1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • 2087f00fef Merge pull request #11218 from SparkiDev/regression_fixes_30 philljj 2026-09-03 12:23:53 -05:00
  • 12601e44e4 dtls: cid: error out/return 0 on BAD_ARGS Marco Oliverio 2026-09-03 17:08:58 +02:00
  • f029e8b54f F-7113: keep the caller's IV in the TROPIC01 AES-CBC callback Daniele Lacamera 2026-09-03 18:23:49 +02:00
  • 6451b6bfd9 F-12313: derive the GHASH subkey from the TROPIC01 device key Daniele Lacamera 2026-09-03 17:59:39 +02:00
  • 339aa5779f Merge pull request #11165 from SparkiDev/argon2 philljj 2026-09-03 09:51:30 -05:00
  • 7fe91174a0 Merge pull request #11291 from gasbytes/persistent-session-cache-fix philljj 2026-09-03 09:32:13 -05:00
  • 968c0b426e Rust wrapper: fail crate build if WOLFSSL_PREFIX set but unusable Josh Holtrop 2026-09-03 08:49:08 -04:00
  • e36beda7bf Regression testing fixes Sean Parkinson 2026-08-17 07:28:27 +10:00
  • 0259226551 Merge pull request #11304 from gasbytes/tls-alert-fixes Sean Parkinson 2026-09-03 17:27:47 +10:00
  • ee45da0e3c Merge pull request #11347 from holtrop-wolfssl/f-11269 Sean Parkinson 2026-09-03 16:14:48 +10:00
  • 78c984242f Merge pull request #11337 from holtrop-wolfssl/f-10093 Sean Parkinson 2026-09-03 16:14:09 +10:00
  • 23b33a2635 Argon2: Add Argon2d/i/id version 1.3 Sean Parkinson 2026-08-13 12:02:44 +10:00
  • 5a2feb5cc0 Merge pull request #11310 from gasbytes/ech-tlsx-ech-parse-fix Sean Parkinson 2026-09-03 15:37:39 +10:00
  • e6137af43a Merge pull request #11266 from holtrop-wolfssl/f-11241 Sean Parkinson 2026-09-03 15:29:58 +10:00
  • e980ce6468 Merge pull request #11263 from JacobBarthelmeh/qnx Sean Parkinson 2026-09-03 15:21:48 +10:00
  • 411c3406c8 Merge pull request #11265 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-E Sean Parkinson 2026-09-03 15:15:14 +10:00
  • 847e068535 Merge pull request #11303 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-D Sean Parkinson 2026-09-03 15:13:06 +10:00
  • ccb11f354c Merge pull request #11308 from Frauschi/curve25519-cryptocb-fix Sean Parkinson 2026-09-03 15:08:20 +10:00
  • c3ac2f6da4 add ssh server extended key usage parsing and missing ssh extended key parsing to asn template from asn orig JacobBarthelmeh 2026-09-02 23:03:51 -06:00
  • 9a192651a6 Merge pull request #11215 from SparkiDev/tls13_rfc9846 philljj 2026-09-02 22:31:24 -05:00
  • f860f4bf81 Added cheap bounds checking: Aidan Keefe 2026-09-02 15:22:43 -06:00
  • 9b0f6795ae Fix: Do not build RC4 cipher suites in D/TLS 1.3 capable configurations Aidan Keefe 2026-08-25 16:58:46 -06:00
  • 070d311d4a Merge pull request #11298 from SparkiDev/sp_arm64_gen philljj 2026-09-02 14:26:37 -05:00
  • b7339b7583 Merge pull request #11271 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-I lealem47 2026-09-02 15:20:13 -04:00
  • 60b67d47a7 For callbacks that ruturn WC_PENDING_E without suppport for it, return BAD_STATE_E Anthony Hu 2026-08-31 16:41:36 -04:00
  • 447ded4372 Rust wrapper: build.rs: check for MSVC/Cygwin library names Josh Holtrop 2026-09-02 13:41:19 -04:00
  • b185e43d26 Address review: guard PSK-DHE key share test for SP math curves Juliusz Sosinowicz 2026-08-28 02:17:12 +00:00
  • 427c58ebc9 Harden key share mismatch tests Juliusz Sosinowicz 2026-08-25 14:37:53 +00:00
  • e1d429d77e Add PSK-DHE key share mismatch test and fix SetSupported docs Juliusz Sosinowicz 2026-08-25 14:09:12 +00:00
  • ef7c50f472 Fix tests expecting the old HRR fallback on group mismatch Juliusz Sosinowicz 2026-08-25 13:50:28 +00:00
  • d3abc288e6 Reject TLS 1.3 ClientHello with no shared group Juliusz Sosinowicz 2026-08-25 10:17:30 +00:00
  • 7dcc60535b Guard cipher lookup in new TLS13 auth NID test case Juliusz Sosinowicz 2026-08-25 15:03:52 +00:00
  • 0e22abb115 Report NID_auth_any from wolfSSL_CIPHER_get_auth_nid for TLS 1.3 suites Juliusz Sosinowicz 2026-08-25 13:57:02 +00:00
  • 720bc1b12d Map name/IP mismatches to X509_V_* codes in GetX509Error() Juliusz Sosinowicz 2026-08-25 16:04:05 +00:00
  • d44c94e3ed ci: add OpenSSH 10.5p1 to CI matrix Juliusz Sosinowicz 2026-09-01 13:26:48 +00:00
  • 8881f4333c Test that a QUIC client rejects a post-handshake CertificateRequest Mattia Moffa 2026-09-02 18:23:08 +02:00
  • d1932ec049 Avoid duplicate SendAlert in QUIC CertificateRequest Mattia Moffa 2026-09-02 18:11:21 +02:00
  • 9e0d3894d2 Merge pull request #11190 from SparkiDev/sp_asm_aarch64_trans_table philljj 2026-09-02 10:40:04 -05:00
  • ca707535c7 Rust wrapper: check for wolfSSL library file under WOLFSSL_PREFIX Josh Holtrop 2026-09-02 10:31:35 -04:00
  • 021ec857c7 Merge pull request #11319 from Frauschi/sniffer_fixes David Garske 2026-09-02 07:02:52 -07:00
  • 89af0d5c9b Addressed review comment Hideki Miyazaki 2026-09-02 09:52:09 -04:00
  • d8bb87805c Add Doxygen documentation for the HPKE public API Hideki Miyazaki 2026-09-02 08:03:19 -04:00
  • 7663855d0e Require the key export in the X25519 and X448 imported-key agreement test Tobias Frauenschläger 2026-08-28 15:24:45 +02:00
  • 0fdf71079f Only offload a key-owned X25519 private scalar to that key's own device Tobias Frauenschlaeger 2026-08-25 08:20:43 +00:00
  • 9d7ac3ee01 clear setTrustedSk on X509_STORE_CTX_init Reda Chouk 2026-09-02 12:32:04 +02:00
  • c2b26fee3a Merge pull request #11332 from yosuke-wolfssl/fix/f_12563 Sean Parkinson 2026-09-02 16:59:17 +10:00
  • d5a91cf59a Merge pull request #11331 from yosuke-wolfssl/fix/f_12568 Sean Parkinson 2026-09-02 16:58:01 +10:00
  • bf7a189fa3 Merge pull request #11327 from embhorn/zd22390 Sean Parkinson 2026-09-02 16:54:21 +10:00
  • 9666b28bbc Merge pull request #11325 from holtrop-wolfssl/f-10092 Sean Parkinson 2026-09-02 16:52:12 +10:00
  • d9f90b6b7d Merge pull request #11262 from night1rider/fenrir-8259 Sean Parkinson 2026-09-02 16:27:49 +10:00
  • c4c9af625a Merge pull request #11317 from yosuke-wolfssl/fix/f_12564 Sean Parkinson 2026-09-02 16:24:43 +10:00
  • 80a5e788e1 Merge pull request #11316 from yosuke-wolfssl/fix/f_12559 Sean Parkinson 2026-09-02 16:21:59 +10:00
  • aabfa25a53 Merge pull request #11305 from padelsbach/fenrir-cert-chain Sean Parkinson 2026-09-02 16:11:05 +10:00
  • e8fac4e0e8 Conformance to RFC 9846: New version of TLS 1.3 specification Sean Parkinson 2026-08-20 12:50:04 +10:00
  • 7bfdc9c793 Merge pull request #11301 from miyazakh/f6776_3des Sean Parkinson 2026-09-02 16:00:07 +10:00
  • 0e3155cece Merge pull request #11283 from miyazakh/f9972_curve25519 Sean Parkinson 2026-09-02 15:54:01 +10:00
  • 732b35e9dd Merge pull request #11112 from JacobBarthelmeh/cryptocb Sean Parkinson 2026-09-02 15:47:23 +10:00
  • ca985055c4 Merge pull request #11189 from kareem-wolfssl/zd22342 Sean Parkinson 2026-09-02 15:45:43 +10:00
  • fdc454328c Merge pull request #11162 from JacobBarthelmeh/afalg Sean Parkinson 2026-09-02 15:39:55 +10:00
  • 3e41ce2bab Merge pull request #11173 from dgarske/fenrir_ecc_ct_points Sean Parkinson 2026-09-02 15:25:15 +10:00
  • 8f692bf1d5 remove check on if input length is 0 JacobBarthelmeh 2026-08-31 14:35:05 -06:00
  • 19b4daf2ac additional sanity checks on CMAC input arguments with QNX resource manager f-8236 JacobBarthelmeh 2026-08-25 09:41:06 -06:00
  • 97a947cc3c additional sanity checks on AES input arguments with QNX resource manager f-11224 JacobBarthelmeh 2026-08-25 09:19:36 -06:00
  • d331ba977b Allowlist the three new PQ keygen PCT macros for check-source-text kaleb-himes 2026-09-01 20:15:07 -06:00
  • 6f572b1bb8 Add opt-in non-FIPS PQ keygen PCT macros, off by default kaleb-himes 2026-09-01 15:17:36 -06:00
  • a816829b01 Add ML-DSA test vector for the zero-hint h[0] case kaleb-himes 2026-09-01 11:14:59 -06:00
  • 16f942df02 Add FIPS sanity symbols for the five PQ algorithms kaleb-himes 2026-08-31 16:58:13 -06:00
  • 7b9f9b0397 Require SLH-DSA signing for the v7 FIPS module kaleb-himes 2026-08-31 16:57:28 -06:00
  • 4dfd8bc13a Fix MC/DC test that relied on CheckKey rewriting the key kaleb-himes 2026-08-31 16:57:19 -06:00
  • 4308349c01 Trim FIPS comments and share one ML-DSA seed entry point kaleb-himes 2026-08-31 16:57:13 -06:00
  • b5d90b9396 Drop Windows section pragmas; they belong on the Windows branch kaleb-himes 2026-08-31 15:06:21 -06:00
  • ec487817a0 Initialise wolfCrypt before use in fips_cast_bench kaleb-himes 2026-08-28 17:20:26 -06:00
  • 742fa74d51 Restore NULL seed check and harden bench pass criteria kaleb-himes 2026-08-28 16:22:06 -06:00
  • 8fd39b8af3 Fix key-free condition, lock balance and bench portability nits kaleb-himes 2026-08-28 15:56:42 -06:00
  • 0a940443ed Check h[0] when ML-DSA signature carries no hints kaleb-himes 2026-08-28 14:32:22 -06:00
  • 1253b466f3 Address Skoll review findings in RSA and PQ key-pair tests kaleb-himes 2026-08-28 14:26:46 -06:00
  • 92c7c9696b Add IG-named PK.SEED check and fix ecc.c self-test citation kaleb-himes 2026-08-27 08:32:12 -06:00
  • dc6a7f3295 Use root recompute for SLH-DSA key check instead of sign+verify kaleb-himes 2026-08-27 08:15:35 -06:00
  • 66544ec02d Simplify FIPS comments and correct two wrong citations kaleb-himes 2026-08-27 07:33:07 -06:00
  • 2ce1432bc5 Expect PSS max-salt refusal under FIPS v7 with long salts kaleb-himes 2026-08-26 16:41:01 -06:00
  • 67cde0b020 Add PCT timing mode to fips_cast_bench for SLH-DSA PCT election kaleb-himes 2026-08-26 16:13:33 -06:00
  • a8924f89c8 FIPS compliance updates in boundary for v7 kaleb-himes 2026-08-26 15:30:48 -06:00
  • 3622adefc8 Rust wrapper: curve25519: fix possible dangling WC_RNG pointer Josh Holtrop 2026-09-01 15:26:01 -04:00
  • eebf80f26d Merge pull request #11240 from douzzer/20260821-linuxkm-WC_SVR_USE_NATIVE_REG_BUFS Sean Parkinson 2026-09-02 10:22:56 +10:00
  • 835a7c17c6 TLS certificate verification: add more tests Sean Parkinson 2026-09-01 16:01:51 +10:00
  • e8975c522f Rust wrapper: mlkem: generate operation-specific cfgs for mlkem features Josh Holtrop 2026-08-27 08:56:35 -04:00
  • 9466c8f7c2 define ecc_get_k_raw if skipped by FIPS enable Ruby Martin 2026-08-28 17:20:50 -06:00
  • 1c487e9703 Move out of boundary for v5 modules too kaleb-himes 2026-09-01 10:19:21 -06:00
  • ac9fff9280 Move wolfentropy outside the FIPS boundary for v7 kaleb-himes 2026-08-31 15:52:20 -06:00
  • 42640067a0 Fix PKCS11 ECDSA test registration and coverage Aidan Garske 2026-09-01 10:05:11 -07:00
  • 88c766b6b6 Merge pull request #11221 from gasbytes/certificatePolicies-fix philljj 2026-09-01 12:04:43 -05:00
  • 4bef71c2df tests: free PKCS7 cert stack when encode_certs fails Sameeh Jubran 2026-09-01 19:53:37 +03:00
  • ca806c8971 x86_64 asm: vzeroupper on .S lanes, resync SP asm to generator kaleb-himes 2026-08-26 14:16:26 -06:00
  • 50afcdca7e MASM: non-AVX VEX fix, x64 home space, vzeroupper on VAES exits kaleb-himes 2026-08-25 16:03:59 -06:00
  • e8e0630c76 SLH-DSA pre-hash enforcement per FIPS 205 and FIPS v7 test fixes kaleb-himes 2026-08-29 20:16:25 -06:00
  • 98e862f06f Fix CI: pick a cipher name that narrows the list in SSL_CIPHER_find test Juliusz Sosinowicz 2026-09-01 16:16:58 +00:00
  • 623c13f406 Bring in fips.h into pwdbased for FIPS v6+ Lealem Amedie 2026-08-31 19:01:26 -06:00
  • 0b0a99c914 Reject empty PKCS11 ECDSA integers Aidan Garske 2026-09-01 09:01:47 -07:00
  • 4a239be0b7 Rust wrapper: pbkdf2_password_hash: gate out unsupported SHA algorithms Josh Holtrop 2026-09-01 11:08:40 -04:00
  • c8cc22cdbc wc_port: add wc_fopen_owner_only() and use it for the persisted session cache file Reda Chouk 2026-08-26 18:10:15 +02:00