公开记录中等
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-23 03:17 UTC
microsoft / SymCrypt-OpenSSL
OpenSSL engine for use with SymCrypt cryptographic library
microsoft/SymCrypt-OpenSSL 的健康指数为 100 分中的 62 分，处于「中等」区间。 其得分最高的类别是Sustainability & Governance（75/100），最低的是Engineering Quality（42/100）。 最近一次更新在 7 天前。 近期的大部分工作由 2 位贡献者完成。
62
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
62
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
69
开发活跃度
62中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 7 天前 |
| 9/36 | 提交节奏 — 52 周中有 13 周有提交 |
| 12.1/18 | 提交量 — 最近一年 21 次提交 |
| 5/10 | OpenSSF Scorecard：Maintained — 5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5 |
所用输入
| commits_last_year | 21 |
| human_commit_share | 1 |
| days_since_last_push | 7 |
| active_weeks_last_year | 13 |
发布纪律
80良好
评分方式
| 16.2/27 | 有发布版本 — 24 个版本标签（无 GitHub 发布版本） |
| 36/36 | 发布时效 — 最近一次发布版本于 7 天前 |
| 19.8/27 | 发布节奏 — 约每 48.2 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 24 |
| latest_release_tag | v1.11.0 |
| releases_from_tags | 是 |
| days_since_latest_release | 7 |
| mean_days_between_releases | 48.2 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
54
流行度与采用
45存在风险
评分方式
| 30.8/60 | 星标 — 80 个星标 |
| 9.6/25 | 复刻 — 15 个复刻 |
| 5/15 | 关注者 — 9 位关注者 |
所用输入
| forks | 15 |
| stars | 80 |
| watchers | 9 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
65中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 13.5/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 是 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
75
维护者韧性（巴士系数）
59中等
评分方式
| 25.2/54 | 巴士系数 — 2 位贡献者贡献了半数提交 |
| 13.9/22.5 | 提交分布 — 头号贡献者编写了 38% 的提交 |
| 13.5/13.5 | 贡献者广度 — 16 位贡献者 |
| 6/10 | OpenSSF Scorecard：Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
所用输入
| bus_factor | 2 |
| contributors_sampled | 16 |
| top_contributor_share | 0.38 |
议题与 PR 响应能力
90优秀
评分方式
| 38.5/46.8 | 议题解决 — 82% 的议题已关闭 |
| 37/38.3 | PR 接受 — 已裁定的 PR 中 146/151 已合并 |
| 15/15 | OpenSSF Scorecard：Code-Review — all changesets reviewed |
所用输入
| merged_prs | 146 |
| open_issues | 3 |
| closed_issues | 14 |
| issue_closed_ratio | 0.824 |
| closed_unmerged_prs | 5 |
所有权与托管责任
80良好
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 25/25 | 所有者影响力 — microsoft 有 125,651 位关注者 |
| 25/25 | 既往记录 — 8,217 个公开仓库，账户约 12 年 |
所用输入
| followers | 125,651 |
| owner_type | Organization |
| is_verified | — |
| owner_login | microsoft |
| public_repos | 8,217 |
| account_age_days | 4,607 |
工程质量
基础的工程与文档实践是否到位？
42
工程实践
36存在风险
评分方式
| 0/24 | CI 工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 12/20 | OpenSSF Scorecard：CI-Tests — 14 out of 23 merged PRs checked by a CI test -- score normalized to 6 |
所用输入
| has_ci | 否 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
50中等
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 10/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
64
安全态势
64中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 4.5/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 1.5/2.5 | CI-Tests — 14 out of 23 merged PRs checked by a CI test -- score normalized to 6 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 7.5/7.5 | Code-Review — all changesets reviewed |
| 1.5/2.5 | Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
| 0/10 | Dangerous-Workflow — 无数据 |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 3.8/7.5 | Maintained — 5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — 无数据 |
| 3.5/5 | SAST — SAST tool is not run on all commits -- score normalized to 7 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — 无数据 |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 13 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 5 |
| scorecard_aggregate | 6.4 |
已排除计分（无数据或不适用）：dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
52
AI 代理上下文与指引
40存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 100 次人类提交中有 89 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.89 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
验证循环（构建 / 测试 / 类型检查）
43存在风险
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — C（静态类型） |
| 0/10 | 可复现环境 |
| 6/10 | 已体现的代理实践 — 最近 100 次提交中有 3 次由代理编写或署名代理 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — 无数据 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0.03 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Pinned-Dependencies。 其余权重已重新归一化。
面向模型的代码可读性
99优秀
评分方式
| 45/45 | 可类型检查的代码 — C（静态类型） |
| 54.1/55 | 可控的文件大小 — 采样的 122 个源文件中有 2 个超过 60KB |
所用输入
| primary_language | C |
| largest_source_bytes | 84,800 |
| source_files_sampled | 122 |
| oversized_source_files | 2 |
关键数据
80GitHub 星标
16贡献者
21最近 12 个月提交数
7距最近推送天数
24发布版本数
2巴士系数（bus factor）
3开放议题
—软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
更多细节
Star 与 Fork 历史 0 ★ / 15 ⇿
0Star
15Fork
22发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 1次版本 9修订 12
每个点涵盖 5 天。
OpenSSF Scorecard 6.4 / 10
6.4综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 6 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 6 | CI-Tests | 14 out of 23 merged PRs checked by a CI test -- score normalized to 6 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 10 | Code-Review | all changesets reviewed |
| 6 | Contributors | project has 2 contributing companies or organizations -- score normalized to 6 |
| 不适用 | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 5 | Maintained | 5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5 |
| 不适用 | Packaging | packaging workflow not detected |
| 不适用 | Pinned-Dependencies | no dependencies found |
| 7 | SAST | SAST tool is not run on all commits -- score normalized to 7 |
| 10 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 不适用 | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
全部依赖 0
来自 GitHub 依赖图的完整解析依赖集合：0 个直接依赖与 0 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|
依赖安全公告 未评估
本报告未能完成公告比对：No resolved dependencies to assess
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 6597,
"has_wiki": true,
"homepage": null,
"languages": {
"C": 1288908,
"C++": 147286,
"CMake": 20700
},
"pushed_at": "2026-07-15T22:33:01Z",
"created_at": "2021-04-30T23:18:24Z",
"owner_type": "Organization",
"updated_at": "2026-07-11T15:49:50Z",
"description": "OpenSSL engine for use with SymCrypt cryptographic library",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "C",
"significant_languages": [
"C",
"C++"
]
},
"owner": {
"blog": "https://opensource.microsoft.com",
"name": "Microsoft",
"type": "Organization",
"login": "microsoft",
"company": null,
"location": "Redmond, WA",
"followers": 125651,
"avatar_url": "https://avatars.githubusercontent.com/u/6154722?v=4",
"created_at": "2013-12-10T19:06:48Z",
"is_verified": null,
"public_repos": 8217,
"account_age_days": 4607
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.11.0",
"kind": "minor",
"published_at": "2026-07-15T22:32:05Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2026-07-08T19:54:18Z"
},
{
"tag": "v1.9.6",
"kind": "patch",
"published_at": "2026-03-31T21:17:40Z"
},
{
"tag": "v1.9.5",
"kind": "patch",
"published_at": "2026-03-05T17:31:56Z"
},
{
"tag": "v1.9.4",
"kind": "patch",
"published_at": "2025-10-20T23:58:17Z"
},
{
"tag": "v1.9.3",
"kind": "patch",
"published_at": "2025-09-30T20:08:42Z"
},
{
"tag": "v1.9.2",
"kind": "patch",
"published_at": "2025-09-19T15:36:58Z"
},
{
"tag": "v1.9.1",
"kind": "patch",
"published_at": "2025-07-14T22:21:09Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2025-05-21T23:58:31Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2025-05-07T19:24:11Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2025-03-27T01:33:28Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2025-01-29T21:10:59Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2024-11-26T21:28:54Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2024-11-23T04:43:51Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2024-08-21T16:20:31Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2024-08-15T20:01:33Z"
},
{
"tag": "v1.4.3",
"kind": "patch",
"published_at": "2024-05-16T23:19:46Z"
},
{
"tag": "v1.4.2",
"kind": "patch",
"published_at": "2024-04-24T23:51:22Z"
},
{
"tag": "v1.4.1",
"kind": "patch",
"published_at": "2024-04-17T18:47:49Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2024-01-26T00:15:35Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2022-12-29T20:21:54Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2022-06-06T12:46:44Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2022-03-29T16:52:09Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2022-02-17T12:13:06Z"
}
],
"recent_commits": [
{
"oid": "d73b1e9ebf589f5c0098810e74e9556b2bef776a",
"body": "* ML-DSA stubs\n\n* Keymgmt function stubs\n\n* ML-DSA key management\n\n* ML-DSA signatures\n\n* ML-DSA tests\n\n* ML-DSA decoder\n\n* ML-DSA encoder\n\n* Fix compat with OpenSSL 3.3.5\n\n* Move ML-DSA test files\n\n* Cleanup. Use fallthrough comment instead of attribute\n\n* Add TLS SIGALG capability\n\n* Add missing m\n[…]\nam\n\n* PR comments\n\n* Additional fixes to encoder interface\n\n* PR comments\n\n* PR comments\n\n* Fix type for OSSL_PKEY_PARAM_MAX_SIZE\n\n* PR comments\n\n* PR comments\n\n* Cleanup\n\n* PR comments\n\n* PR comments",
"is_bot": false,
"headline": "Add Pure ML-DSA to the SymCrypt provider (#161)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-07-08T16:14:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "665878722481057cab6504fc47c1e2cb2a406eb7",
"body": "* Add composite functions\n\n* Add RSA sigalg interface\n\n* Add RSA sigalg implementations\n\n* Separate rsa sigalg functions into another file.\n\n* ECDSA composite signature implementation\n\n* Clean up RSA\n\n* Cleanup\n\n* Improve ECC error messaging and parameter validation\n\n* Harden RSA input validation and PR comments\n\n* Add sigalg tests\n\n* PR comments\n\n* Correct digest too short test\n\n* Reset ECDSA signature on init\n\n* PR comments",
"is_bot": false,
"headline": "Add composite signature interface for RSA and ECDSA signatures (#166)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-07-07T01:02:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43604f8996104cbe659a3dd66a6e388d985b8d37",
"body": "* digests: add missing NULL parameter checks\n\nMirror NULL-parameter checks performed by the OpenSSL default\nprovider in providers/implementations/digests/.\n\n- p_scossl_shake_set_ctx_params: check ctx and params for NULL\n- p_scossl_cshake_set_ctx_params: check ctx and params for NULL\n- p_scossl_cshak\n[…]\nuthored-by: Copilot <223556219+Copilot@users.noreply.github.com>\nCo-authored-by: Copilot <copilot@github.com>\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
"is_bot": false,
"headline": "Harden parameter checks in provider functions (#168)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-07-01T23:26:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3fab1d17d73d0b713b1665256473be998d4a68bc",
"body": "* Compare correct values in rsa match\n\n* Use correct bit size for DH P and Q in dup\n\n* Update RSA encrypt/decrypt input validation to match default implementation\n\n* Use correct bit lengths in copy group only case for DH\n\n* Add mac initialized flag\n\n* Compare to correct mac stize in aes\n\n* Fix RSA s\n[…]\nvate key import scratch space. Validate x25519 size\n\n* Fix skeymgmt compiler warning\n\n* cleanup\n\n* Use fallthrough comment instead of attribute\n\n---------\n\nCo-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "Provider bugfixes (main branch) (#169)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-06-26T18:55:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f5fa8eb1fa7ada0fd05f7bc2b85cf1741e85d492",
"body": "* Pass SYMCRYPT_FLAG_KEY_NO_FIPS for x25519 import\n\nRFC 7748 accepts any 32-byte string as a public key, including\nlow-order and on-twist points. These do not satisfy the FIPS subgroup\ncheck performed by SymCryptEckeySetValue. Since X25519 is not a FIPS\nalgorithm, pass SYMCRYPT_FLAG_KEY_NO_FIPS to s\n[…]\n Use correct variable for malloc\n\n* Add additional wycheproof test vectors\n\n---------\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>\nCo-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "Support low-order, on-twist, and non-canonical x25519 keys (#167)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-06-22T23:59:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "eea7cc4a79dcb17b43b20e12bc7ecebfc86f3515",
"body": "* Add AES and generic SKEY mgmt interfaces\n\n* Add AES SKEY integration\n\n* Add cmac skey support\n\n* Set minimum OpenSSL version and address copilot comments.\n\n* Clean up skey import signature\n\n* PR comments. Allow empty generic secrets",
"is_bot": false,
"headline": "Add generic and AES SKEY support (#163)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-04-13T17:26:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9acd1eb7a4c07960636fb527835c60cee351e45e",
"body": "* Only concatenate info from same set_params call\n\n* Export HKDF size parameter",
"is_bot": false,
"headline": "Clear HKDF info when set from params (#160)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-03-05T17:29:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "855de797e685395665b1c6cfa0f251dffb4dad37",
"body": "* Support new digest copy context function\n\n* Only compile new functions where supported",
"is_bot": false,
"headline": "Add digest context copy function (#158)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-03-04T20:17:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e453f08306e8ec7d0235d2754db1b317060d383b",
"body": "…SL versions (#159)\n\n* Additional fixes for block ciphers in TLS connections (#145)\n\n* Allow optional mac in TLS block decrypt\n\n* Fix issue found for TLSv1 connections\n\n* Bump minor version\n\n* Add comments describing etm behavior\n\n* Bugfixes for 1.9 (#150)\n\n* Add OSSL_SIGNATURE_PARAM_NONCE_TYPE to E\n[…]\nt\n\n* Fix error messages\n\n* Fix compilation\n\n* Add missing parameter on older versions\n\n* Fix errors in OpenSSL 3.0 builds\n\n* Use dummy OID on older versions for ml-kem composite\n\n* Use valid dummy OID",
"is_bot": false,
"headline": "Integrate changes from 1.9 branch and fix compilation for older OpenS…",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-03-04T20:17:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eca0d4ecd7192b05894ebdec09865ed1b2dfc976",
"body": "* Stub out ML-KEM interfaces\n\n* Split mlkem standalone key management\n\n* Standalone MLKEM\n\n* Hybrid key management\n\n* Re-add hybrid ML-KEM\n\n* Separate ML-KEM decoders\n\n* Separate MLKEM encoders\n\n* Cleanup\n\n* Add comment indicating hybrids are only for TLS\n\n* Cleanup and add explicit ikme rejection\n\n* Add mlkem evp_test\n\n* PR comments\n\n* Don't use boolean operators on SCOSSL_STATUS",
"is_bot": false,
"headline": "Update ML-KEM for compatibility with OpenSSL 3.5 implementation (#153)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-01-30T22:26:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd9cca401eccdc9b455ee84f74e6d9c9d714353e",
"body": "* Check output size of RSA encrypt\n\n* Check pbkdf size before passing to SymCrypt\n\n* Fix RSA keydup logic to match OpenSSL behavior\n\n* Allow zero length secrets and salts for HKDF and TLS1_PRF\n\n* Validate PBKDF salt and iteration count in set param in non-pkcs5 mode\n\n* zalloc AES context\n\n* Validate\n[…]\n match OpenSSL default\n\n* Return -1 for ECDSA error\n\n* Remove references to UINT type from symcrypt\n\n* Bump minimum required SymCrypt\n\n* Undo change to provider function parameter types\n\n* PR comments",
"is_bot": false,
"headline": "Bugfixes to SymCrypt-OpenSSL for OpenSSL 3.5 (#155)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2026-01-23T17:51:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1cc5fd90d2e20dde9153d842d526f846509967d3",
"body": "* Implement fork handling for keysinuse context management\n\n* Refactor keysinuse context management for fork handling\n\n* Fix fork safety in keysinuse by recreating locks\n\n* Revert \"Fix fork safety in keysinuse by recreating locks\"\n\nThis reverts commit 0a6a3ea92a4e07df8a20c4f091025d46f710994a.",
"is_bot": false,
"headline": "Implement fork handling for keysinuse context management (#154)",
"author_name": "jasjivsingh-corp",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-12-12T17:48:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f0a841d59eae5f832546127cc48bc68bd27f4f2",
"body": "…s-support\n\nToggle keyinuse using KEYSINUSE_ENABLED env var",
"is_bot": false,
"headline": "Merge pull request #152 from microsoft/jasjivsingh-keyinuse-breakglas…",
"author_name": "jasjivsingh-corp",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-12T22:52:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c0dcbac866923ecb52c7fb0afd314c890a4ff41",
"body": null,
"is_bot": false,
"headline": "added checks in parent and fork process for env",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-11T23:48:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "092918ddc668311cbc7e143002903a722a195100",
"body": "…breakglass-support",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main' into jasjivsingh-keyinuse-…",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-11T21:58:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57c656c19f6649466585819f39a338ad21177492",
"body": "use pthread_atfork handler for ngnix support",
"is_bot": false,
"headline": "Merge pull request #149 from microsoft/jasjivsingh-fork-ngnix-support",
"author_name": "jasjivsingh-corp",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-06T22:05:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4138660364edcd93f658425e3e01922ca8c50266",
"body": null,
"is_bot": false,
"headline": "added an additional check for pthread_atfork",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-06T21:55:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98ae04a9a776f31e7888c168d5b69155732f0dac",
"body": null,
"is_bot": false,
"headline": "disable keyinuse if locks are not created",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-06T21:14:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb078961d25bc6adb23b6ddadb0045c6860bec06",
"body": null,
"is_bot": false,
"headline": "Added keyinuse env var for breakglass scenarios",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-11-05T22:41:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad821115e0662498502b183b69224ff6e02a41b4",
"body": null,
"is_bot": false,
"headline": "added keysinuse_reset_key_ctx and feedback",
"author_name": "Jasjiv Singh",
"author_login": "jasjivsingh-corp",
"committed_at": "2025-10-13T23:04:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe39b66fe26a53e8e39cad19077873050977e82d",
"body": null,
"is_bot": false,
"headline": "use pthread_atfork handler for ngnix support",
"author_name": "Jasjiv Singh",
"author_login": null,
"committed_at": "2025-10-06T20:14:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a69991efb7cb07ba7f799bbff72696e35d58b343",
"body": "* Based on additional fixes made when porting previous fix to 1.9 branch\n (#135)\n* Check for failure in CRYPTO_THREAD_lock_new\n* Reduce scope for unexpected behavior in RSA keygen",
"is_bot": false,
"headline": "Additional allocation hardening (#137)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2025-07-17T20:38:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a6a595d5e7d3187a67312771647e1ec9f82365a",
"body": "…cations (#133)\n\n* Refactor logic to avoid use of uninitialized memory and improve\nconsistency\n\n* Fix up a few more nitpicks\n\n+ Potential memory leak in common gcm init ctx (never hit with provider,\n but could be hit from engine)\n+ Consistency of dupctx ERR and assignment\n\n* Fix some unhandled OPENSSL_strdup failures",
"is_bot": false,
"headline": "Fix use of uninitialized memory and consistency of code handling allo…",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2025-07-11T00:53:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3dd13a32d77c57f85d6639942183165268f462f",
"body": "Builds on fix: compatibility issue between SCOSSL and TLS 1.2 ciphersuites which use HMAC in AzL3 #129 but handles overly large padding on decryption\n\nAddresses bug 58142883\nError Message:\nopenssl s_client -connect tcs.microsoftstore.com.cn:443 -tls1_2 -cipher ECDHE-RSA-AES256-SHA384\n40D79C8E857B000\n[…]\nmac in decryption path.\n(3) fix typo in 1.10 for public key export\n\nTest:\n(1) sslplay passed\n(2) openssl s_client -connect tcs.microsoftstore.com.cn:443 -tls1_2 -cipher ECDHE-RSA-AES256-SHA384 worked.",
"is_bot": false,
"headline": "Fix for TLS 1.x CBC ciphersuites (#130)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2025-07-10T00:18:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9ed0b76305ae73a3b121cccc74758a4e682089f1",
"body": "CFB fix. change the blocksize to 1 for all CFBs per\nhttps://docs.openssl.org/3.0/man3/EVP_EncryptInit/#gettable-evp_cipher-parameters:~:text=%22blocksize%22%20(OSSL_CIPHER_PARAM_BLOCK_SIZE,the%20cached%20value.\n\ntest:\n(1) test code from sql team passed.\n(2) sslplay passed.\n(3) buddy pipeline, functional test pipeline successfully.",
"is_bot": false,
"headline": "CFB fix. change the blocksize to 1 for all CFBs (#131)",
"author_name": "MS-megliu",
"author_login": "MS-megliu",
"committed_at": "2025-07-09T00:05:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4bb48f877b04e2ef41eee7b84a20b2ad3d83bc0",
"body": null,
"is_bot": false,
"headline": "Test fixes (#127)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-06-12T00:07:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e453388464a441ba6399c44951b49406b52dafb",
"body": "The SymCrypt provider does not currently support Brainpool curves. The curves are not used within Microsoft, but have some 3P usage. The curves should be added to the SymCrypt provider for compatibility.\n\nbrainpoolP256r1\nbrainpoolP256t1\nbrainpoolP384r1\nbrainpoolP384t1\nbrainpoolP512r1\nbrainpoolP512t1\n[…]\nc:122\n # Starting \"ECDH KATs (RFC 7027)\" tests at line 555\n # INFO: @ test/testutil/stanza.c:32\n # Completed 60 tests with 0 errors and 0 skipped\n ok 1 - iteration 1\nok 1 - run_file_tests",
"is_bot": false,
"headline": "Support Brainpool curves (#126)",
"author_name": "MS-megliu",
"author_login": "MS-megliu",
"committed_at": "2025-06-11T19:06:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1de12ca525aabb9ebfd7556d3ff45048f605d58a",
"body": "SymCrypt-OpenSSL Provider should implement the TLS13-KDF. Added support.\nhttps://docs.openssl.org/3.0/man7/EVP_KDF-TLS13_KDF/\n\nTesting:\nUsed Openssl's evpkdf_tls13_kdf.txt data file, all 562 test cases passed.\n\n# Reading EvpTestRecipes/3.0/evpkdf_tls13_kdf.txt\n# INFO: @ test/testutil/stanza.c:122\n#\n[…]\n\n# INFO: @ test/testutil/stanza.c:122\n# Starting \"TLS13-KDF bad mode test\" tests at line 4931\n# INFO: @ test/testutil/stanza.c:32\n# Completed 562 tests with 0 errors and 0 skipped\nok 1 - iteration 1",
"is_bot": false,
"headline": "TLS1.3KDF support (#118)",
"author_name": "MS-megliu",
"author_login": "MS-megliu",
"committed_at": "2025-06-11T18:57:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f98b2990b872ce995b44ab95e65e8c0a292e580",
"body": "* Stub new keysinuse functions. Add TODOs\n\n* Context management functions\n\n* Update public API functions to use new context and lhash\n\n* Use lhash from the logging thread\n\n* Update RSA and ECC to use new API calls\n\n* Add KeysInUse test\n\n* Bugfixes from testing\n\n* Implement keysinuse tests\n\n* Add sta\n[…]\nr to fetch Key ID\n\n* Use systemd logging with metadata\n\n* Enforce libsystemd requirement in cmake\n\n* Put logging prefix behind ifdef, better syslog verbosity, and additional null checks\n\n* PR comments",
"is_bot": false,
"headline": "Export KeysInUse as an API (#125)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-06-10T20:50:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "89330e920b135be86d17fd47046f6a4b0590ef1d",
"body": "Support ffdhe6144 and ffdhe8192 in the SymCrypt provider\n\ntesting:\nadded ffdhe6144 and ffdhe8192 in sslplay. sslplay passed.",
"is_bot": false,
"headline": "FFDHE: Support ffdhe6144 and ffdhe8192 in the SymCrypt provider (#124)",
"author_name": "MS-megliu",
"author_login": "MS-megliu",
"committed_at": "2025-06-07T00:00:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c076f5badcab4b6e94dd1fdba9eb1fc29f7720b",
"body": "support RSA key size 512 generate in SymCrypt provider.\n\nTesting:\nadded: TestRsaEvp(512, 65537)\nsslplay passed.",
"is_bot": false,
"headline": "Support RSA512 generate in SymCrypt provider (#123)",
"author_name": "MS-megliu",
"author_login": "MS-megliu",
"committed_at": "2025-05-30T18:57:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82fb9ce10365fc0e636b59cf5dddd4762fcd88d3",
"body": "* Update version\n\n* Only optimize release builds\n\n* Fix typos in readme\n\n* Add compilation flags to resolve pipeline build warnings\n\n* Use specific build flags\n\n* Add O2 to SslPlay for fortify source\n\n* Remove SslPlay options",
"is_bot": false,
"headline": "Only compile with optimizations for release builds and fix typos (#122)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-05-23T20:33:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaa0dc54c23f59e9c9dcc4a2b2cbc06542fbca30",
"body": "* Mamckee/gcm leak (#116)\n\n* Add free back to GCM IV set\n\n* Update minor version\n\n* Update version for merge\n\n* Update version to 1.10.0-dev",
"is_bot": false,
"headline": "RI fixes in 1.8.1 into main (#120)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-05-22T00:08:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a97319e5a54d96bb4f8e792de1567b6767943d7",
"body": "* Add exportable digests\n\n* Put common functions in macro expansion\n\n* Update SslPlay to test and validate exported hash states\n\n* Update version and fix typo in readme\n\n* Turn off optimization for debug builds\n\n* Cleanup and add SHA3\n\n* Use fixed length array for state export\n\n* Fix pipeline errors\n\n* Revert \"Turn off optimization for debug builds\"\n\nThis reverts commit 520bd0b51756de46378fece0e1070bece51293c7.\n\n* Fix SslPlay argument parsing",
"is_bot": false,
"headline": "Support digest state export for MD5, SHA1, and SHA2 digests (#117)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-05-21T23:18:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2988e46b5bff87aa150526352ca19b677975fe74",
"body": "* Boilerplate mlkem kem and keymgmt interfaces\n\n* ML-KEM key management\n\n* ML-KEM KEM interface\n\n* Update to latest APIs\n\n* ML-KEM decoder\n\n* MLKEM PEM and DER encoder. Refactor decoder\n\n* Consolidate ML-KEM decoder\n\n* MLKEM text encoder and bugfixes\n\n* Start of hybrid implementation\n\n* ML-KEM hyrbi\n[…]\nt errors\n\n* PR comments\n\n* PR comments\n\n* Only copy modified private bits with key material\n\n* PR comments and cleanup\n\n* Merge branch 'main' into mamckee-ml-kem\n\n* PR comments\n\n* Fix ML-KEM constants",
"is_bot": false,
"headline": "ML-KEM and ML-KEM hybrid (#103)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-04-08T18:03:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c4aac63a63e47d47b1f69da46fc604fc5825fc63",
"body": "* Only reset IV for new IV length. Track iv and tag state in ccm\n\n* Update tagSet after ccm encrypt\n\n* Free rsa private exponent in import\n\n* Secure malloc and free primes and private exponent",
"is_bot": false,
"headline": "Proper state management for AES GCM and CCM (#112)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-03-27T01:33:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b08f1c47b442f0f5be934b7b26ab11d53b7d480",
"body": "…113)",
"is_bot": false,
"headline": "Clamp keysinuse max file size to SCOSSL_MAX_CONFIGURABLE_FILE_SIZE (#…",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-03-24T19:50:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d44df366a2a2912e69ef1a18c12936397989ef2a",
"body": "* PBKDF2 outline\n\n* Parameters and context\n\n* PBKDF2 implementation\n\n* Cleanup\n\n* Bump version\n\n* PR comments\n\n* Use new logging macros after rebase\n\n* Set cbPassword early",
"is_bot": false,
"headline": "PBKDF2 (#101)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-03-07T22:25:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d07487deb9e3e83764b36165c0e936c89a34aa88",
"body": "* Fix potential deadlock for multithreaded applications\n\n* Avoid double alloc of keysinuse lock\n\n* Always create logging dir on start if not present\n\n* Fix valgrind leaks\n\n* Cleanup TLS-PRF mdname in free\n\n* Set ownership of directory if created\n\n* Add comment about logging, set umask, and fix max file size",
"is_bot": false,
"headline": "KeysInUse and memory fixes (#110)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-03-06T00:17:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e61044d52bba0ae1b7072f5275a7236833a66af7",
"body": null,
"is_bot": false,
"headline": "fix cut-n-paste bug (#111)",
"author_name": "efer-ms",
"author_login": "efer-ms",
"committed_at": "2025-03-06T00:01:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "300cf4d9c42311c8323dc574b73b156a5c2bad11",
"body": "* Fix RSASSA-PSS keygen\r\n\r\n* Only set key type restriction in keygen. Use keytype instead of padding in key context\r\n\r\n* Remove unused member",
"is_bot": false,
"headline": "Restrict padding for generated RSASSA-PSS keys (#107)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-02-12T19:41:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aebe8e04c6b14f92b5ee16f68bc1abadb3bcb4b3",
"body": null,
"is_bot": false,
"headline": "Use hardcoded minimum version instead of version from headers (#106)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-02-12T19:41:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fe8cd6400a320853054f19cccd705e7665a9025",
"body": null,
"is_bot": false,
"headline": "Only use xoflen for final operation (#105)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-02-04T17:00:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bf988bf5a87a6a901234badff007e88927a5b89",
"body": "* Bump version\r\n\r\n* Split SHAKE test file for engine testing\r\n\r\n* Disable KeysInUse in default config\r\n\r\n* Fix provider name in tests\r\n\r\n* Fix child libctx creation\r\n\r\n* Remove fips provider test\r\n\r\n* Split provider and engine docs\r\n\r\n* Provider readme\r\n\r\n* Update SCOSSL provider readme\r\n\r\n* Add not\n[…]\ne documentation referencing each other\r\n\r\n* Use availablein keyword for digests\r\n\r\n* Fix typos and update configuration file path\r\n\r\n* Fix typo in SymCryptProvider README.md\r\n\r\n* Fix typo in README.md",
"is_bot": false,
"headline": "Prepare and cleanup for 1.7.0 (#104)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-01-29T21:10:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e60a3353d3ad24df7c93633c2a2e316df3071bcc",
"body": "* Add RSA fallback test\r\n\r\n* Update error function codes to match refactor\r\n\r\n* Surface SymCrypt errors from provider\r\n\r\n* Allow logging configuration\r\n\r\n* Add debug logging to keysinuse init\r\n\r\n* Add RSA and ECC keysinuse debug logs\r\n\r\n* PR comments\r\n\r\n* Add FIPS compliance logging to unpadded RSA encrypt/decrypt\r\n\r\n* PR comments\r\n\r\n* Create separate provider loggin calls without func code",
"is_bot": false,
"headline": "Update error handling and debug logging (#92)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-01-15T22:52:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8e9f21392e2e938edddefae342155103e65434f",
"body": "* Check that ECDSA signature is a sequence of two integers without trailing data\r\n\r\n* Return authenticated bytes for AEAD ciphers if out is NULL",
"is_bot": false,
"headline": "Provider behavior fixes (#102)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2025-01-03T18:25:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "405a016466627408da4d73159292082a2b0083a7",
"body": "Ensure that CMakeLists.txt versions are up to date",
"is_bot": false,
"headline": "Update CMakeLists.txt versions (#100)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2024-11-26T21:28:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42f9c2193f7f8e04744c612552cc3a4d6727a0cd",
"body": null,
"is_bot": false,
"headline": "Initialized EVP_MD values to NULL (#99)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-11-26T20:16:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3211181ec32ecd20c16990f437872e956219cee2",
"body": "* Use OSSL_LIB_CTX_new_child instead of OSSL_FUNC_CORE_GET_LIBCTX\n\n* Allow no digest for PKCS1 sign/verify\n\n* Allow RSA import from private exponent\n\n* Fix PKCS1 no digest errors\n\n* Bugfixes for RSA private exponent import\n\n---------\n\nCo-authored-by: Samuel Lee <saml@microsoft.com>",
"is_bot": false,
"headline": "Additional provider RSA compatibility (#98)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-11-23T04:43:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61ea9b110aa3357cc2218e4584a27ae4e62249f8",
"body": "* Expose new digests to signature and MAC algorithms\r\n\r\n* Add missing digest implementations\r\n\r\n* Update tests with new digests\r\n\r\n* Cleanup and fix PKCS1 signatures with MD5-SHA1\r\n\r\n* Return correct algorithm",
"is_bot": false,
"headline": "Add missing digests (#97)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-11-23T04:31:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c45c9ee05e354bdd7eaeeb2154e4509c6312b136",
"body": "* HKDF and TLS1-PRF EVP_PKEY wrapper\r\n\r\n* Cleanup\r\n\r\n* Use const value for KDF KeyExch",
"is_bot": false,
"headline": "HKDF and TLS1-PRF EVP_PKEY key exchange wrapper (#96)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-11-21T22:45:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98749e496dce6e1ba177a1a9499857228b449057",
"body": "* Refactor digests to use SymcryptHash* functions\r\n\r\n* Additional refactor and add SHAKE\r\n\r\n* Bump version\r\n\r\n* Add CSHAKE\r\n\r\n* Add MD testing and fix uncovered bugs\r\n\r\n* Delay init and restrict parameters during update operation\r\n\r\n* Cleanup\r\n\r\n* Put digest squeeze behind ifdef\r\n\r\n* Move new parame\n[…]\nparate file\r\n\r\n* Don't dynamically alloc cshake state\r\n\r\n* Rename function name string parameter\r\n\r\n* PR comments\r\n\r\n* Init in extract if update has not been called\r\n\r\n* Track cshake state in provider",
"is_bot": false,
"headline": "Add SHAKE and CSHAKE (#90)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-10-15T19:18:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7a7215d3ad809168783605abacb52bcc991d5e6e",
"body": "* Boilerplate implementation\r\n\r\n* sskdf implementation\r\n\r\n* Update function call\r\n\r\n* Add SymCrypt version constraint\r\n\r\n* Cleanup\r\n\r\n* Revert changes to p_scossl_sskdf_dupctx",
"is_bot": false,
"headline": "Add SSKDF (SP800-56C) (#93)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-10-15T16:56:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1befa15c9847a741ef72cab175c848b71cf1e323",
"body": "* Boilerplate code\r\n\r\n* Context and parameters\r\n\r\n* Reset and derive\r\n\r\n* Parameters\r\n\r\n* Add SRTP tests and fix errors\r\n\r\n* Add SRTCP\r\n\r\n* Additional key length tests\r\n\r\n* Move new parameter names to a separate file\r\n\r\n* Cleanup\r\n\r\n* Check uIndexWidth is acceptable value\r\n\r\n* Add default label value\r\n\r\n* Make unset label a macro for readability",
"is_bot": false,
"headline": "Add SRTP KDF (#91)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-10-08T17:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df8c9c671db4b02eb7f0fbc6ac39769dfd6cb760",
"body": "…th (#94)\n\nusr/CACHE;PATH;Path to OpenSSL providers;lib/symcryptprovider.so\r\nvs\r\nusr/lib/symcryptprovider.so\r\n\r\nSigned-off-by: Alejandro Hernandez Samaniego <alhe@linux.microsoft.com>\r\nCo-authored-by: Alejandro Hernandez Samaniego <alhe@linux.microsoft.com>",
"is_bot": false,
"headline": "cmake: fixup CMakeLists to avoid installing libraries in incorrect pa…",
"author_name": "Alejandro H",
"author_login": "ahcbb6",
"committed_at": "2024-09-30T15:52:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07ccc8be925043f6f539d33d3d73fc34928b9203",
"body": "* Fix RSA unsupported fallback\r\n\r\n* Turn default log level off",
"is_bot": false,
"headline": "Fix engine behavior (#89)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-09-04T20:24:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f341f4c64d349a8e11a61b3c8be09f23d0236ca8",
"body": null,
"is_bot": false,
"headline": "Remove GCM nonce restriction comment (#88)",
"author_name": "Kevin Jones",
"author_login": "vcsjones",
"committed_at": "2024-09-04T19:55:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65f24e4834af2f251b208b00b2cca565c13494d3",
"body": "* Fix build for engine 1.1.1 sshkdf\r\n\r\n* Fix regression with e_scossl_get_symcrypt_hash_algorithm\r\n\r\n* Fix outdated function name in SslPlay",
"is_bot": false,
"headline": "Fix SSH KDF engine (#85)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-08-21T16:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61e917315092b830238181e8589a634d7fb84d0e",
"body": "* Correct log messages to say digest where they said Hmac\r\n\r\n* Use 'hash' instead of 'digest'",
"is_bot": false,
"headline": "Correct log messages to say hash where they said Hmac (#87)",
"author_name": "Kevin Jones",
"author_login": "vcsjones",
"committed_at": "2024-08-21T16:20:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9300d58eed7dd02202a3dc0b495926eb097b226",
"body": "* Explicitly set outl for zero inl\r\n\r\n* Return null check to internal function\r\n\r\n* Restore null checks for internal block ciphers and correct SAL annotations\r\n\r\n* Support larger/smaller buffers for key exchange\r\n\r\n* Return sufficient buffer size for ECDSA size\r\n\r\n* Fix returns for ECDH size request and bump version",
"is_bot": false,
"headline": "Behavior fixes for API compatability (#86)",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-08-21T16:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81bfe457ed2e757f2806fa7fdbbb06257c5e81f8",
"body": "* Expose EC X and Y as parameters\r\n\r\n* Make AES-CFB compatible with OpenSSL stream cipher calling pattern\r\n\r\n* Cleanup\r\n\r\n* PR comments, address in == out case\r\n\r\n* Comment",
"is_bot": false,
"headline": "Fixes for tpm2 (#84)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-08-15T20:01:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab6d48fbc993e76425895bdc22c54b91917148c1",
"body": "* Keysinuse test fixes\r\n\r\n* Move variable declaration outside of case statement",
"is_bot": false,
"headline": "Various provider bugfixes (#83)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-07-26T01:16:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a67355c13e4c4759262ea9e3a04e57726f73607",
"body": "* KeysInUse logging thread\r\n\r\n* KeysInUse behavior control\r\n\r\n* Keysinuse logging\r\n\r\n* Connect keysinuse to provider init\r\n\r\n* ECDSA keysinuse\r\n\r\n* RSA keysinuse\r\n\r\n* Properly free and upref keysinuse info\r\n\r\n* Bugfixe found in first testing\r\n\r\n* Allow KB, MB, GB suffixes for file size\r\n\r\n* Associat\n[…]\nInUseInfo in keyctx behind lock. Reset on new key material\r\n\r\n* Second round PR comments\r\n\r\n* Separate teardown function\r\n\r\n* Initialize i\r\n\r\n* PR comments\r\n\r\n* PR comments and cleanup merge conflicts",
"is_bot": false,
"headline": "Initial KeysInUse integration (#74)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-06-05T19:07:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b27f691f262f738e4745d8259b8a0d1e3444a5de",
"body": "Fix CMake file to avoid installing libraries incorrect path",
"is_bot": false,
"headline": "Merge pull request #81 from microsoft/user/mitchl/alejandro_overlake_fix",
"author_name": "Mitch Lindgren",
"author_login": "mlindgren",
"committed_at": "2024-05-29T00:26:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a374548dd608876bcdb919fb17f23f1480fe7196",
"body": "…red libraries in:\n\n/usr/CACHE;PATH;Path to OpenSSL engines;lib/engines-1.1/symcryptengine.so\n\nSigned-off-by: Alejandro Hernandez Samaniego <alhe@linux.microsoft.com>",
"is_bot": false,
"headline": "Avoids incorrectly parsing cmake file resulting in installing the sha…",
"author_name": "Mitch Lindgren",
"author_login": "mlindgren",
"committed_at": "2024-05-28T23:53:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cc0f7d743b5b0bb5048873a0194d46df836141f",
"body": "* Move initialization after copying functions\r\n\r\n* Support OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT\r\n\r\n* Initialize parameters in p_scossl_aes_copy_mac\r\n\r\n* Fix remaining test failures due to RSA provider implementation\r\n\r\n* Fix remaining test errors due to provider ECC\r\n\r\n* Check HMAC md by name \n[…]\ngroup is passed by the caller\r\n\r\n* Support variable length GCM IV in engine\r\n\r\n* Re-remove XTS key set error tests for engine\r\n\r\n* Remove fetched alloc functions\r\n\r\n* Fix memory leaks\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Provider and Engine bugfixes (#80)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-05-16T23:19:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bf78204684e208690ca5c845d2a686e04c44868b",
"body": null,
"is_bot": false,
"headline": "Fix memory leaks",
"author_name": "Maxwell Moyer-McKee",
"author_login": "mamckee",
"committed_at": "2024-05-15T21:51:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef91a8827e5ca7cab7db2858dd9a185c4d8a932d",
"body": "* Return correct ctx in kmac_dupctx\r\n\r\n* Correct error check in dh export\r\n\r\n* Support RSA algorithm ID parameter\r\n\r\n* Support OSSL_PKEY_PARAM_EC_ENCODING parameter\r\n\r\n* Support algorithm ID in ECDSA\r\n\r\n* Track DH group independant of key\r\n\r\n* Add libcrypto as link target for provider\r\n\r\n* DH fixes for SSL layer\r\n\r\n* Support TLS mode for AES block ciphers and styling\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Bugfixes for TLS connections (#78)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-04-24T23:51:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ef3602eced13ccf2ed6558d44b710e5e92f4f04",
"body": "* Fix errors in SslPlay\r\n\r\n* Add EVP test recipes\r\n\r\n* Update permissions\r\n\r\n* Update test cases\r\n\r\n* Update test recipes\r\n\r\n* Fix 1.1.1 engine errors in testing\r\n\r\n* Move 3.0.2 test files\r\n\r\n* Fix tests\r\n\r\n* Fix errors found in test\r\n\r\n* Split RSA tests\r\n\r\n* Outstanding test fixes\r\n\r\n* Rely on patc\n[…]\nt folder\r\n\r\n* Update test readme\r\n\r\n* Nit: spacing\r\n\r\n* IV null check in correct function\r\n\r\n* Update version and name to match expected\r\n\r\n* Add named curve only test for Azure Linux\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Update tests for OpenSSL 3 and fix bugs found in test (#77)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-04-17T18:47:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5361693ec536c34105bf741432fb120ad792b4d4",
"body": "* Function stubs\r\n\r\n* SP800-108 counter\r\n\r\n* KMAC KBKDF\r\n\r\n* Cleanup\r\n\r\n* PR comments\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Provider KBKDF (SP800-108) (#76)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-03-08T17:03:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2cb7fdc5b875a34ce08b7204df53c11eba29fa3",
"body": "* Properly support restricted PSS keys\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Properly support restricted PSS keys (#75)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-03-06T00:01:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "571dfb06bb2844afa7dfb76a84531bd921ff9d89",
"body": "* Fix 3.0 compatability issues\r\n\r\n* Check major version too\r\n\r\n* PR comment",
"is_bot": false,
"headline": "Fix 3.0 compatability issues (#73)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-02-07T22:43:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7ffa3f046aac4da8a5070a667b57cb40d976380",
"body": "* Fix TLS errors due to parameter types\r\n\r\n* Fix rsa errors\r\n\r\n* Add basic default config\r\n\r\n* Fix typo",
"is_bot": false,
"headline": "Various provider bugfixes (#72)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2024-01-26T00:15:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6ee55f08954ba5bd4ad0b2075daaf4f5da937d5",
"body": "* Stub DH functions in provider\r\n\r\n* Provider DH key mgmt\r\n\r\n* DH provider\r\n\r\n* Full DH support\r\n\r\n* Fix warnings\r\n\r\n* Require only private or public key for key import\r\n\r\n* Cleanup\r\n\r\n* Engine use common implementation for DH\r\n\r\n* Engine fixes\r\n\r\n* Better error checking in provider\r\n\r\n* PR comments\r\n\r\n* PR comments\r\n\r\n* Copy correct group into dupctx",
"is_bot": false,
"headline": "Provider DH (#71)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-12-14T22:21:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd21ea8031677ca97f74c4dc85085c892160a5f4",
"body": "* x25519 key management\r\n\r\n* x25519 exchange\r\n\r\n* Fetch hidden 25519 curve from separate function\r\n\r\n* Advertize TLS group capability\r\n\r\n* Fix warning\r\n\r\n* Address comments\r\n\r\n* Address comments and fix discovered tls errors\r\n\r\n* PR comments\r\n\r\n* Fix size update",
"is_bot": false,
"headline": "Provider X25519 (#70)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-12-14T19:15:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c16e31d4e6c6c72bf2ef1058eb9659dd7efb1bdf",
"body": "* HMAC stubs\r\n\r\n* Common hmac implementation\r\n\r\n* Typedef aligned context type for readablity\r\n\r\n* Provider HMAC\r\n\r\n* Refactor engine hmac\r\n\r\n* KMAC stubs\r\n\r\n* Provider KMAC\r\n\r\n* CMAC\r\n\r\n* Make mac implementations more generic\r\n\r\n* Route cmac to common mac implementation\r\n\r\n* Clean up kmac\r\n\r\n* Validate engine build\r\n\r\n* Additional refactoring and cleanup\r\n\r\n* Address PR comments\r\n\r\n* Address PR comments\r\n\r\n* Address PR comments and ad SHA3 HMAC\r\n\r\n* zalloc in mac duplication\r\n\r\n* PR comments",
"is_bot": false,
"headline": "Provider MAC (#66)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-12-14T18:26:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ecad51d38191741bf4eecba0112ef4a9a7e99db",
"body": null,
"is_bot": false,
"headline": "Add support for AES-XTS and RSA-PSS with auto salt-len (#68)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2023-12-12T22:06:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7abafd80a9d15c878ad478bb0fefc4862161bd38",
"body": "* Stub KDF functions\r\n\r\n* HKDF implementation\r\n\r\n* Provider SSH KDF\r\n\r\n* Fix engine publiuc header property\r\n\r\n* Provider TLS1-PRF\r\n\r\n* Cleanup\r\n\r\n* OpenSSL 1.1.1 engine build compatability\r\n\r\n* Use common hash fetching for RSA\r\n\r\n* Address PR comments\r\n\r\n* Correct MAC related error logging\r\n\r\n* PR comments\r\n\r\n* PR comments\r\n\r\n* Minor cleanup",
"is_bot": false,
"headline": "Provider KDF (#65)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-11-30T00:04:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ee9ee42c983b09dc2b9a1dbc4af1c75d92c7e83",
"body": "* Support building for ARM\r\n\r\n* Fix the branch for cross compilation for arm build\r\n\r\n---------\r\n\r\nAuthored-by: Changyu Li <Changyu.Li@microsoft.com>",
"is_bot": false,
"headline": "Support building for ARM (#69)",
"author_name": "ironyman",
"author_login": "ironyman",
"committed_at": "2023-11-27T21:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d01ed05103bd4c4e5187c2dbd3adce27cc08df3f",
"body": "* ECC key context management\r\n\r\n* Stub keymgmt functions\r\n\r\n* ECC keygen\r\n\r\n* ECC import/export with named params\r\n\r\n* Provider ECDSA\r\n\r\n* ECDH stubs\r\n\r\n* ECDH\r\n\r\n* Refactor engine ECC\r\n\r\n* Changes from RSA topic branch\r\n\r\n* Cleanup for PR\r\n\r\n* Cleanup\r\n\r\n* Cleanup rebase\r\n\r\n* Use SymCrypt curve for\n[…]\nress PR comments\r\n\r\n* Include paramter header in ecc_keymgmt header\r\n\r\n* Check selection when duplicating EC keys\r\n\r\n* Address PR comments\r\n\r\n* Call SymCryptEckeyExtendKeyUsage in every EC sign/verify",
"is_bot": false,
"headline": "Provider ECDH and ECDSA (#64)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-11-20T23:57:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7d069356f4cfd70855be2572b266bca29038116c",
"body": null,
"is_bot": false,
"headline": "Fix public exponent in RSA key export (#67)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2023-10-13T22:04:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc9d92869ed5900f1906dc7f1075d2a277a41549",
"body": "* RSA keygen\r\n\r\n* Remove dependency on BN\r\n\r\n* Kery match and import export stubs\r\n\r\n* Key import/export\r\n\r\n* Use BN for RSA parameters\r\n\r\n* Add libctx to provider base context\r\n\r\n* Common RSA signature implementation\r\n\r\n* RSA PKCS1 signatures\r\n\r\n* Move all RSA code under one folder\r\n\r\n* PSS sign/ve\n[…]\ness PR comments\r\n\r\n* Fix RSA pss cases\r\n\r\n* Update parameter styling\r\n\r\n* Handle RSA sign/verify with no digest\r\n\r\n* Remove support for RSA sign/verify without digest\r\n\r\n* Cleanup and address comments",
"is_bot": false,
"headline": "Provider RSA signature and encryption (#63)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-08-04T22:47:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4038d139cdc4aad241908e87400250382ea34d4c",
"body": "* Ensure that SymCrypt structures have sufficient alignment\r\n\r\n+ Previously SCOSSL would rely on allocations made by libcrypto being at\r\n least 16-byte aligned for 64-bit platforms. This was normally true, but\r\n in some environments where the allocator is modified, only 8-byte\r\n alignment was bei\n[…]\nents\r\n\r\n+ Make macro variable names unambiguous and scoped\r\n+ Fix provider AES without zero-ing allocation for the ctx\r\n+ Fix typo\r\n\r\n* Add compile-time assert to ensure aligned allocations make sense",
"is_bot": false,
"headline": "Ensure that SymCrypt structures have sufficient alignment (#62)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2023-05-19T20:48:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1e43d976797dffa862bc6861d66bcf2bb9759275",
"body": "* Add ctr-drbg implementation\r\n\r\n* Add AES-CBC implementation\r\n\r\n* Add ECB\r\n\r\n* Rename engine files to avoid conflicts with common files\r\n\r\n* Add gcm support in provider\r\n\r\n* Add AES CCM cipher\r\n\r\n* Cleanup code\r\n\r\n* Refactor cipher files, add XTS (disabled)\r\n\r\n* Cleanup\r\n\r\n* Remove unnecessary head\n[…]\nonsistent with rest of code base\r\n\r\n* Clean up includes\r\n\r\n* Address first round of comments\r\n\r\n* Address comments\r\n\r\n* Address comments, add cfb\r\n\r\n* Address comments\r\n\r\n* Fix clang compilation error",
"is_bot": false,
"headline": "Provider Ciphers and Rand (#60)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-05-16T21:35:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d64329698f14fdf2a3445756ba6a7fb35dbacc11",
"body": null,
"is_bot": false,
"headline": "Fetch alloc functions from in dispatch table (#61)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-03-28T00:54:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3332a5956c3c2e30616471eb874cd620c0ffee7",
"body": "* Autodetect system-installed symcrypt library\r\n\r\nUse pkg-config to find SymCrypt library in the system unless root\r\ndirectory build were given as a variable. Make it fatal error unless any\r\nof those were provided.\r\n\r\n* Make openssl engines path configurable\r\n\r\nDo not assume engines-1.1 is always the correct path. Allow simple\r\noverride with custom value. Useful for tests with OpenSSL 3.",
"is_bot": false,
"headline": "Cmake improvements (#58)",
"author_name": "Petr Menšík",
"author_login": "pemensik",
"committed_at": "2023-03-28T00:36:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9425a3cbffd7e828649ce9b3848aa9215230845d",
"body": "* Minimally viable provider\r\n\r\n* Algorithm table stubs\r\n\r\n* Stub out dispatch tables\r\n\r\n* Prototype digests with macros\r\n\r\n* Create common code\r\n\r\n* Refactor common source files into library\r\n\r\n* Stub remaining funciton tables\r\n\r\n* SymCrypt init in provider init\r\n\r\n* Add sha3 digests\r\n\r\n* Macro defi\n[…]\n* Cleanup scossl_helpers\r\n\r\n* Cleanup naming\r\n\r\n* Additional cleanup\r\n\r\n* Fix name change in digests\r\n\r\n* Return scossl_failure for failure case\r\n\r\n* Address PR comments\r\n\r\n* Remove unnecessary checks",
"is_bot": false,
"headline": "SymCrypt provider base (#57)",
"author_name": "Maxwell McKee",
"author_login": "mamckee",
"committed_at": "2023-03-02T18:51:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d5c05dc9d15d9bf843a3b5492ec9075cef49c81",
"body": null,
"is_bot": false,
"headline": "Update README for HMAC failure with unsupported digest (#56)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-12-29T20:21:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbc2ea79842e4096377660abb406979602269e10",
"body": "…50)\" (#55)\n\nThis reverts commit 948a1ddf65b9b92c9edb562f4e4303d044147628.",
"is_bot": false,
"headline": "Revert \"Intercept stitched AES-CBC + HMAC ciphers and disable them (#…",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-12-29T02:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20931a2272ef5582573d3f179d177848d43d9e87",
"body": "+ On SCOSSL bind, load all EVP ciphers and then remove the stitched\r\n ciphers that we do not support in SCOSSL. This is a workaround for\r\n callers using EVP_get_cipherbyname.",
"is_bot": false,
"headline": "Explicitly remove stitched EVP ciphers from OpenSSL internal list (#54)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-12-13T18:52:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "437db74a52a5c847f8a399681b442bfb2a8f6602",
"body": "+ Previously was wrong when RSA keys had a modulus size in bits which is\r\n 1 modulo 8. In this case using SCOSSL to sign/verify signatures with\r\n RSA_PSS_SALTLEN_MAX would fail with invalid argument error in SymCrypt\r\n + Problem is with calculating length of EM as per RFC 3447 section 8.1.1 (step 1) - \"Note that the octet length of EM will be one less than k if modBits - 1 is divisible by 8 and equal to k otherwise.\"\r\n+ Amend SslPlay testcases to test this corner case",
"is_bot": false,
"headline": "Fix RSA-PSS maximum salt length calculation (#53)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-10-27T22:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d63edf42fcbc0fcf2a2393b40312c0f4111ca0f",
"body": "+ Add SSH-KDF support to Engine. SSH-KDF implementation is disabled by default and can be enabled by adding -DSCOSSL_SSHKDF=1 argument to CMake. OpenSSL source code is required in the build process.",
"is_bot": false,
"headline": "Add SSH-KDF support to Engine (#52)",
"author_name": "Çağdaş Çalık",
"author_login": "ccalik",
"committed_at": "2022-09-22T22:53:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afb362219b621b92d94c2c512110722b838633ab",
"body": "* Initial implementation\r\n\r\n* Add test case for recomputing tag with the same key\r\nRevert to OpenSSL hmac_ctrl_str implementation\r\n\r\n* Add comments to the scossl_hmac_ctrl function",
"is_bot": false,
"headline": "Add HMAC support to Engine (#51)",
"author_name": "Çağdaş Çalık",
"author_login": "ccalik",
"committed_at": "2022-09-15T18:44:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "948a1ddf65b9b92c9edb562f4e4303d044147628",
"body": "+ This means libssl will have to call AES-CBC and HMAC separately, which\n is easier for us to route to SymCrypt",
"is_bot": false,
"headline": "Intercept stitched AES-CBC + HMAC ciphers and disable them (#50)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-08-30T22:07:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a44b1ea9ee897caaa07587662ce0e83634a14219",
"body": "Do not set -DDBG=1 when build type is RelWithDebInfo",
"is_bot": false,
"headline": "Merge pull request #49 from microsoft/mitchl-dbg-flag",
"author_name": "Mitch Lindgren",
"author_login": "mlindgren",
"committed_at": "2022-08-02T18:58:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0da23a6cb3dc2a0082731faf39127d1e31fce84",
"body": null,
"is_bot": false,
"headline": "Do not set -DDBG=1 when build type is RelWithDebInfo",
"author_name": "Mitch Lindgren",
"author_login": "mlindgren",
"committed_at": "2022-08-01T22:00:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e95a781ff2087e4499ff9a43b331a4365e6f8ec",
"body": "+ Avoid crash on invalid RSA-PSS input\r\n+ Avoid double free if Engine is destroyed multiple times\r\n+ Tweak AES-GCM to only Finalize when passed in pointer of NULL",
"is_bot": false,
"headline": "Use new SymCrypt flags to specify asymmetric key purposes (#48)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-06-06T12:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1e5905b76cbd8fa6ea2f159b92d048cf78884d6",
"body": "+ Use EC_KEY_set_public_key with an EC_POINT created by SCOSSL, rather\r\n than using EC_KEY_set_public_key_affine_coordinates, which also\r\n performs validation that SymCrypt has already taken care of",
"is_bot": false,
"headline": "Avoid redundant EC_KEY tests on key generation (#45)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-05-20T15:28:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "055d83b469acd5fc0dc64372bb47e9d42078d06c",
"body": "+ Copy flags from base methods for RSA and EVP methods\r\n+ Specify the normally unused FIPS flags for ciphers and digests",
"is_bot": false,
"headline": "Ensure method flags are compatible with FIPS mode OpenSSL (#46)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-05-03T17:57:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2962228927aaf3f638a16cd9ca1463edfa604540",
"body": null,
"is_bot": false,
"headline": "Add selftest flags for RSA, ECC and DH (#44)",
"author_name": "Samuel Lee",
"author_login": "samuel-lee-msft",
"committed_at": "2022-03-29T16:52:09Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 24,
"commits_last_year": 21,
"latest_release_at": "2026-07-15T22:32:05Z",
"latest_release_tag": "v1.11.0",
"releases_from_tags": true,
"days_since_last_push": 7,
"active_weeks_last_year": 13,
"days_since_latest_release": 7,
"mean_days_between_releases": 48.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 15,
"stars": 80,
"watchers": 9,
"fork_history": {
"days": [
{
"date": "2021-07-06",
"count": 2
},
{
"date": "2021-11-25",
"count": 1
},
{
"date": "2022-06-29",
"count": 1
},
{
"date": "2023-03-08",
"count": 1
},
{
"date": "2023-11-14",
"count": 1
},
{
"date": "2024-07-25",
"count": 1
},
{
"date": "2024-07-26",
"count": 1
},
{
"date": "2024-08-20",
"count": 1
},
{
"date": "2024-09-27",
"count": 1
},
{
"date": "2025-03-05",
"count": 1
},
{
"date": "2025-09-19",
"count": 1
},
{
"date": "2026-06-03",
"count": 1
},
{
"date": "2026-06-19",
"count": 1
}
],
"complete": true,
"collected": 14,
"total_forks": 15
},
"star_history": null,
"open_issues_and_prs": 6
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 84800,
"source_files_sampled": 122,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 3,
"merged_prs": 146,
"open_issues": 3,
"closed_ratio": 0.824,
"closed_issues": 14,
"closed_unmerged_prs": 5
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "samuel-lee-msft",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/56448320?v=4"
},
{
"type": "User",
"login": "mamckee",
"commits": 57,
"avatar_url": "https://avatars.githubusercontent.com/u/66395252?v=4"
},
{
"type": "User",
"login": "mlindgren",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/945164?v=4"
},
{
"type": "User",
"login": "jasjivsingh-corp",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/209014192?v=4"
},
{
"type": "User",
"login": "SpencerNofzinger",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/8743747?v=4"
},
{
"type": "User",
"login": "MS-megliu",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/185960349?v=4"
},
{
"type": "User",
"login": "microsoftopensource",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/22527892?v=4"
},
{
"type": "User",
"login": "vcsjones",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/361677?v=4"
},
{
"type": "User",
"login": "xumia",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/59720581?v=4"
},
{
"type": "User",
"login": "ccalik",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1865326?v=4"
}
],
"contributors_sampled": 16,
"top_contributor_share": 0.38
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 6,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 6,
"reason": "14 out of 23 merged PRs checked by a CI test -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 7,
"reason": "SAST tool is not run on all commits -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d73b1e9ebf589f5c0098810e74e9556b2bef776a",
"ran_at": "2026-07-23T03:17:15Z",
"aggregate_score": 6.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-16T22:16:27Z",
"oldest_open_prs": [
{
"number": 140,
"created_at": "2025-08-06T01:59:02Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 142,
"created_at": "2025-08-27T19:59:42Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 143,
"created_at": "2025-08-27T20:07:22Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-15T22:32:05Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 114,
"created_at": "2025-04-30T17:45:49Z",
"last_comment_at": "2025-05-22T15:55:43Z",
"last_comment_author": "qmuntal"
},
{
"number": 151,
"created_at": "2025-10-24T10:24:04Z",
"last_comment_at": "2025-10-29T18:33:24Z",
"last_comment_author": "mamckee"
},
{
"number": 170,
"created_at": "2026-06-17T10:52:16Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/microsoft/SymCrypt-OpenSSL",
"host": "github.com",
"name": "SymCrypt-OpenSSL",
"owner": "microsoft"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"security": 64,
"vitality": 69,
"community": 54,
"governance": 75,
"engineering": 42
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"commits_last_year": 21,
"human_commit_share": 1,
"days_since_last_push": 7,
"active_weeks_last_year": 13
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "13/52 weeks with commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 13
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "21 commits in the last year",
"points": 12.1,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 21
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"releases_count": 24,
"latest_release_tag": "v1.11.0",
"releases_from_tags": true,
"days_since_latest_release": 7,
"mean_days_between_releases": 48.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "24 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 24
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~48.2 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 48.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 14,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 14 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 14
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 54,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 45,
"inputs": {
"forks": 15,
"stars": 80,
"watchers": 9,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "80 stars",
"points": 30.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 80
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "15 forks",
"points": 9.6,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 15
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "9 watchers",
"points": 5,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 9
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 75,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 16,
"top_contributor_share": 0.38
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 38% of commits",
"points": 13.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 38
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "16 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 16
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"merged_prs": 146,
"open_issues": 3,
"closed_issues": 14,
"issue_closed_ratio": 0.824,
"closed_unmerged_prs": 5
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "82% of issues closed",
"points": 38.5,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 82
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "146/151 decided PRs merged",
"points": 37,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 146,
"decided": 151
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"followers": 125651,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "microsoft",
"public_repos": 8217,
"account_age_days": 4607
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "125,651 followers of microsoft",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 125651,
"login": "microsoft"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "8217 public repos, account ~12 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 8217
}
},
{
"code": "account_age_years",
"params": {
"years": 12
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 42,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "14 out of 23 merged PRs checked by a CI test -- score normalized to 6",
"points": 12,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 64,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 13,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 5,
"scorecard_aggregate": 6.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "14 out of 23 merged PRs checked by a CI test -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 7",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 12
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 52,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.89,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "89 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 89,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 43,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.03,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "3 of the last 100 commits agent-authored or agent-credited",
"points": 6,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 84800,
"source_files_sampled": 122,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/122 source files over 60KB",
"points": 54.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 122,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-23T03:17:37.232308Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/microsoft/SymCrypt-OpenSSL.svg",
"full_name": "microsoft/SymCrypt-OpenSSL",
"license_state": "standard",
"license_spdx": "MIT"
}