1. 94e3cdf Merge pull request #340 from artgins/exact-alg-pin-verify by Ben Collins · 5 weeks ago master
  2. c948840 jwt: pin the exact algorithm in both verify paths (RFC 8725 3.1) by Core · 5 weeks ago
  3. 8a7a9bb Add curl to combo tests and memcheck by Ben Collins · 6 weeks ago
  4. f4edfe5 Merge pull request #338 from benmcollins/release-3.6.1 by Ben Collins · 6 weeks ago v3.6.1
  5. 197ac58 Release v3.6.1 by Ben Collins · 6 weeks ago
  6. ca975fa tests: consume write() result without asserting in the jwks test server by Ben Collins · 6 weeks ago
  7. b7bb97a tests: check write() return in the jwks-cache test server by Ben Collins · 6 weeks ago
  8. 273d522 Merge pull request #337 from benmcollins/release-3.6.0 by Ben Collins · 6 weeks ago v3.6.0
  9. 8fb7464 Release v3.6.0 by Ben Collins · 6 weeks ago
  10. 791fe9d Merge pull request #336 from benmcollins/317-app-profiles by Ben Collins · 6 weeks ago
  11. 929bd68 jwt: enforce jwt_checker_require() on the JWS JSON Serialization path by Ben Collins · 6 weeks ago
  12. 6579215 jwt: application profiles + the primitives they need (#317) by Ben Collins · 6 weeks ago
  13. d0760dc Merge pull request #335 from benmcollins/313-jwks-cache by Ben Collins · 6 weeks ago
  14. 22a089a jwks: harden the cached source against HTTP errors and failing refreshes by Ben Collins · 6 weeks ago
  15. 6f23796 jwks: add a cached/refreshing remote JWKS source (RFC 7517, #313) by Ben Collins · 6 weeks ago
  16. 77f4141 ci: run the "all" row valgrind/memcheck only on PRs, not on master pushes by Ben Collins · 6 weeks ago
  17. 329caad Merge pull request #334 from benmcollins/314-x509-phase1 by Ben Collins · 6 weeks ago
  18. c222fb4 jwks: parse and expose X.509 params x5c/x5t/x5t#S256 (RFC 7517, #314 phase 1) by Ben Collins · 6 weeks ago
  19. 171100d Merge pull request #333 from benmcollins/310-pbes2 by Ben Collins · 6 weeks ago
  20. 9cd2114 jwe: add PBES2 password-based key management (RFC 7518 4.8) by Ben Collins · 6 weeks ago
  21. 92615ba tests: fix jwe_multi key-set leaks (reusable builder references keys) by Ben Collins · 6 weeks ago
  22. a02ce8e Merge pull request #332 from benmcollins/309-aes-gcm-kw by Ben Collins · 6 weeks ago
  23. 6ef66d2 jwe: add AES-GCM Key Wrap (A128/192/256GCMKW, RFC 7518 4.7) by Ben Collins · 6 weeks ago
  24. 37cf1ef Merge pull request #331 from benmcollins/311-jwks-generate by Ben Collins · 6 weeks ago
  25. 8da8130 mbedtls: scrub the private-key PEM stack buffer in generate_pem by Ben Collins · 6 weeks ago
  26. a1bc8d3 jwks: add jwks_generate() key-generation API (all backends) by Ben Collins · 6 weeks ago
  27. 406b846 Merge pull request #330 from benmcollins/312-typ-allowlist by Ben Collins · 6 weeks ago
  28. 910e3e4 jwt: add typ media-type helper and algorithm allowlist (RFC 8725) by Ben Collins · 6 weeks ago
  29. da5c24c Merge pull request #329 from benmcollins/315-rfc7797-b64 by Ben Collins · 6 weeks ago
  30. eca511e jwt: RFC 7797 review fixes — reject NUL in unencoded payload; empty detached error by Ben Collins · 6 weeks ago
  31. 2469253 jwt: add RFC 7797 unencoded (b64=false) and detached payloads by Ben Collins · 6 weeks ago
  32. 825b0a2 Merge pull request #328 from benmcollins/327-xbackend-free by Ben Collins · 6 weeks ago
  33. b6d2c1c jwks: free a key's provider_data via its origin backend (#327) by Ben Collins · 6 weeks ago
  34. 8a55844 Merge pull request #326 from benmcollins/308-jws-json by Ben Collins · 6 weeks ago
  35. b3f1a70 jwt: fix JWS JSON verify header leak; parse test keys under active backend by Ben Collins · 6 weeks ago
  36. eafe5e2 jwt: add JWS JSON Serialization (multi-signature) + keyring verify by Ben Collins · 6 weeks ago
  37. de0770e Merge pull request #325 from benmcollins/320-backend-affinity by Ben Collins · 6 weeks ago
  38. f4a536f jwt: route key operations to the backend that parsed the key by Ben Collins · 6 weeks ago
  39. 86cedec Merge pull request #324 from benmcollins/docs-mbedtls-4x by Ben Collins · 6 weeks ago
  40. 88d3885 docs: MbedTLS 4.x builds (PSA backend); drop stale "4.x will not build" by Ben Collins · 6 weeks ago
  41. b1f0dd5 Merge pull request #322 from benmcollins/321-cnf-load-order by Ben Collins · 6 weeks ago
  42. 2428159 tests: jwt_cnf: set crypto ops before loading keys by Ben Collins · 6 weeks ago
  43. a486608 Merge pull request #319 from benmcollins/316-cnf by Ben Collins · 6 weeks ago
  44. a69d823 jwt: add RFC 7800 "cnf" (confirmation) claim helpers by Ben Collins · 6 weeks ago
  45. a05da90 Merge pull request #318 from benmcollins/307-jwk-thumbprint by Ben Collins · 6 weeks ago
  46. 590beb2 openssl: export public "x" for private OKP keys (RFC 8037) by Ben Collins · 6 weeks ago
  47. 6903450 tools: generate a deterministic thumbprint "kid" and disambiguate jwk2key by Ben Collins · 6 weeks ago
  48. f648626 jwks: add RFC 7638 JWK Thumbprint and RFC 9278 Thumbprint URI by Ben Collins · 6 weeks ago
  49. 3c7bd2a Add Ed448 to EdDSA alg type comment. by Ben Collins · 6 weeks ago
  50. 8f32b58 docs: document the *_auto_t cleanup macros (and let Doxygen render them) by Ben Collins · 6 weeks ago
  51. 077941a docs: track @since maintenance in the release process by Ben Collins · 6 weeks ago
  52. 8e017b5 Merge pull request #306 from benmcollins/305-since-annotations by Ben Collins · 6 weeks ago
  53. 3f588f3 docs: annotate public API with @since version in jwt.h by Ben Collins · 6 weeks ago
  54. 9cab021 docs: document the release process in CLAUDE.md by Ben Collins · 6 weeks ago
  55. 08ef4ce Merge pull request #304 from benmcollins/release-3.5.0 by Ben Collins · 6 weeks ago v3.5.0
  56. 502eac0 Release v3.5.0 by Ben Collins · 6 weeks ago
  57. 60384cb doxygen: read sources as UTF-8 (was ISO-8859-1) by Ben Collins · 6 weeks ago
  58. 4860069 docs: drop non-ASCII (em-dashes) from doxygen-rendered docs by Ben Collins · 6 weeks ago
  59. 9a16027 docs: record the CI image, matrix rework, and GnuTLS OKP gating in CLAUDE.md by Ben Collins · 6 weeks ago
  60. 949d50f Update social preview images by Ben Collins · 6 weeks ago
  61. 1d839c2 gnutls: gate the two OKP defects in GnuTLS < 3.8.13 (runtime-checked) by Ben Collins · 6 weeks ago
  62. 4995771 ci: exclude json-c on ubuntu-22.04 (jammy ships json-c 0.15 < 0.16 floor) by Ben Collins · 6 weeks ago
  63. f8bc888 ci: clarify GnuTLS Ed448/X25519 breakage is the <=3.8.12->3.8.13 upgrade by Ben Collins · 6 weeks ago
  64. 82a86ec ci: build both JSON backends per distro; disable GnuTLS in compat matrix by Ben Collins · 6 weeks ago
  65. 8ed636b ci: run backend combos in the leancrypto image; consolidate coverage by Ben Collins · 6 weeks ago
  66. 8d2391d ci: add debian:forky GnuTLS+leancrypto / MbedTLS base image by Ben Collins · 6 weeks ago
  67. 47c7efe docs: record ML-DSA, CI, and coverage notes in CLAUDE.md by Ben Collins · 6 weeks ago
  68. afe663c Merge pull request #303 from benmcollins/301-mldsa-gnutls by Ben Collins · 6 weeks ago
  69. 22c6b28 ci: exercise ML-DSA on the forky (OpenSSL 3.6.2) build by Ben Collins · 6 weeks ago
  70. 6056dfc feat: add GnuTLS ML-DSA (FIPS 204 / RFC 9964) backend by Ben Collins · 6 weeks ago
  71. 67b81e3 Merge pull request #302 from benmcollins/227-ml-dsa-support by Ben Collins · 7 weeks ago
  72. cfee8fd feat: add experimental ML-DSA (FIPS 204 / RFC 9964) signing by Ben Collins · 7 weeks ago
  73. bd0270c Update logo image in README.md by Ben Collins · 7 weeks ago
  74. f9c845e docs: add GitHub social preview card (1280x640) by Ben Collins · 7 weeks ago
  75. a00c9dd ci: move workflow actions off the deprecated Node.js 20 runtime by Ben Collins · 7 weeks ago
  76. 6e5f475 gnutls: drop the RSA-OAEP (SHA-1) OpenSSL fallback; just fail by Ben Collins · 7 weeks ago
  77. 5a705e6 gnutls: require GnuTLS >= 3.8.8 for issue-free EdDSA Ed448 by Ben Collins · 7 weeks ago
  78. 3974c56 gnutls: require GnuTLS >= 3.8.4 and drop pre-3.8.4 compatibility by Ben Collins · 7 weeks ago
  79. ee2bf9c docs: replace em-dash with colon in the JSON-library line by Ben Collins · 7 weeks ago
  80. 3e235b1 Merge pull request #300 from benmcollins/299-docs-optional-backends by Ben Collins · 7 weeks ago
  81. 1d91852 docs: OpenSSL and the JSON library are optional/interchangeable (closes #299) by Ben Collins · 7 weeks ago
  82. d19efd1 Merge pull request #298 from benmcollins/297-openssl-optional by Ben Collins · 7 weeks ago
  83. ddd2075 tests: skip jwk2key RSA PEM byte-compare on non-PKCS#8 backends by Ben Collins · 7 weeks ago
  84. a9ff19f key2jwk: fix builds on MbedTLS 3.x and GnuTLS < 3.8.4 by Ben Collins · 7 weeks ago
  85. 39fef0d Make OpenSSL an optional crypto backend (closes #297) by Ben Collins · 7 weeks ago
  86. ac01b6e Merge pull request #296 from benmcollins/267-mbedtls-4x by Ben Collins · 7 weeks ago
  87. d805659 mbedtls: migrate the native backend to the PSA Crypto API (closes #267) by Ben Collins · 7 weeks ago
  88. f9a05a8 Update copyright notices to 2026 in files edited this year by Ben Collins · 7 weeks ago
  89. 6ea3b6b Merge pull request #295 from benmcollins/release-3.4.0 by Ben Collins · 7 weeks ago v3.4.0
  90. 08f5813 Release v3.4.0 by Ben Collins · 7 weeks ago
  91. b28c5a3 Merge pull request #293 from benmcollins/284-strict-base64url by Ben Collins · 7 weeks ago
  92. 4859ab4 Merge branch 'master' into 284-strict-base64url by Ben Collins · 7 weeks ago
  93. 51c2efc Merge pull request #292 from benmcollins/283-claim-validation by Ben Collins · 7 weeks ago
  94. ebe7fe2 Merge branch 'master' into 283-claim-validation by Ben Collins · 7 weeks ago
  95. e7d642e Merge pull request #291 from benmcollins/282-jwks-curl-hardening by Ben Collins · 7 weeks ago
  96. b259915 Merge branch 'master' into 282-jwks-curl-hardening by Ben Collins · 7 weeks ago
  97. fa80177 Merge pull request #290 from benmcollins/281-crypto-backend-hardening by Ben Collins · 7 weeks ago
  98. a0588d1 Merge branch 'master' into 281-crypto-backend-hardening by Ben Collins · 7 weeks ago
  99. 1b7f3b0 Merge pull request #289 from benmcollins/282-jwks-oom-free by Ben Collins · 7 weeks ago
  100. 930ede3 Merge branch 'master' into 282-jwks-oom-free by Ben Collins · 7 weeks ago