1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • 480cb88c3f Fix FSPSM AES-GCM AAD alignment, Init-failure UB, and auth error code Hideki Miyazaki 2026-09-26 10:17:54 +09:00
  • 013314c6ea Regenerate RA6M4 SCE-signed CA signatures, fix ECC sizeof linkage Hideki Miyazaki 2026-09-26 08:17:18 +09:00
  • 5d5fab72d7 CI: smoke test improvements: new configs, CFLAGS fix Paul Adelsbach 2026-09-25 14:33:54 -07:00
  • 1a442b00f1 Rename TLS 1.3 test variables flagged by codespell jackctj117 2026-09-25 14:17:37 -06:00
  • 3c5eead449 Merge pull request #11558 from JacobBarthelmeh/release v5.9.4-stable philljj 2026-09-25 15:14:07 -05:00
  • 7548f5b404 End a FipsCmac on any Final result jackctj117 2026-09-25 12:39:03 -06:00
  • 30b462553c prepare for release 5.9.4 JacobBarthelmeh 2026-09-25 09:57:56 -06:00
  • 4885e2409d Pin returned secrets, close the EMS label bypass, require FIPS version in helper jackctj117 2026-09-25 12:15:21 -06:00
  • 96d60a0765 Scope wrapper to FIPS v5.2.1 and shorten comments jackctj117 2026-09-25 10:14:48 -06:00
  • 3b55d494bc Rewrite C# FIPS wrapper README with build and usage instructions jackctj117 2026-09-25 09:29:11 -06:00
  • d00b079517 Serialize RSA key and CCM calls jackctj117 2026-09-25 09:15:03 -06:00
  • 337a7d69b5 Limit wrapper to validated boundary services jackctj117 2026-09-24 16:41:34 -06:00
  • 06e378b9c7 Harden wrapper from code review findings jackctj117 2026-09-24 09:11:04 -06:00
  • 956b7abeba Target .NET 8 and .NET 10 jackctj117 2026-09-23 13:33:23 -06:00
  • 313e13e5ff Enforce FIPS usage rules from compliance audit jackctj117 2026-09-23 12:43:18 -06:00
  • 8ced00c3f4 Add FIPS forced-failure tests jackctj117 2026-09-23 11:49:46 -06:00
  • 0d3e286f01 Add FipsKdf (TLS 1.2, TLS 1.3, HKDF, SSH) jackctj117 2026-09-23 11:19:38 -06:00
  • 088a5e1aab Add FipsEccKey and FipsDh jackctj117 2026-09-23 10:49:23 -06:00
  • ec6299f91c Add FipsRsaKey jackctj117 2026-09-23 09:56:55 -06:00
  • 202bcb0cda Add AES ECB/CBC/CTR/OFB, GCM, GMAC and CCM jackctj117 2026-09-23 08:31:08 -06:00
  • e1ece2a224 Add FipsHash, FipsHmac and FipsCmac jackctj117 2026-09-22 15:21:23 -06:00
  • c4ce8f411f Run C# FIPS known-answer tests from ACVP vectors jackctj117 2026-09-22 14:50:09 -06:00
  • 8d4b11b642 Add FipsRng (Hash_DRBG) jackctj117 2026-09-22 14:21:50 -06:00
  • 79ce64cf51 Add C# wrapper for the wolfCrypt FIPS v5.2.3 boundary jackctj117 2026-09-22 14:08:39 -06:00
  • 478a255070 Rust wrapper: validate minimum PBKDF2/scrypt output length before KDF Josh Holtrop 2026-09-25 10:19:20 -04:00
  • 2796c9f90e fix wolfSSL_x509_STORE_add_crl reporting success when copying the CRL fails Reda Chouk 2026-09-23 16:38:36 +02:00
  • aee5a6bf2d Flush the post-handshake CertificateRequest when grouping messages Tobias Frauenschläger 2026-09-25 16:03:27 +02:00
  • de78e090b2 PKCS#7: parse an EncryptedContentInfo that arrives split across calls Tobias Frauenschläger 2026-09-25 15:05:08 +02:00
  • 1c9b695cb1 PKCS#7: decode indefinite-length AuthEnvelopedData Tobias Frauenschläger 2026-09-25 11:12:27 +02:00
  • 6481bf1f47 PKCS#7: decrypt every fragment of an indefinite-length EnvelopedData Tobias Frauenschläger 2026-09-25 11:12:27 +02:00
  • f1b4bb3474 PKCS#7: accept every EnvelopedData version a reader can meet Tobias Frauenschläger 2026-09-25 11:12:27 +02:00
  • aa33b728d7 STM32L4: resolve AES/HASH availability per sub-variant Tobias Frauenschläger 2026-09-16 13:49:58 +02:00
  • 45c3906dc8 Fix double-free/aliasing in Sha256Copy() and FSPSM hash Copy() Hideki Miyazaki 2026-09-25 15:13:10 +09:00
  • 90cd207e72 Retry FreeRTOS_connect() on ETIMEDOUT/ENOTCONN in the multithread TLS client Hideki Miyazaki 2026-09-25 15:09:21 +09:00
  • 99c589233a Fix xTaskCreate() incompatible-pointer-types warning for wolfSSL_TLS_client_do Hideki Miyazaki 2026-09-25 15:04:58 +09:00
  • e6cb565ab8 Avoid hanging on wc_GetTime() when flashed standalone (no debugger attached) Hideki Miyazaki 2026-09-25 14:56:04 +09:00
  • 14692b8c90 Merge pull request #11545 from night1rider/MAX32666-SHA384-test Daniel Pouzzner 2026-09-25 00:55:27 -05:00
  • 333f93cfe2 Add command-line build/flash tooling for RA6M4, and a Windows wrapper for generate_SignedCA.sh Hideki Miyazaki 2026-09-25 14:42:52 +09:00
  • 9342a5e3d2 Add Doxygen documentation for the wolfCrypt PKCS#12 API Koji Takeda 2026-09-11 19:03:26 +09:00
  • dca6855407 Fix SHA-3 reset taking the in-place path under CB find Uses the same devId-gated block as the SHA-2 resets night1rider 2026-09-24 21:25:55 -06:00
  • 291a6e7f91 Merge pull request #11546 from JacobBarthelmeh/test philljj 2026-09-24 21:06:01 -05:00
  • 9ad6688b02 Merge pull request #11536 from douzzer/20260923-release-fixes JacobBarthelmeh 2026-09-24 16:18:01 -06:00
  • 1b5a74db98 adjust RNG counter test case for if offloading with a device ID JacobBarthelmeh 2026-09-24 15:37:05 -06:00
  • 966d75c496 Reset through Free + Init_ex only when the context has a devId Restores the in-place reset for callback builds with no device night1rider 2026-09-24 15:33:58 -06:00
  • 19c6f16331 linuxkm/lkcapi_rsa_glue.c: in km_rsa_ctx_init_rng(), add back availability gate for the bankref identifier. Daniel Pouzzner 2026-09-24 15:40:41 -05:00
  • 50d54d208b Merge pull request #11528 from sameehj/fix/memorylog-alloc-count JacobBarthelmeh 2026-09-24 13:47:08 -06:00
  • d579ce0dfc Exclude callback builds from the in-place SHA-3 reset Same devCtx gap as SHA-2 night1rider 2026-09-24 13:03:46 -06:00
  • f3596c0d1c In-place SHA-2 reset is for plain software only Callback builds fall back to Free + Init_ex so devCtx is cleared night1rider 2026-09-24 12:46:20 -06:00
  • d1e545a082 Merge commit from fork JacobBarthelmeh 2026-09-24 10:57:41 -06:00
  • e531772c77 zephyr: match FIPS Ready's version to configure.ac Tobias Frauenschläger 2026-09-24 17:44:32 +02:00
  • 8e04db46e1 PR feedback: add continue-on-error Paul Adelsbach 2026-09-24 08:18:36 -07:00
  • 290eac5f28 linuxkm/lkcapi_rsa_glue.c: fix clang-diagnostic-parentheses-equality in km_rsa_ctx_init_rng(). Daniel Pouzzner 2026-09-24 10:11:29 -05:00
  • cae706cf1d configure.ac, CMakeLists.txt, cmake/options.h.in: fix HAVE_WC_RNG_BANK + WC_RNG_AUTOFORK support in autotools/cmake. Daniel Pouzzner 2026-09-24 09:07:34 -05:00
  • 27d2875907 address reviewer's comments Marco Oliverio 2026-09-24 15:34:15 +02:00
  • fd7904b254 address reviewer's comments Marco Oliverio 2026-09-24 14:22:26 +02:00
  • 62ba92b466 Rust wrapper: aes: avoid panic on StreamCipher buffers >= 4GB Josh Holtrop 2026-09-24 08:13:52 -04:00
  • 959e185df4 tls: doProcessReply: improve App data handling during handshake Marco Oliverio 2026-09-23 16:40:36 +02:00
  • 331eaa157e wolfssl/wolfcrypt/random.h: add exemptions for FIPS WC_RNG_WANT_BANKREF_SUPPORT. Daniel Pouzzner 2026-09-24 02:30:56 -05:00
  • 103ef37cc7 globally rename WC_RNG_BANK_SUPPORT to HAVE_WC_RNG_BANK, and add WC_RNG_WANT_BANKREF_SUPPORT as an explicit feature flag for the bankref mechanism, always disabled for FIPS configurations. Daniel Pouzzner 2026-09-24 01:36:32 -05:00
  • cb6e4644ae Merge pull request #11340 from sameehj/fix/intel-cpu-dispatch-sigill Daniel Pouzzner 2026-09-23 20:22:59 -05:00
  • 5e30f756b4 Merge pull request #11533 from night1rider/RNG-Callbac-test-fix JacobBarthelmeh 2026-09-23 16:37:26 -06:00
  • c2e2196214 Merge pull request #11521 from gasbytes/dtls-unverified-peer-hardening JacobBarthelmeh 2026-09-23 15:45:16 -06:00
  • 3a05bf7837 Merge pull request #11535 from JacobBarthelmeh/nightly philljj 2026-09-23 16:41:20 -05:00
  • c31527558a remove the now redundent cpuid checks, reduce sha256 alignment without movbe changes JacobBarthelmeh 2026-09-23 15:33:56 -06:00
  • 588f036e98 sha256: stage unaligned hash in wc_Sha256HashBlock MOVBE fallback Sameeh Jubran 2026-09-04 16:55:14 +03:00
  • 977d8c5c48 Fix SIGILL on Intel SHA/AVX/MOVBE dispatch Sameeh Jubran 2026-09-01 19:35:56 +03:00
  • 5456d2262a Merge pull request #11510 from douzzer/20260920-rng-fixes JacobBarthelmeh 2026-09-23 15:14:34 -06:00
  • 1a863fd707 Use xorshift32 for the test crypto callback's fake seed A byte counter repeats RSA prime candidates in no-DRBG builds and wedges keygen Zackery Backman 2026-09-23 12:25:01 -06:00
  • ef4a49071f Add a no-DRBG callback-only RNG config to the cryptocb-only workflow Covers the crypto callback test path where the fake seed feeds RSA keygen Zackery Backman 2026-09-23 12:32:11 -06:00
  • ba7f7bffd6 Merge pull request #11522 from Frauschi/zephyr_psa JacobBarthelmeh 2026-09-23 14:06:36 -06:00
  • 1d59b4f44f add function declaration for caamAesCombined JacobBarthelmeh 2026-09-23 11:02:53 -06:00
  • 25e68b57fc Rust wrapper: RNG::health_test_ex: document that seed_b must be non-empty Josh Holtrop 2026-09-23 15:15:33 -04:00
  • c46e620c2a silabs: validate imported ECC key size against the selected curve David Garske 2026-09-23 07:19:16 -07:00
  • 885e345065 Rust wrapper: ssh_kdf(): validate typ is within u8 range Josh Holtrop 2026-09-23 13:08:00 -04:00
  • 9220b2cddf Restore human written comment Paul Adelsbach 2026-09-23 09:14:43 -07:00
  • 83fa4f3413 address reviewer's comments Marco Oliverio 2026-09-23 17:41:49 +02:00
  • 39c722a2ba PR feedback: fix python code in janitor, increase cleanup rate, better cancellation handling Paul Adelsbach 2026-09-23 08:41:35 -07:00
  • 249383702a Rust wrapper: wolfcrypt_cleanup(): document caller preconditions Josh Holtrop 2026-09-23 08:41:15 -04:00
  • 16b9555297 tests: waive translated date errors in the small-cert verify callback Sameeh Jubran 2026-09-23 12:26:26 +03:00
  • a05f0e8aad tests: avoid a second free after a TLSX parse allocation failure Sameeh Jubran 2026-09-23 12:15:20 +03:00
  • dadcd3c504 memory: drop the alloc count when the memory-log allocator returns NULL Sameeh Jubran 2026-09-23 10:55:21 +03:00
  • 1078de2975 zephyr: withhold the constant-time AES option from settings-file builds Tobias Frauenschläger 2026-09-23 10:18:33 +02:00
  • e181958d5b zephyr: define WC_ALLOW_ECC_ZERO_HASH only when a consumer selects it Tobias Frauenschläger 2026-09-23 09:09:21 +02:00
  • 28b490d4fc Register the new Zephyr AES Kconfig macros as known Tobias Frauenschläger 2026-09-22 21:35:36 +02:00
  • 51b4ff9a3c zephyr: withhold the constant-time AES backend on FIPS v2 and v5 Tobias Frauenschläger 2026-09-22 18:45:33 +02:00
  • 95ff4e02c3 zephyr: add Kconfig symbols for a constant-time AES backend Tobias Frauenschläger 2026-09-22 17:59:06 +02:00
  • 998ca1149e linuxkm/lkcapi_sha_glue.c: in wc_get_random_bytes_user() and wc_extract_crng_user(), map -EINTR from rng_invalidation_pre_check() to -ERESTARTSYS, for proper SA_RESTART dynamics, matching in-tree get_random_bytes_user(). Daniel Pouzzner 2026-09-22 23:09:30 -05:00
  • 73015d25b0 wolfcrypt/src/wc_slhdsa.c: add WOLFSSL_FIPS_DEV exception for "SLH-DSA signing is required for the v7 FIPS module" assert. Daniel Pouzzner 2026-09-22 22:10:05 -05:00
  • 9816294588 configure.ac: remove stray echo. Daniel Pouzzner 2026-09-22 21:57:29 -05:00
  • b702ff6f8b more fixes for Fenrir PR review items: Daniel Pouzzner 2026-09-22 21:41:44 -05:00
  • 0309184849 wolfssl/wolfcrypt/wc_compat.h and linuxkm/module_exports.c.template: recognize WC_NO_COMPAT_H_REMAPS, and use it to inhibit false kernel symbol exports. Daniel Pouzzner 2026-09-22 18:09:32 -05:00
  • 5389dedb0f fixes for Fenrir PR review items: Daniel Pouzzner 2026-09-22 18:05:05 -05:00
  • 893986e6fd linuxkm/module_hooks.c: in wc_lkm_LockMutex(), bail early for CONFIG_PREEMPT_RT NMI (rt_spin_trylock() forbidden from NMI). Daniel Pouzzner 2026-09-22 16:23:13 -05:00
  • a4407442c0 wolfcrypt/src/sha256.c, wolfcrypt/src/sha512.c: add WOLFSSL_KERNEL_MODE* asserts to assure that wc_Sha256Reset() and wc_Sha512Reset() are the no-heap-operation in-place implementations in those builds. Daniel Pouzzner 2026-09-22 16:12:51 -05:00
  • 3ffbf696ab wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h, linuxkm/lkcapi_sha_glue.c, doc/dox_comments/header_files/rng_bank.h: Daniel Pouzzner 2026-09-22 15:47:59 -05:00
  • 189e01e35e linuxkm/lkcapi_sha_glue.c, linuxkm/module_hooks.c: Daniel Pouzzner 2026-09-22 14:07:59 -05:00
  • 3ecfc6df16 wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, doc/dox_comments/header_files/random.h, wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h, wolfcrypt/test/test.c, tests/api/test_random.c: Daniel Pouzzner 2026-09-22 14:01:49 -05:00
  • a1d642a31a Add in-place public reset APIs for SHA-2 and SHA-3/SHAKE, leaving state restarted like the Final APIs but with no output. Plain-software configs reset in place with no heap calls; other configs fall back to Free + Init_ex, preserving heap hint and devId. Daniel Pouzzner 2026-09-22 11:18:37 -05:00
  • 3d683a35ec linuxkm: RNG invalidation recovery, kernel mutex behavior, error-trace fixes. Daniel Pouzzner 2026-09-21 01:18:43 -05:00
  • 075b3341e4 tests/unit-mcdc/test_random_fault_whitebox.c, tests/unit-mcdc/test_sp_int_whitebox.c: Daniel Pouzzner 2026-09-21 00:36:19 -05:00