Reda Chouk
|
e11c312382
|
fixup! Rust wrapper: use approved calls for AES-GCM encrypt with external IV in FIPS builds
|
2026-10-21 14:34:47 +02:00 |
|
Reda Chouk
|
42aaf551a9
|
Rust wrapper: add FIPS tests for the private key read guard and the self test helper
|
2026-10-21 14:27:37 +02:00 |
|
Reda Chouk
|
f1cd6d4410
|
Rust wrapper: add a scoped FIPS private key read guard and a run-once helper for all self tests
|
2026-10-21 14:27:37 +02:00 |
|
Reda Chouk
|
aa7e287b26
|
Rust wrapper: expect FIPS to refuse a caller supplied reseed in test_rng_reseed
|
2026-10-21 08:46:52 +02:00 |
|
Reda Chouk
|
51470f325d
|
Rust wrapper: tell dependent crates when wolfSSL is a FIPS build
|
2026-10-21 08:23:31 +02:00 |
|
Reda Chouk
|
a317235cd3
|
Rust wrapper: use the FIPS minimum PBKDF2 output length in test_output_len_bounds
|
2026-10-21 08:23:31 +02:00 |
|
Reda Chouk
|
560aa8e71c
|
Rust wrapper: use a FIPS-sized key in the HMAC chain_update test
|
2026-10-21 08:23:31 +02:00 |
|
Reda Chouk
|
f51ab9ccb7
|
Rust wrapper: use approved calls for AES-GCM encrypt with external IV in FIPS builds
|
2026-10-21 08:23:31 +02:00 |
|
Aidan Keefe
|
aa3f7cb6e3
|
remove depriacted build option
|
2026-10-20 16:40:06 -07:00 |
|
Josh Holtrop
|
6bd2469cbd
|
Rust wrapper: allow generating random data to large buffers
Previously RNG::generate_block and TryRng::try_fill_bytes would return
an error for buffers larger than 64KB.
Fixes F-15122.
|
2026-10-16 11:17:51 -04:00 |
|
Josh Holtrop
|
3d6454aeff
|
Rust wrapper: fail crate build if C library built with async support
The Rust wrapper was not designed to properly handle the C async
implementation.
|
2026-10-16 11:17:51 -04:00 |
|
philljj
|
e6bc824748
|
Merge pull request #11718 from holtrop-wolfssl/rust-updates-2026-10-12
Rust updates 2026-10-12
|
2026-10-15 14:59:30 -05:00 |
|
Reda Chouk
|
d89136ec9b
|
rust: gate zeroize and aead imports on the algorithms that use them
|
2026-10-13 14:28:08 +02:00 |
|
Reda Chouk
|
c3a986bb33
|
rust: publish library dir to dependant crates for rpath
|
2026-10-13 14:20:20 +02:00 |
|
Josh Holtrop
|
4b6abe88f0
|
Rust wrapper: address minor Copilot code review findings
chacha20_poly1305: zeroize struct on error
ed25519/ed448: do not drop ph_stream_len if it is unexpected size
|
2026-10-12 13:56:50 -04:00 |
|
Josh Holtrop
|
6b7959ba8b
|
Rust wrapper: chacha20_poly1305: disallow finalize() for decrypt
finalize_verify() must be used instead.
Fixes F-11284.
|
2026-10-12 09:05:32 -04:00 |
|
Josh Holtrop
|
5e00545b10
|
Rust wrapper: ed25519/ed448: require correct prehash length
Fixes F-10102, F-10103.
|
2026-10-12 09:05:32 -04:00 |
|
Josh Holtrop
|
22e6caa87c
|
Rust wrapper: ed25519/ed448: fix prehash comments
Fixes F-11280, F-11281.
|
2026-10-12 09:05:32 -04:00 |
|
Josh Holtrop
|
1ebc339a8b
|
Rust wrapper: fix detecting NO_SIG_WRAPPER C build option
Fixes F-13036.
|
2026-10-12 09:05:32 -04:00 |
|
Josh Holtrop
|
64385c64dd
|
Rust wrapper: ed448: fix comments to correct hash to SHAKE256
Fixes F-10081.
|
2026-10-12 09:05:32 -04:00 |
|
Josh Holtrop
|
9668a48b9a
|
Rust wrapper: fail build if library not found for in-repo build
Fixes F-13702.
|
2026-10-12 09:05:32 -04:00 |
|
Josh Holtrop
|
1fdfe36632
|
Rust wrapper: ed25519/ed448: verify variant/context combinations
Fixes F-13060.
|
2026-10-12 09:05:32 -04:00 |
|
Josh Holtrop
|
534771bb9e
|
Rust wrapper: disable rsa_oaep cfg if C library disables it
Fixes F-13034.
|
2026-10-12 09:05:32 -04:00 |
|
Josh Holtrop
|
1021958ef5
|
Rust wrapper: aes: avoid pointer aliasing in apply_stream_chunked
Fixes F-10099.
|
2026-10-12 09:05:32 -04:00 |
|
Josh Holtrop
|
bb4a9caff5
|
Rust wrapper: chunk digest updates to fit in 4GB chunks
Fixes F-10104.
|
2026-10-12 09:05:32 -04:00 |
|
Josh Holtrop
|
2b73bcaac2
|
Rust wrapper: return output lengths from key export methods
Fixes F-11287.
|
2026-10-12 09:05:32 -04:00 |
|
Josh Holtrop
|
66586272d7
|
Rust wrapper: fix CMAC one-shot methods reinitializing CMAC instances
Fixes F-8291.
|
2026-10-12 09:05:31 -04:00 |
|
Josh Holtrop
|
88f3c9f917
|
Rust wrapper: XChaCha20Poly1305Aead: avoid large stack buffer
Also allow larger input buffers by using caller's buffer for in-place
operation.
Fixes F-8290.
|
2026-10-12 09:05:01 -04:00 |
|
philljj
|
9d911234df
|
Merge pull request #11515 from holtrop-wolfssl/f-12240
Rust wrapper: lms: replace export_pub_from() with export_pub()
|
2026-10-10 17:58:24 -05:00 |
|
philljj
|
132b548a39
|
Merge pull request #11512 from holtrop-wolfssl/f-11273
Rust wrapper: rsa_pkcs1v15: make SigningKey::verifying_key infallible
|
2026-10-08 10:16:40 -05:00 |
|
Josh Holtrop
|
e964ce50a9
|
Rust wrapper: lms: replace export_pub_from() with export_pub()
Also add export_pub_ex().
Fixes F-12240.
|
2026-10-07 21:30:33 -04:00 |
|
philljj
|
95fea1a540
|
Merge pull request #11630 from holtrop-wolfssl/f-11276
Rust wrapper: blake2: fix comments about hash length
|
2026-10-07 16:00:06 -05:00 |
|
Josh Holtrop
|
dba52cf55b
|
Rust wrapper: mldsa: use cfg gates for level constants
Fixes F-12237.
|
2026-10-07 12:31:29 -04:00 |
|
philljj
|
84fa109943
|
Merge pull request #11556 from holtrop-wolfssl/f-10085
Rust wrapper: validate minimum PBKDF2/scrypt output length before KDF
|
2026-10-07 10:03:39 -05:00 |
|
philljj
|
00e6291105
|
Merge pull request #11485 from holtrop-wolfssl/f-11271
Rust wrapper: fix ed25519/ed448 Keypair possibly panicking without public component
|
2026-10-07 08:37:00 -05:00 |
|
Josh Holtrop
|
d2f328e61a
|
Rust wrapper: rsa_pkcs1v15: make SigningKey::verifying_key infallible
Fixes F-11273.
|
2026-10-06 17:36:28 -04:00 |
|
philljj
|
6f96db9bf7
|
Merge pull request #11638 from holtrop-wolfssl/f-8289
Rust wrapper: scrypt/pbkdf2: zeroize local temporary password hash
|
2026-10-06 01:29:39 -05:00 |
|
philljj
|
90de9ffabb
|
Merge pull request #11568 from holtrop-wolfssl/f-11274
Rust wrapper: check for wrapping for extremely large key sizes
|
2026-10-04 21:52:45 -05:00 |
|
JacobBarthelmeh
|
9173cf7baa
|
Merge pull request #11514 from holtrop-wolfssl/f-12236
Rust wrapper: fix rsa_oaep cfg probe for FIPS
|
2026-10-03 21:13:28 -06:00 |
|
philljj
|
8f81b78579
|
Merge pull request #11634 from holtrop-wolfssl/f-13052
Fix KDF key buffer comments for SRTCP labels
|
2026-10-03 15:13:33 -05:00 |
|
philljj
|
0f403f8f40
|
Merge pull request #11635 from holtrop-wolfssl/f-8288
Rust wrapper: mlkem_kem: zeroize local private key and shared secret variables
|
2026-10-03 15:08:41 -05:00 |
|
JacobBarthelmeh
|
2411aae3f7
|
Merge pull request #11560 from jackctj117/C#-FIPS
C# FIPS wrapper
|
2026-10-03 00:12:53 -06:00 |
|
Josh Holtrop
|
c073103cd8
|
Rust wrapper: scrypt/pbkdf2: zeroize local temporary password hash
Fixes F-8289.
|
2026-10-02 15:19:48 -04:00 |
|
jackctj117
|
fb67a7ebab
|
Move C# FIPS wrapper ignores to the root .gitignore
|
2026-10-02 11:25:35 -06:00 |
|
philljj
|
30cf62ac67
|
Merge pull request #11633 from holtrop-wolfssl/f-11278
Rust wrapper: kdf: fix comments about output buffer size
|
2026-10-02 12:03:38 -05:00 |
|
Josh Holtrop
|
3e422945ff
|
Rust wrapper: fix ed25519/ed448 Keypair possibly panicking without public component
Fixes F-11271, F-11272.
|
2026-10-02 12:40:30 -04:00 |
|
Reda Chouk
|
3374c6f9f6
|
Merge pull request #11511 from holtrop-wolfssl/f-8307
Rust wrapper: random: implement fallible rand_core traits
|
2026-10-02 18:15:28 +02:00 |
|
Josh Holtrop
|
8ae68eb4b1
|
Rust wrapper: mlkem_kem: zeroize local private key and shared secret variables
Fixes F-8288.
|
2026-10-02 11:51:18 -04:00 |
|
jackctj117
|
aa4b743e19
|
Remove ACVP vector tests from the C# wrapper suite
|
2026-10-02 09:32:25 -06:00 |
|
philljj
|
d7950e20e9
|
Merge pull request #11631 from holtrop-wolfssl/f-11277
Rust wrapper: hkdf: fix comments about output buffer size
|
2026-10-02 09:51:58 -05:00 |
|