microsoft/SymCrypt-OpenSSL holds a health index of 62 out of 100, placing it in the Moderate band. It scores highest on Sustainability & Governance (75/100) and lowest on Engineering Quality (42/100). It was last updated 7 days ago. 2 contributors account for most of its recent work.
62
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
62
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Excluded from scoring (no data or not applicable): dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Manageable file sizes — 2/122 source files over 60KB
Inputs used
primary_language
C
largest_source_bytes
84,800
source_files_sampled
122
oversized_source_files
2
Key facts
80GitHub stars
16contributors
21commits, last 12 months
7days since last push
24releases
2bus factor
3open issues
—package ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 15 ⇿
0Stars
15Forks
22Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 9Patch 12
Each point covers 5 days.
OpenSSF Scorecard 6.4 / 10
6.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-23 03:17 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 6597,
"has_wiki": true,
"homepage": null,
"languages": {
"C": 1288908,
"C++": 147286,
"CMake": 20700
},
"pushed_at": "2026-07-15T22:33:01Z",
"created_at": "2021-04-30T23:18:24Z",
"owner_type": "Organization",
"updated_at": "2026-07-11T15:49:50Z",
"description": "OpenSSL engine for use with SymCrypt cryptographic library",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "C",
"significant_languages": [
"C",
"C++"
]
},
"owner": {
"blog": "https://opensource.microsoft.com",
"name": "Microsoft",
"type": "Organization",
"login": "microsoft",
"company": null,
"location": "Redmond, WA",
"followers": 125651,
"avatar_url": "https://avatars.githubusercontent.com/u/6154722?v=4",
"created_at": "2013-12-10T19:06:48Z",
"is_verified": null,
"public_repos": 8217,
"account_age_days": 4607
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.11.0",
"kind": "minor",
"published_at": "2026-07-15T22:32:05Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2026-07-08T19:54:18Z"
},
{
"tag": "v1.9.6",
"kind": "patch",
"published_at": "2026-03-31T21:17:40Z"
},
{
"tag": "v1.9.5",
"kind": "patch",
"published_at": "2026-03-05T17:31:56Z"
},
{
"tag": "v1.9.4",
"kind": "patch",
"published_at": "2025-10-20T23:58:17Z"
},
{
"tag": "v1.9.3",
"kind": "patch",
"published_at": "2025-09-30T20:08:42Z"
},
{
"tag": "v1.9.2",
"kind": "patch",
"published_at": "2025-09-19T15:36:58Z"
},
{
"tag": "v1.9.1",
"kind": "patch",
"published_at": "2025-07-14T22:21:09Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2025-05-21T23:58:31Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2025-05-07T19:24:11Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2025-03-27T01:33:28Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2025-01-29T21:10:59Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2024-11-26T21:28:54Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2024-11-23T04:43:51Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2024-08-21T16:20:31Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2024-08-15T20:01:33Z"
},
{
"tag": "v1.4.3",
"kind": "patch",
"published_at": "2024-05-16T23:19:46Z"
},
{
"tag": "v1.4.2",
"kind": "patch",
"published_at": "2024-04-24T23:51:22Z"
},
{
"tag": "v1.4.1",
"kind": "patch",
"published_at": "2024-04-17T18:47:49Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2024-01-26T00:15:35Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2022-12-29T20:21:54Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2022-06-06T12:46:44Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2022-03-29T16:52:09Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2022-02-17T12:13:06Z"
}
],
"recent_commits": [
{
"oid": "d73b1e9ebf589f5c0098810e74e9556b2bef776a",
"body": "* ML-DSA stubs\n\n* Keymgmt function stubs\n\n* ML-DSA key management\n\n* ML-DSA signatures\n\n* ML-DSA tests\n\n* ML-DSA decoder\n\n* ML-DSA encoder\n\n* Fix compat with OpenSSL 3.3.5\n\n* Move ML-DSA test files\n\n* Cleanup. Use fallthrough comment instead of attribute\n\n* Add TLS SIGALG capability\n\n* Add missing m\n[…]\nam\n\n* PR comments\n\n* Additional fixes to encoder interface\n\n* PR comments\n\n* PR comments\n\n* Fix type for OSSL_PKEY_PARAM_MAX_SIZE\n\n* PR comments\n\n* PR comments\n\n* Cleanup\n\n* PR comments\n\n* PR comments",
"is_bot": false,
"headline": "Add Pure ML-DSA to the SymCrypt provider (#161)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-07-08T16:14:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "665878722481057cab6504fc47c1e2cb2a406eb7",
"body": "* Add composite functions\n\n* Add RSA sigalg interface\n\n* Add RSA sigalg implementations\n\n* Separate rsa sigalg functions into another file.\n\n* ECDSA composite signature implementation\n\n* Clean up RSA\n\n* Cleanup\n\n* Improve ECC error messaging and parameter validation\n\n* Harden RSA input validation and PR comments\n\n* Add sigalg tests\n\n* PR comments\n\n* Correct digest too short test\n\n* Reset ECDSA signature on init\n\n* PR comments",
"is_bot": false,
"headline": "Add composite signature interface for RSA and ECDSA signatures (#166)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-07-07T01:02:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43604f8996104cbe659a3dd66a6e388d985b8d37",
"body": "* digests: add missing NULL parameter checks\n\nMirror NULL-parameter checks performed by the OpenSSL default\nprovider in providers/implementations/digests/.\n\n- p_scossl_shake_set_ctx_params: check ctx and params for NULL\n- p_scossl_cshake_set_ctx_params: check ctx and params for NULL\n- p_scossl_cshak\n[…]\nuthored-by: Copilot <223556219+Copilot@users.noreply.github.com>\nCo-authored-by: Copilot <copilot@github.com>\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
"is_bot": false,
"headline": "Harden parameter checks in provider functions (#168)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-07-01T23:26:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3fab1d17d73d0b713b1665256473be998d4a68bc",
"body": "* Compare correct values in rsa match\n\n* Use correct bit size for DH P and Q in dup\n\n* Update RSA encrypt/decrypt input validation to match default implementation\n\n* Use correct bit lengths in copy group only case for DH\n\n* Add mac initialized flag\n\n* Compare to correct mac stize in aes\n\n* Fix RSA s\n[…]\nvate key import scratch space. Validate x25519 size\n\n* Fix skeymgmt compiler warning\n\n* cleanup\n\n* Use fallthrough comment instead of attribute\n\n---------\n\nCo-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "Provider bugfixes (main branch) (#169)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-06-26T18:55:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f5fa8eb1fa7ada0fd05f7bc2b85cf1741e85d492",
"body": "* Pass SYMCRYPT_FLAG_KEY_NO_FIPS for x25519 import\n\nRFC 7748 accepts any 32-byte string as a public key, including\nlow-order and on-twist points. These do not satisfy the FIPS subgroup\ncheck performed by SymCryptEckeySetValue. Since X25519 is not a FIPS\nalgorithm, pass SYMCRYPT_FLAG_KEY_NO_FIPS to s\n[…]\n Use correct variable for malloc\n\n* Add additional wycheproof test vectors\n\n---------\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>\nCo-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "Support low-order, on-twist, and non-canonical x25519 keys (#167)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-06-22T23:59:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "eea7cc4a79dcb17b43b20e12bc7ecebfc86f3515",
"body": "* Add AES and generic SKEY mgmt interfaces\n\n* Add AES SKEY integration\n\n* Add cmac skey support\n\n* Set minimum OpenSSL version and address copilot comments.\n\n* Clean up skey import signature\n\n* PR comments. Allow empty generic secrets",
"is_bot": false,
"headline": "Add generic and AES SKEY support (#163)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-04-13T17:26:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9acd1eb7a4c07960636fb527835c60cee351e45e",
"body": "* Only concatenate info from same set_params call\n\n* Export HKDF size parameter",
"is_bot": false,
"headline": "Clear HKDF info when set from params (#160)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-03-05T17:29:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "855de797e685395665b1c6cfa0f251dffb4dad37",
"body": "* Support new digest copy context function\n\n* Only compile new functions where supported",
"is_bot": false,
"headline": "Add digest context copy function (#158)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-03-04T20:17:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e453f08306e8ec7d0235d2754db1b317060d383b",
"body": "…SL versions (#159)\n\n* Additional fixes for block ciphers in TLS connections (#145)\n\n* Allow optional mac in TLS block decrypt\n\n* Fix issue found for TLSv1 connections\n\n* Bump minor version\n\n* Add comments describing etm behavior\n\n* Bugfixes for 1.9 (#150)\n\n* Add OSSL_SIGNATURE_PARAM_NONCE_TYPE to E\n[…]\nt\n\n* Fix error messages\n\n* Fix compilation\n\n* Add missing parameter on older versions\n\n* Fix errors in OpenSSL 3.0 builds\n\n* Use dummy OID on older versions for ml-kem composite\n\n* Use valid dummy OID",
"is_bot": false,
"headline": "Integrate changes from 1.9 branch and fix compilation for older OpenS…",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-03-04T20:17:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eca0d4ecd7192b05894ebdec09865ed1b2dfc976",
"body": "* Stub out ML-KEM interfaces\n\n* Split mlkem standalone key management\n\n* Standalone MLKEM\n\n* Hybrid key management\n\n* Re-add hybrid ML-KEM\n\n* Separate ML-KEM decoders\n\n* Separate MLKEM encoders\n\n* Cleanup\n\n* Add comment indicating hybrids are only for TLS\n\n* Cleanup and add explicit ikme rejection\n\n* Add mlkem evp_test\n\n* PR comments\n\n* Don't use boolean operators on SCOSSL_STATUS",
"is_bot": false,
"headline": "Update ML-KEM for compatibility with OpenSSL 3.5 implementation (#153)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-01-30T22:26:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd9cca401eccdc9b455ee84f74e6d9c9d714353e",
"body": "* Check output size of RSA encrypt\n\n* Check pbkdf size before passing to SymCrypt\n\n* Fix RSA keydup logic to match OpenSSL behavior\n\n* Allow zero length secrets and salts for HKDF and TLS1_PRF\n\n* Validate PBKDF salt and iteration count in set param in non-pkcs5 mode\n\n* zalloc AES context\n\n* Validate\n[…]\n match OpenSSL default\n\n* Return -1 for ECDSA error\n\n* Remove references to UINT type from symcrypt\n\n* Bump minimum required SymCrypt\n\n* Undo change to provider function parameter types\n\n* PR comments",
"is_bot": false,
"headline": "Bugfixes to SymCrypt-OpenSSL for OpenSSL 3.5 (#155)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-01-23T17:51:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1cc5fd90d2e20dde9153d842d526f846509967d3",
"body": "* Implement fork handling for keysinuse context management\n\n* Refactor keysinuse context management for fork handling\n\n* Fix fork safety in keysinuse by recreating locks\n\n* Revert \"Fix fork safety in keysinuse by recreating locks\"\n\nThis reverts commit 0a6a3ea92a4e07df8a20c4f091025d46f710994a.",
"is_bot": false,
"headline": "Implement fork handling for keysinuse context management (#154)",
"author_name": "jasjivsingh-corp",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-12-12T17:48:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f0a841d59eae5f832546127cc48bc68bd27f4f2",
"body": "…s-support\n\nToggle keyinuse using KEYSINUSE_ENABLED env var",
"is_bot": false,
"headline": "Merge pull request #152 from microsoft/jasjivsingh-keyinuse-breakglas…",
"author_name": "jasjivsingh-corp",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-12T22:52:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c0dcbac866923ecb52c7fb0afd314c890a4ff41",
"body": null,
"is_bot": false,
"headline": "added checks in parent and fork process for env",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-11T23:48:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "092918ddc668311cbc7e143002903a722a195100",
"body": "…breakglass-support",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main' into jasjivsingh-keyinuse-…",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-11T21:58:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57c656c19f6649466585819f39a338ad21177492",
"body": "use pthread_atfork handler for ngnix support",
"is_bot": false,
"headline": "Merge pull request #149 from microsoft/jasjivsingh-fork-ngnix-support",
"author_name": "jasjivsingh-corp",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-06T22:05:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4138660364edcd93f658425e3e01922ca8c50266",
"body": null,
"is_bot": false,
"headline": "added an additional check for pthread_atfork",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-06T21:55:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98ae04a9a776f31e7888c168d5b69155732f0dac",
"body": null,
"is_bot": false,
"headline": "disable keyinuse if locks are not created",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-06T21:14:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb078961d25bc6adb23b6ddadb0045c6860bec06",
"body": null,
"is_bot": false,
"headline": "Added keyinuse env var for breakglass scenarios",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-05T22:41:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad821115e0662498502b183b69224ff6e02a41b4",
"body": null,
"is_bot": false,
"headline": "added keysinuse_reset_key_ctx and feedback",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-10-13T23:04:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe39b66fe26a53e8e39cad19077873050977e82d",
"body": null,
"is_bot": false,
"headline": "use pthread_atfork handler for ngnix support",
"author_name": "Jasjiv Singh",
"author_login": null,
"committed_at": "2025-10-06T20:14:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a69991efb7cb07ba7f799bbff72696e35d58b343",
"body": "* Based on additional fixes made when porting previous fix to 1.9 branch\n (#135)\n* Check for failure in CRYPTO_THREAD_lock_new\n* Reduce scope for unexpected behavior in RSA keygen",
"is_bot": false,
"headline": "Additional allocation hardening (#137)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2025-07-17T20:38:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a6a595d5e7d3187a67312771647e1ec9f82365a",
"body": "…cations (#133)\n\n* Refactor logic to avoid use of uninitialized memory and improve\nconsistency\n\n* Fix up a few more nitpicks\n\n+ Potential memory leak in common gcm init ctx (never hit with provider,\n but could be hit from engine)\n+ Consistency of dupctx ERR and assignment\n\n* Fix some unhandled OPENSSL_strdup failures",
"is_bot": false,
"headline": "Fix use of uninitialized memory and consistency of code handling allo…",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2025-07-11T00:53:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3dd13a32d77c57f85d6639942183165268f462f",
"body": "Builds on fix: compatibility issue between SCOSSL and TLS 1.2 ciphersuites which use HMAC in AzL3 #129 but handles overly large padding on decryption\n\nAddresses bug 58142883\nError Message:\nopenssl s_client -connect tcs.microsoftstore.com.cn:443 -tls1_2 -cipher ECDHE-RSA-AES256-SHA384\n40D79C8E857B000\n[…]\nmac in decryption path.\n(3) fix typo in 1.10 for public key export\n\nTest:\n(1) sslplay passed\n(2) openssl s_client -connect tcs.microsoftstore.com.cn:443 -tls1_2 -cipher ECDHE-RSA-AES256-SHA384 worked.",
"is_bot": false,
"headline": "Fix for TLS 1.x CBC ciphersuites (#130)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2025-07-10T00:18:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9ed0b76305ae73a3b121cccc74758a4e682089f1",
"body": "CFB fix. change the blocksize to 1 for all CFBs per\nhttps://docs.openssl.org/3.0/man3/EVP_EncryptInit/#gettable-evp_cipher-parameters:~:text=%22blocksize%22%20(OSSL_CIPHER_PARAM_BLOCK_SIZE,the%20cached%20value.\n\ntest:\n(1) test code from sql team passed.\n(2) sslplay passed.\n(3) buddy pipeline, functional test pipeline successfully.",
"is_bot": false,
"headline": "CFB fix. change the blocksize to 1 for all CFBs (#131)",
"author_name": "MS-megliu",
"author_login": "MS-megliu",
"committed_at": "2025-07-09T00:05:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4bb48f877b04e2ef41eee7b84a20b2ad3d83bc0",
"body": null,
"is_bot": false,
"headline": "Test fixes (#127)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-06-12T00:07:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e453388464a441ba6399c44951b49406b52dafb",
"body": "The SymCrypt provider does not currently support Brainpool curves. The curves are not used within Microsoft, but have some 3P usage. The curves should be added to the SymCrypt provider for compatibility.\n\nbrainpoolP256r1\nbrainpoolP256t1\nbrainpoolP384r1\nbrainpoolP384t1\nbrainpoolP512r1\nbrainpoolP512t1\n[…]\nc:122\n # Starting \"ECDH KATs (RFC 7027)\" tests at line 555\n # INFO: @ test/testutil/stanza.c:32\n # Completed 60 tests with 0 errors and 0 skipped\n ok 1 - iteration 1\nok 1 - run_file_tests",
"is_bot": false,
"headline": "Support Brainpool curves (#126)",
"author_name": "MS-megliu",
"author_login": "MS-megliu",
"committed_at": "2025-06-11T19:06:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1de12ca525aabb9ebfd7556d3ff45048f605d58a",
"body": "SymCrypt-OpenSSL Provider should implement the TLS13-KDF. Added support.\nhttps://docs.openssl.org/3.0/man7/EVP_KDF-TLS13_KDF/\n\nTesting:\nUsed Openssl's evpkdf_tls13_kdf.txt data file, all 562 test cases passed.\n\n# Reading EvpTestRecipes/3.0/evpkdf_tls13_kdf.txt\n# INFO: @ test/testutil/stanza.c:122\n#\n[…]\n\n# INFO: @ test/testutil/stanza.c:122\n# Starting \"TLS13-KDF bad mode test\" tests at line 4931\n# INFO: @ test/testutil/stanza.c:32\n# Completed 562 tests with 0 errors and 0 skipped\nok 1 - iteration 1",
"is_bot": false,
"headline": "TLS1.3KDF support (#118)",
"author_name": "MS-megliu",
"author_login": "MS-megliu",
"committed_at": "2025-06-11T18:57:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f98b2990b872ce995b44ab95e65e8c0a292e580",
"body": "* Stub new keysinuse functions. Add TODOs\n\n* Context management functions\n\n* Update public API functions to use new context and lhash\n\n* Use lhash from the logging thread\n\n* Update RSA and ECC to use new API calls\n\n* Add KeysInUse test\n\n* Bugfixes from testing\n\n* Implement keysinuse tests\n\n* Add sta\n[…]\nr to fetch Key ID\n\n* Use systemd logging with metadata\n\n* Enforce libsystemd requirement in cmake\n\n* Put logging prefix behind ifdef, better syslog verbosity, and additional null checks\n\n* PR comments",
"is_bot": false,
"headline": "Export KeysInUse as an API (#125)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-06-10T20:50:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "89330e920b135be86d17fd47046f6a4b0590ef1d",
"body": "Support ffdhe6144 and ffdhe8192 in the SymCrypt provider\n\ntesting:\nadded ffdhe6144 and ffdhe8192 in sslplay. sslplay passed.",
"is_bot": false,
"headline": "FFDHE: Support ffdhe6144 and ffdhe8192 in the SymCrypt provider (#124)",
"author_name": "MS-megliu",
"author_login": "MS-megliu",
"committed_at": "2025-06-07T00:00:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c076f5badcab4b6e94dd1fdba9eb1fc29f7720b",
"body": "support RSA key size 512 generate in SymCrypt provider.\n\nTesting:\nadded: TestRsaEvp(512, 65537)\nsslplay passed.",
"is_bot": false,
"headline": "Support RSA512 generate in SymCrypt provider (#123)",
"author_name": "MS-megliu",
"author_login": "MS-megliu",
"committed_at": "2025-05-30T18:57:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82fb9ce10365fc0e636b59cf5dddd4762fcd88d3",
"body": "* Update version\n\n* Only optimize release builds\n\n* Fix typos in readme\n\n* Add compilation flags to resolve pipeline build warnings\n\n* Use specific build flags\n\n* Add O2 to SslPlay for fortify source\n\n* Remove SslPlay options",
"is_bot": false,
"headline": "Only compile with optimizations for release builds and fix typos (#122)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-05-23T20:33:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaa0dc54c23f59e9c9dcc4a2b2cbc06542fbca30",
"body": "* Mamckee/gcm leak (#116)\n\n* Add free back to GCM IV set\n\n* Update minor version\n\n* Update version for merge\n\n* Update version to 1.10.0-dev",
"is_bot": false,
"headline": "RI fixes in 1.8.1 into main (#120)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-05-22T00:08:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a97319e5a54d96bb4f8e792de1567b6767943d7",
"body": "* Add exportable digests\n\n* Put common functions in macro expansion\n\n* Update SslPlay to test and validate exported hash states\n\n* Update version and fix typo in readme\n\n* Turn off optimization for debug builds\n\n* Cleanup and add SHA3\n\n* Use fixed length array for state export\n\n* Fix pipeline errors\n\n* Revert \"Turn off optimization for debug builds\"\n\nThis reverts commit 520bd0b51756de46378fece0e1070bece51293c7.\n\n* Fix SslPlay argument parsing",
"is_bot": false,
"headline": "Support digest state export for MD5, SHA1, and SHA2 digests (#117)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-05-21T23:18:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2988e46b5bff87aa150526352ca19b677975fe74",
"body": "* Boilerplate mlkem kem and keymgmt interfaces\n\n* ML-KEM key management\n\n* ML-KEM KEM interface\n\n* Update to latest APIs\n\n* ML-KEM decoder\n\n* MLKEM PEM and DER encoder. Refactor decoder\n\n* Consolidate ML-KEM decoder\n\n* MLKEM text encoder and bugfixes\n\n* Start of hybrid implementation\n\n* ML-KEM hyrbi\n[…]\nt errors\n\n* PR comments\n\n* PR comments\n\n* Only copy modified private bits with key material\n\n* PR comments and cleanup\n\n* Merge branch 'main' into mamckee-ml-kem\n\n* PR comments\n\n* Fix ML-KEM constants",
"is_bot": false,
"headline": "ML-KEM and ML-KEM hybrid (#103)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-04-08T18:03:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c4aac63a63e47d47b1f69da46fc604fc5825fc63",
"body": "* Only reset IV for new IV length. Track iv and tag state in ccm\n\n* Update tagSet after ccm encrypt\n\n* Free rsa private exponent in import\n\n* Secure malloc and free primes and private exponent",
"is_bot": false,
"headline": "Proper state management for AES GCM and CCM (#112)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-03-27T01:33:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b08f1c47b442f0f5be934b7b26ab11d53b7d480",
"body": "…113)",
"is_bot": false,
"headline": "Clamp keysinuse max file size to SCOSSL_MAX_CONFIGURABLE_FILE_SIZE (#…",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-03-24T19:50:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d44df366a2a2912e69ef1a18c12936397989ef2a",
"body": "* PBKDF2 outline\n\n* Parameters and context\n\n* PBKDF2 implementation\n\n* Cleanup\n\n* Bump version\n\n* PR comments\n\n* Use new logging macros after rebase\n\n* Set cbPassword early",
"is_bot": false,
"headline": "PBKDF2 (#101)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-03-07T22:25:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d07487deb9e3e83764b36165c0e936c89a34aa88",
"body": "* Fix potential deadlock for multithreaded applications\n\n* Avoid double alloc of keysinuse lock\n\n* Always create logging dir on start if not present\n\n* Fix valgrind leaks\n\n* Cleanup TLS-PRF mdname in free\n\n* Set ownership of directory if created\n\n* Add comment about logging, set umask, and fix max file size",
"is_bot": false,
"headline": "KeysInUse and memory fixes (#110)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-03-06T00:17:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e61044d52bba0ae1b7072f5275a7236833a66af7",
"body": null,
"is_bot": false,
"headline": "fix cut-n-paste bug (#111)",
"author_name": "efer-ms",
"author_login": "efer-ms",
"committed_at": "2025-03-06T00:01:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "300cf4d9c42311c8323dc574b73b156a5c2bad11",
"body": "* Fix RSASSA-PSS keygen\r\n\r\n* Only set key type restriction in keygen. Use keytype instead of padding in key context\r\n\r\n* Remove unused member",
"is_bot": false,
"headline": "Restrict padding for generated RSASSA-PSS keys (#107)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-02-12T19:41:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aebe8e04c6b14f92b5ee16f68bc1abadb3bcb4b3",
"body": null,
"is_bot": false,
"headline": "Use hardcoded minimum version instead of version from headers (#106)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-02-12T19:41:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fe8cd6400a320853054f19cccd705e7665a9025",
"body": null,
"is_bot": false,
"headline": "Only use xoflen for final operation (#105)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-02-04T17:00:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bf988bf5a87a6a901234badff007e88927a5b89",
"body": "* Bump version\r\n\r\n* Split SHAKE test file for engine testing\r\n\r\n* Disable KeysInUse in default config\r\n\r\n* Fix provider name in tests\r\n\r\n* Fix child libctx creation\r\n\r\n* Remove fips provider test\r\n\r\n* Split provider and engine docs\r\n\r\n* Provider readme\r\n\r\n* Update SCOSSL provider readme\r\n\r\n* Add not\n[…]\ne documentation referencing each other\r\n\r\n* Use availablein keyword for digests\r\n\r\n* Fix typos and update configuration file path\r\n\r\n* Fix typo in SymCryptProvider README.md\r\n\r\n* Fix typo in README.md",
"is_bot": false,
"headline": "Prepare and cleanup for 1.7.0 (#104)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-01-29T21:10:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e60a3353d3ad24df7c93633c2a2e316df3071bcc",
"body": "* Add RSA fallback test\r\n\r\n* Update error function codes to match refactor\r\n\r\n* Surface SymCrypt errors from provider\r\n\r\n* Allow logging configuration\r\n\r\n* Add debug logging to keysinuse init\r\n\r\n* Add RSA and ECC keysinuse debug logs\r\n\r\n* PR comments\r\n\r\n* Add FIPS compliance logging to unpadded RSA encrypt/decrypt\r\n\r\n* PR comments\r\n\r\n* Create separate provider loggin calls without func code",
"is_bot": false,
"headline": "Update error handling and debug logging (#92)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-01-15T22:52:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8e9f21392e2e938edddefae342155103e65434f",
"body": "* Check that ECDSA signature is a sequence of two integers without trailing data\r\n\r\n* Return authenticated bytes for AEAD ciphers if out is NULL",
"is_bot": false,
"headline": "Provider behavior fixes (#102)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-01-03T18:25:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "405a016466627408da4d73159292082a2b0083a7",
"body": "Ensure that CMakeLists.txt versions are up to date",
"is_bot": false,
"headline": "Update CMakeLists.txt versions (#100)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2024-11-26T21:28:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42f9c2193f7f8e04744c612552cc3a4d6727a0cd",
"body": null,
"is_bot": false,
"headline": "Initialized EVP_MD values to NULL (#99)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-11-26T20:16:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3211181ec32ecd20c16990f437872e956219cee2",
"body": "* Use OSSL_LIB_CTX_new_child instead of OSSL_FUNC_CORE_GET_LIBCTX\n\n* Allow no digest for PKCS1 sign/verify\n\n* Allow RSA import from private exponent\n\n* Fix PKCS1 no digest errors\n\n* Bugfixes for RSA private exponent import\n\n---------\n\nCo-authored-by: Samuel Lee <saml@microsoft.com>",
"is_bot": false,
"headline": "Additional provider RSA compatibility (#98)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-11-23T04:43:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61ea9b110aa3357cc2218e4584a27ae4e62249f8",
"body": "* Expose new digests to signature and MAC algorithms\r\n\r\n* Add missing digest implementations\r\n\r\n* Update tests with new digests\r\n\r\n* Cleanup and fix PKCS1 signatures with MD5-SHA1\r\n\r\n* Return correct algorithm",
"is_bot": false,
"headline": "Add missing digests (#97)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-11-23T04:31:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c45c9ee05e354bdd7eaeeb2154e4509c6312b136",
"body": "* HKDF and TLS1-PRF EVP_PKEY wrapper\r\n\r\n* Cleanup\r\n\r\n* Use const value for KDF KeyExch",
"is_bot": false,
"headline": "HKDF and TLS1-PRF EVP_PKEY key exchange wrapper (#96)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-11-21T22:45:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98749e496dce6e1ba177a1a9499857228b449057",
"body": "* Refactor digests to use SymcryptHash* functions\r\n\r\n* Additional refactor and add SHAKE\r\n\r\n* Bump version\r\n\r\n* Add CSHAKE\r\n\r\n* Add MD testing and fix uncovered bugs\r\n\r\n* Delay init and restrict parameters during update operation\r\n\r\n* Cleanup\r\n\r\n* Put digest squeeze behind ifdef\r\n\r\n* Move new parame\n[…]\nparate file\r\n\r\n* Don't dynamically alloc cshake state\r\n\r\n* Rename function name string parameter\r\n\r\n* PR comments\r\n\r\n* Init in extract if update has not been called\r\n\r\n* Track cshake state in provider",
"is_bot": false,
"headline": "Add SHAKE and CSHAKE (#90)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-10-15T19:18:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7a7215d3ad809168783605abacb52bcc991d5e6e",
"body": "* Boilerplate implementation\r\n\r\n* sskdf implementation\r\n\r\n* Update function call\r\n\r\n* Add SymCrypt version constraint\r\n\r\n* Cleanup\r\n\r\n* Revert changes to p_scossl_sskdf_dupctx",
"is_bot": false,
"headline": "Add SSKDF (SP800-56C) (#93)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-10-15T16:56:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1befa15c9847a741ef72cab175c848b71cf1e323",
"body": "* Boilerplate code\r\n\r\n* Context and parameters\r\n\r\n* Reset and derive\r\n\r\n* Parameters\r\n\r\n* Add SRTP tests and fix errors\r\n\r\n* Add SRTCP\r\n\r\n* Additional key length tests\r\n\r\n* Move new parameter names to a separate file\r\n\r\n* Cleanup\r\n\r\n* Check uIndexWidth is acceptable value\r\n\r\n* Add default label value\r\n\r\n* Make unset label a macro for readability",
"is_bot": false,
"headline": "Add SRTP KDF (#91)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-10-08T17:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df8c9c671db4b02eb7f0fbc6ac39769dfd6cb760",
"body": "…th (#94)\n\nusr/CACHE;PATH;Path to OpenSSL providers;lib/symcryptprovider.so\r\nvs\r\nusr/lib/symcryptprovider.so\r\n\r\nSigned-off-by: Alejandro Hernandez Samaniego <alhe@linux.microsoft.com>\r\nCo-authored-by: Alejandro Hernandez Samaniego <alhe@linux.microsoft.com>",
"is_bot": false,
"headline": "cmake: fixup CMakeLists to avoid installing libraries in incorrect pa…",
"author_name": "Alejandro H",
"author_login": "ahcbb6",
"committed_at": "2024-09-30T15:52:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07ccc8be925043f6f539d33d3d73fc34928b9203",
"body": "* Fix RSA unsupported fallback\r\n\r\n* Turn default log level off",
"is_bot": false,
"headline": "Fix engine behavior (#89)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-09-04T20:24:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f341f4c64d349a8e11a61b3c8be09f23d0236ca8",
"body": null,
"is_bot": false,
"headline": "Remove GCM nonce restriction comment (#88)",
"author_name": "Kevin Jones",
"author_login": "vcsjones",
"committed_at": "2024-09-04T19:55:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65f24e4834af2f251b208b00b2cca565c13494d3",
"body": "* Fix build for engine 1.1.1 sshkdf\r\n\r\n* Fix regression with e_scossl_get_symcrypt_hash_algorithm\r\n\r\n* Fix outdated function name in SslPlay",
"is_bot": false,
"headline": "Fix SSH KDF engine (#85)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-08-21T16:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61e917315092b830238181e8589a634d7fb84d0e",
"body": "* Correct log messages to say digest where they said Hmac\r\n\r\n* Use 'hash' instead of 'digest'",
"is_bot": false,
"headline": "Correct log messages to say hash where they said Hmac (#87)",
"author_name": "Kevin Jones",
"author_login": "vcsjones",
"committed_at": "2024-08-21T16:20:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9300d58eed7dd02202a3dc0b495926eb097b226",
"body": "* Explicitly set outl for zero inl\r\n\r\n* Return null check to internal function\r\n\r\n* Restore null checks for internal block ciphers and correct SAL annotations\r\n\r\n* Support larger/smaller buffers for key exchange\r\n\r\n* Return sufficient buffer size for ECDSA size\r\n\r\n* Fix returns for ECDH size request and bump version",
"is_bot": false,
"headline": "Behavior fixes for API compatability (#86)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-08-21T16:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81bfe457ed2e757f2806fa7fdbbb06257c5e81f8",
"body": "* Expose EC X and Y as parameters\r\n\r\n* Make AES-CFB compatible with OpenSSL stream cipher calling pattern\r\n\r\n* Cleanup\r\n\r\n* PR comments, address in == out case\r\n\r\n* Comment",
"is_bot": false,
"headline": "Fixes for tpm2 (#84)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-08-15T20:01:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab6d48fbc993e76425895bdc22c54b91917148c1",
"body": "* Keysinuse test fixes\r\n\r\n* Move variable declaration outside of case statement",
"is_bot": false,
"headline": "Various provider bugfixes (#83)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-07-26T01:16:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a67355c13e4c4759262ea9e3a04e57726f73607",
"body": "* KeysInUse logging thread\r\n\r\n* KeysInUse behavior control\r\n\r\n* Keysinuse logging\r\n\r\n* Connect keysinuse to provider init\r\n\r\n* ECDSA keysinuse\r\n\r\n* RSA keysinuse\r\n\r\n* Properly free and upref keysinuse info\r\n\r\n* Bugfixe found in first testing\r\n\r\n* Allow KB, MB, GB suffixes for file size\r\n\r\n* Associat\n[…]\nInUseInfo in keyctx behind lock. Reset on new key material\r\n\r\n* Second round PR comments\r\n\r\n* Separate teardown function\r\n\r\n* Initialize i\r\n\r\n* PR comments\r\n\r\n* PR comments and cleanup merge conflicts",
"is_bot": false,
"headline": "Initial KeysInUse integration (#74)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-06-05T19:07:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b27f691f262f738e4745d8259b8a0d1e3444a5de",
"body": "Fix CMake file to avoid installing libraries incorrect path",
"is_bot": false,
"headline": "Merge pull request #81 from microsoft/user/mitchl/alejandro_overlake_fix",
"author_name": "Mitch Lindgren",
"author_login": "mlindgren",
"committed_at": "2024-05-29T00:26:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a374548dd608876bcdb919fb17f23f1480fe7196",
"body": "…red libraries in:\n\n/usr/CACHE;PATH;Path to OpenSSL engines;lib/engines-1.1/symcryptengine.so\n\nSigned-off-by: Alejandro Hernandez Samaniego <alhe@linux.microsoft.com>",
"is_bot": false,
"headline": "Avoids incorrectly parsing cmake file resulting in installing the sha…",
"author_name": "Mitch Lindgren",
"author_login": "mlindgren",
"committed_at": "2024-05-28T23:53:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cc0f7d743b5b0bb5048873a0194d46df836141f",
"body": "* Move initialization after copying functions\r\n\r\n* Support OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT\r\n\r\n* Initialize parameters in p_scossl_aes_copy_mac\r\n\r\n* Fix remaining test failures due to RSA provider implementation\r\n\r\n* Fix remaining test errors due to provider ECC\r\n\r\n* Check HMAC md by name \n[…]\ngroup is passed by the caller\r\n\r\n* Support variable length GCM IV in engine\r\n\r\n* Re-remove XTS key set error tests for engine\r\n\r\n* Remove fetched alloc functions\r\n\r\n* Fix memory leaks\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Provider and Engine bugfixes (#80)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-05-16T23:19:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bf78204684e208690ca5c845d2a686e04c44868b",
"body": null,
"is_bot": false,
"headline": "Fix memory leaks",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-05-15T21:51:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef91a8827e5ca7cab7db2858dd9a185c4d8a932d",
"body": "* Return correct ctx in kmac_dupctx\r\n\r\n* Correct error check in dh export\r\n\r\n* Support RSA algorithm ID parameter\r\n\r\n* Support OSSL_PKEY_PARAM_EC_ENCODING parameter\r\n\r\n* Support algorithm ID in ECDSA\r\n\r\n* Track DH group independant of key\r\n\r\n* Add libcrypto as link target for provider\r\n\r\n* DH fixes for SSL layer\r\n\r\n* Support TLS mode for AES block ciphers and styling\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Bugfixes for TLS connections (#78)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-04-24T23:51:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ef3602eced13ccf2ed6558d44b710e5e92f4f04",
"body": "* Fix errors in SslPlay\r\n\r\n* Add EVP test recipes\r\n\r\n* Update permissions\r\n\r\n* Update test cases\r\n\r\n* Update test recipes\r\n\r\n* Fix 1.1.1 engine errors in testing\r\n\r\n* Move 3.0.2 test files\r\n\r\n* Fix tests\r\n\r\n* Fix errors found in test\r\n\r\n* Split RSA tests\r\n\r\n* Outstanding test fixes\r\n\r\n* Rely on patc\n[…]\nt folder\r\n\r\n* Update test readme\r\n\r\n* Nit: spacing\r\n\r\n* IV null check in correct function\r\n\r\n* Update version and name to match expected\r\n\r\n* Add named curve only test for Azure Linux\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Update tests for OpenSSL 3 and fix bugs found in test (#77)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-04-17T18:47:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5361693ec536c34105bf741432fb120ad792b4d4",
"body": "* Function stubs\r\n\r\n* SP800-108 counter\r\n\r\n* KMAC KBKDF\r\n\r\n* Cleanup\r\n\r\n* PR comments\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Provider KBKDF (SP800-108) (#76)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-03-08T17:03:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2cb7fdc5b875a34ce08b7204df53c11eba29fa3",
"body": "* Properly support restricted PSS keys\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Properly support restricted PSS keys (#75)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-03-06T00:01:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "571dfb06bb2844afa7dfb76a84531bd921ff9d89",
"body": "* Fix 3.0 compatability issues\r\n\r\n* Check major version too\r\n\r\n* PR comment",
"is_bot": false,
"headline": "Fix 3.0 compatability issues (#73)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-02-07T22:43:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7ffa3f046aac4da8a5070a667b57cb40d976380",
"body": "* Fix TLS errors due to parameter types\r\n\r\n* Fix rsa errors\r\n\r\n* Add basic default config\r\n\r\n* Fix typo",
"is_bot": false,
"headline": "Various provider bugfixes (#72)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-01-26T00:15:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6ee55f08954ba5bd4ad0b2075daaf4f5da937d5",
"body": "* Stub DH functions in provider\r\n\r\n* Provider DH key mgmt\r\n\r\n* DH provider\r\n\r\n* Full DH support\r\n\r\n* Fix warnings\r\n\r\n* Require only private or public key for key import\r\n\r\n* Cleanup\r\n\r\n* Engine use common implementation for DH\r\n\r\n* Engine fixes\r\n\r\n* Better error checking in provider\r\n\r\n* PR comments\r\n\r\n* PR comments\r\n\r\n* Copy correct group into dupctx",
"is_bot": false,
"headline": "Provider DH (#71)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-12-14T22:21:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd21ea8031677ca97f74c4dc85085c892160a5f4",
"body": "* x25519 key management\r\n\r\n* x25519 exchange\r\n\r\n* Fetch hidden 25519 curve from separate function\r\n\r\n* Advertize TLS group capability\r\n\r\n* Fix warning\r\n\r\n* Address comments\r\n\r\n* Address comments and fix discovered tls errors\r\n\r\n* PR comments\r\n\r\n* Fix size update",
"is_bot": false,
"headline": "Provider X25519 (#70)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-12-14T19:15:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c16e31d4e6c6c72bf2ef1058eb9659dd7efb1bdf",
"body": "* HMAC stubs\r\n\r\n* Common hmac implementation\r\n\r\n* Typedef aligned context type for readablity\r\n\r\n* Provider HMAC\r\n\r\n* Refactor engine hmac\r\n\r\n* KMAC stubs\r\n\r\n* Provider KMAC\r\n\r\n* CMAC\r\n\r\n* Make mac implementations more generic\r\n\r\n* Route cmac to common mac implementation\r\n\r\n* Clean up kmac\r\n\r\n* Validate engine build\r\n\r\n* Additional refactoring and cleanup\r\n\r\n* Address PR comments\r\n\r\n* Address PR comments\r\n\r\n* Address PR comments and ad SHA3 HMAC\r\n\r\n* zalloc in mac duplication\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Provider MAC (#66)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-12-14T18:26:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ecad51d38191741bf4eecba0112ef4a9a7e99db",
"body": null,
"is_bot": false,
"headline": "Add support for AES-XTS and RSA-PSS with auto salt-len (#68)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2023-12-12T22:06:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7abafd80a9d15c878ad478bb0fefc4862161bd38",
"body": "* Stub KDF functions\r\n\r\n* HKDF implementation\r\n\r\n* Provider SSH KDF\r\n\r\n* Fix engine publiuc header property\r\n\r\n* Provider TLS1-PRF\r\n\r\n* Cleanup\r\n\r\n* OpenSSL 1.1.1 engine build compatability\r\n\r\n* Use common hash fetching for RSA\r\n\r\n* Address PR comments\r\n\r\n* Correct MAC related error logging\r\n\r\n* PR comments\r\n\r\n* PR comments\r\n\r\n* Minor cleanup",
"is_bot": false,
"headline": "Provider KDF (#65)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-11-30T00:04:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ee9ee42c983b09dc2b9a1dbc4af1c75d92c7e83",
"body": "* Support building for ARM\r\n\r\n* Fix the branch for cross compilation for arm build\r\n\r\n---------\r\n\r\nAuthored-by: Changyu Li <Changyu.Li@microsoft.com>",
"is_bot": false,
"headline": "Support building for ARM (#69)",
"author_name": "ironyman",
"author_login": "ironyman",
"committed_at": "2023-11-27T21:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d01ed05103bd4c4e5187c2dbd3adce27cc08df3f",
"body": "* ECC key context management\r\n\r\n* Stub keymgmt functions\r\n\r\n* ECC keygen\r\n\r\n* ECC import/export with named params\r\n\r\n* Provider ECDSA\r\n\r\n* ECDH stubs\r\n\r\n* ECDH\r\n\r\n* Refactor engine ECC\r\n\r\n* Changes from RSA topic branch\r\n\r\n* Cleanup for PR\r\n\r\n* Cleanup\r\n\r\n* Cleanup rebase\r\n\r\n* Use SymCrypt curve for\n[…]\nress PR comments\r\n\r\n* Include paramter header in ecc_keymgmt header\r\n\r\n* Check selection when duplicating EC keys\r\n\r\n* Address PR comments\r\n\r\n* Call SymCryptEckeyExtendKeyUsage in every EC sign/verify",
"is_bot": false,
"headline": "Provider ECDH and ECDSA (#64)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-11-20T23:57:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7d069356f4cfd70855be2572b266bca29038116c",
"body": null,
"is_bot": false,
"headline": "Fix public exponent in RSA key export (#67)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2023-10-13T22:04:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc9d92869ed5900f1906dc7f1075d2a277a41549",
"body": "* RSA keygen\r\n\r\n* Remove dependency on BN\r\n\r\n* Kery match and import export stubs\r\n\r\n* Key import/export\r\n\r\n* Use BN for RSA parameters\r\n\r\n* Add libctx to provider base context\r\n\r\n* Common RSA signature implementation\r\n\r\n* RSA PKCS1 signatures\r\n\r\n* Move all RSA code under one folder\r\n\r\n* PSS sign/ve\n[…]\ness PR comments\r\n\r\n* Fix RSA pss cases\r\n\r\n* Update parameter styling\r\n\r\n* Handle RSA sign/verify with no digest\r\n\r\n* Remove support for RSA sign/verify without digest\r\n\r\n* Cleanup and address comments",
"is_bot": false,
"headline": "Provider RSA signature and encryption (#63)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-08-04T22:47:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4038d139cdc4aad241908e87400250382ea34d4c",
"body": "* Ensure that SymCrypt structures have sufficient alignment\r\n\r\n+ Previously SCOSSL would rely on allocations made by libcrypto being at\r\n least 16-byte aligned for 64-bit platforms. This was normally true, but\r\n in some environments where the allocator is modified, only 8-byte\r\n alignment was bei\n[…]\nents\r\n\r\n+ Make macro variable names unambiguous and scoped\r\n+ Fix provider AES without zero-ing allocation for the ctx\r\n+ Fix typo\r\n\r\n* Add compile-time assert to ensure aligned allocations make sense",
"is_bot": false,
"headline": "Ensure that SymCrypt structures have sufficient alignment (#62)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2023-05-19T20:48:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1e43d976797dffa862bc6861d66bcf2bb9759275",
"body": "* Add ctr-drbg implementation\r\n\r\n* Add AES-CBC implementation\r\n\r\n* Add ECB\r\n\r\n* Rename engine files to avoid conflicts with common files\r\n\r\n* Add gcm support in provider\r\n\r\n* Add AES CCM cipher\r\n\r\n* Cleanup code\r\n\r\n* Refactor cipher files, add XTS (disabled)\r\n\r\n* Cleanup\r\n\r\n* Remove unnecessary head\n[…]\nonsistent with rest of code base\r\n\r\n* Clean up includes\r\n\r\n* Address first round of comments\r\n\r\n* Address comments\r\n\r\n* Address comments, add cfb\r\n\r\n* Address comments\r\n\r\n* Fix clang compilation error",
"is_bot": false,
"headline": "Provider Ciphers and Rand (#60)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-05-16T21:35:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d64329698f14fdf2a3445756ba6a7fb35dbacc11",
"body": null,
"is_bot": false,
"headline": "Fetch alloc functions from in dispatch table (#61)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-03-28T00:54:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3332a5956c3c2e30616471eb874cd620c0ffee7",
"body": "* Autodetect system-installed symcrypt library\r\n\r\nUse pkg-config to find SymCrypt library in the system unless root\r\ndirectory build were given as a variable. Make it fatal error unless any\r\nof those were provided.\r\n\r\n* Make openssl engines path configurable\r\n\r\nDo not assume engines-1.1 is always the correct path. Allow simple\r\noverride with custom value. Useful for tests with OpenSSL 3.",
"is_bot": false,
"headline": "Cmake improvements (#58)",
"author_name": "Petr Menšík",
"author_login": "pemensik",
"committed_at": "2023-03-28T00:36:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9425a3cbffd7e828649ce9b3848aa9215230845d",
"body": "* Minimally viable provider\r\n\r\n* Algorithm table stubs\r\n\r\n* Stub out dispatch tables\r\n\r\n* Prototype digests with macros\r\n\r\n* Create common code\r\n\r\n* Refactor common source files into library\r\n\r\n* Stub remaining funciton tables\r\n\r\n* SymCrypt init in provider init\r\n\r\n* Add sha3 digests\r\n\r\n* Macro defi\n[…]\n* Cleanup scossl_helpers\r\n\r\n* Cleanup naming\r\n\r\n* Additional cleanup\r\n\r\n* Fix name change in digests\r\n\r\n* Return scossl_failure for failure case\r\n\r\n* Address PR comments\r\n\r\n* Remove unnecessary checks",
"is_bot": false,
"headline": "SymCrypt provider base (#57)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-03-02T18:51:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d5c05dc9d15d9bf843a3b5492ec9075cef49c81",
"body": null,
"is_bot": false,
"headline": "Update README for HMAC failure with unsupported digest (#56)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-12-29T20:21:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbc2ea79842e4096377660abb406979602269e10",
"body": "…50)\" (#55)\n\nThis reverts commit 948a1ddf65b9b92c9edb562f4e4303d044147628.",
"is_bot": false,
"headline": "Revert \"Intercept stitched AES-CBC + HMAC ciphers and disable them (#…",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-12-29T02:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20931a2272ef5582573d3f179d177848d43d9e87",
"body": "+ On SCOSSL bind, load all EVP ciphers and then remove the stitched\r\n ciphers that we do not support in SCOSSL. This is a workaround for\r\n callers using EVP_get_cipherbyname.",
"is_bot": false,
"headline": "Explicitly remove stitched EVP ciphers from OpenSSL internal list (#54)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-12-13T18:52:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "437db74a52a5c847f8a399681b442bfb2a8f6602",
"body": "+ Previously was wrong when RSA keys had a modulus size in bits which is\r\n 1 modulo 8. In this case using SCOSSL to sign/verify signatures with\r\n RSA_PSS_SALTLEN_MAX would fail with invalid argument error in SymCrypt\r\n + Problem is with calculating length of EM as per RFC 3447 section 8.1.1 (step 1) - \"Note that the octet length of EM will be one less than k if modBits - 1 is divisible by 8 and equal to k otherwise.\"\r\n+ Amend SslPlay testcases to test this corner case",
"is_bot": false,
"headline": "Fix RSA-PSS maximum salt length calculation (#53)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-10-27T22:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d63edf42fcbc0fcf2a2393b40312c0f4111ca0f",
"body": "+ Add SSH-KDF support to Engine. SSH-KDF implementation is disabled by default and can be enabled by adding -DSCOSSL_SSHKDF=1 argument to CMake. OpenSSL source code is required in the build process.",
"is_bot": false,
"headline": "Add SSH-KDF support to Engine (#52)",
"author_name": "Çağdaş Çalık",
"author_login": "ccalik",
"committed_at": "2022-09-22T22:53:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afb362219b621b92d94c2c512110722b838633ab",
"body": "* Initial implementation\r\n\r\n* Add test case for recomputing tag with the same key\r\nRevert to OpenSSL hmac_ctrl_str implementation\r\n\r\n* Add comments to the scossl_hmac_ctrl function",
"is_bot": false,
"headline": "Add HMAC support to Engine (#51)",
"author_name": "Çağdaş Çalık",
"author_login": "ccalik",
"committed_at": "2022-09-15T18:44:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "948a1ddf65b9b92c9edb562f4e4303d044147628",
"body": "+ This means libssl will have to call AES-CBC and HMAC separately, which\n is easier for us to route to SymCrypt",
"is_bot": false,
"headline": "Intercept stitched AES-CBC + HMAC ciphers and disable them (#50)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-08-30T22:07:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a44b1ea9ee897caaa07587662ce0e83634a14219",
"body": "Do not set -DDBG=1 when build type is RelWithDebInfo",
"is_bot": false,
"headline": "Merge pull request #49 from microsoft/mitchl-dbg-flag",
"author_name": "Mitch Lindgren",
"author_login": "mlindgren",
"committed_at": "2022-08-02T18:58:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0da23a6cb3dc2a0082731faf39127d1e31fce84",
"body": null,
"is_bot": false,
"headline": "Do not set -DDBG=1 when build type is RelWithDebInfo",
"author_name": "Mitch Lindgren",
"author_login": "mlindgren",
"committed_at": "2022-08-01T22:00:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e95a781ff2087e4499ff9a43b331a4365e6f8ec",
"body": "+ Avoid crash on invalid RSA-PSS input\r\n+ Avoid double free if Engine is destroyed multiple times\r\n+ Tweak AES-GCM to only Finalize when passed in pointer of NULL",
"is_bot": false,
"headline": "Use new SymCrypt flags to specify asymmetric key purposes (#48)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-06-06T12:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1e5905b76cbd8fa6ea2f159b92d048cf78884d6",
"body": "+ Use EC_KEY_set_public_key with an EC_POINT created by SCOSSL, rather\r\n than using EC_KEY_set_public_key_affine_coordinates, which also\r\n performs validation that SymCrypt has already taken care of",
"is_bot": false,
"headline": "Avoid redundant EC_KEY tests on key generation (#45)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-05-20T15:28:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "055d83b469acd5fc0dc64372bb47e9d42078d06c",
"body": "+ Copy flags from base methods for RSA and EVP methods\r\n+ Specify the normally unused FIPS flags for ciphers and digests",
"is_bot": false,
"headline": "Ensure method flags are compatible with FIPS mode OpenSSL (#46)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-05-03T17:57:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2962228927aaf3f638a16cd9ca1463edfa604540",
"body": null,
"is_bot": false,
"headline": "Add selftest flags for RSA, ECC and DH (#44)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-03-29T16:52:09Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 24,
"commits_last_year": 21,
"latest_release_at": "2026-07-15T22:32:05Z",
"latest_release_tag": "v1.11.0",
"releases_from_tags": true,
"days_since_last_push": 7,
"active_weeks_last_year": 13,
"days_since_latest_release": 7,
"mean_days_between_releases": 48.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 15,
"stars": 80,
"watchers": 9,
"fork_history": {
"days": [
{
"date": "2021-07-06",
"count": 2
},
{
"date": "2021-11-25",
"count": 1
},
{
"date": "2022-06-29",
"count": 1
},
{
"date": "2023-03-08",
"count": 1
},
{
"date": "2023-11-14",
"count": 1
},
{
"date": "2024-07-25",
"count": 1
},
{
"date": "2024-07-26",
"count": 1
},
{
"date": "2024-08-20",
"count": 1
},
{
"date": "2024-09-27",
"count": 1
},
{
"date": "2025-03-05",
"count": 1
},
{
"date": "2025-09-19",
"count": 1
},
{
"date": "2026-06-03",
"count": 1
},
{
"date": "2026-06-19",
"count": 1
}
],
"complete": true,
"collected": 14,
"total_forks": 15
},
"star_history": null,
"open_issues_and_prs": 6
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 84800,
"source_files_sampled": 122,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 3,
"merged_prs": 146,
"open_issues": 3,
"closed_ratio": 0.824,
"closed_issues": 14,
"closed_unmerged_prs": 5
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "samuel-lee-msft",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/56448320?v=4"
},
{
"type": "User",
"login": "mamckee",
"commits": 57,
"avatar_url": "https://avatars.githubusercontent.com/u/66395252?v=4"
},
{
"type": "User",
"login": "mlindgren",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/945164?v=4"
},
{
"type": "User",
"login": "jasjivsingh-corp",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/209014192?v=4"
},
{
"type": "User",
"login": "SpencerNofzinger",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/8743747?v=4"
},
{
"type": "User",
"login": "MS-megliu",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/185960349?v=4"
},
{
"type": "User",
"login": "microsoftopensource",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/22527892?v=4"
},
{
"type": "User",
"login": "vcsjones",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/361677?v=4"
},
{
"type": "User",
"login": "xumia",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/59720581?v=4"
},
{
"type": "User",
"login": "ccalik",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1865326?v=4"
}
],
"contributors_sampled": 16,
"top_contributor_share": 0.38
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 6,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 6,
"reason": "14 out of 23 merged PRs checked by a CI test -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 7,
"reason": "SAST tool is not run on all commits -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d73b1e9ebf589f5c0098810e74e9556b2bef776a",
"ran_at": "2026-07-23T03:17:15Z",
"aggregate_score": 6.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-16T22:16:27Z",
"oldest_open_prs": [
{
"number": 140,
"created_at": "2025-08-06T01:59:02Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 142,
"created_at": "2025-08-27T19:59:42Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 143,
"created_at": "2025-08-27T20:07:22Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-15T22:32:05Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 114,
"created_at": "2025-04-30T17:45:49Z",
"last_comment_at": "2025-05-22T15:55:43Z",
"last_comment_author": "qmuntal"
},
{
"number": 151,
"created_at": "2025-10-24T10:24:04Z",
"last_comment_at": "2025-10-29T18:33:24Z",
"last_comment_author": "mamckee"
},
{
"number": 170,
"created_at": "2026-06-17T10:52:16Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/microsoft/SymCrypt-OpenSSL",
"host": "github.com",
"name": "SymCrypt-OpenSSL",
"owner": "microsoft"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"security": 64,
"vitality": 69,
"community": 54,
"governance": 75,
"engineering": 42
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"commits_last_year": 21,
"human_commit_share": 1,
"days_since_last_push": 7,
"active_weeks_last_year": 13
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "13/52 weeks with commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 13
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "21 commits in the last year",
"points": 12.1,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 21
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"releases_count": 24,
"latest_release_tag": "v1.11.0",
"releases_from_tags": true,
"days_since_latest_release": 7,
"mean_days_between_releases": 48.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "24 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 24
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~48.2 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 48.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 14,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 14 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 14
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 54,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 45,
"inputs": {
"forks": 15,
"stars": 80,
"watchers": 9,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "80 stars",
"points": 30.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 80
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "15 forks",
"points": 9.6,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 15
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "9 watchers",
"points": 5,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 9
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 75,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 16,
"top_contributor_share": 0.38
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 38% of commits",
"points": 13.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 38
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "16 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 16
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"merged_prs": 146,
"open_issues": 3,
"closed_issues": 14,
"issue_closed_ratio": 0.824,
"closed_unmerged_prs": 5
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "82% of issues closed",
"points": 38.5,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 82
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "146/151 decided PRs merged",
"points": 37,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 146,
"decided": 151
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"followers": 125651,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "microsoft",
"public_repos": 8217,
"account_age_days": 4607
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "125,651 followers of microsoft",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 125651,
"login": "microsoft"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "8217 public repos, account ~12 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 8217
}
},
{
"code": "account_age_years",
"params": {
"years": 12
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 42,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "14 out of 23 merged PRs checked by a CI test -- score normalized to 6",
"points": 12,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 64,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 13,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 5,
"scorecard_aggregate": 6.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "14 out of 23 merged PRs checked by a CI test -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 7",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 12
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 52,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.89,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "89 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 89,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 43,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.03,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "3 of the last 100 commits agent-authored or agent-credited",
"points": 6,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 84800,
"source_files_sampled": 122,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/122 source files over 60KB",
"points": 54.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 122,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-23T03:17:37.232308Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/microsoft/SymCrypt-OpenSSL.svg",
"full_name": "microsoft/SymCrypt-OpenSSL",
"license_state": "standard",
"license_spdx": "MIT"
}
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
