All pull requests

Pull requests

• clazel-crypto: verified CertificateVerify signatures (ECDSA P-256, RSA-PSS, Ed25519); stop offering rsa_pss_pss

  #21·atiernan opened Oct 26, 2026Member·5/5·

  ·

• test(clazel): accept 'cannot write' for a truncated hostile renderer

  #20·atiernan opened Oct 26, 2026Member·

  ·

• clazel-crypto: libcrux providers for TLS hashing, key schedule, records and X25519 (3.5f, part 1)

  #19·atiernan opened Oct 26, 2026Member·4/5·

  ·

• clazel-x509: vendor x509-limbo and run it through the decoders

  #18·atiernan opened Oct 26, 2026Member·

  ·

• clazel-x509: Mozilla root trust store generated from NSS certdata.txt

  #15·atiernan opened Oct 26, 2026Member·3/3·

  ·

• clazel-x509: X.509 decoders and name matching (3.5b, partial), tier 0

  #14·atiernan opened Oct 26, 2026Member·2/3·

  ·

• tls: bootstrap refuses a CCS inside a fragmented ServerHello

  #13·atiernan opened Oct 26, 2026Member·3/5·

  ·

• tls: make hello::bootstrap verify

  #12·atiernan opened Oct 26, 2026Member·2/5·

  ·

• clazel-pkcs1: RSASSA-PKCS1-v1_5 verification (3.5c), tier 0

  #11·atiernan opened Oct 26, 2026Member·

  ·

• clazel-der: DER decoder and encoder (3.5a), tier 0

  #10·atiernan opened Oct 26, 2026Member·1/3·

  ·

• tls: refuse a compatibility CCS inside a fragmented handshake message

  #8·atiernan opened Oct 26, 2026Member·1/5·

  ·

• clazel-kernel: the kernel steps the fetch transducer (3.7 join), work in progress

  #6·atiernan opened Oct 26, 2026Member·

  ·

• TLS 1.3 handshake and protected record epochs

  #1·atiernan opened Oct 25, 2026Member·

  ·