1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • ca64ffd25b extra compat support for MLDSA evp pkeys sebastian-carpenter 2026-09-29 11:51:21 -06:00
  • 031d65d51c Merge pull request #11394 from LinuxJedi/pic32-hash-copy-deep-copy JacobBarthelmeh 2026-10-01 09:13:37 -06:00
  • 0a7de61c82 Merge pull request #11488 from holtrop-wolfssl/no-sig-wrapper-prototypes philljj 2026-10-01 10:10:53 -05:00
  • e8e5d23e8d Regenerate armasm after wolfSSL/scripts#625 Mattia Moffa 2026-09-30 15:40:48 +02:00
  • 5205395c50 Address review: keep one cache owner of session ex_data on ticket reissue Juliusz Sosinowicz 2026-10-01 13:13:56 +00:00
  • bbe4bb52bf Zeroizization fixes in tls13 - wipe the whole preMasterSEcret buffer at the tls 1.3 handshake secret's last use as preMasterSz no longer describes its contents - zeroize the tls 1.3 early secret and teh psk it was extracted from at their last use in DeriveHandshakeSecret Reda Chouk 2026-09-09 11:30:01 +02:00
  • 92c618b3fb Rust wrapper: test_hmac: refactor common logic Josh Holtrop 2026-09-29 14:40:41 -04:00
  • 5db357b175 Rust wrapper: fix unsound HMAC::clone() Josh Holtrop 2026-09-23 00:16:55 -04:00
  • 9f7b1ab047 configure.ac: probe the positive form of -Wdeprecated-enum-enum-conversion Sameeh Jubran 2026-10-01 14:25:28 +03:00
  • d6d53fdd2b Release the peer signature algorithms cert list once it is used Tobias Frauenschläger 2026-09-02 14:06:19 +02:00
  • 031e70cde5 Allocate the peer signature algorithms cert list on demand Tobias Frauenschlaeger 2026-08-23 08:00:09 +00:00
  • 4c24d20304 Drop the per-handshake allocation for signature_algorithms Tobias Frauenschlaeger 2026-08-21 14:08:54 +00:00
  • 23a2ac16dd Fix PKCS#7 build with AES enabled but AES-CBC disabled Tobias Frauenschläger 2026-09-30 13:52:15 +02:00
  • 90262582ba Merge pull request #11230 from aidangarske/fenrir-fixes-10620 philljj 2026-10-01 00:45:46 -05:00
  • e34f3e77a6 Address review: DTLS version filter and cipher IDs of stack entries Juliusz Sosinowicz 2026-10-01 05:26:17 +00:00
  • baa31e3a76 test: rename the refused-save test for what it checks kaleb-himes 2026-09-30 15:22:03 -06:00
  • c7c3f08415 sha3: name the C-block switch for what it does, not a claim kaleb-himes 2026-09-30 14:51:02 -06:00
  • 9865399621 sha3: keep Keccak-256 in dev builds, refuse it when certifiable kaleb-himes 2026-09-30 14:29:51 -06:00
  • 1bbe9ec711 fips v7: build the ppc32 AES assembly too kaleb-himes 2026-09-30 13:19:09 -06:00
  • 0912ac66c5 configure: keep the kmac check from splitting the cshake comment kaleb-himes 2026-09-30 13:10:51 -06:00
  • de5f1112d3 sha3: compile the trailing AVX2 arm only where it can run kaleb-himes 2026-09-30 13:10:51 -06:00
  • e4b80911d1 sha3: gate the init-time C block switch for certifiable builds kaleb-himes 2026-09-30 13:10:51 -06:00
  • 25fbf63e35 docs: refresh stale SHA-3 selection notes in mcdc and include.am kaleb-himes 2026-09-25 12:02:08 -06:00
  • d6f734a0b9 test: use the vector-register debug macro, cover the NULL flag kaleb-himes 2026-09-25 12:02:08 -06:00
  • 311871cfa6 sha3: address review findings in block selection and SetFlags kaleb-himes 2026-09-25 12:02:08 -06:00
  • 758321fd08 configure: refuse explicit kmac and cshake for a validated module kaleb-himes 2026-09-25 12:00:25 -06:00
  • b30d11ab76 sha3: no run-time C block switch in certifiable FIPS builds kaleb-himes 2026-09-25 10:26:40 -06:00
  • 8d0f12d47a settings: drop KMAC and cSHAKE from FIPS v7 module builds kaleb-himes 2026-09-25 10:26:40 -06:00
  • a18674cd12 sha3: only claim vector registers for the NEON arm32 block kaleb-himes 2026-09-25 09:48:44 -06:00
  • b369889029 test: require the claim refusal before the SHA-3 retry kaleb-himes 2026-09-12 15:23:37 -06:00
  • c99ae8fc87 test: cover the retry after a refused vector-register claim kaleb-himes 2026-09-11 15:00:32 -06:00
  • 560ffb1d94 sha3: refuse the Keccak-256 flag in a FIPS v7 build kaleb-himes 2026-09-11 15:00:26 -06:00
  • 83233eed77 sha3: claim the vector registers before the final absorb kaleb-himes 2026-09-10 18:18:01 -06:00
  • 9caeb2695a fips v7: build the ppc64 and riscv64 AES assembly kaleb-himes 2026-09-10 15:20:21 -06:00
  • 820885da43 sha3: bracket the block permute and gate non-approved services kaleb-himes 2026-09-10 15:20:21 -06:00
  • d538da8003 PR feedback: ensure mkdir and cp do not fail Paul Adelsbach 2026-09-30 15:19:06 -07:00
  • 26f0e3c922 Test issue: update .wolfssl_known_macro_extras Paul Adelsbach 2026-09-30 08:16:38 -07:00
  • d0911bb9d8 CI: fix membrowse issue Paul Adelsbach 2026-09-29 17:53:57 -07:00
  • b15f8077d5 CI: Zephyr: run tests via script rather than yaml for performance Paul Adelsbach 2026-09-29 17:51:48 -07:00
  • 7834b6a72a CI: Zephyr: use build list file to combine build setup Paul Adelsbach 2026-09-29 17:18:19 -07:00
  • d7b4d5b323 CI: Zephyr: fetch only the west modules used by the build Paul Adelsbach 2026-09-29 17:04:41 -07:00
  • 16b8d3ae70 CI: Zephyr: remove free space cleanup for performance Paul Adelsbach 2026-09-29 17:03:01 -07:00
  • 0e68d5d7a7 Silabs cryptocb: reduced-config guards, KDF/AEAD validation, bind pubkey David Garske 2026-09-18 11:42:29 -07:00
  • 4e374780ee Add Silicon Labs EFR32xG25 Secure Element crypto callback port David Garske 2026-09-10 08:38:45 -07:00
  • 9088161201 Add crypto callback support for PBKDF2 David Garske 2026-09-09 13:41:31 -07:00
  • a22b5f3402 Add crypto callback support for ChaCha20-Poly1305 via a devId on the cipher object David Garske 2026-09-09 13:16:47 -07:00
  • 03044f72a5 Merge pull request #11616 from padelsbach/pkcs7-shorttag-ccm David Garske 2026-09-30 16:41:01 -07:00
  • dbf1a14b0e Merge pull request #11577 from Frauschi/cmake_version JacobBarthelmeh 2026-09-30 17:03:20 -06:00
  • 8cf9097153 PKCS7: only wait for an 00 00 ending on indefinite EncryptedContentInfo Paul Adelsbach 2026-09-30 15:40:28 -07:00
  • 14dc7b32bb Merge pull request #11390 from yosuke-wolfssl/fix/f_13334 JacobBarthelmeh 2026-09-30 16:01:58 -06:00
  • 93253e6238 Merge pull request #11479 from miyazakh/f10032_tsipgcm JacobBarthelmeh 2026-09-30 16:01:19 -06:00
  • 0e18d004bb Merge pull request #11554 from Frauschi/pkcs7-ber-decode JacobBarthelmeh 2026-09-30 15:48:48 -06:00
  • d61539bfaf Merge pull request #11151 from kojo1/timeLen philljj 2026-09-30 16:12:57 -05:00
  • 77a34ebf96 Merge pull request #11503 from holtrop-wolfssl/f-8306 philljj 2026-09-30 15:59:21 -05:00
  • 7d2392ddc9 Merge pull request #11250 from aidankeefe2022/fenrir-10723 JacobBarthelmeh 2026-09-30 14:36:45 -06:00
  • b9df10c6a4 Merge pull request #11501 from holtrop-wolfssl/f-8296 philljj 2026-09-30 14:44:58 -05:00
  • 9aaaaec244 Merge pull request #11534 from holtrop-wolfssl/f-8292 philljj 2026-09-30 14:42:31 -05:00
  • 3e2124abcc Merge pull request #11089 from julek-wolfssl/tls13-certificate-authorities-api philljj 2026-09-30 14:40:32 -05:00
  • 9fa31dc32a Merge pull request #11490 from kaleb-himes/PKCS7-ENFORCE-GCM-TAG-LENGTH JacobBarthelmeh 2026-09-30 11:05:55 -06:00
  • 7fc1098e12 Merge pull request #11596 from padelsbach/ccache-no-reseed-cancel philljj 2026-09-30 12:05:22 -05:00
  • 5ce4ca78e3 Merge pull request #11197 from dgarske/caam_linux JacobBarthelmeh 2026-09-30 10:59:21 -06:00
  • 99f1d27b21 address reviewers' comments + improvements Marco Oliverio 2026-09-30 18:57:12 +02:00
  • e0fd0c677f X509_verify_cert: honor explicit depth 0, don't count anchor against depth Aidan Keefe 2026-09-10 12:36:28 -06:00
  • d19bda6a45 Merge pull request #11423 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-L JacobBarthelmeh 2026-09-30 10:38:33 -06:00
  • b7c06ae559 wolfssl/wolfcrypt/wc_port.h: add armcc-AC5 definitions for WC_BARRIER() and WC_BARRIER_DATA(). Daniel Pouzzner 2026-09-30 11:25:46 -05:00
  • d42c7c86ea Merge pull request #11486 from holtrop-wolfssl/f-13035 philljj 2026-09-30 11:20:37 -05:00
  • df15e0042b Merge pull request #10655 from JacobBarthelmeh/oss-fuzz philljj 2026-09-30 10:59:02 -05:00
  • 1ea5609d7f fixed fenrir-10723 Aidan Keefe 2026-08-24 16:44:16 -06:00
  • 691d21504c Merge pull request #11335 from julek-wolfssl/openssh-10.5p1-ci philljj 2026-09-30 10:23:29 -05:00
  • b92f95567b CI: Update sharding in cryptocb workflow to avoid timeout Paul Adelsbach 2026-09-30 08:22:06 -07:00
  • 4bad58a340 Merge pull request #11604 from padelsbach/ci-fips-dev-no-post-mangle philljj 2026-09-30 10:21:25 -05:00
  • 52acfb0065 PKCS#7: reject a RecipientInfo that runs past its set Tobias Frauenschläger 2026-09-30 17:11:22 +02:00
  • a5f4340aec PKCS#7: let the recipient walk read past an estimated message end Tobias Frauenschläger 2026-09-25 17:00:33 +02:00
  • aafa620f78 PKCS#7: step over the remaining recipients in a chunked decode Tobias Frauenschläger 2026-09-25 12:53:14 +02:00
  • be4adfd07a PKCS#7: do not rewind past an indefinite-length RecipientInfo set Tobias Frauenschläger 2026-09-08 11:07:27 +02:00
  • 0e6b621426 PKCS#7: decode an AuthEnvelopedData with more than one recipient Tobias Frauenschläger 2026-09-08 11:07:27 +02:00
  • d30a9a3bda Add SSL_CTX_get_ciphers() compat API Juliusz Sosinowicz 2026-09-30 14:56:59 +00:00
  • 14ef821926 PKCS#7: resynchronise the stream after a rejected recipient Tobias Frauenschläger 2026-09-01 17:14:20 +02:00
  • 5bd7fd4025 PKCS#7: bound the recipient search by the RecipientInfo set Tobias Frauenschläger 2026-09-01 17:14:02 +02:00
  • bc9f18967c Fix from review Eric Blankenhorn 2026-09-29 14:10:07 -05:00
  • f3bf7a8d93 CMake: use CMAKE_OSX_ARCHITECTURES for Apple target arch Eric Blankenhorn 2026-09-29 12:54:53 -05:00
  • 7b876e269d Size the default client cache multiplier to fit the row limit Tobias Frauenschläger 2026-09-30 12:04:40 +02:00
  • f2c5c24dc9 Address review: build the stack API without certs Juliusz Sosinowicz 2026-09-30 09:47:36 +00:00
  • 45b8dc2f61 Addressed review comments Hideki Miyazaki 2026-09-30 16:58:40 +09:00
  • 45e1098d58 Deprecate wolfSSL_get_session() on the cache reference path Tobias Frauenschläger 2026-09-28 16:29:42 +02:00
  • 70090dcb38 Make the deprecated wolfSSL_get_session() cache reference opt-in Tobias Frauenschläger 2026-09-21 17:55:38 +02:00
  • 13987d6107 Populate the client session cache regardless of NO_SESSION_CACHE_REF Tobias Frauenschläger 2026-09-22 09:25:20 +02:00
  • 6c3e407f41 Fix potential NULL pointer dereference in wolfSSL_free Daniele Lacamera 2026-09-30 08:07:38 +02:00
  • 81741b1939 Switch RA6M4 from fastmath (TFM) to SP math Hideki Miyazaki 2026-09-30 13:40:30 +09:00
  • dc2e9f1383 Merge pull request #11403 from yosuke-wolfssl/fix/f_13440 JacobBarthelmeh 2026-09-29 22:20:52 -06:00
  • 5ab58bcce1 CI: skip wire mangle tests in fips-dev-no-post kernel-settings configs Paul Adelsbach 2026-09-29 21:15:51 -07:00
  • a3eeca4f21 Merge pull request #11289 from rlm2002/fenrir JacobBarthelmeh 2026-09-29 22:01:12 -06:00
  • eeb735baa5 CI: remove disk cleanup from Arduino workflow for performance Paul Adelsbach 2026-09-29 18:02:58 -07:00
  • 44b9c27456 CI: add concurrency and cancel-in-progress Paul Adelsbach 2026-09-29 18:02:08 -07:00
  • 61cb1ce286 CI: add timeouts to jobs to avoid 6 hour hang Paul Adelsbach 2026-09-29 18:01:12 -07:00
  • de9fd34a81 Make set_demo_mode.ps1's comment normalization whitespace-tolerant Hideki Miyazaki 2026-09-30 09:47:57 +09:00
  • 2046d174de Fix batch script bugs: stale errorlevel check, missing JLink sleep Hideki Miyazaki 2026-09-30 09:38:14 +09:00
  • 65259185cc Reject authInSz values that would overflow the AAD bounce-buffer size Hideki Miyazaki 2026-09-30 09:33:11 +09:00
  • 65cfff0af5 sniffer: use the wire session id length in both hello parsers Yosuke Shimizu 2026-09-08 09:51:05 +09:00
  • 7324be9325 Add tests for corrected unknown record type alert Ruby Martin 2026-08-25 16:54:14 -06:00