1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-25 16:16:38 +03:00

Commit Graph

  • 47efe878af Address review: fix AES key-set guard gaps on AF_ALG and MAX3266X_CB Juliusz Sosinowicz 2026-08-19 03:02:29 +00:00
  • 311161c995 Address review: only mark the AES key installed once setup succeeded Juliusz Sosinowicz 2026-08-19 03:02:29 +00:00
  • d089b17a0a Add missing CryptoCb_Free test cases and CI Paul Adelsbach 2026-08-18 20:02:17 -07:00
  • 0a02a24e36 Address review: mark the key installed on the WOLF_CRYPTO_CB_SETKEY path Juliusz Sosinowicz 2026-08-14 12:18:48 +00:00
  • d433852e9a Guard wc_AesEncryptDirect and wc_AesKeyWrap_ex against a missing key Juliusz Sosinowicz 2026-08-06 11:24:27 +00:00
  • 4e7737abde Add opt-out for the AES key-set check and fix three backend gaps Juliusz Sosinowicz 2026-08-06 09:08:13 +00:00
  • 3154e3c257 Fix CI: skip aes_no_key_set_test under WOLF_CRYPTO_CB_FIND Juliusz Sosinowicz 2026-08-06 02:41:11 +00:00
  • bf99dfd5ec Address review: AES no-key guard refinements Juliusz Sosinowicz 2026-08-05 10:31:34 +00:00
  • 6b8634c89a Address review: reject no-key AES on AF_ALG backend (F-6151) Juliusz Sosinowicz 2026-07-24 03:05:20 +00:00
  • 67c11acddf Address review: set keyInstalled in FREESCALE_LTC/MMCAU key setup (F-6151) Juliusz Sosinowicz 2026-07-21 15:59:31 +00:00
  • aaf9c7e2cb Fix CI: reject no-key AES-CBC on RISC-V backend (F-6151) Juliusz Sosinowicz 2026-07-20 02:21:54 +00:00
  • 44965314ae Address review: use INVALID_DEVID in aes_no_key_set_test (F-6151) Juliusz Sosinowicz 2026-07-16 02:22:10 +00:00
  • 8b5662ee9b Address review: set keyInstalled in SECO CAAM key setup (F-6151) Juliusz Sosinowicz 2026-07-16 02:22:10 +00:00
  • dab0b92992 Address review: set keyInstalled in HW port key setup (F-6151) Juliusz Sosinowicz 2026-07-15 02:31:39 +00:00
  • 797cf23fd8 AES: check for a key before the sz == 0 early return (F-6151) Juliusz Sosinowicz 2026-07-14 12:35:39 +00:00
  • e603c07897 AES-CCM: reject use before a key is set (F-6151) Juliusz Sosinowicz 2026-07-14 12:35:17 +00:00
  • 71d4b354ce RSA-PSS test: use ret-independent failure code for tamper check (F-6157) Juliusz Sosinowicz 2026-06-24 18:17:03 +00:00
  • 181113f96b test: skip AES no-key test under FIPS and selftest (F-6151) Juliusz Sosinowicz 2026-06-24 12:46:55 +00:00
  • 2b0e415821 AES: reject no-key use on PIC32MZ and RISC-V backends (F-6151) Juliusz Sosinowicz 2026-06-24 11:43:42 +00:00
  • 5ae42c4cdd AES: rename key-set flag and set it on every key install (F-6151) Juliusz Sosinowicz 2026-06-23 17:00:57 +00:00
  • 4d18cc981e AES: track key-set state with a dedicated flag (F-6151) Juliusz Sosinowicz 2026-06-23 13:44:39 +00:00
  • 521a217534 RSA-PSS: test signature-to-message hash binding (F-6157) Juliusz Sosinowicz 2026-06-23 11:26:39 +00:00
  • 362f144f13 AES: reject mode operations when no key has been set (F-6151) Juliusz Sosinowicz 2026-06-23 11:22:55 +00:00
  • d8e3ba575e Add CryptoCb_Free for Falcon/FN-DSA Paul Adelsbach 2026-08-18 19:21:22 -07:00
  • 82022ff7ba pkcs11: allow a generated EC key to both derive and sign via WC_ECC_FLAG_DERIVE David Garske 2026-08-18 15:47:09 -07:00
  • c5c63c0ba5 wolfCrypt SRAM PUF: health test the raw readout before accepting it David Garske 2026-08-11 07:30:09 -07:00
  • 5d07bc9a20 Fix from review Eric Blankenhorn 2026-08-18 16:42:36 -05:00
  • 89541d1110 Merge pull request #10254 from MarkAtwood/fix/mldsa-privkey-bounds philljj 2026-08-18 16:32:05 -05:00
  • 83091f3ff0 Merge pull request #11179 from padelsbach/membrowse-fork-pr-checkout philljj 2026-08-18 15:51:18 -05:00
  • af1095fb96 Merge pull request #10997 from julek-wolfssl/x509-verify-cert-shared-stack philljj 2026-08-18 15:21:50 -05:00
  • 8ed7767ec1 Merge pull request #11194 from LinuxJedi/se050_rsa_verify_buffer philljj 2026-08-18 15:18:05 -05:00
  • e39eadfa70 Merge pull request #11176 from dgarske/tls_bench_monotonic_clock philljj 2026-08-18 14:52:45 -05:00
  • 0f781fbde1 Merge pull request #11104 from SparkiDev/asm_x64_large_len_fix philljj 2026-08-18 12:39:27 -05:00
  • 63917d7d6d asn.c: check the OCSP responder certificate's signature Josh Holtrop 2026-08-18 11:21:11 -04:00
  • 2017f30b28 Fix from review Eric Blankenhorn 2026-08-18 10:09:31 -05:00
  • 5e0018f76b SE050 CI: update pinned simulator for PKCS7 coverage Andrew Hutchings 2026-08-18 15:09:00 +01:00
  • 4fa8cefb9a SE050: software ECDH fallback for non-resident private keys Andrew Hutchings 2026-08-18 15:08:53 +01:00
  • 676b4d68fa Merge pull request #11052 from night1rider/Xilinx-ASU-RSA-standalone philljj 2026-08-18 09:05:23 -05:00
  • aae126059a SE050: use a scratch buffer for the raw RSA verify operation Andrew Hutchings 2026-08-18 14:51:45 +01:00
  • 7c18048c59 Merge pull request #11065 from MarkAtwood/fix/sp-sqrmod-zero-modulus philljj 2026-08-18 07:56:36 -05:00
  • 8aeaa52de2 Fix directoryName NameConstraints bypass Josh Holtrop 2026-08-11 12:38:07 -04:00
  • 842a42d22b Fix ignored return code Hideki Miyazaki 2026-08-18 07:46:52 -04:00
  • 9d99573b62 Address review: keep scanning the trusted stack past rejected candidates Juliusz Sosinowicz 2026-08-18 02:31:25 +00:00
  • 1df55fb28b Append injected data at the end of the input buffer Yosuke Shimizu 2026-08-04 11:19:51 +09:00
  • bceb9fb6ab Merge pull request #11106 from gasbytes/gh-11088 philljj 2026-08-17 18:34:15 -05:00
  • 26a47aacb3 Merge pull request #10518 from Roy-Carter/feature/missing_openssl_functionality philljj 2026-08-17 17:52:47 -05:00
  • bb430555f7 Rust wrapper: ed448: gate RNG references with random cfg Josh Holtrop 2026-08-17 16:52:50 -04:00
  • ab97151e69 Rust wrapper: ed25519: gate RNG references with random cfg Josh Holtrop 2026-08-17 16:41:35 -04:00
  • d8998da0c9 Fix heap overflow in TLS compression receive path Eric Blankenhorn 2026-08-17 15:47:26 -05:00
  • 2a1993645b Rust wrapper: gate Lms::get_kid() with lms_make_key cfg Josh Holtrop 2026-08-17 14:54:14 -04:00
  • 60e6c3c75f tls_bench: measure with CLOCK_MONOTONIC, label MiB/s, guard zero-division David Garske 2026-08-14 08:06:56 -07:00
  • 97a653e7a1 Xilinx Versal Gen2 ASU RSA: drop goto cleanup for an AsuRsaMem alloc/free pair night1rider 2026-08-17 11:31:37 -06:00
  • f4a94c24e6 Merge pull request #10990 from julek-wolfssl/cryptocb-async-poll-compile-time JacobBarthelmeh 2026-08-17 11:44:31 -06:00
  • 7d0e520eef Enforce RFC 8446 SHA-1 certificate rule on TLS 1.3 chains Eric Blankenhorn 2026-08-06 15:37:39 -05:00
  • 0e3b9bda3e tests: address the findings on the mcdc helpers and the CRL skip vector Daniele Lacamera 2026-08-17 10:01:17 +02:00
  • b32c69e41b tests: pair the GHASH size operands in the aes white-box Daniele Lacamera 2026-08-17 09:37:23 +02:00
  • b7ef79ffa4 tests: record the aes CTR leftover loop as a constant-false decision Daniele Lacamera 2026-08-17 09:30:05 +02:00
  • 99a3511376 tests: sweep the chacha20/poly1305 AVX-512 dispatch rows Daniele Lacamera 2026-08-17 09:25:11 +02:00
  • 73522e7096 tests: drive the dh public-value argument guard Daniele Lacamera 2026-08-17 09:21:14 +02:00
  • 4b2e4b441c tests: drive the aes key-wrap raw guards, roll_auth return and CCM dispatch Daniele Lacamera 2026-08-17 09:19:40 +02:00
  • 2fc0e97e0a tests: reach the aes key-wrap length and overflow operands Daniele Lacamera 2026-08-17 09:19:40 +02:00
  • fefc549038 tests: drive the new cryptocb dispatch guards Daniele Lacamera 2026-08-17 09:17:32 +02:00
  • d16bcb54d4 tests: drive the kdf input-validation guards Daniele Lacamera 2026-08-17 09:16:38 +02:00
  • a10ef6e322 tests: gate the seeded RNG on WOLFSSL_SHAKE256 and register the mcdc macros Daniele Lacamera 2026-08-12 15:54:52 +02:00
  • d7b35872e5 tests: build the tsp internal-symbol cases only in static builds Daniele Lacamera 2026-08-12 13:52:33 +02:00
  • fbbc45e0b9 tests: record the pkcs7 fourth-pass unreachability arguments Daniele Lacamera 2026-08-12 10:56:34 +02:00
  • 77db766152 tests: restore the asn path-length and specified-curve version rows Daniele Lacamera 2026-08-12 10:40:31 +02:00
  • 9d98b4f0a0 tests: verify an RSASSA-PSS signed bundle for the signer key-type guards Daniele Lacamera 2026-08-12 10:37:32 +02:00
  • 94595a1270 tests: reject a pkcs7 recipient certificate with an empty issuer name Daniele Lacamera 2026-08-12 10:34:56 +02:00
  • 99eeb68818 tests: drive the pkcs7 RSASSA-PSS signature parameter tag guard Daniele Lacamera 2026-08-12 10:34:03 +02:00
  • a715bb5123 tests: overflow the unknown-extension OID so the callback dispatch is skipped Daniele Lacamera 2026-08-12 10:31:02 +02:00
  • 6b13a5088b tests: gate the asn date-range expectations on the clock being compiled in Daniele Lacamera 2026-08-12 10:30:03 +02:00
  • 8551b0ac00 tests: drive the pkcs7 content-decryption callback guard Daniele Lacamera 2026-08-12 10:30:00 +02:00
  • 524bba57ca wolfcrypt: keep the CRL signature-parameter error when the date check is off Daniele Lacamera 2026-08-12 10:29:14 +02:00
  • 8098d31c45 tests: disagree the CRL signature parameters and the OCSP issuer hashes Daniele Lacamera 2026-08-12 10:23:46 +02:00
  • 9b6511ceb8 tests: reject the acert general-name URIs and both nonRepudiation spellings Daniele Lacamera 2026-08-12 10:20:40 +02:00
  • f5b6a6fb3d tests: drive the pkcs7 BER-fragmented enveloped content loop Daniele Lacamera 2026-08-12 10:19:59 +02:00
  • 0bb6fa2eaf tests: correct the asn PBE OID-length and specified-curve hash fixtures Daniele Lacamera 2026-08-12 10:17:57 +02:00
  • bf60bc28e5 tests: drive the pkcs7 enveloped IV boundary and explicit-octet content Daniele Lacamera 2026-08-12 10:17:24 +02:00
  • 66431cd396 tests: initialise the asn basic-constraints path length before decoding Daniele Lacamera 2026-08-12 10:14:30 +02:00
  • 4708a24170 tests: drive the pkcs7 short-buffer tag probes in signerinfo and KARI Daniele Lacamera 2026-08-12 10:13:28 +02:00
  • 79bd39f3a9 tests: drive the pkcs7 KARI issuer-and-serial match arms Daniele Lacamera 2026-08-12 10:11:55 +02:00
  • f9899fa518 tests: dispatch the asn DSA signature sizes and fix two vacuous baselines Daniele Lacamera 2026-08-12 10:11:40 +02:00
  • 6c4e0e012c tests: disagree the acert signature parameters and retag its algorithm Daniele Lacamera 2026-08-12 10:08:32 +02:00
  • ef387ffce5 tests: drive the pkcs7 KEKRI wrapped-key size guard through the wrap callback Daniele Lacamera 2026-08-12 10:08:18 +02:00
  • bb80fd619b tests: drive the pkcs7 certificate-set tail probes Daniele Lacamera 2026-08-12 10:06:35 +02:00
  • 8f6588b013 tests: mark the ecc mul2add scalar-width rows covered in the residual block Daniele Lacamera 2026-08-12 10:04:50 +02:00
  • da14ce8dca tests: drive the pkcs7 encapContentInfo length and detached-content shapes Daniele Lacamera 2026-08-12 10:03:49 +02:00
  • ab4ce93c85 tests: close the rsa fault white-box header comment Daniele Lacamera 2026-08-12 10:02:09 +02:00
  • 933c5cec93 tests: drive the ecc fixed-point mul2add scalar-width guard on the SAKKE curve Daniele Lacamera 2026-08-12 10:02:04 +02:00
  • fb2a5dc8a4 tests: register the new MC/DC white-box drivers Daniele Lacamera 2026-08-12 10:01:22 +02:00
  • 6aee676db1 tests: bound the ecc fixed-point mul2add scalar guard Daniele Lacamera 2026-08-12 10:01:22 +02:00
  • 6b3b117c38 tests: pair the signature plain_ptr cleanup guard Daniele Lacamera 2026-08-12 10:01:22 +02:00
  • 8808ff25df tests: fault the pwdbased KDF loop transforms Daniele Lacamera 2026-08-12 10:01:21 +02:00
  • e506fe1325 tests: fault the she AES transform loop Daniele Lacamera 2026-08-12 10:01:21 +02:00
  • 3fc8d4910a tests: drive the sha256 and sha512 length-guard error halves Daniele Lacamera 2026-08-12 10:01:21 +02:00
  • 3e01b4fac5 tests: add the random entropy and Hash_df fault supplement Daniele Lacamera 2026-08-12 10:01:21 +02:00
  • 1a4a64ab62 tests: pair the integer comba thresholds and the gcd error rows Daniele Lacamera 2026-08-12 10:01:21 +02:00
  • 8daf394920 tests: fault the ed25519 and ed448 hash chains and pair the ed448 argument guards Daniele Lacamera 2026-08-12 10:01:21 +02:00
  • cc602a6890 tests: stage the sakke zero-key retry and pairing error rows Daniele Lacamera 2026-08-12 10:01:21 +02:00