1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-25 16:16:38 +03:00

Commit Graph

  • 24091ab365 F-5729 - Guard PKCS7 streaming content size against word32 overflow aidan garske 2026-07-10 12:58:26 -07:00
  • 45dd4947dc F-6557 - Lock ticket key/expiry read against concurrent regeneration aidan garske 2026-07-10 12:57:20 -07:00
  • 57b28a177e F-5625 - Cap BIO file read at MAX_WOLFSSL_FILE_SIZE aidan garske 2026-07-10 12:55:09 -07:00
  • 67e92615c1 F-6712 - Guard gDrbgDefCtx lazy init/free with globalRNGMutex aidan garske 2026-07-10 12:55:09 -07:00
  • 9cb8189d23 F-5585 - Take cert ownership after incorporation to avoid double-free aidan garske 2026-07-10 12:50:01 -07:00
  • fe89d0ff95 F-6705 - Log peerCert copy failure only on actual failure aidan garske 2026-07-10 12:50:01 -07:00
  • b970e31b32 F-6704 - Free WOLFSSL_X509 on CopyDecodedToX509 failure in X509_STORE_GetCerts aidan garske 2026-07-10 12:50:01 -07:00
  • dabd1c8a85 F-6328 - Fix mis-gated key->dp NULL check in wc_BuildEccKeyDer aidan garske 2026-07-10 12:50:01 -07:00
  • 9a30bd6054 F-4112 - Map check_cert_key errors to failure in dual-alg check_private_key aidan garske 2026-07-10 12:46:04 -07:00
  • b953fadb7d F-6711 - Publish bn_one via atomic compare-exchange to fix init race aidan garske 2026-07-10 12:40:23 -07:00
  • be49647d20 F-6723 - Silently discard ChangeCipherSpec records on DTLS 1.3 aidan garske 2026-07-10 12:34:38 -07:00
  • 7dcabd7dbc F-6730 - Use DTLS-aware header size for ECH inner ClientHello buffer aidan garske 2026-07-10 12:32:09 -07:00
  • f7e0649742 F-6731 - ForceZero PreSharedKey identity holding resumption secret before free aidan garske 2026-07-10 12:25:51 -07:00
  • a626f92d10 F-6559 - Reject certs with critical policyConstraints/inhibitAnyPolicy aidan garske 2026-07-10 12:15:13 -07:00
  • 6a7e7be7ad Merge pull request #11004 from rizlik/ecb_fixes JacobBarthelmeh 2026-08-12 16:45:47 -06:00
  • b4ee0bcecb Merge pull request #11021 from kareem-wolfssl/zd22223 JacobBarthelmeh 2026-08-12 16:38:35 -06:00
  • 641253eba8 ChaCha20: fix signed comparisons Sean Parkinson 2026-08-13 08:10:09 +10:00
  • 5a4cab4521 Assembly: fix comparison to be unsigned Sean Parkinson 2026-08-07 12:13:22 +10:00
  • 0bcda7efa2 Merge pull request #10755 from kareem-wolfssl/zd22010 JacobBarthelmeh 2026-08-12 15:03:24 -06:00
  • 816a9e61bf Gate FFDHE enforcement on WOLFSSL_QT, not HAVE_DH_DEFAULT_PARAMS Mattia Moffa 2026-08-12 22:48:09 +02:00
  • d75b7894d1 Keep unknown FFDHE-range codepoints to comply with RFC 7919 Mattia Moffa 2026-08-12 20:58:24 +02:00
  • cccf984700 Merge pull request #11152 from yosuke-wolfssl/fix/f_7074 philljj 2026-08-12 14:18:48 -05:00
  • d59391e8ad Free existing x509 cert before calling InitX509 in DecodeToX509. Kareem 2026-08-12 11:29:05 -07:00
  • f40c2980c5 Add CONTRIBUTING.md covering the contributor agreement and PR process David Garske 2026-08-11 10:59:28 -07:00
  • 927779f896 Fix TI authenticated AES to check pointer alignment not length David Garske 2026-08-11 16:33:54 -07:00
  • 53b37b671f Fix Octeon AES-GCM decrypt to verify the authentication tag David Garske 2026-08-11 16:32:37 -07:00
  • c6a66a9b46 Fix Octeon GCM non-12-byte IV hashed before GHASH init David Garske 2026-08-11 16:31:16 -07:00
  • c0c6132e42 Default resumption ticket enc cb to AES256-GCM when available Mattia Moffa 2026-08-12 18:40:53 +02:00
  • 1fd8990d9d Configure.ac: Limit wolfCLU features on FIPS version Lealem Amedie 2026-08-12 10:00:48 -06:00
  • d539b06564 PSA AES: tear down the object when psa_cipher_abort() fails in wc_psa_aes_reset_ctx() Daniele Lacamera 2026-08-12 17:57:35 +02:00
  • 4b1ff0e346 Gate SHA3-224/256/384/512 prototypes separately Josh Holtrop 2026-08-12 10:43:36 -04:00
  • 190b6ee113 KCAPI AES: tear down the CBC stream on wc_AesSetIV() so a new IV takes effect Daniele Lacamera 2026-08-12 16:40:29 +02:00
  • 4292ec5653 tests: extend test_wc_AesSetIV_RestartsStream to cover KCAPI CBC Daniele Lacamera 2026-08-12 16:40:29 +02:00
  • 0281978c44 F-8254: PSA AES: abort the cipher operation on wc_AesSetIV() so a new IV takes effect Daniele Lacamera 2026-08-12 16:04:04 +02:00
  • 65559843b5 Merge pull request #11050 from MarkAtwood/fix/test-dh-group-loop-underflow Sameeh Jubran 2026-08-12 15:15:44 +03:00
  • 1c9efc4310 Reject curve448 public key export from an unset key Yosuke Shimizu 2026-08-12 16:21:07 +09:00
  • 4a5809bc3e Require a trusted TSA certificate in wc_TspResponse_Verify Yosuke Shimizu 2026-08-12 15:34:47 +09:00
  • 49b133b7ed Set actual date length in CRL ASN1_TIME fields Takashi Kojo 2026-08-12 15:20:17 +09:00
  • e7ec0f8df3 ascon: re-initialize the context in Final so it can be reused Yosuke Shimizu 2026-08-12 13:36:35 +09:00
  • bf4b4aa878 Fix UAF in DH buffers Paul Adelsbach 2026-08-11 21:12:37 -07:00
  • caaf26f409 Check result of SendBuffered in wolfSSL_process_quic_post_handshake Mattia Moffa 2026-08-12 05:15:46 +02:00
  • 14a8ed2dbb Merge pull request #11141 from philljj/ecc_mutex_ret JacobBarthelmeh 2026-08-11 17:01:06 -06:00
  • a453077818 Merge pull request #11017 from miyazakh/f7302_pkcs7_verify JacobBarthelmeh 2026-08-11 16:54:17 -06:00
  • 81c748110b Update README kaleb-himes 2026-08-11 15:37:17 -06:00
  • 5f0f1d6b64 Fix STM32 CubeMX AES-GCM AAD over-read from HAL word reads (ST SA0076) David Garske 2026-08-05 21:22:32 -07:00
  • 5451b2e787 Merge pull request #11124 from dgarske/cross_library_deepen_race JacobBarthelmeh 2026-08-11 13:50:56 -06:00
  • 43fa20b60d Remove legacy statement that no longer reflects todays design kaleb-himes 2026-08-11 13:00:35 -06:00
  • 0a47c62ed8 Merge pull request #10718 from night1rider/AES-Key-wrap_with_padding David Garske 2026-08-11 10:20:54 -07:00
  • 1be3c25f5c Merge pull request #11009 from kareem-wolfssl/zd22229 David Garske 2026-08-11 10:19:21 -07:00
  • e0feaa36e9 Merge pull request #10940 from SparkiDev/chacha20_poly1305_avx512 David Garske 2026-08-11 10:18:18 -07:00
  • 8a31663c54 Merge pull request #10592 from MarkAtwood/fix/ecc-double-free-invalid-format-byte JacobBarthelmeh 2026-08-11 10:55:59 -06:00
  • 8f4fcf5dad Merge pull request #10720 from MarkAtwood/fix/license-metadata-gplv3 JacobBarthelmeh 2026-08-11 10:55:30 -06:00
  • 8fc16f75e7 ecc: check return of wc_InitMutex ecc_oid_cache_lock. jordan 2026-08-11 11:48:23 -05:00
  • fcf11af7a0 Merge pull request #11000 from kareem-wolfssl/zd22213 JacobBarthelmeh 2026-08-11 10:36:50 -06:00
  • d565da071b Merge pull request #11111 from cconlon/eccOidLockInit philljj 2026-08-11 11:27:41 -05:00
  • 72802102c9 Merge pull request #10256 from MarkAtwood/fix/rsa-pss-unpad-bits-zero JacobBarthelmeh 2026-08-11 09:49:51 -06:00
  • b065653b96 Merge pull request #10736 from philljj/bsdkm_rdseed JacobBarthelmeh 2026-08-11 09:03:18 -06:00
  • 66d182b362 Merge pull request #11123 from dgarske/toradex_nxp_imx95 JacobBarthelmeh 2026-08-11 08:54:59 -06:00
  • 3717560a01 ChaCha20/Poly1305 ASM: AVX512 and improvements to other Intel x64 Sean Parkinson 2026-07-15 17:17:55 +10:00
  • 1e02c30891 SP ECC P-256 x64 asm: fix carry in triple and rsb_sub_dbl Sean Parkinson 2026-08-11 11:27:32 +10:00
  • 5fb8a29bd0 Code review feedback Kareem 2026-08-10 16:54:43 -07:00
  • 8009964ae8 Code review feedback Kareem 2026-07-23 16:58:53 -07:00
  • 03a81d8181 Code review feedback Kareem 2026-07-14 18:07:00 -07:00
  • c25168179b Remove WOLFSSL_CERT_REJECT_TRAILING. Reject certs with trailing data by default, allow opt-out via WOLFSSL_NO_ASN_STRICT. Kareem 2026-07-06 16:02:10 -07:00
  • 13f9194e61 Gate new cert trailing rejection logic behind an opt-in macro to avoid breaking existing use cases. Kareem 2026-06-25 17:38:59 -07:00
  • 7193765f84 Reject certificates with trailing data, except for trusted certificates. In addition, only copy the certificate itself to WOLFSSL_X509, omitting trailing bytes. Kareem 2026-06-22 17:17:41 -07:00
  • 04625b2f24 Fix DER buffer size in test_wc_CheckCertSigPubKey. Kareem 2026-06-22 17:14:11 -07:00
  • 2cad68a931 Fix test failure for WOLFSSL_OLD_OID_SUM Kareem 2026-08-10 16:46:31 -07:00
  • 754b220617 Remove carry over of old buffer in wolfSSL_X509_set_ext. Thanks to Kushal Khemka & Mayank Jangid (OpenSec Intelligence) for the report. Kareem 2026-07-30 15:46:40 -07:00
  • 067c10d71e Merge pull request #10819 from lealem47/input_validation Daniel Pouzzner 2026-08-10 18:29:11 -05:00
  • a8cb129088 arm64: runtime-dispatch ML-KEM SHA-3 crypto extension to fix SIGILL David Garske 2026-08-10 15:09:27 -07:00
  • 1e0fa211d0 Merge pull request #10886 from night1rider/cryptocb-hooks-rsapss-ed448-cmac David Garske 2026-08-10 15:49:05 -07:00
  • 5c6112c634 Pass -m32 at make time too for the NO_64BIT key wrap build night1rider 2026-08-10 16:32:27 -06:00
  • 26a8ae690a Add a 32-bit NO_64BIT key wrap build to the os-check matrix night1rider 2026-08-10 14:36:23 -06:00
  • c0c6398f86 Drop the extra braces and line up the comments in the key wrap IV check night1rider 2026-08-10 14:13:18 -06:00
  • 102111e2c7 Give the key wrap tests unused device IDs and fix the comment night1rider 2026-08-08 13:51:07 -06:00
  • 68aa9cc8d2 Reject a key wrap length the device reports beyond the output buffer night1rider 2026-08-08 13:50:10 -06:00
  • 1c79abc53a Do not free an Aes that wc_AesInit never initialized night1rider 2026-08-08 13:49:41 -06:00
  • 2fcc341072 Add AES key wrap with padding (RFC 5649) and crypto callback support night1rider 2026-07-20 13:40:06 -06:00
  • 263cc7d6c8 bsdkm: fix rdseed build. jordan 2026-08-10 15:45:34 -05:00
  • 0aa7c7c94d cross-library: recover the break-check scan base when the PR merge ref moves David Garske 2026-08-10 13:05:00 -07:00
  • 73298a7f63 Share one helper between the RSA-PSS verify crypto callback paths night1rider 2026-08-10 13:46:01 -06:00
  • d9a78aa680 Address Skoll Review comments Lealem Amedie 2026-08-10 13:41:23 -06:00
  • ad8a879ef2 Limit WC_CMAC_TAG_MIN_SZ bump to FIPS builds Lealem Amedie 2026-07-26 09:29:42 -06:00
  • ca06c85ec0 Testing touch-ups to account for error code fix and MIN_AUTH_TAG_SZ update Lealem Amedie 2026-07-21 08:42:41 -06:00
  • 18ce83cf9b Fix spacing nit Lealem Amedie 2026-07-21 08:41:35 -06:00
  • 0e9ee6ffb0 Remove MIN_AUTH_TAG_SZ logic from kernel section to synchronize with user-space build Lealem Amedie 2026-07-21 08:41:10 -06:00
  • 0ee11c71ac Merge pull request #10994 from night1rider/Xilinx-ASU-Ciphers-CMAC-GMAC JacobBarthelmeh 2026-08-10 13:32:55 -06:00
  • d011a614e7 Increase WC_CMAC_TAG_MIN_SZ to SP800-38b recommendation Lealem Amedie 2026-07-20 16:53:33 -06:00
  • 9c113d34f1 Crypto layer: Add missing input validation Lealem Amedie 2026-07-20 16:30:19 -06:00
  • 3563316155 wc_BufferKey{Encrypt,Decrypt}: initialize ret Josh Holtrop 2026-08-10 15:22:50 -04:00
  • a39e0bdba0 Document the WC_PK_TYPE_RSA_PSS_VERIFY handler return contract in cryptocb.h night1rider 2026-08-10 12:56:29 -06:00
  • b5e743ca17 wc_BufferKey{Encrypt,Decrypt}: move opening { to switch line Josh Holtrop 2026-08-10 14:53:25 -04:00
  • f560308969 wc_BufferKey{Encrypt,Decrypt}: test exact expected error code for hash type none Josh Holtrop 2026-08-10 14:52:16 -04:00
  • 356cb54d2b wc_BufferKey{Encrypt,Decrypt}: test IV size too large based on WC_MAX_SYM_KEY_SIZE Josh Holtrop 2026-08-10 14:34:13 -04:00
  • 9bd4a59e65 wc_BufferKeyEncrypt: update documentation example Josh Holtrop 2026-08-10 14:30:08 -04:00
  • 63f441fd1b wc_BufferKeyDecrypt: document BUFFER_E return value Josh Holtrop 2026-08-10 14:09:48 -04:00
  • c6f267706f test_tls13: fix clang tidy. jordan 2026-08-10 12:49:50 -05:00
  • 55e14559bb bsdkm: no M_WAITOK with crypto driver. jordan 2026-08-10 12:09:31 -05:00
  • 9ca12d2a10 Code review feedback Kareem 2026-08-07 15:17:17 -07:00