| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-11-22 | KEYS: Avoid -Wflex-array-member-not-at-end warning | Gustavo A. R. Silva | 1 | -2/+5 |
| 2023-10-31 | certs: Only allow certs signed by keys on the builtin keyring | Mimi Zohar | 1 | -0/+4 |
| 2023-08-17 | KEYS: DigitalSignature link restriction | Eric Snowberg | 1 | -0/+44 |
| 2023-04-24 | integrity: machine keyring CA configuration | Eric Snowberg | 1 | -0/+2 |
| 2023-04-24 | KEYS: CA link restriction | Eric Snowberg | 1 | -0/+38 |
| 2022-01-09 | keys: X.509 public key issuer lookup without AKID | Andrew Zaborowski | 1 | -19/+29 |
| 2021-02-16 | keys: Update comment for restrict_link_by_key_or_keyring_chain | Andrew Zaborowski | 1 | -3/+4 |
| 2019-05-24 | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36 | Thomas Gleixner | 1 | -5/+1 |
| 2018-02-22 | X.509: fix NULL dereference when restricting key with unsupported_sig | Eric Biggers | 1 | -8/+13 |
| 2017-04-04 | KEYS: Keyring asymmetric key restrict method with chaining | Mat Martineau | 1 | -38/+120 |
| 2017-04-04 | KEYS: Restrict asymmetric key linkage using a specific keychain | Mat Martineau | 1 | -0/+71 |
| 2017-04-03 | KEYS: Split role of the keyring pointer for keyring restrict functions | Mat Martineau | 1 | -3/+5 |
| 2016-07-18 | KEYS: Fix for erroneous trust of incorrectly signed X.509 certs | Mat Martineau | 1 | -1/+1 |
| 2016-04-11 | KEYS: Move the point of trust determination to __key_link() | David Howells | 1 | -30/+32 |
| 2016-04-11 | X.509: Move the trust validation code out to its own file | David Howells | 1 | -0/+106 |