit": "c984036926cf1b759b36f0d9bb03d0f2f6365e56", "tree": "e81e79a7fd92adecf829568f5dd55feb34acf7b5", "parents": [ "1958a884fda901ccdac8da5f28675e31fcadc127" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Thu Oct 15 05:50:59 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 05:51:45 2026 -0700" }, "message": "Add key creator functions for X-AES-GCM\n\nPiperOrigin-RevId: 1000077147\nChange-Id: I88c4bf1fcdd2d8a3574f687ab5d7874ff863d902\n" }, { "commit": "1958a884fda901ccdac8da5f28675e31fcadc127", "tree": "67290193353009b6ecac717fc13e682dab6f0482", "parents": [ "b9578712a2446d26c66efa0d315e1caeb3813742" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Thu Oct 15 05:16:22 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 05:17:51 2026 -0700" }, "message": "Add key creator functions for AES-GCM-SIV\n\nPiperOrigin-RevId: 1000063192\nChange-Id: Ice2f0eca8653555f39d88050ef11ddf2e2d7482c\n" }, { "commit": "b9578712a2446d26c66efa0d315e1caeb3813742", "tree": "5900fdd371c90efc15fdfc8f86f3f388ddf4a3a8", "parents": [ "b5db01fd5d541a487518cb52f0a76d6a3b765a02" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Thu Oct 15 05:12:29 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 05:13:37 2026 -0700" }, "message": "Clean up and consolidate HPKE test vector keys\n\nMerge EC keys between hpke_test_vectors.cc, hpke_proto_serialization_impl_test.cc and ec_test_vectors.cc.\n\nFixes an ODR violation if both are linked into the same binary.\n\nPiperOrigin-RevId: 1000061616\nChange-Id: Ia56ff5ac75d35f89499836b44e6165c0c56e8a03\n" }, { "commit": "b5db01fd5d541a487518cb52f0a76d6a3b765a02", "tree": "e366398a7bfb5213a2a0f411375bec85cd3ac013", "parents": [ "7e0f244f9f47d3ba47924319047c545855b92ff4" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Thu Oct 15 04:50:14 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 04:51:04 2026 -0700" }, "message": "Add key creator functions for XChaCha20Poly1305\n\nPiperOrigin-RevId: 1000051978\nChange-Id: Iddd96c69e07a081cc49b9ef022583c7adffa6c79\n" }, { "commit": "7e0f244f9f47d3ba47924319047c545855b92ff4", "tree": "8b6c2ac9f6eeb3ae3088a158e918179346555c8f", "parents": [ "7091e1456ed4e5d58c6de2e3864fa29d3ad53661" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Thu Oct 15 04:45:18 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 04:46:40 2026 -0700" }, "message": "Migrate Tink C++ signature tests off deprecated SecretData APIs.\n\nRecent deprecations of the legacy `crypto::tink::util::SecretData*` helper functions (`SecretDataFromStringView`, `SecretDataAsStringView`, `SecretDataEquals`, `AsSecretData`, and `AsSecretBuffer`) generate `-Wdeprecated-declarations` compiler warnings during Bazel builds of Tink C++.\n\nReplace calls to the deprecated `util::SecretData*` helpers across Tink C++ `signature` unit tests with direct `SecretData` constructors, `.AsStringView()`, `.AsSecretBuffer()`, `operator\u003d\u003d`, and `RestrictedData::Get()`.\n\nPiperOrigin-RevId: 1000049963\nChange-Id: I28fb386801184a7a3702353cf7f94597e7132590\n" }, { "commit": "7091e1456ed4e5d58c6de2e3864fa29d3ad53661", "tree": "88633ae13022eed9208a7ba2ffa5c312a4bcdc29", "parents": [ "6ad89d898c0220091d690d24ea3b5b99e111513f" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Thu Oct 15 04:31:22 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 15 04:32:18 2026 -0700" }, "message": "Update AeadConfig tests to check key serialization registry directly\n\nRefactor registration tests for XChaCha20Poly1305 and AesCtrHmacAead in aead_config_test.cc to test serialization and parsing directly via `MutableSerializationRegistry` instead of using `KeysetHandle` and `KeyGenConfigAead2026`, similar to all other tests in the file.\n\nThe test relied on `KeyGenConfigAead2026` not registering proto serialization, which is no longer the case.\n\nPiperOrigin-RevId: 1000043954\nChange-Id: I2e9fce026b0bea11eb3829b899ab933c3947b67a\n" }, { "commit": "6ad89d898c0220091d690d24ea3b5b99e111513f", "tree": "8c72e883047ff8f735c968fc518abb0ac0fcbd51", "parents": [ "b8cde0856c4fdadc31f7b8181165bc1d86abbc27" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Oct 14 09:26:19 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 09:27:09 2026 -0700" }, "message": "Remove OpenSSL-specific code in Tink C++ Hybrid.\n\nPiperOrigin-RevId: 999421422\nChange-Id: Ib48734cb5951341b279259517e4be59b9534dd2a\n" }, { "commit": "b8cde0856c4fdadc31f7b8181165bc1d86abbc27", "tree": "c8b712bd073c4dfabe2cf46d7774c3dc5ceafba1", "parents": [ "5b1e5543e32fa4847e765bc147e3e15b53791849" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Wed Oct 14 07:56:15 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 07:57:03 2026 -0700" }, "message": "Migrate Tink C++ signature primitives off deprecated SecretData APIs.\n\nRecent deprecations of the legacy `crypto::tink::util::SecretData*` helper functions (`SecretDataFromStringView`, `SecretDataAsStringView`, `SecretDataEquals`, `AsSecretData`, and `AsSecretBuffer`) generate `-Wdeprecated-declarations` compiler warnings during Bazel builds of Tink C++.\n\nReplace calls to the deprecated `util::SecretData*` helpers across Tink C++ `signature` key types, parameters, and serialization implementations with direct `SecretData` constructors, `.AsStringView()`, `.AsSecretBuffer()`, `operator\u003d\u003d`, and `RestrictedData::Get()`.\n\nPiperOrigin-RevId: 999369591\nChange-Id: Id53feb37ed49c4a0dc3daa0c55db3827b25f1e1d\n" }, { "commit": "5b1e5543e32fa4847e765bc147e3e15b53791849", "tree": "1c38855432094a5b5832e41ad496f2f7e1ff2716", "parents": [ "5844cce5c893d4e0b518e49a8a03c315d9f38fb9" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Wed Oct 14 07:54:59 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 07:55:55 2026 -0700" }, "message": "Unwrap StatusOr value in lambda init-capture in hkdf.cc.\n\nPiperOrigin-RevId: 999368886\nChange-Id: I67967a2df07b97d9e0847cd0f0eb8fa326ec7226\n" }, { "commit": "5844cce5c893d4e0b518e49a8a03c315d9f38fb9", "tree": "f95692d97129982edd62bf7980b9e0842bf1794c", "parents": [ "cda14ed7346529033b49c5a25bcc4790cebb6d40" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Oct 14 07:47:36 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 07:48:48 2026 -0700" }, "message": "Internal change.\n\nPiperOrigin-RevId: 999364976\nChange-Id: I5cf71f7b7981c0a035d1c39d92e744aa8afb0bcb\n" }, { "commit": "cda14ed7346529033b49c5a25bcc4790cebb6d40", "tree": "cf95c94df0bc68650137f7733825236bc4ceae54", "parents": [ "016d8b75e5d1e933adf163da40b399b8d06616ee" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Wed Oct 14 07:08:39 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 07:09:44 2026 -0700" }, "message": "Add key creator functions for AES-EAX\n\nPiperOrigin-RevId: 999345111\nChange-Id: I61e4bd65d014959959d9e3936547c296c3fb1f9f\n" }, { "commit": "016d8b75e5d1e933adf163da40b399b8d06616ee", "tree": "fef2fea5408224756b932afb79b1852712c68b92", "parents": [ "fdcd71d95684fd4a8a6ebe83fdebb17e79e38a26" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Wed Oct 14 06:57:02 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 06:57:54 2026 -0700" }, "message": "Check StatusOr status before accessing values in Tink C++ primitives.\n\nFix unchecked `absl::StatusOr` accesses flagged by `google3-runtime-unchecked-statusor-access` in `Ed25519SignKeyManager::DeriveKey` and `GenerateCecpq2Keypair`.\n\nPiperOrigin-RevId: 999339590\nChange-Id: I1f15c9c8550e8d51b0e7f188787da27ba4fdbcd2\n" }, { "commit": "fdcd71d95684fd4a8a6ebe83fdebb17e79e38a26", "tree": "9806e6be5c67e6bc855c20e00b1a9efc0a90348f", "parents": [ "5ee1de7dc7f3c19cd9f76fe328c518cf5e61ed44" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Wed Oct 14 06:37:02 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 06:38:21 2026 -0700" }, "message": "Fix two missing `TESTONLY`s in the CMake rules.\n\nBoth were test utilities but accidentally not declared as such.\n\nPiperOrigin-RevId: 999331691\nChange-Id: I1b1f0c73e9c141853ef9188f9b534084c9d56c80\n" }, { "commit": "5ee1de7dc7f3c19cd9f76fe328c518cf5e61ed44", "tree": "3060b077f2a6df4cff30e47e0118abd29c5b6096", "parents": [ "93b968abd8ddb74e080e737d13b7177001bc78db" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Wed Oct 14 06:19:26 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 06:20:40 2026 -0700" }, "message": "Check StatusOr status before accessing values in Tink C++ tests.\n\nFix unchecked `absl::StatusOr` accesses flagged by `google3-runtime-unchecked-statusor-access` in Tink C++ unit tests and test utilities.\n\nPiperOrigin-RevId: 999324188\nChange-Id: I36527842930f1ab4885a548d178101125e0e7555\n" }, { "commit": "93b968abd8ddb74e080e737d13b7177001bc78db", "tree": "477568678f8f7536933380d37499e0e8ded3c6bc", "parents": [ "f29e6a6c81959e643aae5f297cd99389f92ab0ed" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Wed Oct 14 05:56:17 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 05:57:30 2026 -0700" }, "message": "Avoid unnecessary copies in key creator functions\n\nPiperOrigin-RevId: 999313542\nChange-Id: I77f85fce418a9435eafe924c741e23091a5e5928\n" }, { "commit": "f29e6a6c81959e643aae5f297cd99389f92ab0ed", "tree": "8e0907e66b335233728d3092421cd5f8972c2dd2", "parents": [ "6de9237d069959ea68e561b007ee01ba9dc9faa9" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Oct 14 05:00:07 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 05:00:53 2026 -0700" }, "message": "Make Tink C++ internal RSA and BIGNUM utilities independent of the SSL library.\n\nPiperOrigin-RevId: 999291925\nChange-Id: I84c18f5ff929295af6dfb988831510271f679e50\n" }, { "commit": "6de9237d069959ea68e561b007ee01ba9dc9faa9", "tree": "ff5a3a8dab9ec44645ad52f0d91a0c97572c59c2", "parents": [ "2a051436c0f7f27dabc842ecb992ef68fc90106e" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Wed Oct 14 04:01:27 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 04:02:40 2026 -0700" }, "message": "Add key creator function for AES-CTR-HMAC\n\nPiperOrigin-RevId: 999268781\nChange-Id: I2cae05441a4fad309474cf7ab5ae2e16c7d86a13\n" }, { "commit": "2a051436c0f7f27dabc842ecb992ef68fc90106e", "tree": "610853ae6c42586b555493c9231a017cf818ac0a", "parents": [ "c87fd1f5e6bb6a9aa67072581bf6b81ae2508caa" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Wed Oct 14 03:57:01 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 03:58:12 2026 -0700" }, "message": "Unwrap StatusOr values in lambda init-captures to avoid clang-tidy warnings.\n\nPiperOrigin-RevId: 999267245\nChange-Id: I94306f7b166a2ff708601a7a6b3ad505cb376156\n" }, { "commit": "c87fd1f5e6bb6a9aa67072581bf6b81ae2508caa", "tree": "b38b07edbda0c1a0fd77c37cfc4af03a0de27fe8", "parents": [ "24264e0e05a41bf42db6c2299c04325749fd14d3" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Oct 14 02:08:34 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 02:09:15 2026 -0700" }, "message": "Move deriving EC keys from a seed out of Tink C++ internal::ec_util.\n\n`internal::NewEcKey(curve, seed)` becomes `internal::NewEcKeyFromSeed` in the\nnew target `internal:ec_key_from_seed`. It relies on BoringSSL\u0027s\nEC_KEY_derive_from_secret. With this, `internal:ec_util` has no\n`#ifdef OPENSSL_IS_BORINGSSL` left (only `openssl/ec.h` is included).\n\nPiperOrigin-RevId: 999217886\nChange-Id: I6b917654df4c20bc66f53ecd35effaf03d139a6d\n" }, { "commit": "24264e0e05a41bf42db6c2299c04325749fd14d3", "tree": "e410a7539955da18b822ce26aa99719a9f67e43e", "parents": [ "be716a98a2f720bfca8a11823acf4bec71a60d4a" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Wed Oct 14 01:24:13 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Oct 14 01:25:03 2026 -0700" }, "message": "Use `CreateAesGcmKey` in aead/internal/key_gen_config_2026.cc\n\nPiperOrigin-RevId: 999197155\nChange-Id: I842a68ae4d1ddf37c0d1bf0f2c79144fc3b0f3dd\n" }, { "commit": "be716a98a2f720bfca8a11823acf4bec71a60d4a", "tree": "521d93471a14bd2f9d9e11679b633f31057e61d6", "parents": [ "f6c0f85629a4501f2fd158c718ef755bf4f82253" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 13 13:31:39 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 13:32:30 2026 -0700" }, "message": "Internal change.\n\nPiperOrigin-RevId: 998856283\nChange-Id: I163efa898667eddc2749b19f1f0b3149e683a3e5\n" }, { "commit": "f6c0f85629a4501f2fd158c718ef755bf4f82253", "tree": "48011037ff949f68c1e0ed228de787fb350d8ee5", "parents": [ "478e7beb8eea71039d296d12a88404898d8049d1" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 13 13:09:27 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 13:10:46 2026 -0700" }, "message": "Use d2i_ECDSA_SIG with both BoringSSL and OpenSSL in Tink C++ EcSignatureDerToIeee.\n\nPiperOrigin-RevId: 998841879\nChange-Id: Ieb2249acdb24ad1e5690b311b047af1c0af1b97e\n" }, { "commit": "478e7beb8eea71039d296d12a88404898d8049d1", "tree": "9925b016eb4d51776d7c49a52888db3077a63b4f", "parents": [ "6c83ce50a7692815da6e09e49410cefa0377fef6" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Tue Oct 13 09:41:03 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 09:42:04 2026 -0700" }, "message": "Remove usages of TINK_USE_ONLY_FIPS and delete kUseOnlyFips\n\nPiperOrigin-RevId: 998696578\nChange-Id: I8b7cfc5cc4097c94a0198d2f879a5b83d31f1212\n" }, { "commit": "6c83ce50a7692815da6e09e49410cefa0377fef6", "tree": "681e54e1d2e5eee33c3f6278affbbc5895703e47", "parents": [ "6a7c3610590f68b4022ded6036a57ae674887597" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Tue Oct 13 08:32:43 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 08:33:49 2026 -0700" }, "message": "Add internal key creator function for AES-GCM\n\nPiperOrigin-RevId: 998656484\nChange-Id: I6670a4c91b9c23eeb9aace51cea5f2fae1e032c1\n" }, { "commit": "6a7c3610590f68b4022ded6036a57ae674887597", "tree": "25c010c083a4bae54fdaec72b37190ed6cd12b71", "parents": [ "ed5b352d7366f1c65b84deaf3042ba545af2bc4f" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 13 08:24:45 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 08:25:56 2026 -0700" }, "message": "Internal change.\n\nPiperOrigin-RevId: 998652261\nChange-Id: I73a77c271fdacf00aa1f832ff72a60024bbadde2\n" }, { "commit": "ed5b352d7366f1c65b84deaf3042ba545af2bc4f", "tree": "7f0c45fa3aacd0d2f247fdef9c694db27d53d784", "parents": [ "995ff91ae563252cc4596c73f2781f1abb6fe691" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Tue Oct 13 08:15:24 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 08:16:41 2026 -0700" }, "message": "Check `IsFipsModeEnabled()` instead of `kUseOnlyFips` in FIPS-related C++ tests.\n\nPiperOrigin-RevId: 998647223\nChange-Id: I01da240f68f43a4842ea5a36b5b7b2951f1aeed6\n" }, { "commit": "995ff91ae563252cc4596c73f2781f1abb6fe691", "tree": "67ca104d068ff46212b6b2f646ab9559866b473b", "parents": [ "9bd00e1ecf572d1f3ce7c9ae3b741cae35b9b783" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Tue Oct 13 05:29:20 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 05:30:51 2026 -0700" }, "message": "Do not use libprotobuf-lite in tink.\n\nUsing it causes ODR violations and crashes when linking dynamically as\nother modules use the full libprotobuf.\n\nNote that dynamic linking is not a supported configuration and still\nblocked by a CMake check.\n\nAlso, remove one instance of `STATIC` in the CMake rules. This change\nis a NOP on its own as dynamic linking still is blocked.\n\nPiperOrigin-RevId: 998565773\nChange-Id: I4a3b40d45aa8d4b6a74746dfeb64e0cf6bb2bb1f\n" }, { "commit": "9bd00e1ecf572d1f3ce7c9ae3b741cae35b9b783", "tree": "8082c3375db8fc618cd30a04468f396f71e3ea17", "parents": [ "6ab0a4a38bf4ddb86562414e0e3305d958ace1cf" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Tue Oct 13 04:29:05 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 04:30:13 2026 -0700" }, "message": "Migrate Tink C++ AEAD primitives off deprecated SecretData APIs.\n\nRecent deprecations of the legacy `crypto::tink::util::SecretData*` helper functions (`SecretDataFromStringView`, `SecretDataAsStringView`, `SecretDataEquals`, `AsSecretData`, and `AsSecretBuffer`) generate `-Wdeprecated-declarations` compiler warnings during Bazel builds of Tink C++.\n\nReplace calls to the deprecated `util::SecretData*` helpers across Tink C++ `aead` key managers, cord primitives, and serialization implementations with direct `SecretData` constructors, `.AsStringView()`, `.AsSecretBuffer()`, `operator\u003d\u003d`, and `RestrictedData::Get()`.\n\nPiperOrigin-RevId: 998541296\nChange-Id: Id6948c4bf3783e515b14d7527dd318ecf6ed3746\n" }, { "commit": "6ab0a4a38bf4ddb86562414e0e3305d958ace1cf", "tree": "410bb60c06df5c5712b6cd7691bdbfba2a0af813", "parents": [ "88ab91399df4d9e86dbec50312077b60117cdecc" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 13 03:51:17 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 03:52:12 2026 -0700" }, "message": "Use the EVP_PKEY_HKDF interface in Tink C++ subtle HKDF.\n\nBoringSSL now supports the OpenSSL EVP_PKEY_HKDF interface, so Tink uses it\nwith both libraries instead of selecting BoringSSL\u0027s one-shot HKDF() with\n`#ifdef OPENSSL_IS_BORINGSSL`.\n\nPiperOrigin-RevId: 998526181\nChange-Id: I1e947c91ef7cb70f7ba79aac2d3233b3d9b64e4d\n" }, { "commit": "88ab91399df4d9e86dbec50312077b60117cdecc", "tree": "c9eee2645444c593d28e5f1a6b8fc5cf18ae48a1", "parents": [ "896ff80455e3db5dba06e19200a03311529fa965" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Tue Oct 13 02:57:15 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 02:58:19 2026 -0700" }, "message": "Migrate Tink C++ subtle primitives off deprecated SecretData APIs.\n\nPiperOrigin-RevId: 998502449\nChange-Id: I409f694d6ed2b9f94760d4a7fd217a4ee2526051\n" }, { "commit": "896ff80455e3db5dba06e19200a03311529fa965", "tree": "822a6a28bed7b12a57a8d30a2bbeac311067d559", "parents": [ "a9550865bcf73baff8c0eaf9927fa3cd0a311142" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Tue Oct 13 02:46:58 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 02:47:57 2026 -0700" }, "message": "Remove BORINGSSL_FIPS guard from CordAesGcmSivBoringSsl\n\nFIPS-only mode remains enforced at runtime by CheckFipsCompatibility.\n\nPiperOrigin-RevId: 998497866\nChange-Id: Ic2892db95904230a8ac4a139496c655b3c4d7de6\n" }, { "commit": "a9550865bcf73baff8c0eaf9927fa3cd0a311142", "tree": "56b32b2d07e3edea59d965d6656b03d3977b7d51", "parents": [ "6759a7eeb5007a6f7213b870b9bf9c7b8d5e8bb5" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 13 02:28:59 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 02:29:57 2026 -0700" }, "message": "Remove OpenSSL #ifdef statements in Tink C++ PEM signature key parser.\n\nPiperOrigin-RevId: 998489353\nChange-Id: I48cfcc378003bd7c9c0eb61ac8f9719b76e1a98b\n" }, { "commit": "6759a7eeb5007a6f7213b870b9bf9c7b8d5e8bb5", "tree": "7086bb688a1e30e612e542bd5f8f03ac9cab661f", "parents": [ "8234596c37387f202b625836fcfa4911809475c0" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Tue Oct 13 01:45:46 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 01:47:11 2026 -0700" }, "message": "Remove TINK_USE_ONLY_FIPS guard from CordAesGcmSivBoringSsl.\n\nFIPS-only mode is still rejected at runtime by\nCheckFipsCompatibility, now returning kInternal (consistent with\nZeroCopyAesGcmSivBoringSsl and subtle::AesGcmSivBoringSsl).\n\nPiperOrigin-RevId: 998467749\nChange-Id: I87087cd2b6366bb1fa474198481d53e9a3f0c8f0\n" }, { "commit": "8234596c37387f202b625836fcfa4911809475c0", "tree": "3fea2d6e41ce5cbb66e6a710d26536a49fcdd1c9", "parents": [ "0edc20d8c3fb1558c8959cb29ae854b3ba811bed" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Oct 13 00:57:27 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 13 00:58:13 2026 -0700" }, "message": "Always build Tink C++ against its own private, static, prefixed BoringSSL.\n\nPiperOrigin-RevId: 998444267\nChange-Id: Icd93593632af68757a864c127ac5c39832cbf8f3\n" } ], "next": "0edc20d8c3fb1558c8959cb29ae854b3ba811bed" }