[BoringSSL] Update third_party/boringssl-with-bazel (grpc#37223)

Change was created by the release automation script. See go/grpc-release. Closes grpc#37223 PiperOrigin-RevId: 652942434
paulosjca · Jul 16, 2024 · b81f754 · b81f754
1 parent 4ad050e
commit b81f754
Show file tree

Hide file tree

Showing 8 changed files with 531 additions and 525 deletions.
diff --git a/bazel/grpc_deps.bzl b/bazel/grpc_deps.bzl
@@ -35,11 +35,11 @@ def grpc_deps():
             name = "boringssl",
             # Use github mirror instead of https://boringssl.googlesource.com/boringssl
             # to obtain a boringssl archive with consistent sha256
-            sha256 = "9f441d72fccb9a3faf96470478c8ccfaaeb8db1cffd4d78b698f782124dad1b0",
-            strip_prefix = "boringssl-b8a2bffc598f230484ff48a247526a9820facfc2",
+            sha256 = "7a35bebd0e1eecbc5bf5bbf5eec03e86686c356802b5540872119bd26f84ecc7",
+            strip_prefix = "boringssl-16c8d3db1af20fcc04b5190b25242aadcb1fbb30",
             urls = [
-                "https://storage.googleapis.com/grpc-bazel-mirror/github.com/google/boringssl/archive/b8a2bffc598f230484ff48a247526a9820facfc2.tar.gz",
-                "https://github.com/google/boringssl/archive/b8a2bffc598f230484ff48a247526a9820facfc2.tar.gz",
+                "https://storage.googleapis.com/grpc-bazel-mirror/github.com/google/boringssl/archive/16c8d3db1af20fcc04b5190b25242aadcb1fbb30.tar.gz",
+                "https://github.com/google/boringssl/archive/16c8d3db1af20fcc04b5190b25242aadcb1fbb30.tar.gz",
             ],
         )
 

diff --git a/gRPC-Core.podspec b/gRPC-Core.podspec
diff --git a/src/boringssl/boringssl_prefix_symbols.h b/src/boringssl/boringssl_prefix_symbols.h
@@ -1,4 +1,4 @@
-// generated by generate_boringssl_prefix_header.sh on BoringSSL commit: b8a2bffc598f230484ff48a247526a9820facfc2
+// generated by generate_boringssl_prefix_header.sh on BoringSSL commit: 16c8d3db1af20fcc04b5190b25242aadcb1fbb30
 
 // Copyright (c) 2018, Google Inc.
 //
@@ -1350,6 +1350,7 @@
 #define DILITHIUM_marshal_public_key BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, DILITHIUM_marshal_public_key)
 #define DILITHIUM_parse_private_key BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, DILITHIUM_parse_private_key)
 #define DILITHIUM_parse_public_key BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, DILITHIUM_parse_public_key)
+#define DILITHIUM_public_from_private BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, DILITHIUM_public_from_private)
 #define DILITHIUM_sign BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, DILITHIUM_sign)
 #define DILITHIUM_sign_deterministic BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, DILITHIUM_sign_deterministic)
 #define DILITHIUM_verify BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, DILITHIUM_verify)
@@ -2041,6 +2042,7 @@
 #define OPENSSL_gmtime_diff BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, OPENSSL_gmtime_diff)
 #define OPENSSL_hash32 BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, OPENSSL_hash32)
 #define OPENSSL_ia32cap_P BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, OPENSSL_ia32cap_P)
+#define OPENSSL_init_cpuid BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, OPENSSL_init_cpuid)
 #define OPENSSL_init_crypto BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, OPENSSL_init_crypto)
 #define OPENSSL_isalnum BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, OPENSSL_isalnum)
 #define OPENSSL_isalpha BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, OPENSSL_isalpha)
@@ -2886,8 +2888,11 @@
 #define aes_hw_decrypt BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, aes_hw_decrypt)
 #define aes_hw_ecb_encrypt BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, aes_hw_ecb_encrypt)
 #define aes_hw_encrypt BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, aes_hw_encrypt)
+#define aes_hw_encrypt_key_to_decrypt_key BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, aes_hw_encrypt_key_to_decrypt_key)
 #define aes_hw_set_decrypt_key BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, aes_hw_set_decrypt_key)
 #define aes_hw_set_encrypt_key BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, aes_hw_set_encrypt_key)
+#define aes_hw_set_encrypt_key_alt BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, aes_hw_set_encrypt_key_alt)
+#define aes_hw_set_encrypt_key_base BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, aes_hw_set_encrypt_key_base)
 #define aes_nohw_cbc_encrypt BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, aes_nohw_cbc_encrypt)
 #define aes_nohw_ctr32_encrypt_blocks BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, aes_nohw_ctr32_encrypt_blocks)
 #define aes_nohw_decrypt BORINGSSL_ADD_PREFIX(BORINGSSL_PREFIX, aes_nohw_decrypt)

diff --git a/src/objective-c/BoringSSL-GRPC.podspec b/src/objective-c/BoringSSL-GRPC.podspec
diff --git a/templates/gRPC-Core.podspec.template b/templates/gRPC-Core.podspec.template
@@ -199,7 +199,7 @@
       ss.libraries = 'z'
       ss.dependency "#{s.name}/Interface", version
       ss.dependency "#{s.name}/Privacy", version
-      ss.dependency 'BoringSSL-GRPC', '0.0.35'
+      ss.dependency 'BoringSSL-GRPC', '0.0.36'
       % for abseil_spec in grpc_abseil_specs:
       ss.dependency '${abseil_spec}', abseil_version
       % endfor

diff --git a/templates/src/objective-c/BoringSSL-GRPC.podspec.template b/templates/src/objective-c/BoringSSL-GRPC.podspec.template
@@ -70,7 +70,7 @@
 
   Pod::Spec.new do |s|
     s.name     = 'BoringSSL-GRPC'
-    version = '0.0.35'
+    version = '0.0.36'
     s.version  = version
     s.summary  = 'BoringSSL is a fork of OpenSSL that is designed to meet Google\'s needs.'
     # Adapted from the homepage:

diff --git a/third_party/boringssl-with-bazel b/third_party/boringssl-with-bazel
diff --git a/tools/run_tests/sanity/check_submodules.sh b/tools/run_tests/sanity/check_submodules.sh
@@ -28,7 +28,7 @@ cat <<EOF | sort >"$want_submodules"
 third_party/abseil-cpp 4a2c63365eff8823a5221db86ef490e828306f9d
 third_party/benchmark 344117638c8ff7e239044fd0fa7085839fc03021
 third_party/bloaty 60209eb1ccc34d5deefb002d1b7f37545204f7f2
-third_party/boringssl-with-bazel b8a2bffc598f230484ff48a247526a9820facfc2
+third_party/boringssl-with-bazel 16c8d3db1af20fcc04b5190b25242aadcb1fbb30
 third_party/cares/cares 6360e96b5cf8e5980c887ce58ef727e53d77243a
 third_party/envoy-api 091cfd044258312a56c632ae1860813b1c0c58bc
 third_party/googleapis 2f9af297c84c55c8b871ba4495e01ade42476c92
+10 −2		src/CMakeLists.txt
+2 −6		src/PORTING.md
+3 −1		src/README.md
+3 −5		src/crypto/bytestring/cbs.c
+7 −0		src/crypto/cipher_extra/e_chacha20poly1305.c
+4 −1		src/crypto/cpu_arm_linux.c
+0 −15		src/crypto/cpu_intel.c
+7 −61		src/crypto/crypto.c
+12 −7		src/crypto/crypto_test.cc
+14 −2		src/crypto/curve25519/x25519_test.cc
+43 −1		src/crypto/dilithium/dilithium.c
+102 −120		src/crypto/dilithium/dilithium_test.cc
+21 −0		src/crypto/fipsmodule/aes/aes.c
+14 −0		src/crypto/fipsmodule/aes/aes_test.cc
+166 −156		src/crypto/fipsmodule/aes/asm/aesni-x86.pl
+213 −191		src/crypto/fipsmodule/aes/asm/aesni-x86_64.pl
+31 −7		src/crypto/fipsmodule/aes/internal.h
+0 −2		src/crypto/fipsmodule/bcm.c
+5 −0		src/crypto/fipsmodule/ec/p256-nistz.c
+0 −6		src/crypto/fipsmodule/modes/gcm_test.cc
+6 −4		src/crypto/fipsmodule/self_check/fips.c
+22 −10		src/crypto/internal.h
+1 −0		src/crypto/kyber/kyber.c
+1 −0		src/crypto/kyber/kyber_test.cc
+3 −3		src/crypto/perlasm/x86asm.pl
+0 −2		src/crypto/test/gtest_main.h
+0 −14		src/crypto/thread_test.cc
+215 −190		src/gen/bcm/aesni-x86-apple.S
+222 −193		src/gen/bcm/aesni-x86-linux.S
+212 −186		src/gen/bcm/aesni-x86-win.asm
+208 −183		src/gen/bcm/aesni-x86_64-apple.S
+212 −188		src/gen/bcm/aesni-x86_64-linux.S
+221 −197		src/gen/bcm/aesni-x86_64-win.asm
+6 −6		src/gen/bcm/vpaes-x86-apple.S
+6 −6		src/gen/bcm/vpaes-x86-linux.S
+6 −6		src/gen/bcm/vpaes-x86-win.asm
+2,580 −2,580		src/gen/sources.bzl
+4 −4		src/go.mod
+8 −8		src/go.sum
+6 −11		src/include/openssl/crypto.h
+6 −0		src/include/openssl/experimental/dilithium.h
+10 −0		src/include/openssl/experimental/kyber.h
+26 −12		src/include/openssl/span.h
+83 −33		src/include/openssl/ssl.h
+2 −5		src/pki/cert_error_params.cc
+1 −3		src/pki/input.cc
+2 −4		src/pki/input.h
+1 −2		src/pki/parse_name.cc
+1 −2		src/pki/verify.cc
+2 −4		src/rust/bssl-sys/src/lib.rs
+6 −8		src/ssl/d1_both.cc
+4 −4		src/ssl/d1_pkt.cc
+14 −13		src/ssl/dtls_record.cc
+22 −16		src/ssl/extensions.cc
+2 −1		src/ssl/handshake_client.cc
+2 −1		src/ssl/handshake_server.cc
+15 −15		src/ssl/internal.h
+1 −0		src/ssl/ssl_key_share.cc
+38 −27		src/ssl/ssl_lib.cc
+59 −20		src/ssl/ssl_privkey.cc
+42 −5		src/ssl/ssl_test.cc
+1 −1		src/ssl/ssl_versions.cc
+1 −3		src/ssl/test/bssl_shim.cc
+11 −0		src/ssl/test/runner/common.go
+33 −25		src/ssl/test/runner/conn.go
+11 −7		src/ssl/test/runner/handshake_client.go
+5 −9		src/ssl/test/runner/handshake_server.go
+5 −5		src/ssl/test/runner/key_agreement.go
+202 −73		src/ssl/test/runner/runner.go
+14 −9		src/ssl/test/runner/sign.go
+14 −6		src/ssl/test/test_config.cc
+3 −0		src/ssl/test/test_config.h
+2 −1		src/ssl/tls13_both.cc
+1 −1		src/ssl/tls_record.cc
+1 −0		src/third_party/fiat/README.chromium
+2 −3		src/tool/speed.cc
+0 −2		src/tool/tool.cc
+11 −2		src/util/all_tests.go
+4 −4		src/util/bot/DEPS
+1 −1		src/util/bot/UPDATING
+1 −1		src/util/bot/sde-linux64.tar.xz.sha1
+1 −1		src/util/bot/sde-win32.tar.xz.sha1
+2 −2		src/util/bot/update_clang.py
+5 −7		src/util/fipstools/CMakeLists.txt
+1 −0		src/util/fipstools/acvp/acvptool/subprocess/subprocess.go
+9 −0		src/util/fipstools/delocate/delocate.go
+3 −2		src/util/fipstools/delocate/delocate.peg
+2,421 −2,283		src/util/fipstools/delocate/delocate.peg.go
+1 −0		src/util/fipstools/delocate/testdata/x86_64-Basic/in.s
+1 −0		src/util/fipstools/delocate/testdata/x86_64-Basic/out.s
+7 −0		src/util/fipstools/delocate/testdata/x86_64-LabelRewrite/in1.s
+11 −0		src/util/fipstools/delocate/testdata/x86_64-LabelRewrite/out.s
+33 −18		src/util/fipstools/test_fips.c
+27 −0		src/util/gotools/gotools.go
+6 −3		src/util/pregenerate/build.go