1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • 9b884271d6 Send close_notify after user_canceled even under quiet shutdown Clear quiet shutdown across the shutdown call in wolfSSL_SendUserCanceled so the RFC 9846 paired close_notify is emitted, and cover it in test_wolfSSL_SendUserCanceled. night1rider 2026-08-25 00:47:15 -06:00
  • 34df6e1fff nxp hashcrypt: validate AES ECB/CBC args and zero-length Reject NULL aes/in/out with BAD_FUNC_ARG and return early on zero length before key setup and the sz-16 IV copy, matching wc_AesCtrEncrypt. night1rider 2026-08-25 00:33:31 -06:00
  • 94904e5e3c Enforce Extended Key Usage on chain-supplied intermediate CAs Eric Blankenhorn 2026-08-11 15:36:33 -05:00
  • 720ce9f2a4 PIC32MZ: give hash copies their own cached message buffer Andrew Hutchings 2026-09-07 16:29:56 +01:00
  • 0d9c8249ec tests: cover extended key usage oid sum collision in non-wolfssh builds Reda Chouk 2026-08-19 16:05:58 +02:00
  • e87466a0ad tests: reset freed pointers in mem-fail TLS tests to avoid double-free Sameeh Jubran 2026-09-08 14:51:07 +03:00
  • 87fa090db0 tls13: don't report the client handshake complete until its Finished has been flushed Reda Chouk 2026-08-11 16:54:28 +02:00
  • 01426d0fdb Merge pull request #11395 from julek-wolfssl/x509-name-print-ex-esc-2253 Tobias Frauenschläger 2026-09-08 13:22:50 +02:00
  • 171d4d84e6 X509_NAME_print_ex: rename misnamed test string Juliusz Sosinowicz 2026-09-08 09:38:07 +00:00
  • 88bf23ffb3 X509_NAME_print_ex: honor separator and attribute name flags Juliusz Sosinowicz 2026-09-08 08:23:42 +00:00
  • 05650d3135 Merge pull request #11356 from miyazakh/f8141_PufEnroll Sean Parkinson 2026-09-08 11:52:34 +10:00
  • 092f968f50 Merge pull request #11380 from holtrop-wolfssl/f-11286 Sean Parkinson 2026-09-08 09:41:41 +10:00
  • fa029b5154 Merge pull request #11338 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-H Sean Parkinson 2026-09-08 09:30:18 +10:00
  • 38ed4583e2 Merge pull request #11290 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-K Sean Parkinson 2026-09-08 09:22:20 +10:00
  • 1e4431283a Merge pull request #11330 from yosuke-wolfssl/fix/f_12567 Sean Parkinson 2026-09-08 09:20:08 +10:00
  • d80b4ccbce Merge pull request #11370 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-J Sean Parkinson 2026-09-08 09:17:08 +10:00
  • bd68a1ee33 Merge pull request #11354 from gasbytes/store_ctx-fix Sean Parkinson 2026-09-08 09:13:12 +10:00
  • 19b6eecb87 Merge pull request #11379 from Frauschi/0rtt-fresh-start-clock-skew Sean Parkinson 2026-09-08 09:07:32 +10:00
  • 3ca20a5236 Merge pull request #11369 from aidankeefe2022/fenrir-12627 Sean Parkinson 2026-09-08 09:05:22 +10:00
  • 90f723fea4 Merge pull request #11361 from JacobBarthelmeh/extkeyuse Sean Parkinson 2026-09-08 09:03:56 +10:00
  • c7eadcd0b7 Merge pull request #11360 from aidankeefe2022/fenrir-12717 Sean Parkinson 2026-09-08 09:02:01 +10:00
  • 38578db678 Merge pull request #11255 from julek-wolfssl/nid-auth-any Sean Parkinson 2026-09-08 08:56:59 +10:00
  • 36091dadf3 Merge pull request #11351 from miyazakh/f7401_hpke Sean Parkinson 2026-09-08 08:55:44 +10:00
  • 796a824aaf Merge pull request #11277 from aidankeefe2022/fix-TLS-RFC-issue Sean Parkinson 2026-09-08 08:50:45 +10:00
  • f299ad0097 X509_NAME_print_ex: never write a terminating NUL Juliusz Sosinowicz 2026-09-07 21:57:52 +00:00
  • 865407952b Merge pull request #11389 from yosuke-wolfssl/fix/f_13332 philljj 2026-09-07 16:15:02 -05:00
  • 36d9652bb1 pq-all: split into three shards and recalibrate the schedule Juliusz Sosinowicz 2026-09-04 13:36:04 +00:00
  • 9d3ba23fd2 Merge pull request #11219 from julek-wolfssl/ci/offline-ccache-and-apt-timeouts philljj 2026-09-07 15:22:32 -05:00
  • 863936e80f X509_NAME_print_ex: clarify comments on ESC_QUOTE and memory BIOs Juliusz Sosinowicz 2026-09-07 18:56:01 +00:00
  • 878e7ddbd1 X509_NAME_print_ex: honor ASN1_STRFLGS_ESC_2253 without reversing Juliusz Sosinowicz 2026-09-07 18:14:39 +00:00
  • ed61c5a778 Merge pull request #11333 from SparkiDev/tls_cert_vfy_tests philljj 2026-09-07 12:20:53 -05:00
  • 0ab1d95bc9 Merge pull request #11385 from holtrop-wolfssl/f-12247 philljj 2026-09-07 11:02:38 -05:00
  • b129dbb625 cryptocb: add WC_ALGO_TYPE_KEYSTORE for hardware key store operations Tobias Frauenschläger 2026-09-01 10:56:20 +02:00
  • b2fdb4aeb9 Register SE05x macros for source-text checks Andrew Hutchings 2026-09-07 12:48:02 +01:00
  • b777910a9b sniffer: free the session on CreateSession bailouts Yosuke Shimizu 2026-09-07 15:39:31 +09:00
  • b4d1f73ddf sniffer: copy handshake hashes with the wc_*Copy APIs Yosuke Shimizu 2026-09-07 14:21:59 +09:00
  • a3fa44dddc Merge pull request #11341 from sameehj/fix/pkcs7-encode-certs-ownership philljj 2026-09-05 23:11:08 -05:00
  • 2c7c291a45 Merge pull request #11384 from holtrop-wolfssl/f-10084 philljj 2026-09-05 22:35:21 -05:00
  • d72f6d9e4e Merge pull request #11381 from douzzer/20260904-misc-fixes philljj 2026-09-04 23:18:46 -05:00
  • 2d85272804 Merge pull request #11312 from holtrop-wolfssl/f-10086 philljj 2026-09-04 21:58:33 -05:00
  • bcadaa39c7 Merge pull request #11321 from holtrop-wolfssl/f-10091 philljj 2026-09-04 18:20:14 -05:00
  • a93e5decf5 Merge pull request #11118 from night1rider/fix/11076-cert-authorities-empty-list philljj 2026-09-04 17:32:43 -05:00
  • 789ecb1ff7 RFC 8446 6.2 - no writes after fatal alert Thomas Cook 2026-09-04 18:07:15 -04:00
  • 68b08eca73 Fix NetX DTLS build error with IPv4-only Eric Blankenhorn 2026-08-26 08:46:11 -05:00
  • dc442fcc50 Fixes from review Eric Blankenhorn 2026-08-25 12:54:45 -05:00
  • 32000db01b Fix NetX I/O: differentiate transient errors from fatal ones Eric Blankenhorn 2026-08-25 10:34:52 -05:00
  • 22a7c60a9a Rust wrapper: ecc: fix check() return value comment Josh Holtrop 2026-09-04 16:46:51 -04:00
  • bbd8f50c3a Rust wrapper: rsa: update pss_check_padding() docs to not require set_rng() Josh Holtrop 2026-09-04 16:43:06 -04:00
  • 5f534629f2 address AI review: Daniel Pouzzner 2026-09-04 14:49:16 -05:00
  • ee5ac25370 Merge pull request #10722 from mandelbitdev/ed25519-compat David Garske 2026-09-04 12:40:44 -07:00
  • 7ec76d68df configure.ac: add --enable-all-nonfips-crypto and --enable-all-legacy-crypto, gathering the non-FIPS and legacy algs formerly enabled piecemeal by --enable-all-crypto: Daniel Pouzzner 2026-09-04 12:03:42 -05:00
  • 3b3baff47c Rust wrapper: copy aead keys directly into return struct Josh Holtrop 2026-09-04 12:07:06 -04:00
  • e107360876 Merge pull request #11328 from lealem47/pwdbased_fips philljj 2026-09-04 13:21:55 -05:00
  • 916de9cf1e wolfcrypt/src/{wc_lms.c,wc_xmss.c,wc_mldsa.c,wc_slhdsa.c,ed25519.c,ed448.c,falcon.c} and wolfcrypt/test/test.c: accept the empty message, passed as (NULL, 0), in all sign and verify entry points -- RFCs 8032, 8554, and 8391, and FIPS 204, 205, and (pending) 206, all permit empty messages (in fact RFC 8032's first test vector is for the empty message). Guards now reject a NULL message only with a nonzero length (wc_XmssKey_Verify()/wc_XmssKey_Sign() additionally had an off-by-one, rejecting mLen == 0 outright, unlike their LMS siblings); after validation, a NULL message is canonicalized to a readable stand-in so downstream consumers -- hash updates and crypto callbacks -- never see a NULL pointer. Daniel Pouzzner 2026-08-24 10:12:49 -05:00
  • 7e9c190e27 wolfcrypt/test/test.c: fix wc_test_render_error_message() usage in slhdsa_test(). Daniel Pouzzner 2026-09-04 12:48:09 -05:00
  • 4434e3b8ac wolfcrypt/src/sha256.c: fix unaligned access in Transform_Sha256(). Daniel Pouzzner 2026-09-04 10:55:47 -05:00
  • c54be2f9c3 wolfcrypt/src/port/kcapi/kcapi_aes.c: add missing old-FIPS gate around aes->keyInstalled access in wc_AesGcmSetKey(). Daniel Pouzzner 2026-09-04 10:54:43 -05:00
  • 44c69b62c8 tests/api/test_tls_bounds.c: fix null deref error paths using EXPECT_SUCCESS() checks. Daniel Pouzzner 2026-09-04 10:54:01 -05:00
  • 0b03b2f6b0 tests/api/test_ossl_x509_str.c: add missing NO_TLS gates re test_untrusted_inter_terminal_anchor_rejected(). Daniel Pouzzner 2026-09-04 10:52:57 -05:00
  • b3e68d5c09 tests/api/test_aes.c: fix parens in macro gate for test_wc_AesSetIV_RestartsStream(). Daniel Pouzzner 2026-09-04 10:41:36 -05:00
  • facb72e3f6 wolfcrypt/benchmark/fips_cast_bench.c: fix frame sizes for WOLFSSL_SMALL_STACK. Daniel Pouzzner 2026-09-04 10:32:46 -05:00
  • 18f2b309d5 tests/api.c: gate legacy-policy RC4 expectation on !NO_RC4. Daniel Pouzzner 2026-09-04 10:32:31 -05:00
  • 127c86240d src/tls.c: zero reserved PSK binder region in TLSX_PreSharedKey_Write(). Daniel Pouzzner 2026-09-04 10:31:51 -05:00
  • 1b0e0ebd4d wolfcrypt/test/test.c: in slhdsa_test_param(), bracket the empty-message wc_SlhDsaKey_Sign() probe with PRIVATE_KEY_UNLOCK()/PRIVATE_KEY_LOCK(), as its neighbors do. (identified in 20260824 review batch) Daniel Pouzzner 2026-08-24 17:39:56 -05:00
  • 97ce1edd33 wolfcrypt/src/port/nxp/se050_port.c: fix se050_ed25519_sign_msg() and se050_ed25519_verify_msg() to tolerate null message pointer with zero message length; Daniel Pouzzner 2026-08-24 11:21:32 -05:00
  • ed034252b8 wolfssl/wolfcrypt/memory.h: add configuration consistency asserts around DEBUG_VECTOR_REGISTER_ACCESS*. Daniel Pouzzner 2026-08-14 16:32:38 -05:00
  • 2438ad621e wolfssl/openssl/hmac.h: add missing !OPENSSL_COEXIST gate around #define HMAC_MAX_MD_CBLOCK. Daniel Pouzzner 2026-08-14 16:32:25 -05:00
  • f4607390ed wolfcrypt/benchmark/benchmark.c: smallstack refactor of bench_chacha20_poly1305_aead(). Daniel Pouzzner 2026-08-14 16:32:12 -05:00
  • e9401bdf69 wolfcrypt/src/md5.c: fix MSAN-detected unaligned access in Transform(). Daniel Pouzzner 2026-08-14 16:31:52 -05:00
  • a92054a5a3 wolfcrypt/src/ecc.c: fix identicalInnerCondition in _ecc_import_x963_ex2(). Daniel Pouzzner 2026-08-14 16:31:41 -05:00
  • e0d9af8073 src/pk_ec.c: fix identicalInnerCondition in wolfSSL_ECDH_compute_key(). Daniel Pouzzner 2026-08-14 16:31:29 -05:00
  • 856eb9263c account for non-normalized non-zero values with sp_tohex JacobBarthelmeh 2026-09-04 11:09:12 -06:00
  • 6bbd236e97 Merge pull request #11378 from danielinux/asn-parse-fix-alloc-fails-handling Tobias Frauenschläger 2026-09-04 19:05:15 +02:00
  • d81fedbe02 Merge pull request #11366 from danielinux/fenrir-fixes-2026-09-03 David Garske 2026-09-04 08:41:47 -07:00
  • 3473701428 Merge pull request #11115 from padelsbach/dh-buffer-copy philljj 2026-09-04 10:31:57 -05:00
  • 2081e3bf0b aes: use the decrypt key schedule in the ARM and PPC XTS decrypt lanes kaleb-himes 2026-09-03 15:33:42 -06:00
  • e8deff4453 armasm64: AES-XTS streaming update kaleb-himes 2026-09-03 15:33:42 -06:00
  • 02c70788a6 Merge pull request #11260 from julek-wolfssl/x509-get-error philljj 2026-09-04 09:37:31 -05:00
  • 88c0902c35 Merge pull request #11307 from holtrop-wolfssl/f-8303 philljj 2026-09-04 09:19:13 -05:00
  • 3ec3f79576 Fix SE05x attestation and mutex handling Andrew Hutchings 2026-09-04 15:03:14 +01:00
  • 8f058eb927 Return BAD_STATE_E for uninitialized SE05x object APIs Andrew Hutchings 2026-09-04 13:13:35 +01:00
  • 95b147fc92 Guard SE05x RSA attestation in verify-only builds Andrew Hutchings 2026-09-03 16:32:35 +01:00
  • b656c6b6b4 Fix SE05x API, rotation, and attestation handling Andrew Hutchings 2026-09-01 13:23:59 +01:00
  • 7a4f10cd8c TLS 1.3: compare the 0-RTT fresh start reference against a whole second Tobias Frauenschläger 2026-09-04 15:20:05 +02:00
  • 821c86a536 TROPIC01: address review comments on the callback KATs Daniele Lacamera 2026-09-04 15:17:00 +02:00
  • 38fba1147f Send SNI in external.test so the peer returns its own certificate Tobias Frauenschläger 2026-09-04 13:13:10 +02:00
  • 1f3ba04230 asn: check CALLOC_ASNGETDATA result before use in DecodeCertInternal Daniele Lacamera 2026-09-04 14:14:35 +02:00
  • 091641d359 ssl.c, tls13.c: clear SSL-owned credentials when switching CTX Yosuke Shimizu 2026-09-01 10:59:31 +09:00
  • 9d4968db3d Merge pull request #11003 from julek-wolfssl/ssl-get-cipher-list-compat philljj 2026-09-03 22:06:05 -05:00
  • 0d6d76c36d WIN-PQ-FIPSv7: correct project and documentation inconsistencies kaleb-himes 2026-09-03 15:41:42 -06:00
  • 1130ad0c1f PQ: place FIPS 203/204/205 and SP 800-208 in the Windows hash range kaleb-himes 2026-09-03 15:40:23 -06:00
  • 80dddb8c21 WIN-PQ-FIPSv7: track user_settings variants as patches kaleb-himes 2026-09-03 13:53:24 -06:00
  • 21e9a78f9c WIN-PQ-FIPSv7: set WOLFSSL_X86_64_BUILD on the AES-NI PAA lane kaleb-himes 2026-09-03 13:53:24 -06:00
  • 7f0e128a1a Windows v7 support kaleb-himes 2026-08-25 16:03:40 -06:00
  • 2a3c050fca ML-DSA: make checking low constant time Sean Parkinson 2026-09-04 09:30:03 +10:00
  • 2173ec867f Merge pull request #11279 from night1rider/SHE-SoftwarePathValidation Sean Parkinson 2026-09-04 09:05:23 +10:00
  • f1fb07d77d Added comment to push users in a safer direction Aidan Keefe 2026-09-03 16:04:57 -06:00
  • 11a6e284e1 handle extended key usage oid collisions JacobBarthelmeh 2026-09-03 13:57:07 -06:00
  • 603a1c5404 Fix failure path of wc_PufEnroll Hideki Miyazaki 2026-09-02 11:32:44 -04:00
  • edd180526e Merge pull request #11313 from rlm2002/fipsv6_ecc_cast Chris Conlon 2026-09-03 11:40:04 -06:00