All pull requests

Pull requests

• Use a randomized curve shared-Z algorithm for variable point EC mul

  #6024·randombit opened Oct 9, 2026Owner·

  ·

• BSI-Policy: Classic McEliece Withdrawn

  #6022·FAlbertDev opened Oct 9, 2026Collaborator·

  ·
  2

  

• [DTLS 1.3] Refactor TLS::Cipher_State for TLS/DTLS polymorphism

  #6016·reneme opened Oct 7, 2026Collaborator·

  ·
  3

  

• Don't bother verifying the signatures on trust roots during validation

  #6008·randombit opened Oct 6, 2026Owner·

  ·
  6

• Consistently warn in the API docs regarding known side channel issues

  #6007·randombit opened Oct 6, 2026Owner·

  ·

• Add a statement regarding possible security issues in Classic McEliece

  #5993·randombit opened Oct 3, 2026Owner·

  ·
  2

• Add HPKE from RFC 9180

  #5989·randombit opened Oct 2, 2026Owner·

  ·

  · Botan 3.14
  8

• Fix some bugs and missing validations in the HTTP client

  #5980·randombit opened Sep 29, 2026Owner·

  ·
  7

• Add some additional module-level deprecations

  #5971·randombit opened Sep 27, 2026Owner·

  ·
  1

• In GMAC require a fresh nonce after each finalization

  #5970·stanleys12 opened Sep 27, 2026·

  ·
  1

• Add TLS credentials and session manager handles to the FFI

  #5963·moritzschmitt opened Sep 23, 2026Contributor·

  ·
  20

• Share constant computations for Whirlpool

  #5958·randombit opened Sep 21, 2026Owner·

  ·

• Add TLS::CryptoOperations

  #5936·randombit opened Sep 15, 2026Owner·

  ·
  7

• Fix ML-KEM private key encoding

  #5934·falko-strenzke opened Sep 14, 2026Collaborator·

  ·
  1

• Make XMSS/XMSS^MT generated OIDs and public key format RFC conforming

  #5933·falko-strenzke opened Sep 14, 2026Collaborator·

  ·
  3

• Pkcs12 keyloading check

  #5925·falko-strenzke opened Sep 7, 2026Collaborator·

  ·
  2

• Expose SAN/IAN otherName entries via the FFI GeneralName API

  #5903·moritzschmitt opened Sep 2, 2026Contributor·

  ·
  1

  10

• Add RFC 3779 extensions to FFI certificate builder

  #5853·arckoor opened Aug 17, 2026Collaborator·

  ·
  1

• In TLS enforce policy also during a client resumption

  bugchanges required
  #5837·randombit opened Aug 11, 2026Owner·

  ·

  · Botan 3.14
  3

• Ensure TLS roles are respected during session resumption

  bugchanges required
  #5797·randombit opened Aug 4, 2026Owner·

  ·

  · Botan 3.14
  11

• DTLS bug fixes and hardenings

  #5783·randombit opened Aug 2, 2026Owner·

  ·

  · Botan 3.14
  42

• Fix FIPS 186-5 Lucas parameter selection

  #5755·w3lld1 opened Jul 24, 2026·

  ·
  1

• Add certificate creation to FFI

  #5753·arckoor opened Jul 21, 2026Collaborator·

  ·
  4

• Refactor: Simplify base functionality of Hybrid KEMs

  #5715·reneme opened Jul 7, 2026Collaborator·

  ·
  16

  

• Add ML-KEM composite KEM

  #5686·falko-strenzke opened Jun 22, 2026Collaborator·

  ·
  69