Frank Denis ac7e895df0 tls.Client: reject empty TLS 1.3 inner plaintext and short records ...

After decryption, TLS 1.3 plaintext is trimmed of zero padding, then
the last byte is read as the content type.

But when the plaintext was entirely zero padding, we got a
"thread panic: integer overflow at msg.len - 1" error. That could be
triggered by any server to crash the client.

2026-04-20 12:07:51 +02:00

..

25519

Expose the elligator map for Curve25519

2026-02-23 13:04:58 +01:00

aes

std.crypto.aes: expose the inverse MixColumns operation

2025-11-29 19:25:22 +01:00

Certificate

crypto TLS bundle: make AddCertsFromDirPathError compile

2026-04-12 00:13:59 +02:00

codecs

Correct Element and Tag in crypto.codecs.asn1 (#31511)

2026-04-09 17:59:16 +02:00

pcurves

update API usage of std.crypto.random to io.random

2026-01-07 11:03:36 -08:00

tls

tls.Client: reject empty TLS 1.3 inner plaintext and short records

2026-04-20 12:07:51 +02:00

aegis.zig

std.Io: delete GenericWriter

2025-08-28 18:30:57 -07:00

aes_ccm.zig

std.crypto: add AES-CCM and CBC-MAC (#25526)

2025-10-14 12:00:44 +02:00

aes_gcm_siv.zig

Parallelize deriveKeys

2025-09-16 23:13:58 +02:00

aes_gcm.zig

Add documentation to std.crypto.aes_gcm.AesGcm.encrypt (#24427)

2025-07-13 07:33:08 +00:00

aes_ocb.zig

Fix #24999: copy left-overs before we XOR into c. (#25001)

2025-08-25 15:59:42 +00:00

aes_siv.zig

crypto: correct aes-siv s2v

2026-03-22 07:21:41 -07:00

aes.zig

zig build fmt

2026-03-12 17:44:03 -04:00

argon2.zig

std.crypto.argon2: disable flaky test kdf derived key length

2026-03-14 05:55:24 +01:00

ascon.zig

std.crypto.ascon: disable Ascon-AEAD128 test on RISC-V with V support

2025-09-20 19:05:32 +02:00

bcrypt.zig

Allow the salt to be passed as a parameter in bcrypt

2026-01-07 22:44:37 +01:00

benchmark.zig

Make benchmarking use std.Io.Clock.awake for timing (#31553)

2026-03-18 21:00:08 +01:00

blake2.zig

std.Io: delete GenericWriter

2025-08-28 18:30:57 -07:00

blake3.zig

std.Io: fix and improve Group API

2025-12-29 22:47:34 -08:00

cbc_mac.zig

std.crypto: add AES-CCM and CBC-MAC (#25526)

2025-10-14 12:00:44 +02:00

Certificate.zig

windows: trigger automatic fetching of root certificates

2026-03-20 19:23:48 +01:00

chacha20.zig

coerce vectors to arrays rather than inline for

2025-09-20 18:33:00 -07:00

cmac.zig

std: update std.builtin.Type fields to follow naming conventions

2024-08-28 08:39:59 +01:00

codecs.zig

fixed codecs.zig (#23706)

2025-04-29 22:07:30 +00:00

ecdsa.zig

update API usage of std.crypto.random to io.random

2026-01-07 11:03:36 -08:00

errors.zig

Add ML-DSA post-quantum signatures (#25862)

2025-11-10 14:11:30 +01:00

ff.zig

crypto.ff: allow seamless chaining regardless of representation (#30913)

2026-01-25 17:42:01 +01:00

ghash_polyval.zig

crypto: Allow arbitrary types for secureZeroes

2026-02-13 17:07:03 +01:00

hash_composition.zig

x86_64: implement enough to pass unicode tests

2023-10-23 22:42:18 -04:00

hkdf.zig

closes #21824 (#21832)

2024-10-28 14:54:02 +00:00

hmac.zig

Remove redundant test name prefixes now that test names are fully qualified

2024-02-26 15:18:31 -08:00

hybrid_kem.zig

update API usage of std.crypto.random to io.random

2026-01-07 11:03:36 -08:00

isap.zig

std.crypto: better names for everything in utils

2024-08-09 19:47:06 -07:00

kangarootwelve.zig

std.Io.Select: remove "outstanding" field

2026-02-20 16:42:37 -08:00

keccak_p.zig

crypto.keccak.State: add checks to prevent insecure transitions (#22020)

2024-11-20 11:16:09 +01:00

md5.zig

std.tar: update to new I/O API

2025-07-22 09:41:44 -07:00

ml_dsa.zig

update API usage of std.crypto.random to io.random

2026-01-07 11:03:36 -08:00

ml_kem.zig

update API usage of std.crypto.random to io.random

2026-01-07 11:03:36 -08:00

modes.zig

std.crypto: add AES-SIV and AES-GCM-SIV

2025-09-16 12:45:08 +02:00

pbkdf2.zig

lib: correct unnecessary uses of 'var'

2023-11-19 09:55:07 +00:00

phc_encoding.zig

all: replace all @Type usages

2025-11-22 22:42:38 +00:00

poly1305.zig

crypto: Allow arbitrary types for secureZeroes

2026-02-13 17:07:03 +01:00

salsa20.zig

update API usage of std.crypto.random to io.random

2026-01-07 11:03:36 -08:00

scrypt.zig

Add scrypt.createWithSalt

2026-01-07 23:14:37 +01:00

sha2.zig

crypto: add missing sha2 arm early clobber

2025-12-09 00:41:23 +04:00

sha3.zig

Add std.crypto.hash.sha3.{KT128,KT256} - RFC 9861. (#25593)

2025-11-26 10:08:09 +01:00

Sha1.zig

std.crypto: fix Sha1 namespace

2025-07-14 00:14:21 -07:00

siphash.zig

std.Io: delete GenericWriter

2025-08-28 18:30:57 -07:00

test.zig

update std lib and compiler sources to new for loop syntax

2023-02-18 19:17:21 -07:00

timing_safe.zig

update API usage of std.crypto.random to io.random

2026-01-07 11:03:36 -08:00

tls.zig

add tls.ExtensionType.quic_transport_parameters = 57

2026-01-05 11:26:17 +01:00