1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • 2a1312a1fc Check MMCAU AES alignment before taking the hardware mutex Tobias Frauenschläger 2026-09-09 11:56:10 +02:00
  • 91e1872fd1 Initialize ECC verify fault-check comparison points Tobias Frauenschläger 2026-09-09 11:50:16 +02:00
  • 49cd233790 dtls: cid: enforce tx CID size limit on DTLS 1.2 only Marco Oliverio 2026-09-11 12:24:09 +02:00
  • a0cd4ec02a dtls13: address reviewer's comments Marco Oliverio 2026-08-31 16:08:21 +02:00
  • 544c5bdc1a dtls13: accept a NewConnectionId CID longer than DTLS_CID_MAX_SIZE Marco Oliverio 2026-08-31 12:31:39 +02:00
  • a228fa97f9 dtls13: size Finished/KeyUpdate/Alert output for the tx CID Marco Oliverio 2026-08-31 10:52:17 +02:00
  • 7a7af3495a Merge pull request #11261 from night1rider/fenrir-8258 JacobBarthelmeh 2026-09-10 17:02:14 -06:00
  • e5c3683dae wolfcrypt/src/hmac.c: add HmacKeyFreeHash(), use it in wc_HmacCopy() for correct error-path unwind, and use it in wc_HmacFree() for all deallocation. Fixes F-8163 -- "wc_HmacCopy shallow-copies the cached inner and outer hash contexts". Daniel Pouzzner 2026-09-10 15:51:10 -05:00
  • 2b03ece6d4 linuxkm/lkcapi_aes_glue.c: force WC_LINUXKM_SVR_NO_BATCHING when CONFIG_PREEMPT_RT (walk/map paths must run preemptible with that config). Daniel Pouzzner 2026-09-10 15:50:50 -05:00
  • e38894efef Merge pull request #11296 from dgarske/stm32v8 Aidan Garske 2026-09-10 13:34:19 -07:00
  • 5fc5bee9f0 tests/api.c: in test_wolfSSL_EVP_PKEY_ED25519_openssl(), add old-FIPS exclusion gate for test clauses that depends on new fixes (implicit public key rederivation on import etc.). Daniel Pouzzner 2026-09-10 11:34:30 -05:00
  • 48c7711fb5 linuxkm/lkcapi_aes_glue.c: in AesGcmCrypt_1(), remove the preamble-phase batch opening, leaving just the existing batch opening inside the main crypt loop, to avoid unnecessary atomic-context allocations in the preamble; Daniel Pouzzner 2026-09-10 10:36:06 -05:00
  • 18ad91ac9e linuxkm/module_hooks.c: Daniel Pouzzner 2026-09-09 23:11:18 -05:00
  • d94c1e6283 linuxkm/linuxkm_wc_port.h: restore exclusion of contradictory DEBUG_VECTOR_REGISTER_ACCESS_ALWAYS_{OFF,ON} settings. Daniel Pouzzner 2026-09-09 22:34:56 -05:00
  • eff9fc1886 configure.ac: fix improper use of == test operator. Daniel Pouzzner 2026-09-09 22:34:09 -05:00
  • b216163309 linuxkm/module_hooks.c: fix FIPS_optest_trig_audit_accel_attr and FIPS_optest_trig_audit_c_attr to use distinct handlers that pass distinct mode arguments to a multi-personality FIPS_optest_trig_common(), properly implementing the SVR-auditing variants of the FIPS_optest_run_code sysfs node. Daniel Pouzzner 2026-09-09 21:41:39 -05:00
  • 068e309f8f .wolfssl_known_macro_extras: add __ATOMIC_SEQ_CST. Daniel Pouzzner 2026-09-09 20:27:22 -05:00
  • 2ebf8626df linuxkm/module_hooks.c: move my_kallsyms_lookup_name() declaration early, and add WC_LINUXKM_HAVE_MY_KALLSYMS_LOOKUP_NAME. Daniel Pouzzner 2026-09-09 20:02:19 -05:00
  • b1fe1a3b1f .wolfssl_known_macro_extras: add WC_LINUXKM_SVR_NO_BATCHING. Daniel Pouzzner 2026-09-09 17:22:17 -05:00
  • e022244276 wolfssl/wolfcrypt/wc_port.h: in __GNUC__ gnu-builtin definitions for WOLFSSL_ATOMIC_LOAD() and WOLFSSL_ATOMIC_STORE(), use __ATOMIC_SEQ_CST rather than __ATOMIC_CONSUME/__ATOMIC_RELEASE, for consistency with semantics of the primary C11 bindings to atomic_load() and atomic_store(). Daniel Pouzzner 2026-09-09 13:45:00 -05:00
  • fdaebaa992 linuxkm/module_hooks.c: in wc_lkm_LockMutex(), fix dynamics in !CONFIG_PREEMPT_RT kernels. Daniel Pouzzner 2026-09-08 22:19:30 -05:00
  • 8db8f84138 wolfssl/wolfcrypt/error-crypt.h: add support for WOLFSSL_DEBUG_TRACE_ERROR_CODES_PER_FILE and WOLFSSL_DEBUG_TRACE_ERROR_CODES_THIS_FILE (file-scoped code traces). Daniel Pouzzner 2026-09-04 10:57:05 -05:00
  • 48fb8cb453 linuxkm/lkcapi_aes_glue.c: recognize a WC_LINUXKM_SVR_NO_BATCHING macro. Daniel Pouzzner 2026-09-04 10:34:36 -05:00
  • 824d72bfde linuxkm/lkcapi_aes_glue.c: implement WC_LINUXKM_{GCM,XTS}_SVR_BATCH, batching several chunks within a single SAVE_VECTOR_REGISTERS2() bracket (entails adding WALK_ATOMIC to calls that affect walk dynamics during the locked batches). Daniel Pouzzner 2026-08-14 16:36:15 -05:00
  • 3157da0223 linuxkm/module_hooks.c: Daniel Pouzzner 2026-09-04 13:50:17 -05:00
  • 003ac561be linuxkm/lkcapi_glue.c: tolerate !HAVE_FIPS with CONFIG_CRYPTO_FIPS, with a runtime check that kernel fips_enabled is zero. Daniel Pouzzner 2026-09-04 12:17:20 -05:00
  • 9907811bed linuxkm/linuxkm-fips-hash.c: in hmac_update_cb(), use wc_HmacUpdate(), not wc_HmacUpdate_fips(), for compatibility with dev-no-post. Daniel Pouzzner 2026-09-04 12:06:26 -05:00
  • 7810394f09 linuxkm/module_hooks.c: fixes for external review of FIPS_OPTEST/LKCAPI coexistence: in FIPS_optest_trig_handler(), implement assiduous (atomic-based) mutual exclusion with LKCAPI registration. Daniel Pouzzner 2026-09-07 14:39:27 -05:00
  • 85311bb912 linuxkm/module_hooks.c: in wolfssl_init(), when WOLFSSL_AESNI but not USE_INTEL_SPEEDUP, don't expect wc_svr_disallowed_count_current() to increase for wolfCrypt_IntegrityTest_fips() (no AES in it). Daniel Pouzzner 2026-08-20 16:30:51 -05:00
  • 424342163d linuxkm/module_hooks.c: implement /sys/module/libwolfssl/FIPS_optest_run_code_audit_accel and /sys/module/libwolfssl/FIPS_optest_run_code_audit_c. Daniel Pouzzner 2026-08-18 18:46:13 -05:00
  • db4c46d369 linuxkm/module_hooks.c: when DEBUG_VECTOR_REGISTER_ACCESS_FUZZING or DEBUG_VECTOR_REGISTER_ACCESS_ALWAYS_ON, inhibit DISABLE_VECTOR_REGISTERS() exercises and auditing of wc_svr_disallowed_count_current(). Daniel Pouzzner 2026-08-17 16:52:43 -05:00
  • 722a64cedf linuxkm/module_hooks.c: * add WOLFSSL_DEBUG_TRACE_ERROR_CODES coverage for all system error codes used by module_hooks.c and its includes. * implement double-run wolfCrypt_IntegrityTest_fips() and wc_RunAllCast_fips() in WC_C_DYNAMIC_FALLBACK configurations, once with acceleration on (leveraging fallback instrumentation to fail the module if any fallbacks occur), and once with it forced off using DISABLE_VECTOR_REGISTERS(). Daniel Pouzzner 2026-08-14 16:36:00 -05:00
  • 7c55167ca0 linuxkm/linuxkm_wc_port.h: Daniel Pouzzner 2026-08-14 16:35:47 -05:00
  • f0e530e5e1 cryptocb: use AES_128_KEY_SIZE for the derived key size in the test Tobias Frauenschläger 2026-09-10 19:10:18 +02:00
  • ba8ab7069e cryptocb: let wc_KeyStore_Derive() request the key size Tobias Frauenschläger 2026-09-09 23:37:47 +02:00
  • 032f115cae Fix Ed25519/Ed448 make_public documentation and test leftovers Tobias Frauenschläger 2026-09-10 10:30:27 +02:00
  • 443bdb09f8 Store the derived public key in wc_ed448_make_public() Tobias Frauenschläger 2026-09-10 09:49:55 +02:00
  • 252c3b1aa3 Merge pull request #11231 from dgarske/cryptocb_async_tls13 Sean Parkinson 2026-09-10 14:39:16 +10:00
  • 517a383f8a Certifcate Name Id lookup when WOLFSSL_CERT_NAME_ALL defined Sean Parkinson 2026-09-10 09:23:53 +10:00
  • 765d2165e3 Merge pull request #11202 from dgarske/c2000_hw_aes Sean Parkinson 2026-09-10 09:40:37 +10:00
  • 517c45f2ed Add TLS 1.3 crypto callback pend tests and byte-stream test memio David Garske 2026-09-02 14:33:12 -07:00
  • 58445f6372 Simulate pending for all supported ops in async TLS example David Garske 2026-09-02 14:33:12 -07:00
  • 1ed9f2c02c Add TLS 1.3 handshake support for crypto callbacks returning WC_PENDING_E David Garske 2026-09-02 14:33:12 -07:00
  • 6314a051e9 Add crypto callback WC_PENDING_E support to wolfCrypt HKDF David Garske 2026-09-02 14:33:12 -07:00
  • 8005f18630 Merge pull request #11323 from Frauschi/filc-improvements Sean Parkinson 2026-09-10 08:15:58 +10:00
  • 734465e542 Merge pull request #11344 from dgarske/mldsa_c28x_octets Sean Parkinson 2026-09-10 08:07:15 +10:00
  • 41a47d5784 Add STM32V8 (Cortex-M85) hardware crypto family support David Garske 2026-08-26 07:38:30 -07:00
  • c78213752a nxp hashcrypt: drop the outdated AES-CFB/OFB block-size note from the README night1rider 2026-09-09 16:02:23 -06:00
  • 09dd33eeb7 Merge pull request #11348 from dgarske/stm32_mx2 Aidan Garske 2026-09-09 13:47:03 -07:00
  • 2a782414ab Merge pull request #11299 from mattia-moffa/20260826-fenrir-fixes JacobBarthelmeh 2026-09-09 14:20:34 -06:00
  • 6b508b482e Merge pull request #11213 from anhu/oldtls JacobBarthelmeh 2026-09-09 13:46:44 -06:00
  • 6a4e744efc Rust wrapper: only enable mlkem cfg when !WC_NO_CONSTRUCTORS Josh Holtrop 2026-08-27 09:20:13 -04:00
  • 931afcd860 Merge pull request #11383 from douzzer/20260904-configure-all-nonfips-crypto-etc JacobBarthelmeh 2026-09-09 13:31:19 -06:00
  • ec34521dba Rust wrapper: rsa: fix sha224/sha384 cfg guards for hash type constants Josh Holtrop 2026-09-02 15:36:25 -04:00
  • a48ef5b880 Add TI C2000 oscillator-jitter entropy source and harden wc_RNG_TestSeed for wide bytes David Garske 2026-08-13 10:27:23 -07:00
  • b04084bff3 Add STM32CubeMX2 (MX2) support: conf detection, HAL2 example console, codegen assets David Garske 2026-08-28 16:38:15 -07:00
  • 9e92763fcd Guard SLH-DSA TLS 1.3 suite tests on ML-DSA sign support Emma Stensland 2026-08-05 09:51:44 -06:00
  • 0b7adb31e2 Fix ECC key init assigning ku from wrong alt buffer Emma Stensland 2026-08-05 09:51:33 -06:00
  • f670b0cd0d Merge pull request #11055 from padelsbach/slh-dsa-cryptocb philljj 2026-09-09 10:56:55 -05:00
  • c830626625 NULL check in tests Anthony Hu 2026-09-09 11:27:30 -04:00
  • 0adab671e9 Cover the DES-CBC decrypt arm in the EVP_Cipher error test Hideki Miyazaki 2026-09-09 11:18:35 -04:00
  • 768f6462bd Merge pull request #11139 from gasbytes/gh-11085 philljj 2026-09-09 09:45:18 -05:00
  • 89da309b9f Fix wolfSSL_EVP_Cipher DES-CBC branch swallowing the DES return code Hideki Miyazaki 2026-09-09 09:54:00 -04:00
  • fb18c21094 Fix wc_hash2mgf returning WC_MGF1SHA3_224 for MD2/MD4/MD5/MD5-SHA Hideki Miyazaki 2026-09-09 09:19:05 -04:00
  • 7a9b99ed66 Rust wrapper: curve25519: add cfgs for shared_secret, import, and export Josh Holtrop 2026-09-09 08:56:46 -04:00
  • 468dad47ec wolfSSL_PEM_X509_X509_CRL_X509_PKEY_read_bio: avoid quadratic PEM marker scanning Per Allansson 2026-09-09 07:18:09 +02:00
  • c9aef0f45a Merge pull request #11223 from aidangarske/fenrir-fixes-9951 philljj 2026-09-08 21:41:23 -05:00
  • bd753e2f2e Merge pull request #11177 from julek-wolfssl/fenrir-dtls-record-layer-fixes philljj 2026-09-08 20:31:10 -05:00
  • a5085bc13d Add TI C2000 AESA hardware AES port and fix CHAR_BIT!=8 AES defects David Garske 2026-08-13 10:27:23 -07:00
  • 0458577b33 ssl_api_ext: lock ticket key context in the public key APIs Yosuke Shimizu 2026-09-08 17:14:07 +09:00
  • 55d382777f ML-DSA: optional precomputed matrix A for verify on constrained targets David Garske 2026-09-02 10:33:13 -07:00
  • 39542cebe3 Add CHAR_BIT != 8 octet boundary helpers and fix the C28x SP regression David Garske 2026-08-31 16:29:13 -07:00
  • 68070aab69 internal: propagate WANT_WRITE from the DTLS 1.3 receive timeout Yosuke Shimizu 2026-09-08 10:38:43 +09:00
  • bd3d3be51e Code review feedback Kareem 2026-09-08 15:27:24 -07:00
  • f67d3bb656 Code review feedback Kareem 2026-08-27 15:16:50 -07:00
  • 8cb22e6756 Code review feedback Kareem 2026-08-18 13:29:26 -07:00
  • d15e7d292a Rework post-handshake checks for resumed connections. Kareem 2026-08-18 12:13:03 -07:00
  • c8db2e1816 PR feedback: add WC_PK_TYPE_PQC_SIG_KEYGEN_SEED, matching pattern in MLDSA PR Paul Adelsbach 2026-09-08 15:18:39 -07:00
  • 2eead7c511 Restore quiet shutdown only after the user_canceled close_notify is sent Use a flag set by wolfSSL_SendUserCanceled so quiet shutdown never sends data on its own, and test alert order, a failed retry, and that the setting comes back. night1rider 2026-09-08 16:05:30 -06:00
  • 533ea438fe remove the word warning Anthony Hu 2026-08-28 14:56:31 -04:00
  • 1380227a41 Warn about non-conformance when using old TLS versions. Anthony Hu 2026-08-19 20:11:23 -04:00
  • 82467fb505 Address CI failures Paul Adelsbach 2026-09-04 12:53:27 -07:00
  • 535cf347c1 Update configure.ac for slh-dsa Paul Adelsbach 2026-09-02 20:37:37 -07:00
  • 1d06037b10 PR feedback Paul Adelsbach 2026-09-02 16:12:54 -07:00
  • 49a87cc15d Address build matrix warnings Paul Adelsbach 2026-08-27 10:25:25 -07:00
  • 978f13da09 PR feedback: address re-entrance into callback Paul Adelsbach 2026-08-25 14:52:19 -07:00
  • e4f8a6f9c1 Add crypto callback mode for SLH-DSA Paul Adelsbach 2026-08-21 11:24:16 -07:00
  • 7b135e34ba F-10620 - Preserve binary ALPN names via length-aware storage Aidan Garske 2026-08-20 18:31:14 -07:00
  • 1d4f805596 F-12259 - Wrap async pending error comparison Aidan Garske 2026-09-08 13:44:41 -07:00
  • 6040e2a574 Flush a buffered close_notify on quiet shutdown after user_canceled Have the wolfSSL_shutdown quiet path send a close_notify already left in the output buffer by WANT_WRITE, so the retry after wolfSSL_SendUserCanceled restores quiet shutdown still delivers it; cover it with a WANT_WRITE write callback and check restoration via wolfSSL_shutdown instead of ssl->options, per PR #11264 review. night1rider 2026-09-08 14:17:07 -06:00
  • bd15f3279f F-9951 - Clamp ColdFire AES-CBC chunk to remaining length Aidan Garske 2026-08-20 11:05:58 -07:00
  • a43ccc39bc Rust wrapper: Remove unused aes_cts cfg detection Josh Holtrop 2026-09-08 15:35:01 -04:00
  • 13f03469b5 Fix from review Eric Blankenhorn 2026-09-08 12:18:33 -05:00
  • a633e3b70e Incorporate review feedback Tobias Frauenschläger 2026-09-08 17:29:12 +02:00
  • f899dfd877 Keep stapling best-effort when a chain responder is unreachable Tobias Frauenschläger 2026-08-31 17:57:21 +02:00
  • f0b78fb9ba Complete a TLS 1.3 handshake with the ECC PK callbacks Tobias Frauenschläger 2026-08-31 17:57:11 +02:00
  • 3b103bdaaa Build dtls_bench without the server or the client side Tobias Frauenschläger 2026-08-31 12:54:14 +02:00
  • 817d39b4c6 Make --disable-tlsv12 compile TLS 1.2 out Tobias Frauenschlaeger 2026-08-22 22:21:24 +00:00
  • 00de317aad Guard the unit tests that need TLS 1.2 on WOLFSSL_NO_TLS12 Tobias Frauenschlaeger 2026-08-22 22:02:02 +00:00
  • c9438c4808 tests: harden SendUserCanceled quiet-shutdown checks Guard the quiet-shutdown setter against a NULL ssl_s and assert quietShutdown is restored after SendUserCanceled, per PR #11264 review. night1rider 2026-08-25 11:16:21 -06:00