uboringssl is a subset of BoringSSL's libcrypto. The source code under this directory comprises a minimal set needed for selected cryptographic operations in the kernel.
Changes from the upstream files are limited to just three files:
All other code is unchanged from BoringSSL.
This subset does not include tests. Before updating from Fuchsia's BoringSSL, maintainers should first ensure the unit tests in that package pass before updating the subset for Zircon.
A check-boringssl.go script recognizes these changes and will identify any other changes introduce when updating BoringSSL. Maintainers should port these differences until the script exits cleanly.
Additionally, the changed files listed above should be manually inspected and copied or edited as needed. Care should be taken to minimize the differences between files in uboringssl and BoringSSL. Only the minimum number of changes necessary to limit pulling in excessive dependencies should be added.
A perlasm.sh script produces the assembly files from the source tree's Perl scripts. This script should be re-run after the source tree has been updated.
Finally, maintainers should update this file with the new revision of BoringSSL to provide an easy way to confirm uboringssl was checked.
All code under this directory is covered by the same license as BoringSSL.