1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-25 16:16:38 +03:00

Commit Graph

  • bded1f48c8 CI: increase timeout and fix minutes in cryptocb-only test Paul Adelsbach 2026-08-21 11:48:55 -07:00
  • ddbd4c10b0 Xilinx Versal Gen2 ASU: TRNG seed in the template, no compressed key ECIES night1rider 2026-08-21 11:37:52 -06:00
  • 54e41494ab Code review feedback Kareem 2026-08-13 16:53:27 -07:00
  • 0f9e3580cc Code review feedback Kareem 2026-08-12 17:40:19 -07:00
  • e59b42b2ca Add documentation for expected size for DES functions. A complete fix is not possible without breaking OpenSSL compatibility. Fixes F-2246. Kareem 2026-08-12 16:57:15 -07:00
  • b9575d9502 Assert TLSX_GetRequestSize matches TLSX_WriteRequest in cookie echo test Ruby Martin 2026-08-21 11:43:16 -06:00
  • 7b0a50d44c Fix multiple comparisons in AdjustSequence and CheckFinCapture in the sniffer. Thanks to NVIDIA Project Vanessa for the report. Kareem 2026-07-24 13:10:44 -07:00
  • 46f13980d6 Avoid a negative length in CheckHeaders/Sequence. Kareem 2026-07-23 13:20:24 -07:00
  • b18382bb39 AF-ALG redirect for AES-ECB function JacobBarthelmeh 2026-08-13 16:00:29 -06:00
  • f4de1c0904 add github actions CI test for AF-ALG JacobBarthelmeh 2026-08-12 16:23:11 -06:00
  • ae692e7f01 add documentation for f-8238 report JacobBarthelmeh 2026-08-12 16:16:55 -06:00
  • 500c708cbe Fix for reuse of AES-GCM struct with encrypt and decrypt f-7442 JacobBarthelmeh 2026-08-12 16:06:08 -06:00
  • addd5ea04b Fix private scalar handling under ECC key blinding and add CI coverage David Garske 2026-08-13 17:08:05 -07:00
  • 550597a43a strengthen wording of 'test only' comment and cite relvent RFC along with correcting 'Currently allows comment to represent current behavior' Aidan Keefe 2026-08-21 09:43:42 -06:00
  • 4d1bd552d0 Merge pull request #11220 from LinuxJedi/fix-se050-asn-key-to-der-guards philljj 2026-08-21 10:39:00 -05:00
  • c5d9483cce Merge pull request #11097 from julek-wolfssl/tls13-0rtt-middlebox-fixes philljj 2026-08-21 10:35:09 -05:00
  • 94f939cfbd Report X509_VERIFY_PARAM hostname/IP mismatches to the verify callback so applications can inspect or override them Reda Chouk 2026-08-12 12:57:46 +02:00
  • 9de9f6639c Limit ASN guard regression to build check Andrew Hutchings 2026-08-21 13:34:29 +01:00
  • 0ae2ef095f Add RSA key-to-DER ASN regression build Andrew Hutchings 2026-08-21 12:55:15 +01:00
  • 5db5f693bd Add +WOLFSSL_VERSAL_GEN2_ASU_NO_COMP_KEY_WARN to known macros list night1rider 2026-08-21 03:18:22 -06:00
  • 76b81a11e6 Xilinx Versal Gen2 ASU: offload ECIES on Brainpool P-320 and P-512 as well night1rider 2026-08-21 01:26:33 -06:00
  • e1a2dd1862 Address review: budget the apt loop and keep DEBIAN_FRONTEND across sudo Juliusz Sosinowicz 2026-08-21 02:48:32 +00:00
  • 1c73648177 F-9961 - Encode default cert validity as UTCTime through 2049 Aidan Garske 2026-08-20 15:57:10 -07:00
  • cecf35171d PR feedback: test updates, invalidate shake.devId Paul Adelsbach 2026-08-20 17:46:42 -07:00
  • a3ee6746ed F-10613 - Check GrowAnOutputBuffer result in threaded crypt SendData Aidan Garske 2026-08-20 16:29:47 -07:00
  • 420c919f60 Xilinx Versal Gen2 ASU: log why ECDH and ECIES send work to software night1rider 2026-08-20 16:50:26 -06:00
  • f7687b011d Xilinx Vitis SDT: make the settings template pick a random seed source night1rider 2026-08-20 16:50:26 -06:00
  • f71194b839 Free the i2d output buffer in test_wc_PKCS12DecisionCoverage Ruby Martin 2026-08-20 16:31:04 -06:00
  • 259b291f42 test_ssl_crl_ocsp.c: free parsed URL parts on the failure path Ruby Martin 2026-08-20 15:51:35 -06:00
  • 9ab8a4b19d Merge pull request #11172 from dgarske/fenrir_threadsafety_keys philljj 2026-08-20 16:32:51 -05:00
  • a1cde8e343 Merge pull request #11187 from holtrop-wolfssl/rust-fenrir-2026-08-17 philljj 2026-08-20 16:26:06 -05:00
  • 9fd8f2b45a Macro guard to prevent dead code. Anthony Hu 2026-08-20 16:21:54 -04:00
  • 25224b6827 Add wc_ecc_key_new_ex (#11160) Josh Holtrop 2026-08-20 16:05:51 -04:00
  • a9526e9fd8 cap derLen at largest valid DER size Ruby Martin 2026-07-28 17:06:18 -06:00
  • dd04f301b1 prevent uninitialized scalar variable issue Ruby Martin 2026-07-27 15:35:26 -06:00
  • 79aca0b3f7 Merge pull request #11196 from gasbytes/quic-clear-fix philljj 2026-08-20 11:57:00 -05:00
  • 27de130fb0 Merge pull request #11170 from dgarske/fenrir_align_ports philljj 2026-08-20 11:38:30 -05:00
  • 08c7d3389b Merge pull request #10762 from julek-wolfssl/fenrir/20260623 philljj 2026-08-20 11:09:49 -05:00
  • 87d41e2dd5 Merge pull request #11140 from holtrop-wolfssl/zd22282 JacobBarthelmeh 2026-08-20 09:21:47 -06:00
  • 3fe6dc1503 Merge pull request #11101 from padelsbach/client-cookie-enable philljj 2026-08-20 10:12:23 -05:00
  • 19755092a8 Merge pull request #11153 from yosuke-wolfssl/fix/f_7075 philljj 2026-08-20 09:35:12 -05:00
  • aa1f85114b Xilinx Versal Gen2 ASU: fix the Vitis build and correct the benchmark rows night1rider 2026-08-20 08:12:19 -06:00
  • b741dd8cfd Fix ASN guards for RSA key DER export Andrew Hutchings 2026-08-20 13:52:18 +01:00
  • 9dda3b8141 reset all five encryption-level in wolfSSL_quic_clear() when cleaning up a TLS connection Reda Chouk 2026-08-18 19:05:31 +02:00
  • 16d9378f80 CI: keep the apt retry loops POSIX and inside the job budget Juliusz Sosinowicz 2026-08-20 09:21:33 +00:00
  • ccd810bb73 CI: install ccache from the staged bundle and bound every apt call Juliusz Sosinowicz 2026-08-19 19:07:30 +00:00
  • a16b89b798 Fix RPK verify under WOLFSSL_SMALL_CERT_VERIFY Sameeh Jubran 2026-08-11 15:33:54 +03:00
  • 2c67d6af50 Set hashType on SHAKE128/256 contexts so crypto-callback Copy/Free dispatch with the correct type instead of WC_HASH_TYPE_NONE night1rider 2026-08-20 00:13:12 -06:00
  • 0c55d9d8fc tests: fix mem-fail crashes in ECC coverage and X509 extension tests Sameeh Jubran 2026-08-11 15:33:54 +03:00
  • 060113ec90 Peer review feedback (thanks Douzzer) David Garske 2026-08-14 11:57:33 -07:00
  • 5343b2b8c3 Mask the RSA blinding factor before inverting it (F-2972) David Garske 2026-08-13 10:35:31 -07:00
  • 3363f2150a Zero private key DER buffers before release in SE050 port (F-2636) David Garske 2026-08-12 16:36:17 -07:00
  • 8bffaff697 Check ECC private key scalar range on import (F-1930, F-1931) David Garske 2026-08-12 16:32:48 -07:00
  • ae054f26d9 Publish crypto callback device entries after their fields are set (F-1380) David Garske 2026-08-12 16:10:39 -07:00
  • 35508920e8 Elect a single mutex initializer for ECC caches and netRandom (F-1514, F-1515, F-1946) David Garske 2026-08-12 16:08:52 -07:00
  • 212b70cf35 Add SHA-256 unaligned block hashing regression test (F-3344) David Garske 2026-08-12 16:41:26 -07:00
  • 32520fa1f1 Return an error for disabled hash types in CryptoCell RSA hash mode (F-603) David Garske 2026-08-12 16:36:18 -07:00
  • d32dbc5188 Stage cipher block data through aligned buffers in STM32 CRYP and Renesas SCE paths (F-3080, F-3081, F-3345) David Garske 2026-08-12 15:25:06 -07:00
  • c75f9e1143 Use unaligned word accessors in bitsliced AES, scrypt and SHA-256 block hash (F-1394, F-1971, F-3344) David Garske 2026-08-12 15:19:17 -07:00
  • cbcaf31100 Address review: widen the same-second tolerance for a 32 bit ticket start time Juliusz Sosinowicz 2026-08-20 02:19:02 +00:00
  • 90899e1ef8 Fix CI: keep the 0-RTT fresh start check active on a backward 32 bit clock Juliusz Sosinowicz 2026-08-20 02:18:57 +00:00
  • 3abaff7e8e Address review: cover the fresh start check error returns Juliusz Sosinowicz 2026-08-19 02:45:06 +00:00
  • 3bbfb32adf Address review: gate the JNI middlebox compat define on ECH Juliusz Sosinowicz 2026-08-19 02:45:06 +00:00
  • 1e46767aba Address review: make the 0-RTT fresh start check clock-safe Juliusz Sosinowicz 2026-08-19 02:44:58 +00:00
  • 88d4bdf05f Address review: CMake option sync and test record-scan bounds Juliusz Sosinowicz 2026-08-13 14:27:31 +00:00
  • 978d795701 TLS 1.3: reject 0-RTT for tickets minted before the server ctx was created Juliusz Sosinowicz 2026-08-05 09:48:33 +00:00
  • 16231de0ce Add build option for TLS 1.3 middlebox compatibility mode Juliusz Sosinowicz 2026-08-05 09:41:59 +00:00
  • 56dfde0df2 TLS 1.3: fatal bad_record_mac for accepted early data that fails decryption Juliusz Sosinowicz 2026-08-05 09:38:31 +00:00
  • 07edb52139 PR feedback: add/update tests, ensure devId is invalidated Paul Adelsbach 2026-08-19 17:05:23 -07:00
  • 437bca85a7 Merge pull request #11206 from LinuxJedi/se050_ci_pkcs7_pin philljj 2026-08-19 17:57:30 -05:00
  • ac4e90b779 Merge pull request #11122 from danielinux/mcdc-test-coverage philljj 2026-08-19 17:55:55 -05:00
  • 9d7ec9aa96 Fix test issue with WOLFSSL_TLS13_COOKIE Paul Adelsbach 2026-08-19 13:54:40 -07:00
  • 346543b3cb PR feedback: add cookie size check, remove braces, update comment Paul Adelsbach 2026-08-06 21:48:51 -07:00
  • 3e1e6b2bf8 Add separate client cookie enable Paul Adelsbach 2026-08-06 15:42:03 -07:00
  • cd854fb323 Merge pull request #11207 from julek-wolfssl/zendesk-22347 philljj 2026-08-19 15:33:58 -05:00
  • 1990dcad61 Merge pull request #11161 from mattia-moffa/20260812-fenrir-fixes philljj 2026-08-19 14:28:54 -05:00
  • c72ae34027 benchmark: build the AES key wrap benchmarks only where the _ex API exists night1rider 2026-08-19 13:11:01 -06:00
  • 5d9b2e01d5 Xilinx Versal Gen2 ASU: require a private key before offloading ECDSA sign, ECDH and ECIES decrypt night1rider 2026-08-19 12:40:00 -06:00
  • 0b16211384 Xilinx Versal Gen2 ASU: add a port README night1rider 2026-08-19 10:44:34 -06:00
  • 3c208c82eb Merge pull request #11193 from miyazakh/f9945_cryptkey philljj 2026-08-19 12:27:47 -05:00
  • ba2a540c09 Merge pull request #10900 from julek-wolfssl/julek-dev/test-scripts-hang-fixes philljj 2026-08-19 12:03:11 -05:00
  • 25d61f614a Merge pull request #10960 from julek-wolfssl/openssh-10.4p1-ci philljj 2026-08-19 12:00:55 -05:00
  • e5a6af1d08 benchmark: skip AES-CCM nonce and block size pairs the length field cannot encode night1rider 2026-08-19 09:44:34 -06:00
  • 54cc8f04d0 benchmark: keep the GMAC iv16 label alive for the stats list night1rider 2026-08-19 09:43:11 -06:00
  • c42b8e9e7e benchmark: keep the AES-CCM nonce sweep labels alive for the stats list night1rider 2026-08-19 09:38:41 -06:00
  • 4426bf9f8c Xilinx Versal Gen2 ASU ECIES: accept the default context, not just the named roles night1rider 2026-08-19 09:30:33 -06:00
  • fa65a8d6ee Enforce RFC 7919 in DHE builds without named FFDHE groups Mattia Moffa 2026-08-19 17:21:09 +02:00
  • 80876f8586 Merge pull request #11044 from yosuke-wolfssl/fix/f_7521 philljj 2026-08-19 10:10:07 -05:00
  • 66865d3f5b Merge pull request #10362 from MarkAtwood/fix/d2i-ecprivatekey-pubkey-derive philljj 2026-08-19 09:21:05 -05:00
  • d3e9b0f002 Also retain FFDHE codepoints with configured supported groups Mattia Moffa 2026-08-19 16:15:20 +02:00
  • 6ab329ce45 asn.c: map code points to SPACE for directory string per RFC 4518 2.2 Josh Holtrop 2026-08-19 09:04:21 -04:00
  • f71ee94aa1 benchmark: add AES key wrap and padded key wrap benchmarks night1rider 2026-08-19 05:57:54 -06:00
  • ff43b323bd Merge pull request #11201 from dgarske/pkcs11_ecc_derive_sign Andrew Hutchings 2026-08-19 13:36:09 +01:00
  • e4bc968c9d benchmark: run Ed448 and the DRBG through the device id so both can be compared night1rider 2026-08-19 05:43:39 -06:00
  • cf58dacee2 Only use AES-256 key size as ticket key size if AES-GCM is enabled Mattia Moffa 2026-08-19 13:45:13 +02:00
  • 074f904ff3 ntp CI: build wolfSSL with OPENSSL_EXTRA_BSD and MD4 Juliusz Sosinowicz 2026-08-19 11:15:42 +00:00
  • d7c7cb6c66 benchmark: AES IV and CCM nonce sweeps, ECC curve sweep and CSV HW/SW column night1rider 2026-08-19 02:21:10 -06:00
  • fe30f3fcf7 Xilinx Versal Gen2 ASU port: ECC, ECDH, ECIES and EdDSA offload night1rider 2026-08-19 02:21:09 -06:00
  • fe76b8782a Map SHA-512/224 and SHA-512/256 OIDs in wc_OidGetHash Yosuke Shimizu 2026-08-12 17:11:00 +09:00
  • eedd798e86 Fix TSP message imprint algorithm/digest length consistency Yosuke Shimizu 2026-08-12 15:57:53 +09:00