1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-27 04:49:34 +03:00

Commit Graph

  • cee82eb3bb TFM bounds checks for safety Sean Parkinson 2026-07-22 08:42:00 +10:00
  • 961ae19984 ssl.c: Move code out and some fixes Sean Parkinson 2026-07-16 15:34:14 +10:00
  • f18ebef1c2 Merge pull request #10959 from lealem47/WC_FIPS_NOT_APPROVED Sean Parkinson 2026-07-22 17:07:31 +10:00
  • 3330bdc778 se050: test rsa encrypt/decrypt with SE050_KEY_ID_ONLY Marco Oliverio 2026-07-08 15:42:34 +02:00
  • 57d42ccb61 se050: implement dynamic hw/sw offload Marco Oliverio 2026-06-30 09:37:55 +02:00
  • 9548753bb3 Remove embedding of macros within a function call Lealem Amedie 2026-07-21 18:40:13 -06:00
  • 27657088e7 Unify alert sent when HRR does not contain supported_versions to missing_extension. Run truncated extensions check in DoTls13ServerHello regardless of downgrade flag state. Kareem 2026-07-21 16:54:23 -07:00
  • 459905e1ab Also handle alerts for alternate DoTls13ServerHello call path. Fix incorrect illegal_parameter alert for missing supported_versions. This is a missing extension rather than an extra/unexpected extension. Kareem 2026-07-16 17:00:40 -07:00
  • cf2cf75e62 Avoid sending duplicate protocol_version alert in DoTls13ServerHello. DoTls13ServerHello was explicitly sending a protocol_version alert, then returning VERSION_ERROR which TranslateErrorToAlert then mapped to protocol_version, causing a duplicate alert to be sent. Remove all protocol_version alerts from DoTls13ServerHello itself and instead return VERSION_ERROR and allow TranslateErrorToAlert to handle sending the alerts. Fixes #10746. Kareem 2026-06-29 16:54:53 -07:00
  • f7bac47a74 Send missing_extension alert when the server does not include supported_versions in HelloRetryRequest for TLS 1.3. Partially fixes #10746. Kareem 2026-06-29 16:53:28 -07:00
  • c4d1586d00 XMALLOC_OVERRIDE for uITRON4 Takashi Kojo 2026-07-16 14:04:56 +09:00
  • 7b7ce703c7 .wolfssl_known_macro_extras: restore C lexical sort order for fipsCastStatus_get and wc_Des3_SetKey. night1rider 2026-07-21 12:33:58 -06:00
  • 527154dc85 Testing: AES GCM opps with IV < 96-bits now returns WC_FIPS_NOT_APPROVED with FIPS Lealem Amedie 2026-07-21 13:59:57 -06:00
  • 6b0c832284 Route wc_MlDsaKey_SignCtx through crypto callback before prvKeySet check for device keys aidan garske 2026-07-21 12:32:05 -07:00
  • 1239170c02 Add WOLFSSL_BUILD_MSG_NO_ZERO_COPY to known macros Juliusz Sosinowicz 2026-07-14 13:25:26 +00:00
  • bc6c652673 Zero-copy encrypt of AEAD application data Juliusz Sosinowicz 2026-07-14 10:08:29 +00:00
  • 33f37b9836 initialize uninitialized variables in tests Ruby Martin 2026-07-15 10:53:13 -06:00
  • 568bfe4299 limit extLen to MAX_RECORD_SIZE Ruby Martin 2026-07-14 11:27:53 -06:00
  • 43b273dd68 Remove dead check Ruby Martin 2026-07-14 10:43:58 -06:00
  • 94e157f5ad Direct compare paramTo->check_time == 11 to prevent store_truncates_time_t Ruby Martin 2026-07-13 13:08:18 -06:00
  • 97699a7c57 clear dereference before null check in myCryptoDevCb() Ruby Martin 2026-07-10 10:56:31 -06:00
  • 4a7695ef13 Merge pull request #10928 from Frauschi/pkcs7_fix philljj 2026-07-21 09:46:57 -05:00
  • a048395345 Merge pull request #10941 from Frauschi/rfc_compliance Sean Parkinson 2026-07-21 16:19:33 +10:00
  • 425d8f8c2e Merge pull request #10943 from Frauschi/crl_pqc Sean Parkinson 2026-07-21 15:57:06 +10:00
  • 104f685ca9 Merge pull request #10948 from SparkiDev/ed25519_fixes_2 philljj 2026-07-20 21:54:32 -05:00
  • 69eb81a76e Merge pull request #10936 from aidangarske/fix-tls13-ctx-status-request Sean Parkinson 2026-07-21 10:13:26 +10:00
  • ca53afe35d Merge pull request #10785 from stenslae/ml-dsa-ssl-error-queue-fix Sean Parkinson 2026-07-21 10:08:11 +10:00
  • 66f6f7c451 Xilinx Versal Gen2 ASU port: TRNG, hashes, HMAC offload night1rider 2026-06-23 14:07:39 -06:00
  • bd6388c0b6 Merge pull request #10951 from Frauschi/fix-dist-argmax Daniel Pouzzner 2026-07-20 17:06:10 -05:00
  • 69a994e62b Merge pull request #10945 from ejohnstown/ocsp-fail Daniel Pouzzner 2026-07-20 16:42:04 -05:00
  • dc491c4c4b Fall back to the exported EC point for PKCS11 verify when label or ID lookup finds none aidan garske 2026-07-20 13:35:39 -07:00
  • 6d03f8a493 Fix from review Eric Blankenhorn 2026-07-20 15:52:40 -05:00
  • 39a607384c Merge pull request #10920 from douzzer/20260713-WC_FIPS_AESGCM_ONE_SHOT_EXT_IV_ALLOWED-etc JacobBarthelmeh 2026-07-20 13:27:24 -06:00
  • 91ca43f1ac Bound CKS extension allocation in TLSX_CKS_Parse Eric Blankenhorn 2026-07-20 14:19:37 -05:00
  • ec73081c7e Fix off-by-one OOB NUL write in GetCertName (classic ASN parser) Eric Blankenhorn 2026-07-20 12:38:34 -05:00
  • f62aa55284 Check ctx extensions before rejecting a TLS1.3 certificate message extension aidan garske 2026-07-16 13:30:16 -07:00
  • e19a1a4dc4 Merge pull request #10912 from danielinux/mcdc-test-coverage JacobBarthelmeh 2026-07-20 10:10:39 -06:00
  • 3f9bc8c775 linuxkm/Makefile: fix module-update-fips-hash recipe to allow SHA512 verifyCore. Daniel Pouzzner 2026-07-20 11:09:27 -05:00
  • 6fcfadfee2 configure.ac: more FIPS v7/ready/dev DH purging: omit HAVE_FFDHE_* too. Daniel Pouzzner 2026-07-19 14:45:23 -05:00
  • f79b203745 wolfcrypt/src/sha3.c, wolfssl/wolfcrypt/sha3.h, wolfssl/wolfcrypt/error-crypt.h, wolfcrypt/src/error.c: Daniel Pouzzner 2026-07-19 13:41:47 -05:00
  • ef070bf564 linuxkm/linuxkm-fips-hash-wrapper.sh: fix dependency on SHA-2 coreKey. Daniel Pouzzner 2026-07-18 16:17:48 -05:00
  • b4a9326842 configure.ac: fix DH dependencies for FIPS v7 (implicit --disable-dh). Daniel Pouzzner 2026-07-18 16:15:58 -05:00
  • 755220792e wolfcrypt/src/kdf.c, wolfssl/wolfcrypt/kdf.h: use "hash_type", not "hash", for the hash type in wc_PRF_fips(), for clarity and consistency. Daniel Pouzzner 2026-07-18 13:50:00 -05:00
  • d494864965 wolfssl/wolfcrypt/settings.h: add assert that WC_FIPS_AESGCM_ONE_SHOT_EXT_IV_ALLOWED isn't defined in old FIPS builds. Daniel Pouzzner 2026-07-18 11:30:04 -05:00
  • 7897c335e0 configure.ac: don't include CShake or KMAC in enable-all-crypto when building FIPS < v7. Daniel Pouzzner 2026-07-18 11:24:04 -05:00
  • a7511940ff wolfssl/wolfcrypt/wc_compat.h: in non-streaming wc_AesGcmEncrypt_compat_shim(), restore aes->reg to the supplied IV after wc_AesGcmEncrypt_ex() increments it, supporting the EVP access pattern. Daniel Pouzzner 2026-07-15 22:31:54 -05:00
  • 09bcd2f391 wolfssl/wolfcrypt/wc_compat.h: FIPS v2 compatibility. Daniel Pouzzner 2026-07-15 20:27:12 -05:00
  • 00368d1cc4 wolfssl/wolfcrypt/error-crypt.h: #include <wolfssl/wolfcrypt/wc_port.h> where previously #include <wolfssl/wolfcrypt/types.h>, to retain standalone compilability without provoking circular dependencies via wc_compat.h. Daniel Pouzzner 2026-07-15 15:45:53 -05:00
  • b4095f0578 wolfcrypt/src/ed25519.c: whitespace fix (from AI review). Daniel Pouzzner 2026-07-15 13:27:14 -05:00
  • 08b5b65c26 configure.ac: add --enable-all-quantum-crypto "Enable all quantum-resistant asymmetric algorithms (default: disabled)". Daniel Pouzzner 2026-07-15 10:10:23 -05:00
  • 3db433a31a wolfcrypt/src/ed25519.c, tests/api/test_ed25519.c: * add missing null key checks to wc_ed25519_verify_msg_init(), wc_ed25519_verify_msg_update(), and wc_ed25519_verify_msg_final(). * add WC_ARG_NOT_NULL() attributes to args of static functions as appropriate. * add FIPS >v6 gates to new null key tests and a new invalid hash size test in test_wc_ed25519_sign_verify_ctx_ph() and test_wc_ed25519_verify_streaming(). Daniel Pouzzner 2026-07-15 10:09:54 -05:00
  • 2628676b28 wolfssl/wolfcrypt/wc_compat.h, wolfssl/wolfcrypt/fips_test.h, .wolfssl_known_macro_extras: * also inhibit recursive evaluation midway through random.h, fips.h, and fips_test.h (circular dependencies). * add WC_FIPS_ENUM_CAST_ID_DEFINED to allow detection of fips_test.h incomplete evaluation. Daniel Pouzzner 2026-07-15 10:09:31 -05:00
  • 6f1e5a93d4 wolfcrypt/src/aes.c: revert atomic refactor of checkedAESNI, haveAESNI, and intel_flags (3f3ebcac58 / #10871) to avoid frivolous atomic access overhead. Also use regular int, not cpuid_flags_atomic_t, for cpuid_flags in the WOLFSSL_ARMASM path, and similarly use a regular int for aes_ppc64_use_crypto in the WOLFSSL_PPC64_ASM_CRYPTO path. Daniel Pouzzner 2026-07-14 17:19:52 -05:00
  • 9b30443288 linuxkm/lkcapi_aes_glue.c: in the inner streaming loops for AES-GCM and AES-XTS (AesGcmCrypt_1(), km_AesXtsEncrypt(), and km_AesXtsDecrypt()), bypass FIPS wrappers to avoid frivolous overhead, with decisive check after looping by the Final function. Daniel Pouzzner 2026-07-14 17:19:38 -05:00
  • 40623dada0 Implement FIPS shimming for wc_AesGcmEncrypt(): Daniel Pouzzner 2026-07-14 17:19:13 -05:00
  • 29506d2cac build: distribute IDE project trees per-directory to fix "make dist" Tobias Frauenschläger 2026-07-20 16:22:51 +02:00
  • 4c7cbf5c15 Cleanup curve25519 checking in settings.h Paul Adelsbach 2026-07-20 07:34:41 -07:00
  • 5012d1d6e7 check-source-text: whitelist WOLFSSL_OCSP_SCREEN_RESPONDER Tobias Frauenschläger 2026-07-20 12:55:47 +02:00
  • 7b5970b9b5 Merge pull request #10898 from danielinux/sp-from-mp-const-time Sean Parkinson 2026-07-20 23:06:41 +10:00
  • 6cc88fff85 add WOLFSSL_OCSP_SCREEN_RESPONDER to known macros Marco Oliverio 2026-07-20 13:17:08 +02:00
  • c30e8d6116 Add post-quantum and EdDSA CRL signing via wc_SignCRL_ex2 Tobias Frauenschläger 2026-07-17 16:27:59 +02:00
  • 503b51f663 check-source-text: whitelist WOLFSSL_OCSP_SCREEN_RESPONDER Tobias Frauenschläger 2026-07-20 12:55:47 +02:00
  • 028a407f1e dtls13: add check over handshake message length Marco Oliverio 2026-06-24 19:31:42 +02:00
  • 07353cc6e8 Ed25519 tests: Fix to pass regression testing Sean Parkinson 2026-07-20 10:46:55 +10:00
  • 5dd7717d11 Merge pull request #10933 from holtrop-wolfssl/f-6445 philljj 2026-07-19 11:04:41 -05:00
  • c1ee61c8d1 Merge pull request #10888 from SparkiDev/kmac_cshake JacobBarthelmeh 2026-07-17 16:49:25 -06:00
  • f46a48c35d benchmark: build the AArch64 cycle counter under MSVC/ARM64 night1rider 2026-07-17 15:57:51 -06:00
  • 25b5636c30 Merge pull request #10808 from aidankeefe2022/fenrir-fixes-jun29-ak JacobBarthelmeh 2026-07-17 15:49:14 -06:00
  • d65b9ebf68 Merge pull request #10723 from ejohnstown/ocsp-fix JacobBarthelmeh 2026-07-17 14:45:18 -06:00
  • 98f4d6f955 Merge pull request #10721 from JacobBarthelmeh/dev_2 philljj 2026-07-17 15:34:35 -05:00
  • ae0bac50c9 OCSP: opt-in fail-closed on missing responder John Safranek 2026-07-16 17:42:31 -07:00
  • 6f087a502e OCSP: opt-in SSRF screening of AIA responder John Safranek 2026-06-17 15:11:56 -07:00
  • 6283bd6db8 Merge pull request #10891 from rlm2002/fipsEcc JacobBarthelmeh 2026-07-17 13:35:41 -06:00
  • 2281459e2b Merge pull request #10923 from miyazakh/mldsa_verifyonly_op JacobBarthelmeh 2026-07-17 13:26:43 -06:00
  • 57655e08d6 Address Marco's concern about WOLFSSL_CURVE25519_USE_ED25519 pulling in field math Paul Adelsbach 2026-07-17 11:17:57 -07:00
  • 2bc5d47ec3 Add missing checks for WOLF_CRYPTO_CB_ONLY_CURVE25519, add test case for no swdev Paul Adelsbach 2026-07-13 09:20:23 -07:00
  • c4f9b5e9e8 Add crypto callback only mode for curve25519 Paul Adelsbach 2026-07-01 13:55:23 -07:00
  • dc1c77e079 Merge pull request #10830 from padelsbach/ed25519-cryptocb-only philljj 2026-07-17 11:42:31 -05:00
  • 3984c8b1dd Merge pull request #10870 from SparkiDev/frodokem_1 JacobBarthelmeh 2026-07-17 10:14:47 -06:00
  • 575c107249 Merge pull request #10929 from Frauschi/xmss_cmake JacobBarthelmeh 2026-07-17 09:27:12 -06:00
  • 21314550a9 Fix PKCS7 SignerIdentifier SKID to implicit [0] tagging Eric Blankenhorn 2026-07-16 16:19:19 -05:00
  • 2214063a91 Honor SSLKEYLOGFILE environment variable for key log output Tobias Frauenschläger 2026-07-16 17:26:58 +02:00
  • d832415d32 Remove ed25519+fips cryptocb check in settings.h Paul Adelsbach 2026-07-17 06:36:03 -07:00
  • 78df69d051 FrodoKEM: ASN.1 keys, X.509 certicates Sean Parkinson 2026-07-13 16:10:42 +10:00
  • 607d7cfdb3 FrodoKEM: Initial implementation Sean Parkinson 2026-07-08 10:42:30 +10:00
  • 81c11c9c34 Fix NO_PKCS7_STREAM infinite loop on constructed-definite EnvelopedData Tobias Frauenschläger 2026-07-17 09:12:42 +02:00
  • c82cddb5f4 Fix decrypt-context leak on abandoned streaming EnvelopedData decode Tobias Frauenschläger 2026-07-16 17:15:02 +02:00
  • 33decf759c Fix PKCS#7/CMS EnvelopedData decrypt of definite-length constructed [0] Tobias Frauenschläger 2026-07-16 16:55:00 +02:00
  • 29d9fb61ac Add integrator-focused AGENTS.md and CLAUDE.md Andrew Hutchings 2026-07-17 11:10:42 +01:00
  • 34a2a2f389 Parse sniffer keylog file line by line for RFC 9850 Tobias Frauenschläger 2026-07-16 17:21:16 +02:00
  • bfdecbc644 Update cert_with_extern_psk references from RFC 8773bis to RFC 9973 Tobias Frauenschläger 2026-07-16 17:00:27 +02:00
  • d0f5bce96b Accept empty CertificateRequest extensions for RFC 9846 Tobias Frauenschläger 2026-07-16 16:38:56 +02:00
  • 9e019c2b82 Cap TLS 1.3 sender key updates at 2^48-1 for RFC 9846 Tobias Frauenschläger 2026-07-16 16:33:49 +02:00
  • 4a6e7e91d9 Fix PKCS#7/CMS RSA verify of SignedData with mismatched DigestInfo params Tobias Frauenschläger 2026-07-16 11:47:15 +02:00
  • 4c36537053 Regenerate SP sources: constant-time sp_*_from_mp Daniele Lacamera 2026-07-14 11:40:31 +02:00
  • 3a47bfb78e tests: fix check-source-text and clang-tidy findings in Part-3 tests Daniele Lacamera 2026-07-16 20:22:39 +02:00
  • 004cc22e9f tests: skip KDF MC/DC suites under FIPS/selftest (behavioral divergence) Daniele Lacamera 2026-07-16 18:05:02 +02:00
  • 28a9c5921f tests: fix shared-CI link and FIPS build for math/kdf MC/DC tests Daniele Lacamera 2026-07-16 15:54:33 +02:00
  • 2f5ae6c9ab tests: skip DEBUG-unreachable hash type-error checks in test_hash Daniele Lacamera 2026-07-16 09:42:50 +02:00
  • afe37aabd1 tests: MC/DC gap-closing for the deferred Part-3 modules Daniele Lacamera 2026-07-16 02:24:06 +02:00