1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • 1208e51bd8 Address review: NUL terminate explicitly in ASN1_STRING_to_UTF8 Juliusz Sosinowicz 2026-10-16 05:29:53 +00:00
  • a340f20c2e Address review: take const name in X509_NAME text and index getters Juliusz Sosinowicz 2026-10-16 05:29:53 +00:00
  • 8ab29dc2a8 Address review: don't write through const in X509_NAME_ENTRY_get_object Juliusz Sosinowicz 2026-10-16 05:29:53 +00:00
  • 227bbcae4d Take const args in X509_NAME and ASN1_STRING getters Juliusz Sosinowicz 2026-10-15 17:06:47 +00:00
  • 480d7d5990 Return int from EVP_CIPHER_mode and EVP_CIPHER_CTX_mode Juliusz Sosinowicz 2026-10-15 17:06:47 +00:00
  • b139a5a051 Merge pull request #11717 from SparkiDev/mlkem_fixes_2 philljj 2026-10-16 12:07:28 -05:00
  • 6bd2469cbd Rust wrapper: allow generating random data to large buffers Josh Holtrop 2026-10-13 15:17:42 -04:00
  • 3d6454aeff Rust wrapper: fail crate build if C library built with async support Josh Holtrop 2026-10-13 14:58:23 -04:00
  • 0c7c5b4406 Merge pull request #11773 from Frauschi/mlkem-decaps-id-key philljj 2026-10-16 09:39:04 -05:00
  • bc9c079025 Generate wolfIP test certificates before the parallel build Tobias Frauenschläger 2026-10-16 09:54:21 +02:00
  • 725fe0edfa Address review comment Tobias Frauenschläger 2026-10-15 12:24:13 +02:00
  • 9bfeaff061 Merge pull request #11765 from Arpan0995/mldsa-initid-setparams Tobias Frauenschläger 2026-10-16 10:06:08 +02:00
  • 55084c9a50 Let an ML-KEM key named by id decapsulate on a device Tobias Frauenschläger 2026-10-16 09:45:25 +02:00
  • b9426d0073 Address review comment Tobias Frauenschläger 2026-10-15 12:09:29 +02:00
  • 97a584effc CI: Zephyr: build the certificate and curve-split Kconfig scenarios Tobias Frauenschläger 2026-10-15 11:59:08 +02:00
  • 516ea93e3c zephyr: add Kconfig options for PKCS#7, CSRs and key generation Tobias Frauenschläger 2026-09-24 15:53:20 +02:00
  • 263de15809 zephyr: add Kconfig options for user I/O and certificate generation Tobias Frauenschläger 2026-09-24 15:49:15 +02:00
  • 68d83d2a7f Merge pull request #11496 from SparkiDev/aarch64_asm_fixup_1 Tobias Frauenschläger 2026-10-16 08:46:03 +02:00
  • 5e7fc2203d Merge pull request #11749 from twcook86/ghs_guard_for_arch_extension Tobias Frauenschläger 2026-10-16 08:36:56 +02:00
  • 47367df731 Merge pull request #11764 from Arpan0995/tls13-x25519-zero-secret-alert Tobias Frauenschläger 2026-10-16 08:22:25 +02:00
  • 9f16d3bb98 Merge pull request #11642 from Arpan0995/mldsa-getlen-null-len philljj 2026-10-15 23:26:48 -05:00
  • 28ab51bb1d Merge pull request #11769 from douzzer/20261015-linuxkm-AES-XTS-NI-fix philljj 2026-10-15 22:13:40 -05:00
  • 0643ac02f6 linuxkm/module_hooks.c: add WC_LINUXKM_NO_SVR_DYNAMIC_AUDITING and WC_LINUXKM_SVR_FORCE_DYNAMIC_AUDITING overrides and an svr_dynamic_auditing runtime gate, conditional (when available) on IS_INTEL_AVX1(cpuflags), to avoid false positive "inhibited-save instrumentation was not exercised" error at startup. Daniel Pouzzner 2026-10-15 18:18:08 -05:00
  • 14314b626c asn: test explicit EC-domain field-length bounds (issue 11288) jackctj117 2026-08-25 15:57:30 -06:00
  • eeb4b37cde asn: bound explicit EC-domain A, B and order in every build jackctj117 2026-08-25 15:47:23 -06:00
  • eb113cac67 Merge pull request #11547 from padelsbach/cbonly-lmsxmss philljj 2026-10-15 17:01:48 -05:00
  • 4da3ecb35a Merge pull request #11736 from dgarske/mldsa_weak_prehash Tobias Frauenschläger 2026-10-15 23:31:36 +02:00
  • f3ac849ff2 linuxkm/lkcapi_aes_glue.c: enable WC_LINUXKM_XTS_NO_AESNI only if neither WC_C_DYNAMIC_FALLBACK nor WC_SVR_USE_NATIVE_REG_BUFS. Daniel Pouzzner 2026-10-15 15:22:02 -05:00
  • 36754d7613 fips-check: use fips-hash.sh for the in core hash update jackctj117 2026-10-15 14:20:59 -06:00
  • e6bc824748 Merge pull request #11718 from holtrop-wolfssl/rust-updates-2026-10-12 philljj 2026-10-15 14:59:30 -05:00
  • 6997631516 LMS: SigsLeft returns 0 for a key without parameters or verify-only Arpan Sharma 2026-10-15 12:12:42 -05:00
  • 1f05bcdcd8 Address pr comments Thomas Cook 2026-10-15 13:22:14 -04:00
  • 2aba76ba69 TLS 1.3: map an all-zero X25519 result from an async completion too Arpan Sharma 2026-10-15 12:32:09 -05:00
  • d139ee0c3a Merge pull request #11750 from sebastian-carpenter/ecc-mutex-fix philljj 2026-10-15 12:29:33 -05:00
  • f75fbe2cdd ML-DSA: set the device key level in InitId/InitLabel only on success Arpan Sharma 2026-10-15 11:11:13 -05:00
  • a177ac8c6d Merge pull request #11549 from kareem-wolfssl/zd22505 philljj 2026-10-15 11:00:29 -05:00
  • de63c4ec57 TLS 1.3: send illegal_parameter for an all-zero X25519 shared secret Arpan Sharma 2026-10-15 10:40:21 -05:00
  • 7c501a0ff8 wolfcrypt/src/rng_bank.c: add missing WC_RNG_BANK_FLAG_QUIET checks in wc_rng_bank_reseed_range(). Daniel Pouzzner 2026-10-15 10:48:46 -05:00
  • 9c0f6b4624 hash.c: un-deprecate type parameter for generic hash functions in debug builds Josh Holtrop 2026-10-15 11:45:21 -04:00
  • fa565101ab mldsa: add WOLFSSL_MLDSA_ALLOW_WEAK_PREHASH for SHA-256-only TPM firmware David Garske 2026-10-14 20:49:50 -07:00
  • b8891fa1a4 Rework the static-memory heap hint fix Tobias Frauenschläger 2026-10-15 09:51:56 +02:00
  • 3b172fe050 Address review comments Tobias Frauenschläger 2026-10-14 10:49:07 +02:00
  • d2cfc23759 Address review comment Tobias Frauenschläger 2026-10-13 13:24:33 +02:00
  • 5a02fa04d9 Bound error-message and time-string formatting under WOLF_C89 Tobias Frauenschläger 2026-09-30 10:05:25 +02:00
  • c991775457 Bound OID text formatting in DecodePolicyOID and the RID alt name Tobias Frauenschläger 2026-09-30 10:05:25 +02:00
  • ee02df7518 Format key bytes into a local buffer in wolfssl_print_number Tobias Frauenschläger 2026-09-30 10:05:25 +02:00
  • 1b4fe3820e Size the CRL number string from CRL_MAX_NUM_SZ Tobias Frauenschläger 2026-09-30 10:05:25 +02:00
  • 808be25236 Bound certificate fields in the remaining X509 print paths Tobias Frauenschläger 2026-09-30 10:05:25 +02:00
  • 5aa793e52e Test the peer DH prime on every ServerKeyExchange Tobias Frauenschläger 2026-09-30 08:35:14 +02:00
  • aedbb77270 Regrow a retained server DH private key buffer Tobias Frauenschläger 2026-09-30 13:17:34 +02:00
  • e70c246dd5 Build the session-cache-ref CI leg with opensslall Tobias Frauenschläger 2026-09-29 18:39:08 +02:00
  • 85448600aa Resolve client cache handles in SSL_SESSION_set1_id and set1_id_context Tobias Frauenschläger 2026-09-29 18:35:58 +02:00
  • cbaa4d47d4 Allocate cached ticket nonce with NULL heap Tobias Frauenschläger 2026-09-29 15:19:40 +02:00
  • 56fbdd6d1f Release the static-memory SSL hint last in wolfSSL_ResourceFree Tobias Frauenschläger 2026-09-29 15:34:46 +02:00
  • a65f13b623 Free static-memory SSL into its creating pool after a CTX swap Tobias Frauenschläger 2026-09-29 15:33:16 +02:00
  • 3a45cc02e6 Merge pull request #11682 from padelsbach/byteray-med-x509 philljj 2026-10-15 09:42:49 -05:00
  • 22ed3dc401 Merge pull request #11728 from ageprocpp/fix/fenrir-15886 kaage 2026-10-15 22:39:42 +09:00
  • f46cdde15b Merge pull request #11400 from julek-wolfssl/ca-store-loading-fixes Tobias Frauenschläger 2026-10-15 11:03:36 +02:00
  • 2a5d2ec5eb Merge pull request #11465 from padelsbach/ossl-compat-issue-31 Tobias Frauenschläger 2026-10-15 11:02:42 +02:00
  • bebfdc0293 Merge pull request #11747 from Frauschi/stm32_armasm_aes David Garske 2026-10-14 22:34:57 -07:00
  • ee07709802 wolfcrypt/test/test.c: in rng_lifecycle_test(), (void)child_inited after last zeroing to hush old clang-tidy. Daniel Pouzzner 2026-10-15 00:17:10 -05:00
  • 72b7471544 Merge pull request #11661 from julek-wolfssl/compat-max-send-fragment philljj 2026-10-14 23:01:37 -05:00
  • 488c02c774 linuxkm/module_hooks.c: READ_ONCE()/WRITE_ONCE() stand-ins for kernel 3.17 and 3.18. Daniel Pouzzner 2026-10-14 20:36:55 -05:00
  • 902b038f48 wolfssl/wolfcrypt/random.h: under WC_NO_RNG, every RNG capability derived in the feature setup is off. Daniel Pouzzner 2026-10-14 19:59:39 -05:00
  • 2a133a160c wolfcrypt/src/rng_bank.c: a bank's root cannot be a full-mutex instance. Daniel Pouzzner 2026-10-14 19:32:59 -05:00
  • fc89bcdfe9 wolfcrypt/src/rng_bank.c: prediction-resistant checkouts in lock-less multithreaded banks, and no waiting on verdicts in wc_rng_bank_reseed_range(). Daniel Pouzzner 2026-10-14 19:12:20 -05:00
  • 9408cabd8b PR feedback: use XVALIDATE_DATE, remove early return, fix tests Paul Adelsbach 2026-10-14 16:27:38 -07:00
  • a19f41c284 Check expiry for trusted certs Paul Adelsbach 2026-09-16 22:18:59 -07:00
  • 4479a163fa Add CERT_BUFFERS guards to unit tests. Kareem 2026-09-24 15:42:58 -07:00
  • 599b8f5ab9 Add length checks for DSA Q buffer in EVP layer. Thanks to Bright Zhu for the report. Kareem 2026-09-24 15:25:29 -07:00
  • 7512272c56 Free old peerSigSpec pointer before allocating to prevent overwriting it. Thanks to Bright Zhu for the report. Kareem 2026-09-24 15:24:02 -07:00
  • 181575db73 wolfcrypt/src/rng_bank.c: in wc_rng_bank_inst_reinit(), a member of a lock-less RBG-chain bank no longer waits on an out-of-service root. Daniel Pouzzner 2026-10-14 18:19:09 -05:00
  • 267d56d920 RNG review round 2: bank teardown against retained root references, lock-less bank root reinit, user seed on RDRAND hosts, and two linuxkm legacy-kernel fixes. Daniel Pouzzner 2026-10-14 17:48:07 -05:00
  • 360f93b322 SLH-DSA: restore one-byte sigSz probe, sync Japanese doxygen Arpan Sharma 2026-10-14 00:05:06 -05:00
  • d3c1d7a1fd SLH-DSA: update msg docs and empty-message tests per review Arpan Sharma 2026-10-10 00:06:31 -05:00
  • e0806fd809 SLH-DSA: accept (NULL, 0) message in SignWithRandom/SignDeterministic Arpan Sharma 2026-10-03 09:17:48 -05:00
  • e802f848ee Merge pull request #11463 from kareem-wolfssl/gh11454 philljj 2026-10-14 17:09:16 -05:00
  • 8a65208daa RNG SP-800-90* compliance mechanism completion (the balance of the WC_RNG_RBGC_STRATUM_IMMUTABLE campaign): Daniel Pouzzner 2026-10-14 16:12:13 -05:00
  • cabf3bd681 tests/api/test_ossl_x509_pk.c: remove redundant-nested OPENSSL_ALL gates in test_wolfSSL_X509_set_pubkey(). Daniel Pouzzner 2026-10-14 15:36:07 -05:00
  • 1b660b0acf tests/api/test_aes.c: add missing FIPS gate in test_wc_AesXtsStream_CounterOverflow(). Daniel Pouzzner 2026-10-14 15:35:19 -05:00
  • 1789844710 wolfcrypt/test/test.c: add missing !HAVE_FIPS gates to cryptocb_nested_register_test(), cryptocb_pqc_mlkem_encap(), cryptocb_pqc_shake_test(), and cryptocb_test() (FIPS currently intercepts all callbacks, so the expected call counts never increment). Daniel Pouzzner 2026-10-13 16:32:32 -05:00
  • 2b641b3780 wolfssl/wolfcrypt/types.h: fix WC_STATIC_STRUCT_INITIALIZER for C++. Daniel Pouzzner 2026-10-13 16:28:45 -05:00
  • 1d8481d1fb wolfcrypt/src/wc_port.c and wolfssl/wolfcrypt/wc_port.h: * add missing !NO_STDATOMIC_H gate to "Default C Implementation" of atomic operations. * remove WOLFSSL_LINUXKM time() definition (migrated). * fix USE_WINDOWS_API WOLFSSL_ATOMIC_LOAD() to follow the type of its operand (in particular, its signedness). Daniel Pouzzner 2026-10-13 16:28:05 -05:00
  • d96366fab3 wolfcrypt/src/wc_mlkem.c: smallstack coverage in wc_MlKemKey_Decapsulate(). Daniel Pouzzner 2026-10-13 16:26:37 -05:00
  • aa1399a433 wolfcrypt/src/asn.c: in _RsaPrivateKeyDecode(), allow PKCS1v1 for WOLFSSL_LINUXKM to work around pre-6.0 flub in the crypto manager KAT table. Daniel Pouzzner 2026-10-13 16:24:37 -05:00
  • 6951441c04 tests/api/test_session.c: in test_ticket_keys_writer(), add explicit XSLEEP_MS() to force block points, for compatibility with the valgrind default scheduler. Daniel Pouzzner 2026-10-13 16:24:15 -05:00
  • f023a1dc62 linuxkm/lkcapi_rsa_glue.c: move WC_RNG to the heap in linuxkm_test_rsa_driver() and linuxkm_test_pkcs1pad_driver(). Daniel Pouzzner 2026-10-13 16:23:25 -05:00
  • 55fa3a18b1 tests/api.c: add missing NO_TLS gates around test_wolfSSL_X509_CRL_get_REVOKED_after_update(). Daniel Pouzzner 2026-10-10 12:20:06 -05:00
  • 60cbe45eed src/x509.c: in wolfssl_x509_add_ext_key_usage_sk(), add nullness check on obj returned by wolfSSL_sk_value(), to resolve may-be-null warning from cross-mingw-all-crypto. Daniel Pouzzner 2026-10-10 12:19:54 -05:00
  • 90d141825c linuxkm/x86_vector_register_glue.c: fix comment text re WC_C_DYNAMIC_FALLBACK. Daniel Pouzzner 2026-10-09 13:43:37 -05:00
  • 551faa2b0c wolfssl/wolfcrypt/error-crypt.h, wolfcrypt/src/error.c: add STILL_REFERENCED_E "Object is still referenced (unsafe to deallocate)". Daniel Pouzzner 2026-10-09 13:43:14 -05:00
  • 8c1295b88d linuxkm/module_hooks.c, linuxkm/linuxkm_wc_port.h, wolfssl/wolfcrypt/types.h, src/internal.c, src/tls13.c: NMI safety fixes: Daniel Pouzzner 2026-10-09 13:42:46 -05:00
  • 8dc80cc77b wolfssl/wolfcrypt/wc_port.h, wolfssl/wolfcrypt/settings.h: fix/finish support for NO_STDATOMIC_H, set NO_STDATOMIC_H when WOLFSSL_LINUXKM, and fix WOLFSSL_ATOMIC_LOAD() in "Default C Implementation" to work around const-arg-warning C11 atomic_load() (fixed in C17). Daniel Pouzzner 2026-10-09 13:41:33 -05:00
  • f0c65b5945 wolfssl/wolfcrypt/types.h: add WC_STATIC_STRUCT_INITIALIZER, WC_SIZEOFMEMBER(), WC_CAN_BLOCK(), WC_CAN_LONG_LOOP(). Daniel Pouzzner 2026-10-09 13:41:13 -05:00
  • 2a58e4f5d6 wolfcrypt/src/random.c: Daniel Pouzzner 2026-09-29 17:18:03 -05:00
  • c40f5bdd34 wolfcrypt/src/wc_lms_impl.c, wolfcrypt/src/wc_xmss_impl.c, wolfcrypt/src/wc_slhdsa.c: fixes and cleanup for -Wsign-conversion, and a couple garbled comment cleanups. Daniel Pouzzner 2026-09-29 14:37:03 -05:00
  • 0a450234b6 linuxkm/lkcapi_sha_glue.c: clean up 4 benign variable truncations reported by KMSAN. Daniel Pouzzner 2026-09-29 00:01:58 -05:00
  • ebcd652ca8 src/ssl_api_dtls.c, wolfssl/ssl.h: add !NO_TLS gating for wolfSSL_disable_cookie() and wolfSSL_enable_cookie((); Daniel Pouzzner 2026-09-28 21:37:23 -05:00
  • fd95bf37c6 src/internal.c and wolfcrypt/src/pkcs7.c: fixes for fortify-source on gcc-15.3.1_p20260918: Daniel Pouzzner 2026-09-28 19:46:43 -05:00
  • 0c6f105fde add WC_RNG_RBGC_STRATUM_IMMUTABLE: freeze WC_RNG.RBGCStratum at its instantiated value (the genealogical birth stratum); implied by HAVE_FIPS. Daniel Pouzzner 2026-09-28 19:46:10 -05:00