)]}' { "log": [ { "commit": "893659e534d2a980fd38da247108fc6825e1e99d", "tree": "aa5a2f320d299b932a0222708743aeb8351200b9", "parents": [ "eea4671e1555cde85cc8cdacf91cf94e53d602cd" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 20:41:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 20:43:26 2026" }, "message": "Internal change.\n\nPiperOrigin-RevId: 1018461221\nChange-Id: I3611621f11a8236624d72226d93383c00a60e3e6\n" }, { "commit": "eea4671e1555cde85cc8cdacf91cf94e53d602cd", "tree": "7cc98e5a1b6352353dd213191bd64824241d861b", "parents": [ "716e5c2e416a0708bc7bb8f83a5be586d709ec28" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 15:26:25 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 15:27:07 2026" }, "message": "Remove SerializationRegistry::Builder\n\nPiperOrigin-RevId: 1018202512\nChange-Id: I935591e9c0f7d77442b8cbdd189468357de9b042\n" }, { "commit": "716e5c2e416a0708bc7bb8f83a5be586d709ec28", "tree": "ef31d6c89e58346c4d7a7694ee5b735bb2c43ddf", "parents": [ "98f49495d8b5f260039370df13e1eeefd5c08389" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 15:18:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 15:20:09 2026" }, "message": "Remove the OpenSSL branch from the Tink C++ SSL AEAD large inputs test.\n\nPiperOrigin-RevId: 1018198497\nChange-Id: Ifd1628137f5a6083a88bdeff91371ad960dedd9a\n" }, { "commit": "98f49495d8b5f260039370df13e1eeefd5c08389", "tree": "a194b8938868c3a01dda81d2b8283c83208b0031", "parents": [ "d68c0f413e56e6ed80455a635311294887872434" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 14:23:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 14:24:05 2026" }, "message": "Only compile the OpenSSL AEAD implementation of Tink C++ with OpenSSL.\n\nPiperOrigin-RevId: 1018165095\nChange-Id: Icae7055598fd7a582c771109e9b7376e2f1faa50\n" }, { "commit": "d68c0f413e56e6ed80455a635311294887872434", "tree": "d877bd585f05c3f5803d1f892fa1ea2a380331f9", "parents": [ "4ce5900783e47aef87c36009eff7400d290b43ed" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 13:32:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 13:33:46 2026" }, "message": "Remove dead OpenSSL code from Tink C++ keys.\n\nPiperOrigin-RevId: 1018138488\nChange-Id: I1b10d15105d0621556efac890f00ac3a313cba81\n" }, { "commit": "4ce5900783e47aef87c36009eff7400d290b43ed", "tree": "15121e4d0165767cd047a3dc71f60bd8ab93814a", "parents": [ "ce5e44f2c29879342f06ed1c5136a5393edd68b6" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 13:31:31 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 13:32:30 2026" }, "message": "Remove OpenSSL branches from Tink C++ AEAD tests.\n\nPiperOrigin-RevId: 1018138038\nChange-Id: Ib84c74a4246701ede426b3acd54347733c77ab8c\n" }, { "commit": "ce5e44f2c29879342f06ed1c5136a5393edd68b6", "tree": "2de5533427530404f51176cd18dd358352ca76fd", "parents": [ "aeb068a563551a9882a448bac0295e7cfcc8bb78" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 13:13:14 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 13:14:14 2026" }, "message": "Remove OpenSSL branches from Tink C++ signature tests.\n\nNOKEYCHECK\n\nPiperOrigin-RevId: 1018129554\nChange-Id: I4d4e39ed605b0551dfb40e683f28867a4ab407a7\n" }, { "commit": "aeb068a563551a9882a448bac0295e7cfcc8bb78", "tree": "7287742573757a6af3012973aa7192d45deaf799", "parents": [ "6bef2d30154048f7b747b44d484288ed9b049b6a" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 13:03:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 13:05:03 2026" }, "message": "Remove OpenSSL branches from Tink C++ subtle tests.\n\nPiperOrigin-RevId: 1018124368\nChange-Id: I9f223a85de1b7c206e33d7eb5c848c0cce10b416\n" }, { "commit": "6bef2d30154048f7b747b44d484288ed9b049b6a", "tree": "1e736f4ae7570db4c5a28038f8457d60c5f78442", "parents": [ "6bce186194a5672b33d221bf9e4c896827cc4918" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Tue Nov 10 12:29:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 12:30:29 2026" }, "message": "Support instantiating AesSivBoringSsl from an AesSivKey.\n\n`subtle::AesSivBoringSsl` previously only accepted a raw `SecretData` key buffer, which always used the `kNoPrefix` variant. Callers holding a `tink::AesSivKey` could not directly instantiate `AesSivBoringSsl` while honoring the key\u0027s `Variant` and output prefix.\n\nAdd an `AesSivBoringSsl::New(const AesSivKey\u0026)` overload that delegates to `internal::NewAesSivBoringSsl(const AesSivKey\u0026)`, route the existing `SecretData` overload through it, and deprecate `AesSivBoringSsl::New(const SecretData\u0026)`.\n\nPiperOrigin-RevId: 1018105828\nChange-Id: Ibb40d3a5a4597bd46c1b89067aa85cdcaf2795f0\n" }, { "commit": "6bce186194a5672b33d221bf9e4c896827cc4918", "tree": "91d9d2854e6a4e051907c3bf2970f7dc3548b44c", "parents": [ "d5a898e8b68eaf4f9c1fc2d7638a8997e2d691e1" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Tue Nov 10 12:19:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 12:20:05 2026" }, "message": "Add static GetTypeIndex template utility to Tink C++ internal package.\n\nPiperOrigin-RevId: 1018100364\nChange-Id: I663b99a4802ae18d195dd3752100c62524991d7a\n" }, { "commit": "d5a898e8b68eaf4f9c1fc2d7638a8997e2d691e1", "tree": "c9b36345c56cf5ac9ff2bae2b54921524db546fd", "parents": [ "df7544294b50c1e4559a52584aa0b767c28fec71" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Tue Nov 10 12:08:43 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 12:09:28 2026" }, "message": "Support instantiating XChacha20Poly1305BoringSsl from an XChaCha20Poly1305Key.\n\n`subtle::XChacha20Poly1305BoringSsl` previously only accepted a raw `SecretData` key buffer, which produces raw ciphertexts without a Tink output prefix. Callers holding a `tink::XChaCha20Poly1305Key` could not directly instantiate `XChacha20Poly1305BoringSsl` while honoring the key\u0027s `Variant` and output prefix.\n\nAdd an `XChacha20Poly1305BoringSsl::New(const XChaCha20Poly1305Key\u0026)` overload that delegates to `internal::ZeroCopyXChacha20Poly1305BoringSsl::New(const XChaCha20Poly1305Key\u0026)`, ensuring the key\u0027s output prefix is respected, and deprecate `XChacha20Poly1305BoringSsl::New(SecretData)`.\n\nPiperOrigin-RevId: 1018094691\nChange-Id: Id0a78eac3b0db820bbcfdf0ab23a00695b97c853\n" }, { "commit": "df7544294b50c1e4559a52584aa0b767c28fec71", "tree": "e687db6f6c076b5af93a4f38f280cc3141a60975", "parents": [ "fd63368835d947bcbb24f0c6ba27a20a06b2bfa9" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Tue Nov 10 10:44:33 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 10:45:22 2026" }, "message": "Add CreateAesSivDeterministicAeads single-key primitive factory.\n\nRFC 5297 defines AES-SIV over a vector of up to 126 associated data components (as used in protocols such as RFC 8915 Network Time Security), whereas `subtle::CreateAesSivDeterministicAead` only exposes the single-AD `DeterministicAead` interface.\n\nExpose `crypto::tink::subtle::CreateAesSivDeterministicAeads(const AesSivKey\u0026)` returning `std::unique_ptr\u003csubtle::DeterministicAeads\u003e`, supporting 32-byte and 64-byte keys, output prefixes, and up to 126 associated data inputs.\n\nPiperOrigin-RevId: 1018056421\nChange-Id: Icc5e3ed3d4c89472c34ab679968613ce494f08e4\n" }, { "commit": "fd63368835d947bcbb24f0c6ba27a20a06b2bfa9", "tree": "138991c5e0e1f518e5fc22b74afddbd9207a1f06", "parents": [ "4407f7ca0589429396ae83fab193f2bf1ea5a729" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 10:31:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 10:33:15 2026" }, "message": "Remove OpenSSL branches from Tink C++ keyset handle benchmark.\n\nPiperOrigin-RevId: 1018049404\nChange-Id: I833a0f97f5c442806fdb67ee37f4e69155d5608f\n" }, { "commit": "4407f7ca0589429396ae83fab193f2bf1ea5a729", "tree": "52b14a383a8bc2fa58132416066f6effcb920967", "parents": [ "7c776e8c43fb05e48a1721ebfde5b6ebe0cd7629" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 10:30:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 10:31:32 2026" }, "message": "Use portable OpenSSL code in Tink C++ `ComputeHash`.\n\nPiperOrigin-RevId: 1018049053\nChange-Id: I1ad12f625b54d5ede3a90d493c7924bff33dbd58\n" }, { "commit": "7c776e8c43fb05e48a1721ebfde5b6ebe0cd7629", "tree": "bf49a2212ae4c106c4b208b1951ccea6e233924d", "parents": [ "07c587e9fcf347dbcd5429f092d80d431c23505e" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 10:17:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 10:18:32 2026" }, "message": "Remove OpenSSL branches from Tink C++ key derivation tests.\n\nPiperOrigin-RevId: 1018042677\nChange-Id: I1f0ae0b4935ecc5e058999eb871812dfbf66aa5c\n" }, { "commit": "07c587e9fcf347dbcd5429f092d80d431c23505e", "tree": "8f50ef9d1f0ee71f37cf416db969c6e193f1b6aa", "parents": [ "283aefbddb532ce9ceed18913e4f99ce56954575" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Tue Nov 10 10:14:33 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 10:15:14 2026" }, "message": "Support instantiating AesEaxBoringSsl from an AesEaxKey.\n\n`subtle::AesEaxBoringSsl` previously only accepted a raw `SecretData` key buffer and nonce size, which always used the `kNoPrefix` variant. Callers holding a `tink::AesEaxKey` could not directly instantiate `AesEaxBoringSsl` while honoring the key\u0027s `Variant` and output prefix.\n\nAdd an `AesEaxBoringSsl::New(const AesEaxKey\u0026)` overload that delegates to `internal::AesEaxZeroCopyAead(const AesEaxKey\u0026)` wrapped in `internal::AeadFromZeroCopy`, route the existing `SecretData` overload through it, and deprecate `AesEaxBoringSsl::New(const SecretData\u0026, size_t)`.\n\nPiperOrigin-RevId: 1018041304\nChange-Id: I6d9175bfabc817ef425c1167c2c8d74341e7147f\n" }, { "commit": "283aefbddb532ce9ceed18913e4f99ce56954575", "tree": "b6b7cb4a7b4a338cfe790a05349a510e6c137baa", "parents": [ "616acf762abf966f09fba67bfa262760c25ebea4" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 09:55:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 09:56:22 2026" }, "message": "Add internal::NewEcdsaPrehashBoringSsl in signature/internal.\n\nPiperOrigin-RevId: 1018030814\nChange-Id: I761a383c31cda31804aa15c1a0831938fe95423c\n" }, { "commit": "616acf762abf966f09fba67bfa262760c25ebea4", "tree": "599ac4d4b7eabfe8e34f7207aca6fa56a459fc1a", "parents": [ "113291f16bfd99127332ece4928878cff70e940e" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 09:54:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 09:55:28 2026" }, "message": "Internal change.\n\nPiperOrigin-RevId: 1018030260\nChange-Id: Id93c05be3b267bf52d7280ec883b4aa3f609b2d3\n" }, { "commit": "113291f16bfd99127332ece4928878cff70e940e", "tree": "31c4d2375777df77ff4a90d4ff15b1743891fa9c", "parents": [ "215608b93bf594f9bf49453c4c2a01de7d725c64" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 09:28:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 09:29:47 2026" }, "message": "Add a test-only key for Tink C++ tests.\n\nPiperOrigin-RevId: 1018016138\nChange-Id: I08cb1ccb67257ce70361cc9b68c345aca41127e2\n" }, { "commit": "215608b93bf594f9bf49453c4c2a01de7d725c64", "tree": "b06fa84586fd518c76a6d706311125bf1bf5b729", "parents": [ "6cd933798f32cafcacc3e8c5923df923a80431f6" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 08:45:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 08:46:19 2026" }, "message": "Add subtle::CreateJwtMlDsaPublicKeySign and subtle::CreateJwtMlDsaPublicKeyVerify single-key factories.\n\nPiperOrigin-RevId: 1017992657\nChange-Id: Ib9cca173ce6d6826bfc617eb2c3dab0aad97fa72\n" }, { "commit": "6cd933798f32cafcacc3e8c5923df923a80431f6", "tree": "fc83c94a8d685d17d06c8e95e79a61284f7cdd3f", "parents": [ "eb335f801cd7d07862ae856ba62a4d6ccb492d72" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 10 08:42:19 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 08:43:29 2026" }, "message": "Migrate Hybrid, JWT, and KeyDerivation proto serialization from SerializationRegistry::Builder to SerializationRegistry\n\nReplace `Register*ProtoSerializationWithRegistryBuilder` with `Register*ProtoSerializationWithRegistry(SerializationRegistry\u0026)` across `tink/hybrid/`, `tink/jwt/`, and `tink/keyderivation/`.\n\nPiperOrigin-RevId: 1017990797\nChange-Id: I281d1479589c39c94da3d8bbebd2c01d4268a12a\n" }, { "commit": "eb335f801cd7d07862ae856ba62a4d6ccb492d72", "tree": "a5bbeeed9504edf496d0f5515ed3b146d273fe99", "parents": [ "b0f4418bbd8dbcedce07dd6f6d843db568a58468" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Tue Nov 10 08:22:38 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 10 08:23:36 2026" }, "message": "Support instantiating AesGcmSivBoringSsl from an AesGcmSivKey.\n\n`subtle::AesGcmSivBoringSsl` previously only accepted a raw `SecretData` key buffer, which produces raw ciphertexts without a Tink output prefix. Callers holding a `tink::AesGcmSivKey` could not directly instantiate `AesGcmSivBoringSsl` while honoring the key\u0027s `Variant` and output prefix.\n\nAdd an `AesGcmSivBoringSsl::New(const AesGcmSivKey\u0026)` overload that delegates to `internal::ZeroCopyAesGcmSivBoringSsl::New(const AesGcmSivKey\u0026)`, ensuring the key\u0027s output prefix is respected, and deprecate `AesGcmSivBoringSsl::New(const SecretData\u0026)`.\n\nPiperOrigin-RevId: 1017981062\nChange-Id: I88b1df2c0d4380b331e27598d16e2baafa2e529f\n" }, { "commit": "b0f4418bbd8dbcedce07dd6f6d843db568a58468", "tree": "fb7bb7bfb962e0b52db020cad8627e55ebca3020", "parents": [ "7bd8c5cf872b1021de9617d9ad2c82ca48bfac3e" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 16:14:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 16:15:34 2026" }, "message": "Migrate DAEAD, MAC, PRF, and StreamingAEAD proto serialization from SerializationRegistry::Builder to SerializationRegistry\n\nReplace `Register*ProtoSerializationWithRegistryBuilder` with `Register*ProtoSerializationWithRegistry(SerializationRegistry\u0026)` across `tink/daead/`, `tink/mac/`, `tink/prf/`, and `tink/streamingaead/`, and finish migrating `GlobalSerializationRegistry`.\n\nPiperOrigin-RevId: 1017360692\nChange-Id: I312aa596b0fc5f9a03b37a572936488a76b37c1a\n" }, { "commit": "7bd8c5cf872b1021de9617d9ad2c82ca48bfac3e", "tree": "61d75974f49e33501b47501c9cc2753b5d50b7b9", "parents": [ "fc26b0f53e94109742e499b1b4ee29817109c762" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 15:54:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 15:54:38 2026" }, "message": "Populate ECDSA test vectors with prehash values and add kNoPrefixWithPrehashId test vector.\n\nPiperOrigin-RevId: 1017347214\nChange-Id: Icfd721a1b68153e080cf17424ebb3467aa6760b5\n" }, { "commit": "fc26b0f53e94109742e499b1b4ee29817109c762", "tree": "10f1deba94415dfacca3537cb0fd74653a851321", "parents": [ "517ab825b88d4fd33e80b2e0b47f4c082f3cb227" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 15:35:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 15:35:55 2026" }, "message": "Clean up CMake build and ccache directories on exit in macOS Kokoro tests.\n\nPiperOrigin-RevId: 1017335211\nChange-Id: I7b6ffe18871ad5d13a06f0239554c2cf0f9de101\n" }, { "commit": "517ab825b88d4fd33e80b2e0b47f4c082f3cb227", "tree": "0a04808d49ca35677c122ace9c3496e150b71d18", "parents": [ "7fc20c544762f2f570de7462c2add045ee9044f0" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 15:27:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 15:28:13 2026" }, "message": "Add test-only parameters for Tink C++ tests.\n\nPiperOrigin-RevId: 1017330509\nChange-Id: Ic817738733dd9b6594ccb6d35852b1f0b455f848\n" }, { "commit": "7fc20c544762f2f570de7462c2add045ee9044f0", "tree": "d39c31a4f44d01971da6bbbf9fa0450d0a13706a", "parents": [ "c6eb42db4445789e2b4c4a7ca88b8786f8850b56" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 15:25:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 15:25:58 2026" }, "message": "Clean up CMake build and ccache outputs on exit in remaining Ubuntu Kokoro jobs.\n\nPiperOrigin-RevId: 1017329466\nChange-Id: I11a8d9a99a59b4ea1e9a158759c2fbd44d677fb1\n" }, { "commit": "c6eb42db4445789e2b4c4a7ca88b8786f8850b56", "tree": "fa54ba8698566af1a98d417ad9d63eed2176d474", "parents": [ "ca0b21c36d6fa1da6b701d46ce94b889f173e7ef" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 15:00:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 15:02:37 2026" }, "message": "Add subtle::CreateEciesHybridEncrypt single-key primitive factory.\n\nAdds single-key primitive factory `CreateEciesHybridEncrypt(const EciesPublicKey\u0026)` in `third_party/tink/cc/hybrid/subtle/`.\n\nPiperOrigin-RevId: 1017315067\nChange-Id: I021ae0dd5cff79f3d9f2e6f5deed43043ef0c13a\n" }, { "commit": "ca0b21c36d6fa1da6b701d46ce94b889f173e7ef", "tree": "9a8f24a4df109c779ed90808073a2f21942bda59", "parents": [ "8f8401967826adc42ef77461944cff2024e12d23" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 14:59:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 15:01:06 2026" }, "message": "Add SerializeParametersWithRegistryBuilder tests for Streaming AEAD proto serialization.\n\nPiperOrigin-RevId: 1017314303\nChange-Id: I147e32f60ea62196d8bdae4f71c97126f529138d\n" }, { "commit": "8f8401967826adc42ef77461944cff2024e12d23", "tree": "3b64abcac0ffd52bc9d7fd26bebc70fffcf10b4b", "parents": [ "92e3768ef845cc758808bd9f876ab7efa0a516f1" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 14:02:14 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 14:02:56 2026" }, "message": "Add internal NewJwtMlDsaVerify single-key factory.\n\nProvides jwt_internal::NewJwtMlDsaVerify(const JwtMlDsaPublicKey\u0026) to create a single-key JwtPublicKeyVerify primitive from a JwtMlDsaPublicKey object.\n\nPiperOrigin-RevId: 1017283644\nChange-Id: I669336c6cf74ce55187b3913310413bf51e1c5ee\n" }, { "commit": "92e3768ef845cc758808bd9f876ab7efa0a516f1", "tree": "300a1500ba556a8ef53f3f52683e88dfe529354a", "parents": [ "50a888693ddb39e1a22ee0b67a4177905710c652" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 13:52:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 13:53:54 2026" }, "message": "Forward subtle::NewCompositeMlDsaSign and subtle::NewCompositeMlDsaVerify to signature/internal.\n\nPiperOrigin-RevId: 1017279534\nChange-Id: I2d928eedd000dbd7cdaf2da33fe127b2415ed282\n" }, { "commit": "50a888693ddb39e1a22ee0b67a4177905710c652", "tree": "7f5ca4ee208a7f39dd288a6dbcf3297ec8af24e5", "parents": [ "665bbc7c2ba5784f44a0b5591590eb60ee33b0a6" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 13:27:13 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 13:27:51 2026" }, "message": "Clean up CMake build and ccache directories on exit in Ubuntu Kokoro tests.\n\nPiperOrigin-RevId: 1017266978\nChange-Id: Ia828eb173ff3bc6597367b275d38948e7d20b437\n" }, { "commit": "665bbc7c2ba5784f44a0b5591590eb60ee33b0a6", "tree": "41024ff6b612dfcd3b5453058160ff098428ec47", "parents": [ "a6e378d04a5f527faeaa79f98ae9c49e133817be" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 13:14:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 13:15:20 2026" }, "message": "Migrate Signature proto serialization from SerializationRegistry::Builder to SerializationRegistry\n\nReplace `Register*ProtoSerializationWithRegistryBuilder` with `Register*ProtoSerializationWithRegistry(SerializationRegistry\u0026)` across `tink/signature/` and update `GlobalSerializationRegistry`.\n\nPiperOrigin-RevId: 1017261206\nChange-Id: I5e740eb4a23b562e56a4de855289c3dc2721ea90\n" }, { "commit": "a6e378d04a5f527faeaa79f98ae9c49e133817be", "tree": "652fe3d8de50ee34c002653a736621b79ec156ff", "parents": [ "232f65965e134e1adfcdc9137c9863aa2041189e" ], "author": { "name": "Thomas Holenstein CA", "email": "tholenst@google.com", "time": "Mon Nov 09 13:12:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 13:13:25 2026" }, "message": "Verify ML-DSA, SLH-DSA, and parameters in GlobalSerializationRegistry.\n\nPiperOrigin-RevId: 1017260500\nChange-Id: I0f9fda3d70b7c2b0c631874a9638e94ee953e348\n" }, { "commit": "232f65965e134e1adfcdc9137c9863aa2041189e", "tree": "0b6d36eb042bdc0b6b7b82a714b21e968146f32f", "parents": [ "2b8a1c7e5348c716ccd45095eb43321c5a98c38c" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 12:09:54 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 12:11:06 2026" }, "message": "Remove the remaining OpenSSL-specific code in Tink C++ AEAD.\n\nPiperOrigin-RevId: 1017230360\nChange-Id: Ia225b5651fa15b44613a8539ee9dd2abcc7b453d\n" }, { "commit": "2b8a1c7e5348c716ccd45095eb43321c5a98c38c", "tree": "1dc901249ee3ca77f4e23744c8c39190d37937ea", "parents": [ "2aece1ee09c13816542e6fb5c2fd5dc668982b5a" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 11:59:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 12:00:24 2026" }, "message": "Add single-key subtle::CreateCompositeMlDsaPublicKeySign API.\n\nPiperOrigin-RevId: 1017224605\nChange-Id: Id80716db390ad5f5fb8a81498e502d13116dc1f7\n" }, { "commit": "2aece1ee09c13816542e6fb5c2fd5dc668982b5a", "tree": "bc155ec637ac013ac57d6d6fa180936291bdbd42", "parents": [ "cdef16080e29eb9155ddebf244af985e70c978b1" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 10:49:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 10:50:16 2026" }, "message": "Add internal NewJwtMlDsaSign single-key factory.\n\nPiperOrigin-RevId: 1017192060\nChange-Id: I1b0e0f8fcf6ef5870368ac431e743ccb58a5e4e9\n" }, { "commit": "cdef16080e29eb9155ddebf244af985e70c978b1", "tree": "e6af9b275f3e11d80c4bc80ce052c4ab1428256b", "parents": [ "b04b412f33e565647fcfa15cfb6f6c3e4e761d19" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 10:26:19 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 10:27:11 2026" }, "message": "Remove OpenSSL-specific code in the Tink C++ Cord AEADs.\n\nPiperOrigin-RevId: 1017179744\nChange-Id: Iff3101570ca0fd3dc1e7e980ec27228c1f489a67\n" }, { "commit": "b04b412f33e565647fcfa15cfb6f6c3e4e761d19", "tree": "04f85c4867c61ac2a543d27f31e43047e05f6f00", "parents": [ "3cfac2c41b9536453e770d4986211226cb0900cc" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 10:06:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 10:12:10 2026" }, "message": "Migrate AEAD proto serialization from SerializationRegistry::Builder to SerializationRegistry\n\nReplace `Register*ProtoSerializationWithRegistryBuilder` with `Register*ProtoSerializationWithRegistry(SerializationRegistry\u0026)` across `tink/aead/internal/` and update `GlobalSerializationRegistry`.\n\nPiperOrigin-RevId: 1017169810\nChange-Id: I4d022d406576ce1ea513c002b1d2093114a44da0\n" }, { "commit": "3cfac2c41b9536453e770d4986211226cb0900cc", "tree": "50fe529106847fcfbcd0b2644c564e2a7272af5f", "parents": [ "e40ed6a2c44eb63d143732bd9fc4af30ca1c75c8" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 09:54:01 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 09:54:55 2026" }, "message": "Use ECDSA keys in the Tink C++ KeysetHandleAccess test.\n\nPiperOrigin-RevId: 1017162398\nChange-Id: Ie05fa011d4b303a128c391d3ccfb4356dad1e62e\n" }, { "commit": "e40ed6a2c44eb63d143732bd9fc4af30ca1c75c8", "tree": "b0c9b0ce4a593bb5f8570b6d1539c5298d399d02", "parents": [ "be7e072d88ee7b6282700b48843bb4cb6efb2bbd" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 09:16:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 09:17:30 2026" }, "message": "Add subtle::CreateJwtRsaSsaPssPublicKeySign and subtle::CreateJwtRsaSsaPssPublicKeyVerify single-key factories.\n\nPiperOrigin-RevId: 1017141663\nChange-Id: Iccb7b47f4e5eec75eac78f4845ea9e595895a6c9\n" }, { "commit": "be7e072d88ee7b6282700b48843bb4cb6efb2bbd", "tree": "59898eda8673cb4ab2bd9edb7d3abdbb39c7f95a", "parents": [ "85a67dac117666552a534ca4f22d387c8307bf2a" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Mon Nov 09 08:45:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 09 08:46:25 2026" }, "message": "Add subtle::CreateEciesHybridDecrypt single-key primitive factory.\n\nAdds single-key primitive factory `CreateEciesHybridDecrypt(const EciesPrivateKey\u0026)` in `third_party/tink/cc/hybrid/subtle/`.\n\nPiperOrigin-RevId: 1017125399\nChange-Id: I93691caa5588cf9c65a69b862aa739e240199875\n" }, { "commit": "85a67dac117666552a534ca4f22d387c8307bf2a", "tree": "89e9c6dd8671b5487a2ff797d44e89ea0a73955d", "parents": [ "3690e60e1525e157de9d971c8eb0f08bd106f5d6" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Nov 06 20:26:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 20:27:15 2026" }, "message": "Add single-key subtle::CreateCompositeMlDsaPublicKeyVerify API.\n\nPiperOrigin-RevId: 1015763778\nChange-Id: Ia70e67071d2718643e750e83b4c5c577cc9dfca3\n" }, { "commit": "3690e60e1525e157de9d971c8eb0f08bd106f5d6", "tree": "2bd77e12eeb5d31b698583d8188749bbaf6704a6", "parents": [ "9ed2e6e2186d91ce7c74e564b59ceccb43a29773" ], "author": { "name": "Rudolf Polzer", "email": "rpolzer@google.com", "time": "Fri Nov 06 16:16:27 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 16:17:28 2026" }, "message": "Support instantiating AesGcmBoringSsl from an AesGcmKey.\n\n`subtle::AesGcmBoringSsl` previously only accepted a raw `SecretData` key buffer, which produces raw ciphertexts without a Tink output prefix. Callers holding a `tink::AesGcmKey` could not directly instantiate `AesGcmBoringSsl` while honoring the key\u0027s `Variant` and output prefix.\n\nAdd an `AesGcmBoringSsl::New(const AesGcmKey\u0026)` overload that delegates to `internal::ZeroCopyAesGcmBoringSsl::New(const AesGcmKey\u0026)` wrapped in `internal::AeadFromZeroCopy`, ensuring the key\u0027s parameter constraints and output prefix are respected, and deprecate `AesGcmBoringSsl::New(const SecretData\u0026)`.\n\nPiperOrigin-RevId: 1015566307\nChange-Id: Ide4846385a647494d9a868f51fe1510673615129\n" }, { "commit": "9ed2e6e2186d91ce7c74e564b59ceccb43a29773", "tree": "e4f0a3bbe6617e01c9fcb99d157c34034007930e", "parents": [ "29a46b4c93acf62064c1d92b16bb0c05b180e69e" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Nov 06 15:06:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 15:07:56 2026" }, "message": "Add internal NewJwtRsaSsaPssVerify single-key factory.\n\nProvides jwt_internal::NewJwtRsaSsaPssVerify(const JwtRsaSsaPssPublicKey\u0026) to create a single-key JwtPublicKeyVerify primitive from a JwtRsaSsaPssPublicKey object.\n\nPiperOrigin-RevId: 1015526396\nChange-Id: Ic4f6e3d98eab90c687641d3abf59830f59b07c04\n" }, { "commit": "29a46b4c93acf62064c1d92b16bb0c05b180e69e", "tree": "a87e4654c5db28e94c4f3ad275cdfaef5b0337b3", "parents": [ "c59b16404716bc795739f9cff5852fa9a0817222" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Nov 06 15:04:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 15:05:35 2026" }, "message": "Migrate MutableSerializationRegistry from SerializationRegistry::Builder to SerializationRegistry\n\nUpdate `MutableSerializationRegistry` to call `Register*` directly on its underlying `SerializationRegistry` instead of copying and rebuilding via `SerializationRegistry::Builder` on each registration.\n\nPiperOrigin-RevId: 1015525415\nChange-Id: I514bdeb37d0f5c571d6292743695dab797441e7a\n" }, { "commit": "c59b16404716bc795739f9cff5852fa9a0817222", "tree": "388666525fb47b651cf916bfd6db3962b42e041c", "parents": [ "0de79fd18c5914b522bd95e87f396add14ddc4d8" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Nov 06 14:34:38 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 14:35:28 2026" }, "message": "Add internal NewJwtRsaSsaPssSign single-key factory.\n\nProvides jwt_internal::NewJwtRsaSsaPssSign(const JwtRsaSsaPssPrivateKey\u0026) to create a single-key JwtPublicKeySign primitive from a JwtRsaSsaPssPrivateKey object.\n\nPiperOrigin-RevId: 1015509583\nChange-Id: I2f222dd6d5b15fd9365e076de7b04a6abcfcb73c\n" }, { "commit": "0de79fd18c5914b522bd95e87f396add14ddc4d8", "tree": "152c68817dc01957a9d7c3d2509c011e59b1f378", "parents": [ "b6d6c3015a05669bb457b60f1e25ef28c2666f56" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Nov 06 14:14:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 14:15:57 2026" }, "message": "Make SerializationRegistry mutable.\n\n- Add `RegisterParametersParser`, `RegisterParametersSerializer`, `RegisterKeyParser`, and `RegisterKeySerializer` methods to `SerializationRegistry` using `try_emplace`.\n- Delegate `SerializationRegistry::Builder` to an underlying `SerializationRegistry` member and add a move constructor `Builder(SerializationRegistry\u0026\u0026)`.\n\nPiperOrigin-RevId: 1015499710\nChange-Id: I899801006cc69f18cbb0b2d0913b96ec81dbd767\n" }, { "commit": "b6d6c3015a05669bb457b60f1e25ef28c2666f56", "tree": "d995d4e410a7294d015dedf5c5379398d3ac1e14", "parents": [ "96c1584a02593a2850766baa1e5fe71652ebf43b" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Nov 06 13:20:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 13:21:49 2026" }, "message": "Add `internal::NewCompositeMlDsaVerify` in `signature/internal`.\n\nPiperOrigin-RevId: 1015472058\nChange-Id: I65b133068f7077222b658eb2b335727b9c186166\n" }, { "commit": "96c1584a02593a2850766baa1e5fe71652ebf43b", "tree": "87c3036a91d32ca9bb6fd33e886ebcfe75513548", "parents": [ "1b0ad80b2ea6869289b23f9b7337579d3463a326" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Nov 06 11:01:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 11:02:32 2026" }, "message": "Add subtle::CreateJwtRsaSsaPkcs1PublicKeySign and subtle::CreateJwtRsaSsaPkcs1PublicKeyVerify single-key factories.\n\nProvides subtle::CreateJwtRsaSsaPkcs1PublicKeySign(const JwtRsaSsaPkcs1PrivateKey\u0026) and subtle::CreateJwtRsaSsaPkcs1PublicKeyVerify(const JwtRsaSsaPkcs1PublicKey\u0026) in third_party/tink/cc/jwt/subtle/ to create JwtPublicKeySign and JwtPublicKeyVerify primitives from single key objects.\n\nPiperOrigin-RevId: 1015402755\nChange-Id: Ia3112bf6a5fa94d271dc8ecca676d5133fb6e213\n" }, { "commit": "1b0ad80b2ea6869289b23f9b7337579d3463a326", "tree": "9bf8bb5ebd84727e2a096cec9ffb9bff97822ae6", "parents": [ "d87e484342dc67e9f43363368cdf1da728d06a49" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Nov 06 10:37:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 10:38:32 2026" }, "message": "Add `internal::NewCompositeMlDsaSign` in `signature/internal`.\n\nPiperOrigin-RevId: 1015390781\nChange-Id: Id93a0773856d5af225b6e246d320d727314eaa58\n" }, { "commit": "d87e484342dc67e9f43363368cdf1da728d06a49", "tree": "b3c6fe3f171d88455eadde6d1535b9a7125cc55b", "parents": [ "993a9fbb5212ecad6e4504f5ba5efce77d51d471" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Nov 06 09:45:54 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 09:46:46 2026" }, "message": "Add internal NewEciesAeadHkdfHybridEncrypt key-object factory.\n\nPiperOrigin-RevId: 1015366765\nChange-Id: I9873355b16be5d606f58291dd8efdefceb1aede6\n" }, { "commit": "993a9fbb5212ecad6e4504f5ba5efce77d51d471", "tree": "ee9ea6c493eb7f635bad7fcf65b0af5ee9808b2b", "parents": [ "d1a1ad6415211fac202c06545774860b64d3b4b6" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Fri Nov 06 08:40:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 08:41:42 2026" }, "message": "Add internal NewJwtRsaSsaPkcs1Verify single-key factory.\n\nProvides jwt_internal::NewJwtRsaSsaPkcs1Verify(const JwtRsaSsaPkcs1PublicKey\u0026) to create a single-key JwtPublicKeyVerify primitive from a JwtRsaSsaPkcs1PublicKey object.\n\nPiperOrigin-RevId: 1015335637\nChange-Id: Ibf2c2451f1bf42f2008adeadd93ef72438455be0\n" }, { "commit": "d1a1ad6415211fac202c06545774860b64d3b4b6", "tree": "1a08e516d0a955ba0057a10e3edfb5819ad41e80", "parents": [ "c573e3b66aff5cae3c0abd1ca322cc30eace57e0" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Nov 05 17:08:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:43:38 2026" }, "message": "Add `subtle::CreateXAesGcmCordAead` single-key primitive factory.\n\nPiperOrigin-RevId: 1014750656\nChange-Id: I18a54d32908c1de469660c4b386f65bf13b5cbc3\n" }, { "commit": "c573e3b66aff5cae3c0abd1ca322cc30eace57e0", "tree": "f03ab0acb3fed01532e551c7a539e06aa14acda2", "parents": [ "58894d08e90c86578473f807edf5d8dd742cabfe" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Thu Nov 05 15:27:11 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:43:19 2026" }, "message": "Remove unused includes from .cc files in tink/aead/internal\n\nPiperOrigin-RevId: 1014681357\nChange-Id: I7fe21a0c8f1503fee65d0c64ec972192f22dcf04\n" }, { "commit": "58894d08e90c86578473f807edf5d8dd742cabfe", "tree": "a24cb514777119638adfc16356e951ffc2c2ec68", "parents": [ "9bb6b8b1f6e0e3651f59f32060773d50253f491b" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Nov 05 15:26:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:42:58 2026" }, "message": "Add `subtle::CreateHmacChunkedMac` single-key primitive factory.\n\nPiperOrigin-RevId: 1014681185\nChange-Id: I644ddcfe57e972384ffec4247bda96fdeeb93db0\n" }, { "commit": "9bb6b8b1f6e0e3651f59f32060773d50253f491b", "tree": "26062c05d47879efaab838dfad97ee54aef765d7", "parents": [ "6bd6dee8c166499d60dd9641cb56250eb6b4e2f2" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Nov 05 15:19:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:42:37 2026" }, "message": "Add ECIES-AEAD-HKDF test vectors for SHA1, SHA224, legacy uncompressed point format, XChaCha20-Poly1305 DEM, and non-empty salt.\n\nPiperOrigin-RevId: 1014677413\nChange-Id: I28a8fafa810fdaf38068dad41b60397340e0486e\n" }, { "commit": "6bd6dee8c166499d60dd9641cb56250eb6b4e2f2", "tree": "4d29a3c2895c83db8cd53052145bcc21fb57b98d", "parents": [ "105015ce8cc2d168882ae43bc697be152096b055" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Nov 05 14:12:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:42:11 2026" }, "message": "Add `NewChunkedHmac(const HmacKey\u0026)` internal implementation.\n\nPiperOrigin-RevId: 1014642229\nChange-Id: Ibf0fe02f2df4bc1a4cb5ed02cc745bbac191bf97\n" }, { "commit": "105015ce8cc2d168882ae43bc697be152096b055", "tree": "c134989dbf82dcd121bf4d33c03ea8fb159cc639", "parents": [ "b31fccb3494f0b9e4ea2fed2d2e285505b524d3e" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Nov 05 13:40:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:41:48 2026" }, "message": "Add internal NewJwtRsaSsaPkcs1Sign single-key factory.\n\nProvides jwt_internal::NewJwtRsaSsaPkcs1Sign(const JwtRsaSsaPkcs1PrivateKey\u0026) to create a single-key JwtPublicKeySign primitive from a JwtRsaSsaPkcs1PrivateKey object.\n\nPiperOrigin-RevId: 1014626914\nChange-Id: I0b4688b39047043972832852a1f1c0199e79c4eb\n" }, { "commit": "b31fccb3494f0b9e4ea2fed2d2e285505b524d3e", "tree": "e2585cd3d588484dfba934d44dda1b6f77724187", "parents": [ "09256721895b81495e71938862cd97778c5dcbb1" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Nov 05 13:20:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:41:22 2026" }, "message": "Handle `key.GetOutputPrefix()` in `NewCordXAesGcmBoringSsl`.\n\nPiperOrigin-RevId: 1014618058\nChange-Id: I81e044318d9ef2543ce9d8f13a6ac744f048931c\n" }, { "commit": "09256721895b81495e71938862cd97778c5dcbb1", "tree": "1da1a36fd5e0684cd09c263b7f11c3e3a83f9be3", "parents": [ "f856df602b8511acdc2378b6fa12479c306667c1" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Nov 05 13:02:57 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:41:01 2026" }, "message": "Add `subtle::CreateAesCmacChunkedMac` single-key primitive factory.\n\nPiperOrigin-RevId: 1014609350\nChange-Id: I8286854d7ebabebf34113b6b41882374d3236ecc\n" }, { "commit": "f856df602b8511acdc2378b6fa12479c306667c1", "tree": "d2a8faa6987186d11e7d302d4c247af8ce99f87b", "parents": [ "b8a592b36aa77b2cd3ce99c5023abd292df03f05" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Nov 05 12:29:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:40:36 2026" }, "message": "Add JwtRsaSsaPkcs1TestVector and JwtRsaSsaPssTestVector in jwt_rsa_ssa_test_vectors.\n\nPiperOrigin-RevId: 1014592456\nChange-Id: I8a97c03223f7b9f8f0a219471bf182c65313a587\n" }, { "commit": "b8a592b36aa77b2cd3ce99c5023abd292df03f05", "tree": "e37d8d8eccc66d8ab1ae787f0a00793cc6668520", "parents": [ "f02451e74e4201f25e852d5eeb2df760144fb1a8" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Nov 05 11:51:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:40:15 2026" }, "message": "Remove unreachable key and tag size checks in NewChunkedCmac(const AesCmacKey\u0026).\n\nAesCmacParameters::Create already validates that the key size is 16 or 32 bytes and that the cryptographic tag size is between 10 and 16 bytes.\nPiperOrigin-RevId: 1014573960\nChange-Id: Iff7d397c1752260d6267519a6114499bbb714342\n" }, { "commit": "f02451e74e4201f25e852d5eeb2df760144fb1a8", "tree": "df68d8a0786339a24eba5079586e4dda8b58c6cf", "parents": [ "d58118fc7f6ebc981fe774ceba40f83ae88efdb0" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Nov 05 09:22:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:39:49 2026" }, "message": "Add `NewChunkedCmac(const AesCmacKey\u0026)` internal implementation.\n\nPiperOrigin-RevId: 1014494314\nChange-Id: I05aedff61a181b30819ec520933927b39dfd5d3c\n" }, { "commit": "d58118fc7f6ebc981fe774ceba40f83ae88efdb0", "tree": "27cdc77591a2aac08f112e28a9230f8955d6edda", "parents": [ "78ef221a0438b21401cce9470375aade64f8b827" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Thu Nov 05 08:47:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:39:28 2026" }, "message": "Add subtle::CreateJwtEcdsaPublicKeyVerify single-key primitive factory.\n\nAdds `subtle::CreateJwtEcdsaPublicKeyVerify(const JwtEcdsaPublicKey\u0026)` in `third_party/tink/cc/jwt/subtle/`.\n\nPiperOrigin-RevId: 1014475398\nChange-Id: I1037075dbfffa1eddb04df2e4d13df2854b3fdca\n" }, { "commit": "78ef221a0438b21401cce9470375aade64f8b827", "tree": "a55ed3615460b496ea2c99550cc91fb8ab7aa80c", "parents": [ "5dce83549f5fcb142576708d17409b127a1be126" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 21:23:33 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 06 07:38:59 2026" }, "message": "Forward `subtle::AesCmacBoringSsl::New` to `subtle::CreateAesCmacMac`.\n\nPiperOrigin-RevId: 1014089486\nChange-Id: I943d7f95bb6d85ca3c8fefffcbf1e9847aaf8cff\n" }, { "commit": "5dce83549f5fcb142576708d17409b127a1be126", "tree": "e425fed85ee435f13b1aad4a792c1a2ff532658c", "parents": [ "ea6368b30f8847482d4b522a2bbbec5243565ce0" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 17:13:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 17:16:12 2026" }, "message": "Add `subtle::CreateAesCmacMac` single-key primitive factory.\n\nPiperOrigin-RevId: 1013906819\nChange-Id: Iac023d56e2c438b873240b5fc9774555c96b5eee\n" }, { "commit": "ea6368b30f8847482d4b522a2bbbec5243565ce0", "tree": "7d514eab802c4df899d2021028e634e6a32a04c9", "parents": [ "9538dff188ab5f31cb986181114cc2bc8443a867" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 17:13:27 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 17:14:30 2026" }, "message": "Add subtle::CreateJwtEcdsaPublicKeySign single-key primitive factory.\n\nAdds `subtle::CreateJwtEcdsaPublicKeySign(const JwtEcdsaPrivateKey\u0026)` in `third_party/tink/cc/jwt/subtle/`.\n\nPiperOrigin-RevId: 1013906483\nChange-Id: I6d85761d8d2207d477bb313d7069dc9fd811e317\n" }, { "commit": "9538dff188ab5f31cb986181114cc2bc8443a867", "tree": "99f6144ac16a9586a878c81b831e69c717d99fbf", "parents": [ "958c07263ab1e56e63992447515dbf61086d2553" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 17:11:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 17:12:43 2026" }, "message": "Add internal NewEciesAeadHkdfHybridDecrypt key-object factory.\n\nAdds `NewEciesAeadHkdfHybridDecrypt(const EciesPrivateKey\u0026)` in `third_party/tink/cc/hybrid/internal/`.\n\nPiperOrigin-RevId: 1013905375\nChange-Id: Id71ea8bd231f7f46cdcbe418ff9314bf78df628d\n" }, { "commit": "958c07263ab1e56e63992447515dbf61086d2553", "tree": "d270e471d815d4b8a3b39451d31701038354eb08", "parents": [ "133fb6430500b5a7f078aa40078056271c00c63b" ], "author": { "name": "Charles Lee", "email": "ckl@google.com", "time": "Wed Nov 04 17:00:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 17:01:42 2026" }, "message": "Prep for updated Wycheproof ML-DSA test vectors.\n\nDelay test group initialization until a test case which isn\u0027t skipped is encountered.\n\nAdd HasAnyFlag Wycheproof utility function.\n\nPiperOrigin-RevId: 1013896586\nChange-Id: I98fca84d5d0ce2b5cb4121d979f80a55b832765e\n" }, { "commit": "133fb6430500b5a7f078aa40078056271c00c63b", "tree": "944b19bfc17f21a0b3272c4ecefc2f8d4de9e51e", "parents": [ "91dfc517b23167ec4b44a152534009a44aeca3e1" ], "author": { "name": "Charles Lee", "email": "ckl@google.com", "time": "Wed Nov 04 16:38:07 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 16:39:06 2026" }, "message": "Move HasFlag() to wycheproof_util.h.\n\nPiperOrigin-RevId: 1013880602\nChange-Id: If0cd44b10f097021b78d810bc8b8145fe1512466\n" }, { "commit": "91dfc517b23167ec4b44a152534009a44aeca3e1", "tree": "86ac871f47babea1c03b806f70da1523806907d3", "parents": [ "0d076f2251ceb9f19781c7814179cd234f16571d" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 13:04:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 13:06:05 2026" }, "message": "Use ML-DSA-44 test vectors in GenerateMlDsaPrivateKeyForTestOrDie.\n\nPiperOrigin-RevId: 1013760737\nChange-Id: I074ad95868cc3336365b306c7fd0a6618dfe5a3e\n" }, { "commit": "0d076f2251ceb9f19781c7814179cd234f16571d", "tree": "205ea7364d47f2976b092891adff5c8a785b2493", "parents": [ "9b360bd7be3cbda93b7bcc6369c2aa06d9b4b5ab" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 13:03:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 13:04:59 2026" }, "message": "Add internal NewJwtEcdsaVerify key-object factory.\n\nPiperOrigin-RevId: 1013760011\nChange-Id: Ib636a13a628ee3e41beab39f5104ecc59fb6a521\n" }, { "commit": "9b360bd7be3cbda93b7bcc6369c2aa06d9b4b5ab", "tree": "840580faa9b02814c06c8d4114337d1e2e91dd14", "parents": [ "d0cd9057ed69ef36766cc606c3de29c905d0c57b" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 13:02:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 13:03:56 2026" }, "message": "Migrate `cord_x_aes_gcm_boringssl_test` to use `GetXAesGcmTestVector`.\n\nPiperOrigin-RevId: 1013759644\nChange-Id: I5ae2a6cbf416f78172357440929f864280d7a5e6\n" }, { "commit": "d0cd9057ed69ef36766cc606c3de29c905d0c57b", "tree": "0f2345002ff260a0418e30074e15bc2945809b64", "parents": [ "5d42da909b1dcbd78f3e95b64d8713644725e095" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 12:31:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 12:32:15 2026" }, "message": "Add ML-DSA-44 test vectors in composite_ml_dsa_test_vectors.\n\nPiperOrigin-RevId: 1013743600\nChange-Id: I36d54cc34b59c2259395e8ace336ae4d1c5249c9\n" }, { "commit": "5d42da909b1dcbd78f3e95b64d8713644725e095", "tree": "f6c75280f66186264fe3c2bd2464a7f6b924e54e", "parents": [ "7485784f7db9d4f91b76b47d7d2dbbdc20a4d67d" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 11:54:18 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 11:55:21 2026" }, "message": "Add `NewAesCmacBoringSsl` internal implementation.\n\nPiperOrigin-RevId: 1013725455\nChange-Id: I77eae50b5c58ba24bd6cdd399343f95a7ad66def\n" }, { "commit": "7485784f7db9d4f91b76b47d7d2dbbdc20a4d67d", "tree": "299ed09500a57ccb5c280dcc3bd7598230013538", "parents": [ "f684931b9fa79eca4a19d6daddab6d72c233b2f2" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 11:37:19 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 11:38:21 2026" }, "message": "Remove the `SubtleUtilBoringSSL::EcKey` overloads of `subtle::EcdsaSignBoringSsl::New` and `subtle::EcdsaVerifyBoringSsl::New`. Use the `EcdsaPrivateKey` and `EcdsaPublicKey` overloads instead.\n\nPiperOrigin-RevId: 1013717723\nChange-Id: Ib08968b4dc674302e26d7715e5b624a4c4ce7114\n" }, { "commit": "f684931b9fa79eca4a19d6daddab6d72c233b2f2", "tree": "d20e10f895ac65cc31a41ad9f0fa034087a07337", "parents": [ "099272df3afc9690ca01faa4eb2930f21b02c35b" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 10:39:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 10:40:29 2026" }, "message": "Add SignAndEncode(const RawJwt\u0026) to JwtPublicKeySignImpl.\n\nAllows callers such as `JwtEcdsaSignImpl` to delegate `SignAndEncode` directly to `JwtPublicKeySignImpl` without storing a redundant `kid_` member.\n\nPiperOrigin-RevId: 1013690782\nChange-Id: I2b767614bed8782162c5c9b293ac996ea3de6e88\n" }, { "commit": "099272df3afc9690ca01faa4eb2930f21b02c35b", "tree": "ca21290b4d0420a772f7667dc05073bc56422b51", "parents": [ "ce2c4c8dadc80c4d49fae9f75547f2bf72def85f" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Wed Nov 04 10:27:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 10:28:43 2026" }, "message": "Support multiple associated data inputs in `internal::NewAesSivBoringSsl`.\n\nUpdate `crypto::tink::internal::NewAesSivBoringSsl` to return `std::unique_ptr\u003csubtle::DeterministicAeads\u003e` and support up to 126 associated data inputs in S2V per RFC 5297 Section 7.\n\nPiperOrigin-RevId: 1013685320\nChange-Id: I1537990966d653d2234505085cf1bb9aa813c1d3\n" }, { "commit": "ce2c4c8dadc80c4d49fae9f75547f2bf72def85f", "tree": "2b1742252029845663fd6e2cc4a1612a0ec32321", "parents": [ "bb3fb425ea33cb594f15aa686b5870fffebe1244" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Wed Nov 04 10:08:21 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 10:09:10 2026" }, "message": "Add missing includes in tink/cc/aead/.\n\nPiperOrigin-RevId: 1013675956\nChange-Id: I26cc5b3961fb25c5a937018c88a14641517a8b4f\n" }, { "commit": "bb3fb425ea33cb594f15aa686b5870fffebe1244", "tree": "eadedb2c7c3b495015ee44a2cd2c3fb92fd36c75", "parents": [ "b204e6c58ed5143bf12339dbaff1d0ce119e2286" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 10:02:13 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 10:03:00 2026" }, "message": "Add internal NewJwtEcdsaSign key-object factory.\n\nPiperOrigin-RevId: 1013672543\nChange-Id: I25e29597de806304bd57a04f79dfe96b11560389\n" }, { "commit": "b204e6c58ed5143bf12339dbaff1d0ce119e2286", "tree": "6b3d5b6a66d479996276354d95df157f4dfdf229", "parents": [ "e79aa66437694d16de11bb32921c1f52a42c7ed3" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 09:53:12 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 09:54:03 2026" }, "message": "Add kTink test vectors in composite_ml_dsa_test_vectors.\n\nPiperOrigin-RevId: 1013667996\nChange-Id: Ib1bc9353fd08b5ed162d89b1da74429dc7eef450\n" }, { "commit": "e79aa66437694d16de11bb32921c1f52a42c7ed3", "tree": "51da1cb3b6fa254ecfdee4ff76edf29afb114e12", "parents": [ "de3c407fd97c43a5c1748eaff98a94bae2b81236" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Wed Nov 04 09:14:02 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 09:15:04 2026" }, "message": "Remove the `internal::SslUniquePtr\u003cEC_KEY\u003e` overload of `subtle::EcdsaVerifyBoringSsl::New`. Use `EcdsaVerifyBoringSsl::New(const EcdsaPublicKey\u0026)` instead.\n\nPiperOrigin-RevId: 1013647628\nChange-Id: If4770409fc66072f22c891eb5b04162bc1648ff5\n" }, { "commit": "de3c407fd97c43a5c1748eaff98a94bae2b81236", "tree": "102b2edad9e8a503a958e4d5544295f57f71a869", "parents": [ "15c9ed39fbf1ceb33a3cb579286f4bd2344ac593" ], "author": { "name": "Charles Lee", "email": "ckl@google.com", "time": "Wed Nov 04 02:37:43 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 02:38:24 2026" }, "message": "Use alternative Wycheproof test vector files.\n\nPiperOrigin-RevId: 1013453692\nChange-Id: Iecccffa8ea8b63fa34b88d1a3a56cc944d784c56\n" }, { "commit": "15c9ed39fbf1ceb33a3cb579286f4bd2344ac593", "tree": "25dfc67ceb5e7d21bed96b9320bcd591ea0f6c12", "parents": [ "3b66d3de2fc064e0c8293b070b41ab0815c37a26" ], "author": { "name": "Charles Lee", "email": "ckl@google.com", "time": "Wed Nov 04 02:01:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Nov 04 02:02:34 2026" }, "message": "Match against documented number of tests instead of a hardcoded value.\n\nPiperOrigin-RevId: 1013434425\nChange-Id: I45a76c4e846195a383fe502e5995fc619ede2a64\n" }, { "commit": "3b66d3de2fc064e0c8293b070b41ab0815c37a26", "tree": "1214533adf001c4abb3a17359968975e16a81084", "parents": [ "f4c71b8d25ec876f76e23a60865f1e4aadea3f77" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 03 16:24:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 16:25:11 2026" }, "message": "Add subtle::CreateAesGcmHkdfStreamingAead single-key primitive factory.\n\nPiperOrigin-RevId: 1013031651\nChange-Id: I213801fd01013e438e682fab6d8e6b19f444e16d\n" }, { "commit": "f4c71b8d25ec876f76e23a60865f1e4aadea3f77", "tree": "deb2937a4ff81fc041f14c5a9f24907deb432416", "parents": [ "d6704cc88388c07df91cbb4da5ce2f252716d0b4" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Tue Nov 03 16:10:10 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 16:10:49 2026" }, "message": "Disallow SLH-DSA-SHAKE-256f in Tink C++ FIPS mode.\n\nBoringCrypto only FIPS-approves the SLH-DSA-SHA2-128s parameter set; all SLH-DSA-SHAKE-256f functions in BoringCrypto skip self-tests and return not_approved. Update NewSlhDsaSignBoringSsl, NewSlhDsaVerifyBoringSsl, and CreateSlhDsaKey to reject parameter sets other than SLH-DSA-SHA2-128s when FIPS mode is enabled.\n\nPiperOrigin-RevId: 1013022680\nChange-Id: I3349d9756e3508efb94cd3cb170a6e2c51d9a2f6\n" }, { "commit": "d6704cc88388c07df91cbb4da5ce2f252716d0b4", "tree": "d1885b4651dcaf5d0fa31f2f4fcb0341736d65e6", "parents": [ "88633e85d4dbff75d299593db3d34ec25132c38e" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 03 16:01:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 16:02:29 2026" }, "message": "Add single-key subtle::CreateMlDsaPrehash and subtle::CreateMlDsaSignPrehash APIs.\n\nPiperOrigin-RevId: 1013016379\nChange-Id: Ia1a9102004dc499b0ff186b9b065f82d655f33e3\n" }, { "commit": "88633e85d4dbff75d299593db3d34ec25132c38e", "tree": "0e72f2b529e8fd159f397c33ad34c7800decb11a", "parents": [ "8327ac26079afbbd5bdfc838bc5ce3af58568ab1" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 03 15:51:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 15:51:46 2026" }, "message": "Add subtle::CreateHmacPrf single-key primitive factory.\n\nPiperOrigin-RevId: 1013009691\nChange-Id: Id694e5e93824cf987c06d39f80b949612bd3c482\n" }, { "commit": "8327ac26079afbbd5bdfc838bc5ce3af58568ab1", "tree": "e98c742115d3189c7bc1ba5afa65da230122b013", "parents": [ "edfb1f52d1e0a1ed4b3d05e7ae3bf162f172ae65" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 03 15:03:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 15:04:24 2026" }, "message": "Add optional prehash field to SignatureTestVector and populate ML-DSA test vectors with Wycheproof prehash values.\n\nPiperOrigin-RevId: 1012982040\nChange-Id: I79e4d574a1beac9b970ba54596ae39418c43bf66\n" }, { "commit": "edfb1f52d1e0a1ed4b3d05e7ae3bf162f172ae65", "tree": "c5bbc82e6ede68ab60b64907809c9cadbd5fe6c4", "parents": [ "6b24b03268d4fa31dac0848e750c57bc4a2493d2" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 03 13:36:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 13:36:57 2026" }, "message": "Forward `subtle::HmacBoringSsl::New` to `internal::NewHmacBoringSsl`.\n\nPiperOrigin-RevId: 1012936227\nChange-Id: I8186258d08c7d98175edef11dbcc12d5bdd33863\n" }, { "commit": "6b24b03268d4fa31dac0848e750c57bc4a2493d2", "tree": "904db25714523c60c72b674c4f23679433cc5a8a", "parents": [ "43e107eeadca35e934a03314e278d040038c72cf" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Tue Nov 03 13:17:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 13:18:00 2026" }, "message": "Pass `absl::string_view` to `AesSivBoringSslImpl::S2v`.\n\nRefactor `AesSivBoringSslImpl::S2v` to accept `absl::string_view` instead of `absl::Span\u003cconst uint8_t\u003e`, simplifying the call sites in `EncryptDeterministically` and `DecryptDeterministically`.\n\nThis makes an upcoming CL easier.\n\nPiperOrigin-RevId: 1012927460\nChange-Id: I2f6179d04d9de3b8f7125232951026b0166f36f2\n" }, { "commit": "43e107eeadca35e934a03314e278d040038c72cf", "tree": "a401f108887e4475ee965e5c27cb933b81117307", "parents": [ "9122cf8db8e0f6b391d9eaeed68512c9197b63f3" ], "author": { "name": "Moreno Ambrosin", "email": "ambrosin@google.com", "time": "Tue Nov 03 13:01:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 13:02:23 2026" }, "message": "Replace most friends of KeysetHandle with an internal accessor class.\n\nThis is a ~noop, but improves the readability of the class.\n\n`KeysetHandleBuilder` and `LegacyGetKeysetInfo` remain friends, because they\nare part of the same target as `KeysetHandle`, which\n`internal::KeysetHandleAccess` depends on.\n\nLike other APIs in `crypto::tink::internal`, `KeysetHandleAccess` must not be\nused outside of Tink, and its BUILD target is only visible to Tink.\n\nPiperOrigin-RevId: 1012919711\nChange-Id: I51e14f4672099ff1e969e0718366e913fb152950\n" }, { "commit": "9122cf8db8e0f6b391d9eaeed68512c9197b63f3", "tree": "53df54d15b3775a7bce13e5dee8165206795a6b7", "parents": [ "e4978129fefdf6423a01b8ee9f83fa4094b3df0a" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Tue Nov 03 12:55:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 12:56:51 2026" }, "message": "Add Tink Script IDs to remaining CI, release, and tooling scripts.\n\nSome executed `.sh`, `.bat`, and `.ps1` scripts lacked a `Tink Script ID` banner, making it harder to locate the originating script from CI and release logs.\n\nAdd a unique 20-character hex `Tink Script ID` banner to all remaining executed shell, Windows batch, and PowerShell scripts, while leaving sourced-only helper scripts and test targets unchanged.\n\nPiperOrigin-RevId: 1012916879\nChange-Id: Ifbfa3c21ee5e2922e6226f4c697166150660a18b\n" }, { "commit": "e4978129fefdf6423a01b8ee9f83fa4094b3df0a", "tree": "eba14909c91574c655dfada9d2bd278b788cad1d", "parents": [ "d3a4b2ce55a38b846293632ee283d8a8e4d90525" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 03 12:33:38 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 12:36:09 2026" }, "message": "Add NewAesGcmHkdfStreaming internal factory taking AesGcmHkdfStreamingKey.\n\nPiperOrigin-RevId: 1012906174\nChange-Id: Ia42d73b2545d66f342e7b3d0fea7ef4fd15cbb3f\n" }, { "commit": "d3a4b2ce55a38b846293632ee283d8a8e4d90525", "tree": "4b289f06d3be7a6e1e593e4fea0c7bba5d6d9055", "parents": [ "2e319dc024f695b0106f2471c7efddc6589774cd" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Tue Nov 03 12:23:33 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 12:25:21 2026" }, "message": "Add remaining Java AES-GCM-HKDF streaming AEAD test vectors to C++.\n\nPreviously, `CreateAesGcmHkdfStreamingTestVectors` only included two SHA-1 test vectors with 16-byte derived keys and 64-byte ciphertext segments, leaving the SHA-256 and SHA-512 HKDF hash variants, 32-byte derived keys, and alternative segment sizes untested by consumers of the shared test vector suite.\n\nPort the remaining six test vectors from `AesGcmHkdfStreamingTestUtil.java` so that parameterized streaming AEAD tests cover all supported HKDF hash types, derived key sizes, and segment configurations.\n\nPiperOrigin-RevId: 1012901324\nChange-Id: I0f1d5ef13490c5bac8a4e9eb799e97eec8a8e207\n" }, { "commit": "2e319dc024f695b0106f2471c7efddc6589774cd", "tree": "91f05c3c3e2fc3022377c26cd256056435e26707", "parents": [ "91d9a10dcbe165c200febddbb6a20f8cfc303f19" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 03 12:23:12 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 12:24:22 2026" }, "message": "Add subtle::CreateJwtHmac single-key primitive factory.\n\nAdds `subtle::CreateJwtHmac(const JwtHmacKey\u0026)` in `third_party/tink/cc/jwt/subtle/create_jwt_hmac.{h,cc}` to construct a `JwtMac` primitive from a single `JwtHmacKey`.\n\nPiperOrigin-RevId: 1012901172\nChange-Id: I7223d1aa05a18472eff5676c50d9fef1bb084646\n" }, { "commit": "91d9a10dcbe165c200febddbb6a20f8cfc303f19", "tree": "a7fa8adfe618477a1773c13151da8f97f442846c", "parents": [ "4ecc29c433fdcc2bbc0a538d3309736c5a628421" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 03 12:21:18 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 12:22:21 2026" }, "message": "Add subtle::CreateHpkeHybridEncrypt single-key primitive factory.\n\nPiperOrigin-RevId: 1012900265\nChange-Id: I553492a2b840c262ddefa6c1d2be361bed7de6b0\n" }, { "commit": "4ecc29c433fdcc2bbc0a538d3309736c5a628421", "tree": "ec4ef55e2d2418755e504335e7346bcf6a8ade86", "parents": [ "e59dcf770b32f574a92b8709da2193a68009d90c" ], "author": { "name": "Thomas Holenstein", "email": "tholenst@google.com", "time": "Tue Nov 03 11:38:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 11:39:26 2026" }, "message": "Add `crypto::tink::subtle::DeterministicAeads` interface.\n\nIntroduce the `crypto::tink::subtle::DeterministicAeads` interface, which extends `crypto::tink::DeterministicAead` with `EncryptDeterministicallyWithAssociatedDatas` and `DecryptDeterministicallyWithAssociatedDatas`.\n\nPiperOrigin-RevId: 1012879351\nChange-Id: Ice94b9c890f272917264216563ed16dab7572226\n" }, { "commit": "e59dcf770b32f574a92b8709da2193a68009d90c", "tree": "969fa95379a6cc5491c661b630417b7690abc8ab", "parents": [ "271fb513f6e0da052d17f615b1069eb05ae83af9" ], "author": { "name": "Jérémy Prudhommeaux", "email": "jprudhommeaux@google.com", "time": "Tue Nov 03 10:35:56 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Nov 03 10:36:31 2026" }, "message": "Add single-key subtle::CreateSlhDsaPublicKeySign API.\n\nPiperOrigin-RevId: 1012848850\nChange-Id: Iffba9041a698b6aac94d7383918a2cf5cc264f7b\n" } ], "next": "271fb513f6e0da052d17f615b1069eb05ae83af9" }