1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-25 16:16:38 +03:00

Commit Graph

  • fe71d61f42 tests: add asn DecodedCert and pkcs7 decode white-boxes Daniele Lacamera 2026-08-03 14:51:32 +02:00
  • 301019201e tests: repair two interrupted asn white-boxes Daniele Lacamera 2026-08-03 14:17:56 +02:00
  • 3fa230794d tests: add asn and pkcs7 white-boxes Daniele Lacamera 2026-08-03 13:37:23 +02:00
  • b4942e9ebe tests: add wc_port white-box for wolfSSL_strnstr Daniele Lacamera 2026-08-03 12:41:33 +02:00
  • ef430a98d1 tests: give the deterministic ocsp tests a group Daniele Lacamera 2026-08-03 12:13:53 +02:00
  • 2c8fcab985 tests: add asn and pkcs12 white-box tests Daniele Lacamera 2026-08-03 11:54:53 +02:00
  • a914dd24d9 tests: expand ecc and rsa white-box coverage Daniele Lacamera 2026-08-03 11:43:08 +02:00
  • a123863e92 tests: add she DecisionCoverage case Daniele Lacamera 2026-08-03 11:42:56 +02:00
  • 65ffd32f4c tests: add pkcs12 container DecisionCoverage case Daniele Lacamera 2026-08-03 11:32:54 +02:00
  • 9ddb7ff5e0 tests: add compress group for compress.c MC/DC Daniele Lacamera 2026-08-03 11:16:09 +02:00
  • 28f4440dd0 tests: add port group for wc_port.c MC/DC Daniele Lacamera 2026-08-03 10:34:09 +02:00
  • f5f3dd4c6e Support post-quantum-only (ML-KEM + ML-DSA/SLH-DSA) TLS 1.3 builds Tobias Frauenschläger 2026-07-09 14:42:31 +02:00
  • 16cc1f28bb Resume the TLS 1.3 certificate chain send after a WANT_WRITE Tobias Frauenschläger 2026-08-05 14:05:55 +02:00
  • b1e01d6d64 Fix PKCS12 PBKDF mp variant buffer size to include password block Tobias Frauenschläger 2026-08-05 17:25:42 +02:00
  • d4755b4b62 Fix EVP_DecodeUpdate overflow on NUL byte in base64 input Tobias Frauenschläger 2026-08-05 17:18:22 +02:00
  • fa2faecdf9 Bound Renesas crypt callback context slot allocation Tobias Frauenschläger 2026-08-05 17:12:39 +02:00
  • af0eb33fff Invalidate LMS key when private key write fails Tobias Frauenschläger 2026-08-05 17:07:04 +02:00
  • be59d5af49 Wait for NETOS thread to finish before freeing its stack Tobias Frauenschläger 2026-08-05 16:52:58 +02:00
  • 9533a8182a Fix RSA_W_ENC verify guard in signature wrapper Tobias Frauenschläger 2026-08-05 16:42:37 +02:00
  • f9038b7809 Documentation and embedded user_settings.h. Sean Parkinson 2026-08-06 10:54:18 +10:00
  • e260a8e103 Merge pull request #11103 from douzzer/20260806-linuxkm-DEBUG_VECTOR_REGISTER_ACCESS_ALWAYS_foo David Garske 2026-08-06 21:41:49 -07:00
  • 7d2b92ab5b Merge pull request #11022 from SparkiDev/ssl_c_split_cleanup_1 David Garske 2026-08-06 21:36:42 -07:00
  • 80d2969348 Merge pull request #11098 from Frauschi/script_fix David Garske 2026-08-06 18:31:03 -07:00
  • b7dd5bb06e Peer review fixes David Garske 2026-08-05 15:28:18 -07:00
  • 1d264ccc5f mlkem: mask WOLFSSL_MLKEM_SMALL compress_10 pack with WC_OCTET for CHAR_BIT != 8 David Garske 2026-07-23 16:35:06 -07:00
  • e2a9f72b01 sp: use CHAR_BIT not 8 in sp_*_from_mp constant-time mask for CHAR_BIT != 8 (fixes C28x ECC/RSA/DH) David Garske 2026-07-21 13:26:06 -07:00
  • f067cd88a2 types/ci: scope 16-bit word64 to WIDE_BYTE and add portable split-64 Keccak host test David Garske 2026-07-09 12:34:36 -07:00
  • 8d34ef4bde test: guard ecc_test DER key export/import helpers behind !NO_ASN David Garske 2026-07-08 16:58:05 -07:00
  • 4f2fd9c23c test/benchmark/ci: CHAR_BIT != 8 test vectors, NO_MALLOC benchmark, TI C2000 compile CI and docs David Garske 2026-06-25 11:26:17 -07:00
  • f9e34083f5 ecc/25519/448/sp: octet-correct X25519/Ed25519/X448/Ed448 and SP byte<->mp conversion for CHAR_BIT != 8 David Garske 2026-06-25 11:26:17 -07:00
  • e44b63fc52 mldsa/mlkem: correct ML-DSA and ML-KEM on CHAR_BIT != 8; add WOLFSSL_MLDSA_VERIFY_SMALLEST_MEM David Garske 2026-06-25 11:26:17 -07:00
  • a326618937 aes/chacha: octet-correct block, key, keystream and XTS-tweak I/O for CHAR_BIT != 8 David Garske 2026-06-25 11:26:17 -07:00
  • 5371237eb8 sha: octet-correct SHA-1/SHA-2 byte I/O and 32-bit split Keccak permutation for CHAR_BIT != 8 David Garske 2026-06-25 11:26:17 -07:00
  • b6be0c878d wolfcrypt: add WOLFSSL_WIDE_BYTE support for CHAR_BIT != 8 targets (TI C2000 C28x) - core types, misc octet helpers, base64, DRBG David Garske 2026-06-25 11:26:17 -07:00
  • 5a1cd9fc3e ssl.c split: cleanup Sean Parkinson 2026-07-31 07:06:42 +10:00
  • ee1190cc8c linuxkm/linuxkm_wc_port.h, linuxkm/x86_vector_register_glue.c, wolfcrypt/test/test.c: implement DEBUG_VECTOR_REGISTER_ACCESS_ALWAYS_{ON,OFF}, to allow forcing of asm and C paths for kernel module testing. Daniel Pouzzner 2026-08-06 18:20:30 -05:00
  • f79cb90071 Do not free caller's EVP_PKEY until d2i has a replacement Takashi Kojo 2026-08-07 07:18:12 +09:00
  • 7635f3ab9d Match alloc/free pairs and keep pkey_sz bounded by allocation Takashi Kojo 2026-08-07 07:10:00 +09:00
  • 87c848d780 Use clearEVPPkeyKeys for d2i EVP_PKEY reuse cleanup Takashi Kojo 2026-08-07 07:02:55 +09:00
  • 25946c854e Keep the full PKCS#8 wrapper for ML-DSA Takashi Kojo 2026-08-07 06:47:31 +09:00
  • b302e50b9d Replace the macro with a small static helper Takashi Kojo 2026-08-06 17:15:32 +09:00
  • 941bc9ce40 Move the description Takashi Kojo 2026-08-06 17:09:53 +09:00
  • 26ec360efb Cross-check cached mldsaOID against decoded signing key Takashi Kojo 2026-08-06 17:08:14 +09:00
  • 25031722ca Use MLDSA_MAX_PUB_KEY_DER_SIZE for SPKI buffers Takashi Kojo 2026-08-06 17:01:55 +09:00
  • 0f24bac7ab Use d2i_PUBKEY in Ed25519 reuse regression test Takashi Kojo 2026-08-05 15:41:50 +09:00
  • e63172051d Move multi-KB test buffers from stack to heap Takashi Kojo 2026-08-05 14:31:48 +09:00
  • 3d8b6f8701 Use explicit prePopulated flag in Ed25519/Ed448 d2i helpers Takashi Kojo 2026-08-05 14:27:10 +09:00
  • 4749f702fc Cover X25519/X448/HKDF/CMAC in d2i_free_prev_key_obj Takashi Kojo 2026-08-05 14:22:01 +09:00
  • 5340dc1f09 Fix error code check Takashi Kojo 2026-08-02 06:06:05 +09:00
  • c458945037 Note deliberate md tolerance for ML-DSA X509 signing Takashi Kojo 2026-08-01 07:02:11 +09:00
  • 5168c0cb8a Zeroize pkey.ptr before freeing EVP_PKEY key data Takashi Kojo 2026-08-01 06:58:21 +09:00
  • ef66a270ae Do not store failed sigType lookup in sigOID Takashi Kojo 2026-08-01 06:54:57 +09:00
  • b9ed467425 Free previous algorithm object when d2i repurposes an EVP_PKEY Takashi Kojo 2026-08-01 06:45:21 +09:00
  • cc419553e2 Reset XFILE handle after every close in ML-DSA tests Takashi Kojo 2026-08-01 06:32:01 +09:00
  • 522df01c29 Guard ML-DSA key/RNG cleanup in tests against Expect short-circuit Takashi Kojo 2026-08-01 06:15:44 +09:00
  • 728e41791c Test X509_set_pubkey with seed and private-only ML-DSA keys Takashi Kojo 2026-08-01 05:59:01 +09:00
  • 60c92c1acb Use canonical ML-DSA names in new X509/EVP code Takashi Kojo 2026-07-31 16:40:35 +09:00
  • 61961785c1 Derive WC_MAX_X509_GEN_MLDSA from WC_MAX_X509_GEN Takashi Kojo 2026-07-31 16:31:06 +09:00
  • f0f4d3a6da Consistency cleanups in new ML-DSA X509 code Takashi Kojo 2026-07-30 17:55:25 +09:00
  • 8f0f2eb229 Use mldsa_get_oid_sum for draft-aware OID in X509 signing Takashi Kojo 2026-07-30 17:28:59 +09:00
  • 977ed7f1c4 Extend ML-DSA compat test coverage to all levels and untested paths Takashi Kojo 2026-07-30 16:38:15 +09:00
  • 997cfdaeb2 PKCS#8 algId check and DER-only typed d2i for ML-DSA Takashi Kojo 2026-07-30 16:30:54 +09:00
  • 69749e8f99 Reset MlDsaKey between decode attempts in X509_set_pubkey Takashi Kojo 2026-07-30 16:20:47 +09:00
  • 1fda7341d3 Single gate for ML-DSA X509 signing capability Takashi Kojo 2026-07-30 16:14:29 +09:00
  • 9f1dfdb65b Allow NULL md for ML-DSA X509 signing, add test Takashi Kojo 2026-07-30 15:13:22 +09:00
  • ca4986e2bd Size X509 gen buffer from subject public key too Takashi Kojo 2026-07-30 15:02:30 +09:00
  • da4f1b0236 Explicit prePopulated flag for d2iTryMlDsaKey Takashi Kojo 2026-07-30 09:32:34 +09:00
  • 19cec7fe89 Dynamic buff size based on expected cert size Takashi Kojo 2026-07-25 06:44:54 +09:00
  • 82d29aa619 PRIVATE_KEY_UNLOCK to X509 sign/set_pubkey Takashi Kojo 2026-07-25 06:35:29 +09:00
  • e9ca064696 Add ML-DSA test coverage for X509_REQ_sign Takashi Kojo 2026-07-25 06:19:29 +09:00
  • 52766c5b69 OpenSSL compat with ML-DSA Takashi Kojo 2026-07-22 06:27:54 +09:00
  • 65836b4069 Merge pull request #11061 from Frauschi/fix-cert-evp-buffer-overruns David Garske 2026-08-06 15:29:00 -07:00
  • 30bcbd99f7 Fixes from review Eric Blankenhorn 2026-08-06 16:18:35 -05:00
  • 950fe9a3f7 Merge pull request #11048 from yosuke-wolfssl/fix/f_7543 David Garske 2026-08-06 14:16:24 -07:00
  • 63dc0dc827 Reset stale key metadata when d2i reuses an EVP_PKEY Tobias Frauenschläger 2026-08-06 10:12:09 +02:00
  • 009ded5b83 Tighten EC key ownership on the EVP_PKEY Tobias Frauenschläger 2026-08-05 14:59:32 +02:00
  • e266d46e14 Release the previous DH key in EVP_PKEY_keygen Tobias Frauenschläger 2026-08-05 14:58:57 +02:00
  • 5d2188f958 CI: build the cert sign callback path Tobias Frauenschläger 2026-08-05 12:05:57 +02:00
  • ecabfeb301 Fix buffer overrun in the NO_REALLOC EVP_PKEY populate paths Tobias Frauenschläger 2026-08-03 12:41:11 +02:00
  • 4a71db7bef Merge pull request #10918 from MarkAtwood/fix/mldsa-gamma1-19-shift-ub David Garske 2026-08-06 12:11:43 -07:00
  • 9b6b8b1bc2 Merge pull request #10425 from MarkAtwood/feat/rust-sha-copy David Garske 2026-08-06 11:43:47 -07:00
  • 073d4e23fb Merge pull request #11025 from aidankeefe2022/test-fix-for-md5-and-sha-enabled David Garske 2026-08-06 11:43:06 -07:00
  • 38c51ca509 Merge pull request #11058 from yosuke-wolfssl/fix/f_7544 David Garske 2026-08-06 11:42:21 -07:00
  • 92c1b93deb Merge pull request #10917 from MarkAtwood/fix/slhdsa-base2b-shift-ub David Garske 2026-08-06 11:41:50 -07:00
  • 54844b4ae7 Merge pull request #10919 from MarkAtwood/fix/mldsa-slow-red-shift-ub David Garske 2026-08-06 11:40:58 -07:00
  • 9597255499 Document that raw ECC import does not validate Mark Atwood 2026-08-06 11:34:06 -07:00
  • 42bd8e29b4 review changes Aidan Keefe 2026-08-06 11:24:21 -06:00
  • 9a788724d7 Fix CI flakes from ccache saturation and stale schedule estimates Tobias Frauenschläger 2026-08-06 18:54:36 +02:00
  • 42c234ecd2 Parse x500UniqueIdentifier (OID 2.5.4.45) in certificate DN Eric Blankenhorn 2026-07-15 15:48:41 -05:00
  • db34722206 Merge pull request #11091 from Frauschi/script_fix Daniel Pouzzner 2026-08-06 10:27:58 -05:00
  • eff6450239 Fix mem-fail nightly crashes (jenkins-supervisor #501) Sameeh Jubran 2026-08-06 11:15:24 +03:00
  • f3a5d0d973 dtls13: epoch mangament improvement and bug fixes Marco Oliverio 2026-07-29 16:57:53 +02:00
  • 1f36572941 Reset the ready-file wait counter on each server start Tobias Frauenschläger 2026-08-06 10:52:58 +02:00
  • 0d587cd002 Restore WOLF_CRYPTO_EX_INDEX_BIO Takashi Kojo 2026-08-06 15:52:04 +09:00
  • 88bd09d1c4 Keep EVP_PKEY pkey_sz in step with pkey.ptr in PopulateRSAEvpPkeyDer Tobias Frauenschläger 2026-08-03 12:33:54 +02:00
  • ea911b8c9b Fix buffer overrun in EVP_PKEY_keygen on a populated EVP_PKEY Tobias Frauenschläger 2026-08-03 12:29:13 +02:00
  • 757f866fd8 Fix buffer overrun in SignCert when sizing the signature wrapper Tobias Frauenschläger 2026-08-03 12:22:35 +02:00
  • eab70a1e88 Merge pull request #11031 from douzzer/20260727-fips-dev-no-post Tobias Frauenschläger 2026-08-06 08:47:10 +02:00
  • 7e946b8c01 Use a static counter for BIO type indexes in BIO_get_new_index Takashi Kojo 2026-08-06 14:53:42 +09:00
  • e941761ace Merge pull request #11060 from Frauschi/async_pha David Garske 2026-08-05 21:32:17 -07:00