1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • fd5f144ac6 Merge pull request #11838 from padelsbach/frodo-asm-sync philljj 2026-10-21 14:44:38 -05:00
  • 6a9016769e Continue on SNI warning_return in TLS 1.3, drop stale KeyUpdates Tobias Frauenschläger 2026-10-21 15:07:27 +02:00
  • d76eb72c5b Close the remaining paths that write after close_notify Tobias Frauenschläger 2026-10-21 11:58:27 +02:00
  • 2fd8dc2375 Do not answer the peer after our close_notify Tobias Frauenschläger 2026-10-21 11:35:55 +02:00
  • 24c44ac717 Do not build handshake or KeyUpdate records after close_notify Tobias Frauenschläger 2026-10-20 09:01:09 +02:00
  • f7d49da50a Let wolfSSL_shutdown() finish after a refused write Tobias Frauenschläger 2026-10-19 10:51:16 +02:00
  • c2cad5c1bd Keep client and server cache entries in separate rows Tobias Frauenschläger 2026-10-15 12:59:54 +02:00
  • 42636db290 Refuse application writes only after a fatal alert or close_notify Tobias Frauenschläger 2026-10-15 12:53:18 +02:00
  • bda00f528c Tests: Pin validity dates in test_dual_alg_ecdsa_mldsa Emma Stensland 2026-10-21 12:34:19 -06:00
  • c5f1d816fc LMS: fix no-sha256-256 test failure and lms=shake256 build Arpan Sharma 2026-10-21 12:58:46 -05:00
  • 209ae2b2fd Add tests for PQC verify clearing *res on error Emma Stensland 2026-09-30 10:00:30 -06:00
  • e65feb618d Report PQC verify as invalid whenever it returns an error Emma Stensland 2026-09-30 10:00:30 -06:00
  • 6674166407 ci(socat): expect-fail 4 flaky non-TLS tests Mark Atwood 2026-10-21 09:55:10 -07:00
  • 274193c166 Remove Whitewood netRandom support Aidan Garske 2026-10-16 10:22:28 -07:00
  • 149e916ce4 Remove QL profile Aidan Garske 2026-10-16 13:49:33 -07:00
  • 9c20480ce4 Remove Intel Galileo support Aidan Garske 2026-10-16 10:08:34 -07:00
  • 158c31d28b Remove game build support Aidan Garske 2026-10-16 10:08:35 -07:00
  • 71242cb516 Remove nRF51 AES acceleration Aidan Garske 2026-10-16 10:08:37 -07:00
  • f96159c1dc Remove Visual Studio ARM project Aidan Garske 2026-10-16 10:13:40 -07:00
  • e9234c2926 Remove LPCXpresso project Aidan Garske 2026-10-16 10:13:38 -07:00
  • e9dd99b1a3 Remove TrueSTUDIO project Aidan Garske 2026-10-16 10:13:36 -07:00
  • 103577bbcd Remove OPENSTM32 project Aidan Garske 2026-10-16 10:08:32 -07:00
  • 41d6398556 Add Microchip PolarFire SoC Athena F5200 crypto callback port David Garske 2026-10-07 18:52:51 -07:00
  • 8543e40032 Define WOLFSSL_AES_DIRECT for AES-CTR and AES-OFB alongside CFB and XTS David Garske 2026-10-20 14:29:32 -07:00
  • 3dc0d75336 wolfcrypt/test/test.c: add rng_drbg_flavor_flags_test() (positive and negative tests for WC_RNG_INIT_FLAG_DRBG_SHA{256,512}). Daniel Pouzzner 2026-10-21 10:59:22 -05:00
  • b8b2fed768 Report failures from test_wolfSSL_dtls13_null_cipher Tobias Frauenschläger 2026-10-21 14:49:20 +02:00
  • c894f810f0 Update asm from scripts#694 Paul Adelsbach 2026-10-21 06:34:05 -07:00
  • b0afe82085 Merge pull request #11238 from padelsbach/crypto-cb-frodo philljj 2026-10-21 10:31:26 -05:00
  • e5f68aa595 Merge pull request #11730 from Frauschi/tls_mem_3 philljj 2026-10-21 09:18:44 -05:00
  • 4b4e21ad23 Merge pull request #11812 from douzzer/20261019-kernel-cryptonly-default philljj 2026-10-21 08:23:22 -05:00
  • e11c312382 fixup! Rust wrapper: use approved calls for AES-GCM encrypt with external IV in FIPS builds Reda Chouk 2026-10-21 14:34:47 +02:00
  • 42aaf551a9 Rust wrapper: add FIPS tests for the private key read guard and the self test helper Reda Chouk 2026-10-21 14:18:49 +02:00
  • f1cd6d4410 Rust wrapper: add a scoped FIPS private key read guard and a run-once helper for all self tests Reda Chouk 2026-10-21 13:32:13 +02:00
  • d60f1f0450 Merge pull request #11822 from padelsbach/mmr-skip philljj 2026-10-21 06:13:19 -05:00
  • 080d33520d Append point formats through a typed local Tobias Frauenschläger 2026-10-21 11:49:34 +02:00
  • 296ef4be79 Hold the EC point formats in one allocation Tobias Frauenschlaeger 2026-08-21 22:40:46 +00:00
  • caafb688c3 Keep the max fragment length code in the extension Tobias Frauenschlaeger 2026-08-21 22:38:50 +00:00
  • d59405785e Store the trusted CA identifier with its object Tobias Frauenschlaeger 2026-08-21 22:36:54 +00:00
  • 6d72327bdc Store the session ticket data with its object Tobias Frauenschlaeger 2026-08-21 22:35:47 +00:00
  • 9b6f9cc50c Store the ALPN protocol name with its object Tobias Frauenschlaeger 2026-08-21 22:34:03 +00:00
  • 0a23c155de Store the SNI host name with its object Tobias Frauenschlaeger 2026-08-21 22:32:56 +00:00
  • be7257c6d9 wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, wolfcrypt/src/wc_port.c, doc/dox_comments/header_files/random.h: refactor wc_Sha{256,512}Drbg_{Disable,Enable,IsDisabled}() to avoid drbgStateMutex. Daniel Pouzzner 2026-10-21 02:40:18 -05:00
  • aa7e287b26 Rust wrapper: expect FIPS to refuse a caller supplied reseed in test_rng_reseed Reda Chouk 2026-10-21 08:46:52 +02:00
  • 51470f325d Rust wrapper: tell dependent crates when wolfSSL is a FIPS build Reda Chouk 2026-10-20 19:57:04 +02:00
  • a317235cd3 Rust wrapper: use the FIPS minimum PBKDF2 output length in test_output_len_bounds Reda Chouk 2026-10-20 19:30:55 +02:00
  • 560aa8e71c Rust wrapper: use a FIPS-sized key in the HMAC chain_update test Reda Chouk 2026-10-20 19:28:27 +02:00
  • f51ab9ccb7 Rust wrapper: use approved calls for AES-GCM encrypt with external IV in FIPS builds Reda Chouk 2026-10-20 19:21:00 +02:00
  • b56c027267 Merge pull request #11807 from deadcaf3/worktree-wipe-before-free philljj 2026-10-20 22:12:26 -05:00
  • aa3f7cb6e3 remove depriacted build option Aidan Keefe 2026-10-20 14:29:04 -06:00
  • 551c744101 fix for compile warning Aidan Keefe 2026-10-20 11:13:14 -06:00
  • cbfdfd31ba Merge pull request #11777 from douzzer/20261016-linuxkm-no-FP_ECC philljj 2026-10-20 16:40:37 -05:00
  • 85cd9d0514 Merge pull request #11542 from Frauschi/zephyr-cert-kconfig philljj 2026-10-20 16:07:54 -05:00
  • 3846e798c1 Merge pull request #11804 from deadcaf3/worktree-update-keys-docs philljj 2026-10-20 14:50:22 -05:00
  • 8b9e3c95e9 Skip multi-msg-record TLS 1.3 for ML-KEM only builds Paul Adelsbach 2026-10-20 11:54:04 -07:00
  • d60519519a Merge pull request #11820 from LinuxJedi/membrowse-pin-action philljj 2026-10-20 13:58:14 -05:00
  • 2fac436ee9 SLH-DSA: SignHashWithRandom returns BAD_FUNC_ARG for WC_HASH_TYPE_NONE Arpan Sharma 2026-10-20 13:04:14 -05:00
  • 9d28f4e99c Turn off objtool for linuxkm PIE CI builds Andrew Hutchings 2026-10-20 18:18:36 +01:00
  • 0a7dda2e9b Pin membrowse-action to v1.2.15 in Membrowse workflows Andrew Hutchings 2026-10-20 17:59:34 +01:00
  • 36cc0bf518 Merge pull request #11815 from kaleb-himes/PQ-FS-2026-Part3-ppc-aes-setkeydirect-keylen philljj 2026-10-20 10:33:09 -05:00
  • c177f861d0 Merge pull request #11576 from douzzer/20260925-WC_RNG_RBGC_STRATUM_IMMUTABLE philljj 2026-10-20 10:15:26 -05:00
  • 23285d3ff7 wolfcrypt/src/random.c, wolfcrypt/test/test.c, doc/dox_comments/header_files/random.h: fix FIPS eligibility criteria for rng_src in wc_RNG_Pool_Collect2(). Daniel Pouzzner 2026-10-19 23:20:36 -05:00
  • 5b9114650e src/x509.c: in wolfssl_x509_add_ext_key_usage_sk(), fix (possibly unreachable) memory leak from earlier null-deref warning mitigation. Daniel Pouzzner 2026-10-19 23:18:56 -05:00
  • 100b95ffbb Run the zero-length AES key test on PPC asm builds too kaleb-himes 2026-10-19 21:15:12 -06:00
  • 41ffffed30 Reject non-AES key lengths in the PPC wc_AesSetKeyDirect kaleb-himes 2026-10-19 21:15:12 -06:00
  • 5f9ab72a47 Merge pull request #11733 from holtrop-wolfssl/f-7072 JacobBarthelmeh 2026-10-19 16:24:31 -06:00
  • 30d3d425cf .github/membrowse-targets.json, .github/workflows/linuxkm.yml: add a couple missing --disable-cryptonlys. Daniel Pouzzner 2026-10-19 15:49:53 -05:00
  • 00dc4c1317 configure.ac: change default ENABLED_CRYPTONLY to follow $KERNEL_MODE_DEFAULTS -- i.e., by default, disable the TLS/DTLS layer when KERNEL_MODE_DEFAULTS; Daniel Pouzzner 2026-10-19 15:03:30 -05:00
  • 5e42831be0 Merge pull request #11775 from holtrop-wolfssl/rust-updates philljj 2026-10-19 14:38:18 -05:00
  • eee10875a7 hash.c: check type argument in both debug and non-debug builds Josh Holtrop 2026-10-19 14:19:21 -04:00
  • abeea08c7d Merge pull request #11606 from Frauschi/fenrir philljj 2026-10-19 11:41:04 -05:00
  • ecb4697cfb Merge pull request #11802 from Arpan0995/tls13-x448-low-order-tests Tobias Frauenschläger 2026-10-19 11:43:55 +02:00
  • 5f65921ffa Wipe long-term secrets before freeing them deadcafe 2026-10-19 13:55:28 +05:30
  • af7c4e356a Merge pull request #11273 from jackctj117/11288 philljj 2026-10-18 23:22:55 -05:00
  • b234b99d89 Fix WANT_WRITE return docs for TLS 1.3 post-handshake APIs deadcafe 2026-10-19 08:38:42 +05:30
  • 7be1181fa9 Merge pull request #11589 from aidangarske/sniffer-record-bounds philljj 2026-10-18 17:47:02 -05:00
  • d25f9dc64c Test X448 low-order key shares in test_tls13_mlkem_bad_key_share Arpan Sharma 2026-10-18 17:24:03 -05:00
  • 21d747d46c Ensure encap/decap tests go through the find callback Paul Adelsbach 2026-10-16 17:02:26 -07:00
  • 333a14ef4c PR feedback: tests: loosen build guards, ensure key is freed, fix build with CERT_REQ Paul Adelsbach 2026-10-16 16:22:26 -07:00
  • 4729b8994c PR feedback: add Frodo coverage in swdev, allow separate make/encapsulate/decapsulate testing individually Paul Adelsbach 2026-10-13 15:20:06 -07:00
  • 7411f2e5da Update frodokem assembly from Ruby output Paul Adelsbach 2026-10-08 13:47:18 -07:00
  • c0a352ca97 Clarify comment about device free in frodo Paul Adelsbach 2026-10-01 17:55:49 -07:00
  • b465debd01 Address CI failure with build flag for Frodokem Paul Adelsbach 2026-09-16 23:05:09 -07:00
  • c0272af012 PR feedback: update precompiler checks, add test case Paul Adelsbach 2026-09-10 12:13:22 -07:00
  • 3c6fb9a4fd Minor fix in FrodoKEM decapsulate Paul Adelsbach 2026-09-02 20:36:38 -07:00
  • 57b999a588 Add crypto callback for Frodo-kem Paul Adelsbach 2026-08-21 12:20:22 -07:00
  • 16cac42a0d Merge pull request #11735 from jackctj117/fips-hash-detect-alg philljj 2026-10-16 16:39:55 -05:00
  • 25778a3937 Avoid out-of-bounds pointer arithmetic in sniffer record checks Aidan Garske 2026-10-16 08:56:04 -07:00
  • bf2f11d443 Replace sniffer ptrdiff_t checks with pointer range checks Aidan Garske 2026-10-12 13:18:56 -07:00
  • 3f898acac9 Validate sniffer fragment offsets and record spans Aidan Garske 2026-09-29 13:28:47 -07:00
  • 4ce677e00e Bound sniffer handshake processing to each record Aidan Garske 2026-09-28 14:37:49 -07:00
  • e78fc3ef77 Tests: Add wc_MlDsaKey_MakePublicKey Emma Stensland 2026-09-30 14:35:33 -06:00
  • 476ce9a5cf Add wc_MlDsaKey_MakePublicKey Emma Stensland 2026-09-30 14:08:29 -06:00
  • 1dd5318124 Skip ML-DSA small-mem verify w1 steps after a failed expansion Emma Stensland 2026-10-14 13:05:52 -06:00
  • db7cf7c6e6 Share the ML-DSA t calculation between key generation and checking Emma Stensland 2026-10-14 10:41:28 -06:00
  • 61e3124b9d sp: regenerate with the dead order*Q check removed from the key generators Daniel Pouzzner 2026-10-16 14:30:52 -05:00
  • 28aca77e84 wolfcrypt/src/ecc.c, configure.ac: honor priv in keygen validation; default fpecc off in kernel builds. Daniel Pouzzner 2026-10-16 14:07:29 -05:00
  • 25651d0535 Merge pull request #11715 from dgarske/sp_nonblock_fast philljj 2026-10-16 14:23:04 -05:00
  • 0e4c88b656 Merge pull request #11772 from Arpan0995/lms-sigsleft-no-params philljj 2026-10-16 13:52:06 -05:00
  • 6387f3374f Merge pull request #11637 from douzzer/20261002-linuxkm-svr_dynamic_auditing philljj 2026-10-16 13:42:56 -05:00
  • 7638751fdb Address review: check EVP_CIPHER_CTX_mode against CBC mode in test Juliusz Sosinowicz 2026-10-16 05:29:53 +00:00