1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-27 04:49:34 +03:00

Commit Graph

  • 79cbfce36d Honor WC_SIG_MIN_HASH_TYPE override in signature decision test Takashi Kojo 2026-07-31 17:02:33 +09:00
  • b844cdcce0 Merge pull request #10421 from kojo1/pha Tobias Frauenschläger 2026-07-31 09:07:29 +02:00
  • 0e691ddeb7 SP ECC: ecc_point - add padding when 16 byte aligned Sean Parkinson 2026-01-09 11:13:06 +10:00
  • c99dafc1f7 Merge pull request #10973 from danielinux/fixes-mcdc-step4 Sean Parkinson 2026-07-31 10:54:57 +10:00
  • ac3c7f4b3f [JA] Add missing Japanese dox_comments for 7 API groups Yosuke Shimizu 2026-07-31 09:09:54 +09:00
  • 718bda3cc8 RISC-V 64-bit: fix gaurd around GCM tables Sean Parkinson 2026-07-31 10:02:10 +10:00
  • 8ec8bd6876 Merge pull request #11015 from SparkiDev/asm_fixes_5 Daniel Pouzzner 2026-07-30 18:20:14 -05:00
  • 4f92fe3e85 Merge pull request #10988 from SparkiDev/mem_zero_fixes_1 David Garske 2026-07-30 15:42:10 -07:00
  • b6a857cbaa feat(rust): add copy() to SHA256 and SHA384 Mark Atwood 2026-06-03 15:33:31 -07:00
  • 643d209dba Merge pull request #10961 from anhu/crl_unknown_ext David Garske 2026-07-30 09:00:23 -07:00
  • 72c4aa5280 additional fix Hideki Miyazaki 2026-07-30 16:25:44 +09:00
  • e9d411ed09 RISC-V 64-bit assembly: AES-GCM decrypt fix Sean Parkinson 2026-07-30 16:50:52 +10:00
  • fcb13ed391 fix f7302 pkcs7 Hideki Miyazaki 2026-07-30 12:31:03 +09:00
  • f79d42eddd ML-KEM assembly: AVX512F and AVX512VBMI. Sean Parkinson 2026-07-23 16:48:14 +10:00
  • f69903778f Merge pull request #11001 from SparkiDev/regression_fixes_28 Daniel Pouzzner 2026-07-29 22:02:19 -05:00
  • 6fb058c8d5 Merge pull request #11008 from SparkiDev/asm_gen_fixes_6 Daniel Pouzzner 2026-07-29 22:00:07 -05:00
  • bbb0743dbd Generated Assembly/SP: regeneration and fixes Sean Parkinson 2026-07-30 10:35:16 +10:00
  • 1106d593fb MemZero: Add more checks of buffers. Sean Parkinson 2026-07-24 11:44:43 +10:00
  • 78b866fb31 wolfssl: expose trusted argument in ed25519/ed448 der export Marco Oliverio 2026-07-15 14:50:31 +02:00
  • e882e1dc74 Merge pull request #10996 from danielinux/falcon-kernel-fixes Daniel Pouzzner 2026-07-29 13:27:42 -05:00
  • 381935a54d aes: do not ignore ECB return value when used in other modes Marco Oliverio 2026-07-28 16:28:53 +02:00
  • 686ab1d857 Validate CRL entry-extension OID encoding before decoding Anthony Hu 2026-07-29 12:05:39 -04:00
  • d1d54e6aa4 Merge pull request #11002 from danielinux/allow-build-wolfevent-with-usersettings David Garske 2026-07-29 08:05:58 -07:00
  • f0c28b84ea autoconf: build wolfevent.c under --enable-usersettings Daniele Lacamera 2026-07-29 00:25:25 +02:00
  • 94014ee5ca rsa: address review - drop XMEMSET, free uninitialized temporaries instead Daniele Lacamera 2026-07-28 18:05:02 +02:00
  • 2e985f46c3 math: guard fp_cnt_lsb/mp_cnt_lsb digit scan Daniele Lacamera 2026-07-22 15:20:53 +02:00
  • 6a6d4b12ac rsa: fix cleanup of mp_int temporaries in probable-prime checks Daniele Lacamera 2026-07-22 15:20:53 +02:00
  • a11d7f449a ascon: handle empty input in wc_AsconAEAD128_DecryptUpdate Daniele Lacamera 2026-07-22 15:20:53 +02:00
  • 119901c227 Regression testing fixes Sean Parkinson 2026-07-29 14:59:47 +10:00
  • d97ca01066 Merge pull request #10925 from kojo1/uitron_malloc Chris Conlon 2026-07-28 17:27:16 -06:00
  • 07f9b11728 Address review: cover add1_chain_cert and fix X509 leak Juliusz Sosinowicz 2026-07-28 13:45:02 +00:00
  • 81a70fa275 Cosmetic - delete trailing whitespace in PR Roy Carter 2026-05-24 13:56:23 +03:00
  • ed9865fa80 Implement a simple test case to check the chain counter increases. Roy Carter 2026-05-22 19:37:13 +03:00
  • 2b506e2526 bugfix - in TLS 1.3 handshake we're dependent on the cert chain cnt in SendTls13Certificate not updating the chain count made TLS 1.3 handshake fail and leave with leaft-only certficiate and then peer rejected the chain Roy Carter 2026-05-22 19:31:44 +03:00
  • 9c5436b853 Merge pull request #10968 from Frauschi/fenrir_tls Sean Parkinson 2026-07-28 11:31:19 +10:00
  • 19c1d07beb Merge pull request #10944 from Frauschi/tls-read-ahead Sean Parkinson 2026-07-28 11:16:21 +10:00
  • 2ac1991aa8 Merge pull request #10987 from philljj/nest_counter Sean Parkinson 2026-07-28 11:15:02 +10:00
  • 9521f89295 Merge pull request #10989 from philljj/sess_free_cb Sean Parkinson 2026-07-28 09:29:55 +10:00
  • 27aaf47284 Merge pull request #10979 from aidangarske/mldsa-signctx-cryptocb-devkey David Garske 2026-07-27 16:28:18 -07:00
  • 495296a739 Merge pull request #10625 from julek-wolfssl/client-custom-ext Sean Parkinson 2026-07-28 09:22:47 +10:00
  • 662b7978fc Falcon: enable SSE2 for the fpr asm object in the LinuxKM build Daniele Lacamera 2026-07-20 20:13:05 +02:00
  • c03d48ea93 Falcon: save/restore vector/FP registers around signing and keygen Daniele Lacamera 2026-07-20 19:48:49 +02:00
  • 8223170d2a Fix from review Eric Blankenhorn 2026-07-27 15:13:50 -05:00
  • f652db1739 Merge pull request #10980 from douzzer/20260720-linuxkm-CMAC-native Tobias Frauenschläger 2026-07-27 16:52:14 +02:00
  • 10e6ffd81b Merge branch 'master' into 20260720-linuxkm-CMAC-native Daniel Pouzzner 2026-07-27 09:24:50 -05:00
  • c78f35725b Merge pull request #10343 from MarkAtwood/feat/sbom-bomsh Sean Parkinson 2026-07-27 21:28:22 +10:00
  • 59c79512e3 benchmark: build and run the wolfCrypt benchmark in Windows ARM64 CI night1rider 2026-07-24 16:42:44 -06:00
  • 8bf29a493d Add SM2 verify hash test with idential points Paul Adelsbach 2026-07-24 15:09:38 -07:00
  • 6325c48030 fixes from AI review: Daniel Pouzzner 2026-07-24 16:38:42 -05:00
  • 3af441de54 linuxkm/linuxkm_wc_port.h: fix raw_spinlock.magic poison strategy in wc_FreeMutex(). Daniel Pouzzner 2026-07-24 10:40:49 -05:00
  • f12cb8c1d0 .github/workflows/codespell.yml: add *.bin to skip list. Daniel Pouzzner 2026-07-24 10:04:49 -05:00
  • 87149fe5a6 linuxkm/: rename enabled_fips to enabled_kernel_fips_enabled, and fix gating on its declaration (add dependency on defined(CONFIG_CRYPTO_FIPS)); use FIPS_NOT_ALLOWED_E rather than NOT_COMPILED_IN to signal FIPS-forbidden keysizes from linuxkm_test_ecdh_nist_driver() and linuxkm_test_ecdsa_nist_driver() to REGISTER_ALG_OPTIONAL(). Daniel Pouzzner 2026-07-24 09:58:01 -05:00
  • c3277317db wolfcrypt/src/aes.c: implement WC_C_DYNAMIC_FALLBACK for AES-NI in wc_AesGcmInit(). Daniel Pouzzner 2026-07-23 19:02:37 -05:00
  • 01a4a393fb wolfcrypt/src/cpuid.c: in cpuid_flag(), refactor out XMEMSET() to fix SEGV from gcc misoptimization. Daniel Pouzzner 2026-07-23 18:24:19 -05:00
  • 1693b08b3e tests/api/test_kdf.c: fix NO_SHA in test_wc_KdfFeatureCoverage(). Daniel Pouzzner 2026-07-23 17:51:51 -05:00
  • 06a567b1db configure.ac: enable SHA512 for fips=lean-aesgcm, to support SHA512 integrity check and DRBG. Daniel Pouzzner 2026-07-23 17:46:30 -05:00
  • 3d46cf4980 wolfcrypt/src/sha{256,512}.c, wolfssl/wolfcrypt/sha{256,512}.h, wolfssl/wolfcrypt/settings.h: Daniel Pouzzner 2026-07-23 17:23:51 -05:00
  • 596a83a33d wolfssl/wolfcrypt/types.h: add wc_static_assert_if_const(). Daniel Pouzzner 2026-07-23 17:01:55 -05:00
  • dd1268eef5 linuxkm/lkcapi_sha_glue.c: refactor HMAC export/import mechanism: * Eliminate pointer from export blob, replacing it with a TFM-specific random cookie and per-desc serial ID. * Fixes kernel address disclosure risk, handle forgery risk, cross-TFM confusion risk, and heap pointer reuse risk. Daniel Pouzzner 2026-07-23 11:47:06 -05:00
  • fcabd0df0b linuxkm/lkcapi_sha_glue.c: add struct km_sha3_state_by_pointer to tighten up SHA-3 allocations, avoiding frivolous struct km_sha_state (with inline wc_Sha512) for SHA-3. Daniel Pouzzner 2026-07-23 11:37:13 -05:00
  • c039151deb linuxkm/: add defined(CONFIG_CRYPTO_FIPS) condition to a couple macro conjunctions to fix constant-folding-provoked compiler warnings around fips_enabled; Daniel Pouzzner 2026-07-23 08:29:17 -05:00
  • 142109db24 test/: * fixes for NO_DH; * fixes in test_wc_ed448_import_public() and test_wc_Ed448DecisionCoverage() for FIPS v6; * fixes in tests/api/test_sha3.c for KMAC keysize in FIPS builds. Daniel Pouzzner 2026-07-22 22:32:12 -05:00
  • 1a7bc938ab linuxkm/lkcapi_sha_glue.c: fix export/import for HMAC: * add to struct km_sha_hmac_pstate members desc_list_lock, desc_list, export_list, and export_list_len; * add struct km_sha_hmac_export_state; * add km_hmac_alloc_tstate(), km_hmac_export(), km_hmac_import(), km_hmac_test_export_import(); * and update km_hmac_*() and WC_LINUXKM_HMAC_IMPLEMENT(() to implement. Daniel Pouzzner 2026-07-22 17:48:59 -05:00
  • e57c56c0f9 linuxkm/lkcapi_sha_glue.c: add struct km_sha3_export_state, and implement km_sha3_export() and per-alg _import() methods, and km_sha3_test_export_import(). Daniel Pouzzner 2026-07-22 14:58:01 -05:00
  • fc220b75c1 linuxkm/lkcapi_sha_glue.c: refactor SHA-3 state around struct km_Sha3TfmCtx, adding km_sha3_init_tfm(), km_sha3_exit_tfm(), km_sha3_alloc_tstate(), and km_sha3_free_tstate(), implementing garbage collection of abandoned shash_desc objects at .exit_tfm. Daniel Pouzzner 2026-07-22 11:25:40 -05:00
  • 969cd9de5d linuxkm/linuxkm_wc_port.h, linuxkm/module_hooks.c: implement magic checks on kernel struct wolfSSL_Mutex in WOLFSSL_LINUXKM_VERBOSE_DEBUG builds. Daniel Pouzzner 2026-07-22 11:17:42 -05:00
  • dc16169cd3 linuxkm/lkcapi_sha_glue.c: fix sha.W lifecycle management to prevent leaks: Daniel Pouzzner 2026-07-22 09:51:20 -05:00
  • 51c5df3a25 linuxkm/lkcapi_aes_glue.c, linuxkm/lkcapi_glue.c, configure.ac: implement linuxkm cmac(aes) glue. Daniel Pouzzner 2026-07-21 10:03:14 -05:00
  • d4533b63ae Fix tests Eric Blankenhorn 2026-07-24 15:11:13 -05:00
  • acff4d62a1 Merge pull request #10883 from night1rider/Extend-ECIES JacobBarthelmeh 2026-07-24 14:02:32 -06:00
  • a192af8ff9 CI: set ccache path so settings are saved on initial seed Paul Adelsbach 2026-07-24 11:56:31 -07:00
  • 73f1a7b665 More tests Anthony Hu 2026-07-24 14:34:17 -04:00
  • 3f0bb4e97b Invoke poll callback with the resolved device id Juliusz Sosinowicz 2026-07-24 17:10:47 +00:00
  • 13839801d7 Fix tests Eric Blankenhorn 2026-07-24 11:50:57 -05:00
  • f225589bd6 Route wc_CryptoCb_Poll through the device-find remapping Juliusz Sosinowicz 2026-07-24 16:50:45 +00:00
  • 3062dea0b6 Use the existing KEY32 macro and a named fake overhead constant in the new ECIES tests night1rider 2026-07-24 10:21:20 -06:00
  • 09444c84f6 Address ECIES review feedback: reuse aes.h GCM size constants, factor output size into ecc_ecies_total_size helper, gate the AES-GCM ctx default on a usable IV mode, and name the benchmark ECIES desc buffer size night1rider 2026-07-24 10:21:20 -06:00
  • 97ab34c41a Fix ECIES clang-tidy dead-store and whitelist WOLFSSL_ECIES_STATIC_GCM_NONCE night1rider 2026-07-20 11:28:46 -06:00
  • 5460180f9b Small fix to address wrong assignment night1rider 2026-07-13 09:49:43 -06:00
  • e04b8c74da Enforce the ECIES single-use REQ/RESP state on the hardware CryptoCb path so a device that services encrypt/decrypt without a software fallback cannot reuse the ctx. Add a testwolfcrypt case that services ECIES entirely in the callback and checks a second op on the same ctx is rejected with BAD_STATE_E. night1rider 2026-07-11 23:05:24 -06:00
  • a89ba18e7d Fix the ECIES DEM devId threading to compile where ecc_key has no devId field by reading it into a guarded local (PLUTON_CRYPTO_ECC/WOLF_CRYPTO_CB) that defaults to INVALID_DEVID night1rider 2026-07-10 19:01:15 -06:00
  • c00e7260be Add AES-GCM DEM, CryptoCb support, and devId threading to ECIES night1rider 2026-07-10 16:57:24 -06:00
  • aab3257de8 Add compile-time crypto callback async poll for record ciphers Juliusz Sosinowicz 2026-07-24 16:14:35 +00:00
  • be7a0aff11 Fix dtls test Eric Blankenhorn 2026-07-24 10:50:16 -05:00
  • f60002d137 Add TLS receive read-ahead support Tobias Frauenschläger 2026-06-19 08:34:30 +02:00
  • be9963f392 sbom: drop liboqs dependency support (removed from wolfSSL) Mark Atwood 2026-07-23 22:32:50 -07:00
  • c6a336f75f scripts/sbom.am: add SBOM_OPTIONS_H override to unify the fragment Sameeh Jubran 2026-07-16 15:29:47 +03:00
  • 136bfa97ab fix spelling Sameeh Jubran 2026-07-14 15:28:19 +03:00
  • d08282ff9a sbom: use docdir, portable version parse, and widen CI filter Sameeh Jubran 2026-07-14 13:26:48 +03:00
  • 4c0f6acb66 scripts: add canonical shared sbom.am fragment Sameeh Jubran 2026-07-13 18:17:13 +03:00
  • 5ab0ad9fab sbom: address advisory/SBOM review findings Sameeh Jubran 2026-07-13 15:18:47 +03:00
  • 2368fd0eac sbom: add --dep-openssl for OpenSSL-compat products Sameeh Jubran 2026-07-09 12:29:04 +03:00
  • 64b4e441d0 gen-sbom: detect GPLv3 abbreviation and support downstream products Sameeh Jubran 2026-07-08 15:07:18 +03:00
  • 4ec80d309a feat: SBOM generation and OmniBOR build provenance (CRA compliance) Sameeh Jubran 2026-06-30 14:13:57 +03:00
  • f5ace71dd3 Merge pull request #10982 from julek-wolfssl/dtls-clear-tx-cursor-on-free Sean Parkinson 2026-07-24 13:24:52 +10:00
  • 74803cea6e tls13: set sess_free_cb to null after calling. jordan 2026-07-23 22:11:02 -05:00
  • df73fa1b60 ssl_api_cert: remove dead sk null check. jordan 2026-07-23 21:50:13 -05:00
  • 35d749da72 Merge pull request #10977 from padelsbach/no-trackmemory-and-staticmemory Sean Parkinson 2026-07-24 11:06:47 +10:00
  • e23054ca9e Merge pull request #10931 from julek-wolfssl/socat-ci-hang-fix Sean Parkinson 2026-07-24 10:45:20 +10:00
  • 00c9405c24 Merge pull request #10969 from Frauschi/ci_flakyness_fixes Sean Parkinson 2026-07-24 10:41:54 +10:00