uboringssl is a subset of BoringSSL's libcrypto. The source code under this directory comprises a minimal set needed for selected cryptographic operations in the kernel.
Changes to the upstream files are easily identifiable as falling into one of three categories:
All other code is unchanged from BoringSSL.
A check-boringssl.go script recognizes these changes and will identify any other changes introduce when updating BoringSSL. Maintainers should port these differences until the script exits cleanly.
Care should be taken to minimize the differences between files in boring-crypto and BoringSSL. Only the minimum number of changes necessary to limit pulling in excessive dependencies should be added.
This subset does not include tests from BoringSSL. When updating from BoringSSL, maintainers should first ensure the unit tests in that package pass on Fuchsia before updating the subset for Zircon.
Finally, maintainers should update this file with the new revision of BoringSSL to provide an easy way to confirm boring-crypto was checked.
All code under this directory is covered by the same license as BoringSSL.