Closed Bug 2086870 Opened 17 days ago Closed 16 days ago

Update NSS to new version ce819c9475b254768f4c811e4306c5f0a4fa6760 from 2026-10-28 22:00:46 UTC

Categories

(Core :: Security: PSM, enhancement)

Product:
Core
Component:
Security: PSM
Type:
enhancement

Tracking

()

Status:
RESOLVED DUPLICATE of bug 2087387
Tracking Flags:
Tracking Status
firefox161 --- affected

People

(Reporter: update-bot, Unassigned)

References

Details

(Whiteboard: [3pl-filed][task_id: RGa58vRaSHG14zm8oIjrHA])

This update covers 4 commits. Here are the overall diff statistics, and then the commit information.

security/nss/gtests/common/testvectors/chachapoly-long-vectors.h | 2453 ++++++++++
security/nss/gtests/freebl_gtest/chacha20poly1305_unittest.cc | 174 +
security/nss/gtests/freebl_gtest/freebl_gtest.gyp | 10 +
security/nss/gtests/pk11_gtest/pk11_chacha20poly1305_unittest.cc | 75 +-
security/nss/gtests/pk11_gtest/pk11_der_private_key_import_unittest.cc | 130 +
security/nss/gtests/pk11_gtest/pq_pkcs8.h | 60 +-
security/nss/gtests/ssl_gtest/ssl_loopback_unittest.cc | 18 +-
security/nss/gtests/ssl_gtest/ssl_resumption_unittest.cc | 390 +-
security/nss/gtests/ssl_gtest/tls_connect.cc | 13 +-
security/nss/gtests/ssl_gtest/tls_connect.h | 54 +-
security/nss/lib/cryptohi/seckey.c | 16 +-
security/nss/lib/freebl/Makefile | 6 +
security/nss/lib/freebl/chacha20poly1305.c | 49 +
security/nss/lib/freebl/freebl.gyp | 27 +-
security/nss/lib/pk11wrap/pk11pk12.c | 5 +
security/nss/lib/softoken/pkcs11c.c | 5 +
security/nss/lib/ssl/sslencode.c | 9 +
security/nss/lib/ssl/sslencode.h | 1 +
security/nss/lib/ssl/sslexp.h | 16 +
security/nss/lib/ssl/sslimpl.h | 10 +-
security/nss/lib/ssl/sslnonce.c | 678 +-
security/nss/lib/ssl/sslsock.c | 27 +-
security/nss/moz.yaml | 4 +-
23 files changed, 3712 insertions(+), 518 deletions(-)

ce819c9475b254768f4c811e4306c5f0a4fa6760 by Benjamin Beurdouche <bbeurdouche@mozilla.com>

https://github.com/mozilla/nss/commit/ce819c9475b254768f4c811e4306c5f0a4fa6760
Authored: 2026-10-28 22:00:46 +0000
Committed: 2026-10-28 22:00:46 +0000

Bug 2039884 - Use vectorized Hacl_Chacha20Poly1305_128 on aarch64 above 512 bytes. r=jschanck

Differential Revision: https://phabricator.services.mozilla.com/D300759

Files Added:

  • gtests/common/testvectors/chachapoly-long-vectors.h
  • gtests/freebl_gtest/chacha20poly1305_unittest.cc

Files Modified:

  • gtests/freebl_gtest/freebl_gtest.gyp
  • gtests/pk11_gtest/pk11_chacha20poly1305_unittest.cc
  • lib/freebl/Makefile
  • lib/freebl/chacha20poly1305.c
  • lib/freebl/freebl.gyp

b11848d2b5a78d69923f91ad011f2d0e0c4f9045 by Anna <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/b11848d2b5a78d69923f91ad011f2d0e0c4f9045
Authored: 2026-10-28 14:32:09 +0000
Committed: 2026-10-28 14:32:09 +0000

Bug 2046805 - Add SSL_EnablePlaintextResumptionExport experimental API r=djackson

Differential Revision: https://phabricator.services.mozilla.com/D306164

Files Modified:

  • gtests/ssl_gtest/ssl_loopback_unittest.cc
  • gtests/ssl_gtest/ssl_resumption_unittest.cc
  • gtests/ssl_gtest/tls_connect.cc
  • gtests/ssl_gtest/tls_connect.h
  • lib/ssl/sslencode.c
  • lib/ssl/sslencode.h
  • lib/ssl/sslexp.h
  • lib/ssl/sslimpl.h
  • lib/ssl/sslnonce.c
  • lib/ssl/sslsock.c

35cef6ad1c1a1189230d4e19d15840c4bad9ca24 by Anna <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/35cef6ad1c1a1189230d4e19d15840c4bad9ca24
Authored: 2026-10-28 14:32:09 +0000
Committed: 2026-10-28 14:32:09 +0000

Bug 2046805 - Collapse resumption token append boilerplate into macros r=jschanck

Differential Revision: https://phabricator.services.mozilla.com/D321267

Files Modified:

  • lib/ssl/sslnonce.c

8ba7deed92b6f3c0133dc4cbd643355adf8c5472 by Anna <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/8ba7deed92b6f3c0133dc4cbd643355adf8c5472
Authored: 2026-10-28 11:08:00 +0000
Committed: 2026-10-28 11:08:00 +0000

Bug 2086058 - Reject not empty parameters in ML-KEM && ML-DSA AlgorithmIdentifiers r=crypto-reviewers,jschanck

Differential Revision: https://phabricator.services.mozilla.com/D337087

Files Modified:

  • gtests/pk11_gtest/pk11_der_private_key_import_unittest.cc
  • gtests/pk11_gtest/pq_pkcs8.h
  • lib/cryptohi/seckey.c
  • lib/pk11wrap/pk11pk12.c
  • lib/softoken/pkcs11c.c

I've submitted a try run for this commit: https://treeherder.mozilla.org/jobs?repo=try&revision=29ec211da0ffd100cdb8cae7224e597b78f16944

Updatebot encountered an error while trying to submit to phabricator.
Updatebot will be unable to do anything more for this library version.

Flags: needinfo?(jschanck)

This bug is being closed because a newer revision of the library is available.
This bug will be marked as a duplicate of it (because although this bug is older, it is superseded by the newer one).

Status: NEW → RESOLVED
Closed: 16 days ago
Duplicate of bug: 2087387
Resolution: --- → DUPLICATE
Flags: needinfo?(jschanck)
You need to log in before you can comment on or make changes to this bug.