Roll BoringSSL from 6a584e1d58d1 to de8c7af5e7c4 (79 revisions)

https://boringssl.googlesource.com/boringssl.git/+log/6a584e1d58d1..de8c7af5e7c4

2026-03-12 davidben@google.com Remove unused internal constant
2026-03-12 agl@chromium.org bssl-x509: documentation improvements.
2026-03-12 agl@chromium.org bssl-x509: various tidy-ups.
2026-03-12 xfding@google.com rust: Pick up std feature by default for x509 and tls crate
2026-03-12 davidben@google.com Remove NewZeroed entirely
2026-03-11 nfabritius@google.com Add Send and Sync marker traits to X509Certificate
2026-03-11 chlily@google.com Add new Rust crates to build files
2026-03-11 xfding@google.com rust: Fix doc test since last crate renaming
2026-03-11 xfding@google.com rust: Introduce X.509 bindings
2026-03-11 davidben@google.com Remove some more easy NewZeroed calls
2026-03-11 davidben@google.com Remove some dependencies on NewZeroed
2026-03-11 davidben@google.com Wire up ML-DSA keygen to the EVP API
2026-03-11 davidben@google.com Add new APIs to generate EVP_PKEYs
2026-03-11 davidben@google.com Center EVP_PKEY_CTX creation on EVP_PKEY_ALG
2026-03-10 rmacnak@google.com Place kObjects constants in namespace bssl.
2026-03-09 davidben@google.com runner: Also copy resumeExpectations before running the test
2026-03-09 davidben@google.com Don't allow half-empty EVP_PKEYs to be passed into various APIs
2026-03-09 davidben@google.com Revert "Reduce thread contention for pooled CRYPTO_BUFFERs"
2026-03-06 davidben@google.com Document <openssl/cast.h>
2026-03-06 xfding@google.com rust: Properly dispatch the key types to the right curve after parsing
2026-03-06 xfding@google.com rust: parse keys into the right curve type per DER encoding
2026-03-06 davidben@google.com Document length requirements on low-level DES APIs
2026-03-05 davidben@google.com Check for syntax errors in SANs in X509_check_host
2026-03-05 davidben@google.com Fix typo in comment
2026-03-05 davidben@google.com Add some options to bssl client and bssl server to test PSKs
2026-03-05 davidben@google.com Warn in docs that TLS 1.3 PSKs must be high entropy
2026-03-05 rpolzer@google.com Revert "Simplify the symbol prefixing macros."
2026-03-05 rpolzer@google.com Fix prefixed names on MSVC.
2026-03-05 rpolzer@google.com Simplify the symbol prefixing macros.
2026-03-04 davidben@google.com Implement RFC 9258 as a server
2026-03-04 davidben@google.com Handle an API edge case with PSKs and client certificates
2026-03-04 davidben@google.com Implement RFC 9258 as a client
2026-03-04 davidben@google.com Ignore CMS_PARTIAL in CMS_add1_signer
2026-03-04 rpolzer@google.com crypto/x509: Fix interaction of DNS exclude constraints with wildcard DNS names.
2026-03-04 davidben@google.com Use UniquePtr in DSAImpl
2026-03-04 davidben@google.com Use UniquePtr in DHImpl
2026-03-04 davidben@google.com Remove redundant DH_num_bits API
2026-03-03 davidben@google.com Reduce thread contention for pooled CRYPTO_BUFFERs
2026-03-03 davidben@google.com Allow CRYPTO_BUFFERs to outlive CRYPTO_BUFFER_POOL
2026-03-03 davidben@google.com C++ CRYPTO_BUFFER internals a bit more
2026-03-03 davidben@google.com Make CRYPTO_MUTEX a C++ type
2026-03-03 davidben@google.com Add a test for bssl::Cleanup
2026-03-03 davidben@google.com Give CRYPTO_EX_DATA_CLASS a constructor
2026-03-03 davidben@google.com Simplify delocate macros slightly
2026-03-03 davidben@google.com More consistently use the public/private struct split in crypto/pool
2026-03-03 davidben@google.com Don't stack-allocate CryptoBuffer for pool lookups
2026-03-03 xfding@google.com rust: Give options to serialise curve names
2026-02-26 davidben@google.com Remove duplicate include
2026-02-26 chlily@google.com GitHub Actions: Tighten up branch-time.yml check
2026-02-26 xfding@google.com ssl: Allow inspection of SSL_CREDENTIAL completion status
2026-02-26 davidben@google.com Add some missing file headers
2026-02-25 davidben@google.com Publish the remaining historical advisories
2026-02-25 chlily@google.com GitHub: Tweak branch-time.yml workflow
2026-02-25 davidben@google.com runner: Add a preSharedKey object
2026-02-25 chlily@google.com GitHub: Create GitHub Actions workflow to check branch time
2026-02-25 davidben@google.com Add a no-op virtual destructor to EvpPkeyCtx
2026-02-25 davidben@google.com audit_symbols: Allow Windows RTTI descriptors to be unprefixed
2026-02-25 rpolzer@google.com Preprocessor compatibility: update logic for symbol prefixing.
2026-02-25 rpolzer@google.com Move definition of BORINGSSL_ALWAYS_USE_STATIC_INLINE farther up.
2026-02-25 rpolzer@google.com Revert "Integrate the new way of C++ symbol prefixing with Bindgen."
2026-02-25 davidben@google.com Remove getrandom_fillin.h
2026-02-24 davidben@google.com Use std::sort in crypto/stack/stack.cc
2026-02-24 rpolzer@google.com When building a shared ELF library with FIPS, set the section markers hidden.
2026-02-24 rpolzer@google.com Finish symbol prefixing with delocate (delocate approach).
2026-02-24 pcc@google.com delocate: Pass through .reloc directives associated with pointer field protection
2026-02-23 rpolzer@google.com CI naming: minor improvements
2026-02-23 davidben@google.com Add GNU linker manual to references
2026-02-23 davidben@google.com Use destructors more in crypto/cms
2026-02-23 rpolzer@google.com Introduce macro BORINGSSL_ALWAYS_USE_STATIC_INLINE.
2026-02-22 davidben@google.com Reapply "Migrate Bio to RefCounted."
2026-02-22 davidben@google.com Base BIO_free's return value on only the input BIO
2026-02-21 davidben@google.com runner: Don't override the version in the SendBothTickets tests
2026-02-21 davidben@google.com runner: Bundle wire version, protocol version, and isDTLS together
2026-02-21 davidben@google.com runner: Remove version parameter to TLS 1.2 keyAgreement objects
2026-02-21 davidben@google.com runner: Simplify Config.minVersion and Config.maxVersion
2026-02-20 davidben@google.com runner: Check that the server did not resume a session at the wrong version/cipher
2026-02-20 davidben@google.com Rewrite the CipherNotPreferred tests
2026-02-20 davidben@google.com runner: Store a cipherSuite object in sessionState
2026-02-20 davidben@google.com runner: Pass just a hash algorithm, not a cipher suite, into PSK binders

If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/boringssl-dart-sdk
Please CC dart-engprod@google.com,dart-vm-gardener@rotations.google.com,dart-vm-team@google.com on the revert to ensure that a human
is aware of the problem.

To file a bug in BoringSSL: https://crbug.com/boringssl/new
To file a bug in Dart SDK: https://github.com/dart-lang/sdk/issues

To report a problem with the AutoRoller itself, please file a bug:
https://issues.skia.org/issues/new?component=1389291&template=1850622

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md

Tbr: dart-vm-gardener@rotations.google.com
Change-Id: Iaa10301b1016f868b1fd1ddace4c1b02e06094a4
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/487981
Reviewed-by: Alexander Aprelev <aam@google.com>
Reviewed-by: Ryan Macnak <rmacnak@google.com>
Commit-Queue: Alexander Aprelev <aam@google.com>

DEPS

@@ -102,7 +102,7 @@ vars = {
 
   # Prefer to use hashes of binaryen that have been reviewed & rolled into g3.
   "binaryen_rev" : "204c3f88bb2e2c92b103b0cfbf4e0a4863c12c87",
-  "boringssl_rev": "6a584e1d58d1fa95bc47d6c92cc9a8cb49d29635",
+  "boringssl_rev": "de8c7af5e7c40153eb6cc0a79ff61a43f4bb03f9",
   "browser-compat-data_tag": "ac8cae697014da1ff7124fba33b0b4245cc6cd1b", # v1.0.22
   "cpu_features_rev": "936b9ab5515dead115606559502e3864958f7f6e",
   "devtools_rev": "45869157ee784ea4cb78570a5ba41da56a528673",