include/openssl/evp.h (4 lines):
	- line 1066: // TODO: Add support for |EVP_PKEY_DH| once we have param_gen support.
	- line 1083: // TODO: Add support for |EVP_PKEY_DH| once we have param_gen support.
	- line 1322: // TODO (CryptoAlg-2398): Add |OPENSSL_DEPRECATED|. nginx defines -Werror and
	- line 1337: // TODO (CryptoAlg-2398): Add |OPENSSL_DEPRECATED|. tpm2-tss defines -Werror and


crypto/fipsmodule/sha/internal.h (4 lines):
	- line 229: // TODO: Simplify this logic, which was extracted from the assembly:
	- line 240: // TODO: Simplify this logic, which was extracted from the assembly:
	- line 265: // TODO: Simplify this logic, which was extracted from the assembly:
	- line 285: // TODO: Simplify this logic, which was extracted from the assembly:


ssl/ssl_transfer_asn1.cc (3 lines):
	- line 978: //    FIXME add hash of SSL_CTX
	- line 1021: //    FIXME add hash of SSL_CTX
	- line 1022: // This TODO is actually a part of SSL DER struct revisit.


include/openssl/ssl.h (3 lines):
	- line 5901: // TODO (CryptoAlg-2398): Add |OPENSSL_DEPRECATED|. nginx defines -Werror and
	- line 5974: // TODO (CryptoAlg-2398): Add |OPENSSL_DEPRECATED|. nginx defines -Werror and
	- line 5994: // TODO (CryptoAlg-2398): Add |OPENSSL_DEPRECATED|. nginx defines -Werror and


crypto/fipsmodule/bcm.c (2 lines):
	- line 230: // TODO: Re-enable once all data has been moved out of .text segments CryptoAlg-2360
	- line 273: // TODO: remove !defined(OPENSSL_PPC64BE) from the check below when starting to support


crypto/pkcs8/pkcs8_x509.c (2 lines):
	- line 1338: // TODO (CryptoAlg-2897): Update the default |md| to SHA-256 to align with
	- line 1399: // TODO (CryptoAlg-2897): Update the default |md| to SHA-256 to align with


crypto/x509/x509_vfy.c (2 lines):
	- line 230: // FIXME: If this happens, we should take note of it and, if appropriate,
	- line 337: // FIXME: If this happens, we should take note of it and, if


crypto/asn1/tasn_utl.c (2 lines):
	- line 259: // FIXME: need to search application table too
	- line 268: // FIXME: should log the value or OID of unsupported type


tool/client.cc (1 line):
	- line 307: // TODO (aws-lc): we are missing some functions needed to print the following data


include/openssl/rand.h (1 line):
	- line 96: // TODO (CryptoAlg-2398): Add |OPENSSL_DEPRECATED| to the ones that are missing.


crypto/fipsmodule/cipher/e_aesccm.c (1 line):
	- line 502: // TODO: possibly refactor the code instead of repeating it from e_aes.c


include/openssl/pkcs8.h (1 line):
	- line 201: // TODO (CryptoAlg-2897): Update the default |md| to SHA-256 to align with


tool/speed.cc (1 line):
	- line 403: // TODO: Add support for OpenSSL RSA private key parsing benchmarks. Tracked in


crypto/fipsmodule/hmac/hmac.c (1 line):
	- line 168: // FIXME: all hashes but SHA256 have been disabled to check first SHA256


ssl/ssl_asn1.cc (1 line):
	- line 738: /* TODO: in time we can include |is_server| for servers too, then we can


crypto/x509/v3_alt.c (1 line):
	- line 621: // FIXME: should allow other character types...


include/openssl/conf.h (1 line):
	- line 163: // TODO (CryptoAlg-2398): Add |OPENSSL_DEPRECATED|. nginx defines -Werror and


crypto/hrss/hrss.c (1 line):
	- line 65: // TODO: MSVC can likely also be made to work with vector operations, but ^ must


tool/digest.cc (1 line):
	- line 173: // TODO: When given "--binary" or "-b", we should print " *" instead of "  "


tool-openssl/dgst.cc (1 line):
	- line 127: // TODO: Make this customizable when "-digest" is introduced.


crypto/fipsmodule/rsa/rsa_impl.c (1 line):
	- line 134: // TODO: p and q are also CONSTTIME_SECRET but not yet marked as such


include/openssl/bio.h (1 line):
	- line 943: // TODO (CryptoAlg-2398): Add |OPENSSL_DEPRECATED|. nginx defines -Werror and


tool-openssl/x509.cc (1 line):
	- line 65: // TODO: make customizable with -digest option


include/openssl/digest.h (1 line):
	- line 345: // TODO: Look into untangling this, so that |EVP_PKEY_HMAC| can directly call