1. 01 Aug, 2014 3 commits
  2. 31 Jul, 2014 12 commits
  3. 30 Jul, 2014 11 commits
  4. 29 Jul, 2014 12 commits
  5. 28 Jul, 2014 2 commits
    • Adam Langley's avatar
      crypto/tls: check curve equation in ECDHE. · 30fbcc75
      Adam Langley authored
      This change causes a TLS client and server to verify that received
      elliptic curve points are on the expected curve. This isn't actually
      necessary in the Go TLS stack, but Watson Ladd has convinced me that
      it's worthwhile because it's pretty cheap and it removes the
      possibility that some change in the future (e.g. tls-unique) will
      depend on it without the author checking that precondition.
      
      LGTM=bradfitz
      R=bradfitz
      CC=golang-codereviews
      https://golang.org/cl/115290046
      30fbcc75
    • Adam Langley's avatar
      encoding/asn1: only omit optional elements matching default value. · 8332112d
      Adam Langley authored
      ASN.1 elements can be optional, and can have a default value.
      Traditionally, Go has omitted elements that are optional and that have
      the zero value. I believe that's a bug (see [1]).
      
      This change causes an optional element with a default value to only be
      omitted when it has that default value. The previous behaviour of
      omitting optional, zero elements with no default is retained because
      it's used quite a lot and will break things if changed.
      
      [1] https://groups.google.com/d/msg/Golang-nuts/9Ss6o9CW-Yo/KL_V7hFlyOAJ
      
      Fixes #7780.
      
      R=bradfitz
      
      LGTM=bradfitz
      R=golang-codereviews, bradfitz, rsc
      CC=golang-codereviews, r
      https://golang.org/cl/86960045
      8332112d