1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

583 Commits

Author SHA1 Message Date
Reda Chouk
e11c312382 fixup! Rust wrapper: use approved calls for AES-GCM encrypt with external IV in FIPS builds 2026-10-21 14:34:47 +02:00
Reda Chouk
42aaf551a9 Rust wrapper: add FIPS tests for the private key read guard and the self test helper 2026-10-21 14:27:37 +02:00
Reda Chouk
f1cd6d4410 Rust wrapper: add a scoped FIPS private key read guard and a run-once helper for all self tests 2026-10-21 14:27:37 +02:00
Reda Chouk
aa7e287b26 Rust wrapper: expect FIPS to refuse a caller supplied reseed in test_rng_reseed 2026-10-21 08:46:52 +02:00
Reda Chouk
51470f325d Rust wrapper: tell dependent crates when wolfSSL is a FIPS build 2026-10-21 08:23:31 +02:00
Reda Chouk
a317235cd3 Rust wrapper: use the FIPS minimum PBKDF2 output length in test_output_len_bounds 2026-10-21 08:23:31 +02:00
Reda Chouk
560aa8e71c Rust wrapper: use a FIPS-sized key in the HMAC chain_update test 2026-10-21 08:23:31 +02:00
Reda Chouk
f51ab9ccb7 Rust wrapper: use approved calls for AES-GCM encrypt with external IV in FIPS builds 2026-10-21 08:23:31 +02:00
Aidan Keefe
aa3f7cb6e3 remove depriacted build option 2026-10-20 16:40:06 -07:00
Josh Holtrop
6bd2469cbd Rust wrapper: allow generating random data to large buffers
Previously RNG::generate_block and TryRng::try_fill_bytes would return
an error for buffers larger than 64KB.

Fixes F-15122.
2026-10-16 11:17:51 -04:00
Josh Holtrop
3d6454aeff Rust wrapper: fail crate build if C library built with async support
The Rust wrapper was not designed to properly handle the C async
implementation.
2026-10-16 11:17:51 -04:00
philljj
e6bc824748 Merge pull request #11718 from holtrop-wolfssl/rust-updates-2026-10-12
Rust updates 2026-10-12
2026-10-15 14:59:30 -05:00
Reda Chouk
d89136ec9b rust: gate zeroize and aead imports on the algorithms that use them 2026-10-13 14:28:08 +02:00
Reda Chouk
c3a986bb33 rust: publish library dir to dependant crates for rpath 2026-10-13 14:20:20 +02:00
Josh Holtrop
4b6abe88f0 Rust wrapper: address minor Copilot code review findings
chacha20_poly1305: zeroize struct on error
ed25519/ed448: do not drop ph_stream_len if it is unexpected size
2026-10-12 13:56:50 -04:00
Josh Holtrop
6b7959ba8b Rust wrapper: chacha20_poly1305: disallow finalize() for decrypt
finalize_verify() must be used instead.

Fixes F-11284.
2026-10-12 09:05:32 -04:00
Josh Holtrop
5e00545b10 Rust wrapper: ed25519/ed448: require correct prehash length
Fixes F-10102, F-10103.
2026-10-12 09:05:32 -04:00
Josh Holtrop
22e6caa87c Rust wrapper: ed25519/ed448: fix prehash comments
Fixes F-11280, F-11281.
2026-10-12 09:05:32 -04:00
Josh Holtrop
1ebc339a8b Rust wrapper: fix detecting NO_SIG_WRAPPER C build option
Fixes F-13036.
2026-10-12 09:05:32 -04:00
Josh Holtrop
64385c64dd Rust wrapper: ed448: fix comments to correct hash to SHAKE256
Fixes F-10081.
2026-10-12 09:05:32 -04:00
Josh Holtrop
9668a48b9a Rust wrapper: fail build if library not found for in-repo build
Fixes F-13702.
2026-10-12 09:05:32 -04:00
Josh Holtrop
1fdfe36632 Rust wrapper: ed25519/ed448: verify variant/context combinations
Fixes F-13060.
2026-10-12 09:05:32 -04:00
Josh Holtrop
534771bb9e Rust wrapper: disable rsa_oaep cfg if C library disables it
Fixes F-13034.
2026-10-12 09:05:32 -04:00
Josh Holtrop
1021958ef5 Rust wrapper: aes: avoid pointer aliasing in apply_stream_chunked
Fixes F-10099.
2026-10-12 09:05:32 -04:00
Josh Holtrop
bb4a9caff5 Rust wrapper: chunk digest updates to fit in 4GB chunks
Fixes F-10104.
2026-10-12 09:05:32 -04:00
Josh Holtrop
2b73bcaac2 Rust wrapper: return output lengths from key export methods
Fixes F-11287.
2026-10-12 09:05:32 -04:00
Josh Holtrop
66586272d7 Rust wrapper: fix CMAC one-shot methods reinitializing CMAC instances
Fixes F-8291.
2026-10-12 09:05:31 -04:00
Josh Holtrop
88f3c9f917 Rust wrapper: XChaCha20Poly1305Aead: avoid large stack buffer
Also allow larger input buffers by using caller's buffer for in-place
operation.

Fixes F-8290.
2026-10-12 09:05:01 -04:00
philljj
9d911234df Merge pull request #11515 from holtrop-wolfssl/f-12240
Rust wrapper: lms: replace export_pub_from() with export_pub()
2026-10-10 17:58:24 -05:00
philljj
132b548a39 Merge pull request #11512 from holtrop-wolfssl/f-11273
Rust wrapper: rsa_pkcs1v15: make SigningKey::verifying_key infallible
2026-10-08 10:16:40 -05:00
Josh Holtrop
e964ce50a9 Rust wrapper: lms: replace export_pub_from() with export_pub()
Also add export_pub_ex().
Fixes F-12240.
2026-10-07 21:30:33 -04:00
philljj
95fea1a540 Merge pull request #11630 from holtrop-wolfssl/f-11276
Rust wrapper: blake2: fix comments about hash length
2026-10-07 16:00:06 -05:00
Josh Holtrop
dba52cf55b Rust wrapper: mldsa: use cfg gates for level constants
Fixes F-12237.
2026-10-07 12:31:29 -04:00
philljj
84fa109943 Merge pull request #11556 from holtrop-wolfssl/f-10085
Rust wrapper: validate minimum PBKDF2/scrypt output length before KDF
2026-10-07 10:03:39 -05:00
philljj
00e6291105 Merge pull request #11485 from holtrop-wolfssl/f-11271
Rust wrapper: fix ed25519/ed448 Keypair possibly panicking without public component
2026-10-07 08:37:00 -05:00
Josh Holtrop
d2f328e61a Rust wrapper: rsa_pkcs1v15: make SigningKey::verifying_key infallible
Fixes F-11273.
2026-10-06 17:36:28 -04:00
philljj
6f96db9bf7 Merge pull request #11638 from holtrop-wolfssl/f-8289
Rust wrapper: scrypt/pbkdf2: zeroize local temporary password hash
2026-10-06 01:29:39 -05:00
philljj
90de9ffabb Merge pull request #11568 from holtrop-wolfssl/f-11274
Rust wrapper: check for wrapping for extremely large key sizes
2026-10-04 21:52:45 -05:00
JacobBarthelmeh
9173cf7baa Merge pull request #11514 from holtrop-wolfssl/f-12236
Rust wrapper: fix rsa_oaep cfg probe for FIPS
2026-10-03 21:13:28 -06:00
philljj
8f81b78579 Merge pull request #11634 from holtrop-wolfssl/f-13052
Fix KDF key buffer comments for SRTCP labels
2026-10-03 15:13:33 -05:00
philljj
0f403f8f40 Merge pull request #11635 from holtrop-wolfssl/f-8288
Rust wrapper: mlkem_kem: zeroize local private key and shared secret variables
2026-10-03 15:08:41 -05:00
JacobBarthelmeh
2411aae3f7 Merge pull request #11560 from jackctj117/C#-FIPS
C# FIPS wrapper
2026-10-03 00:12:53 -06:00
Josh Holtrop
c073103cd8 Rust wrapper: scrypt/pbkdf2: zeroize local temporary password hash
Fixes F-8289.
2026-10-02 15:19:48 -04:00
jackctj117
fb67a7ebab Move C# FIPS wrapper ignores to the root .gitignore 2026-10-02 11:25:35 -06:00
philljj
30cf62ac67 Merge pull request #11633 from holtrop-wolfssl/f-11278
Rust wrapper: kdf: fix comments about output buffer size
2026-10-02 12:03:38 -05:00
Josh Holtrop
3e422945ff Rust wrapper: fix ed25519/ed448 Keypair possibly panicking without public component
Fixes F-11271, F-11272.
2026-10-02 12:40:30 -04:00
Reda Chouk
3374c6f9f6 Merge pull request #11511 from holtrop-wolfssl/f-8307
Rust wrapper: random: implement fallible rand_core traits
2026-10-02 18:15:28 +02:00
Josh Holtrop
8ae68eb4b1 Rust wrapper: mlkem_kem: zeroize local private key and shared secret variables
Fixes F-8288.
2026-10-02 11:51:18 -04:00
jackctj117
aa4b743e19 Remove ACVP vector tests from the C# wrapper suite 2026-10-02 09:32:25 -06:00
philljj
d7950e20e9 Merge pull request #11631 from holtrop-wolfssl/f-11277
Rust wrapper: hkdf: fix comments about output buffer size
2026-10-02 09:51:58 -05:00