1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-27 04:49:34 +03:00

Commit Graph

  • ba9084bdd6 tests: MC/DC decision coverage for curve25519.c and ed25519.c Daniele Lacamera 2026-07-10 05:38:53 +02:00
  • d11721004b tests: MC/DC decision coverage for hmac.c and cmac.c Daniele Lacamera 2026-07-10 04:43:09 +02:00
  • e2568cc39e tests: MC/DC decision coverage for chacha.c and poly1305.c Daniele Lacamera 2026-07-10 04:04:09 +02:00
  • 9133840053 tests/ecc: MC/DC decision coverage + white-box for wolfcrypt/src/ecc.c Daniele Lacamera 2026-07-10 03:38:21 +02:00
  • 8efb4ddf19 tests: add sp_int.c (sp-math module) MC/DC DecisionCoverage + white-box Daniele Lacamera 2026-07-10 03:09:59 +02:00
  • 059f9143e0 tests/rsa: MC/DC decision + white-box coverage for wolfcrypt/src/rsa.c Daniele Lacamera 2026-07-10 01:55:30 +02:00
  • 059023ac3e tests/unit-mcdc: aarch64 hw-crypto white-box supplements (qemu lane) Daniele Lacamera 2026-07-10 00:48:10 +02:00
  • d868aa2299 sha: reorder update arg guards to make the empty-update decision coverable Daniele Lacamera 2026-07-10 00:23:41 +02:00
  • a453136cc9 tests: cover the AES-EAX streaming Update authIn arg-check Daniele Lacamera 2026-07-09 23:53:56 +02:00
  • c1bb056552 tests/unit-mcdc: add SHA intel-dispatch white-box supplements Daniele Lacamera 2026-07-09 23:14:40 +02:00
  • 136e8da738 KMAC and cSHAKE: Add new algorithms Sean Parkinson 2026-07-13 10:10:50 +10:00
  • bac256ad0b SP ARM64: Fix code to compile under GreenHills Sean Parkinson 2026-07-13 17:26:43 +10:00
  • 54694f9264 Merge pull request #10887 from night1rider/fix-benchmark Tobias Frauenschläger 2026-07-13 08:54:02 +02:00
  • 4ab0a87f36 Merge pull request #10889 from SparkiDev/regression_fixes_27 Tobias Frauenschläger 2026-07-13 08:47:02 +02:00
  • 8e125a1b80 Merge pull request #10836 from yosuke-wolfssl/fix/pkcs Tobias Frauenschläger 2026-07-13 08:35:37 +02:00
  • a6e4bb79ba Fixes from regression testing Sean Parkinson 2026-07-13 10:49:43 +10:00
  • b1d558c8d5 Fix PKCS#7 padding for block-aligned input in wc_EncryptPKCS8Key_ex Yosuke Shimizu 2026-07-02 15:17:29 +09:00
  • b4fa08753f Clamp benchmark numBlocks to at least 1 so large block sizes still run. night1rider 2026-07-11 22:29:35 -06:00
  • 11c53ab808 random.c: fix fips v7 define guards. jordan 2026-07-10 22:55:25 -05:00
  • f8d5905597 Code review feedback Kareem 2026-07-10 16:35:33 -07:00
  • e1876968aa Adjust wolfEntropy size calculation and error out if an invalid combination of settings is given. Kareem 2026-07-10 16:32:40 -07:00
  • 891464fcbf Hardening input validation in wolfCrypt v5.2.4 WCv5.2.4-KRNL-CHKIN-r9 Lealem Amedie 2026-07-10 17:18:16 -06:00
  • 8f3f18a1d1 Also use safe sum for length in PKCS7_VerifySignedData. Kareem 2026-07-10 16:14:05 -07:00
  • 42f453dd24 Use safe sum for certSz in PKCS7_VerifySignedData. Kareem 2026-07-10 16:05:55 -07:00
  • 5d0da8e173 Merge pull request #10871 from SparkiDev/ppc64_le_and_elf1_fix David Garske 2026-07-10 15:54:08 -07:00
  • 1c34cc9cf5 Merge pull request #10568 from sebastian-carpenter/tls-ech-ext-public David Garske 2026-07-10 15:39:24 -07:00
  • e9aebd220c Fix STM32 DHUK AES-CBC in-place decrypt chaining IV and correct stale CTR comment David Garske 2026-07-10 14:07:04 -07:00
  • 436bce8f41 wolfcrypt/src/port/af_alg/afalg_aes.c, wolfcrypt/src/port/kcapi/kcapi_aes.c, tests/api/test_aes.c: fixes for AF_ALG and KCAPI ports. Daniel Pouzzner 2026-07-10 17:29:44 -05:00
  • dcb4d0edea tests/api.c: fix test_wc_CryptoCb_registry() for new ALREADY_E from attempted re-registration of callback. Daniel Pouzzner 2026-07-10 17:29:11 -05:00
  • 972fa21b27 linuxkm/lkcapi_aes_glue.c: in non-streaming AesGcmCrypt_1(), use wc_AesGcmSetExtIV() and wc_AesGcmEncrypt_ex(), not wc_AesGcmEncrypt(), to stay inside FIPS boundary. Daniel Pouzzner 2026-07-10 17:27:36 -05:00
  • 3ef3e980f8 linuxkm/Makefile: move --no-silent kludge into $(NO_SILENT), off by default (apparently unneeded with make 4.4.1 and current Makefile/Kbuild). Daniel Pouzzner 2026-07-10 11:14:48 -05:00
  • c34f346543 add mp_clear(order) before freeing in _ecc_import_private_key_ex() Ruby Martin 2026-07-10 14:51:25 -06:00
  • b08b393f6d Merge pull request #10823 from aidangarske/feature/x509-tiny David Garske 2026-07-10 12:46:25 -07:00
  • da67413199 Merge pull request #10747 from gasbytes/tls-1-2-ocsp-multi-stapl-check David Garske 2026-07-10 11:51:52 -07:00
  • 3c5682664a memory.c: add wc_ConstantCompare wrapper. jordan 2026-07-10 13:44:48 -05:00
  • 159c7a65a2 Merge upstream/master into feature/x509-tiny aidan garske 2026-07-10 10:02:36 -07:00
  • e8653a8270 reject status_request_v2 ocsp-multi staples that bundle multiple SingleResponses So a revoked certificate's non-first single can no longer be accepted Reda Chouk 2026-06-22 17:16:37 +02:00
  • 0913436957 Merge pull request #10559 from MarkAtwood/security-policy-canonical-pointer David Garske 2026-07-10 09:43:02 -07:00
  • f7ccf4c1de testing improvements (from #10542): - *_wire_sni test is now more efficient - openssl-ech workflow now does interop with ECH rejection sebastian-carpenter 2026-06-08 10:42:47 -06:00
  • 3538c4db7a Merge pull request #10875 from danielinux/fixes-2026-07-10 David Garske 2026-07-10 09:05:03 -07:00
  • a962793323 Merge pull request #10704 from aidangarske/length-width-hardening David Garske 2026-07-10 08:00:39 -07:00
  • 772bae44b4 Merge pull request #10821 from wolfSSL/feature/x509-no-malloc-verify David Garske 2026-07-10 07:56:03 -07:00
  • 8cfedfe9de Avoid SIGPIPE issues in fips-hash-offline.sh Josh Holtrop 2026-07-10 10:36:57 -04:00
  • 3ea9dd5231 Merge pull request #10395 from dgarske/stm32_bare Mattia Moffa 2026-07-10 16:27:26 +02:00
  • 3fed5f90f2 rsa: zero wc_MakeRsaKey stack temporaries for mem-zero check Daniele Lacamera 2026-07-10 12:13:41 +02:00
  • 3f3ebcac58 PPC64 Assembly: ELF V1 headers added. Little-endian asm added. Sean Parkinson 2026-07-09 19:18:48 +10:00
  • cf5c126a40 dh: deregister mem-zero entries in wc_FreeDhKey Daniele Lacamera 2026-07-10 11:46:38 +02:00
  • 8dcef49970 dsa test: gate CheckDsaLN on err==MP_OKAY in _DsaImportParamsRaw Daniele Lacamera 2026-07-10 08:56:49 +02:00
  • 9721c5221f fe_operations: error on CURVE25519_SMALL/ED25519_SMALL + x64 asm Daniele Lacamera 2026-07-10 07:52:15 +02:00
  • 0a0e08470b random: reject NULL output in Unix wc_GenerateSeed Daniele Lacamera 2026-07-10 07:29:27 +02:00
  • 666de7d0bb random: guard PollAndReSeed with !CUSTOM_RAND_GENERATE_BLOCK Daniele Lacamera 2026-07-10 07:29:09 +02:00
  • 3aecf6f31e fe_operations: declare asm curve25519_base to fix strict-C build Daniele Lacamera 2026-07-10 07:20:10 +02:00
  • 30ceba03c5 dsa: gate CheckDsaLN on err==MP_OKAY in _DsaImportParamsRaw Daniele Lacamera 2026-07-10 07:20:10 +02:00
  • 600880a0a4 curve25519: fix big-endian public-key order check operand Daniele Lacamera 2026-07-10 07:20:10 +02:00
  • 69bf010918 Merge pull request #10677 from dgarske/realtek_huk Zackery 2026-07-09 18:09:37 -06:00
  • 1847d95711 Add WOLFSSL_X509_TINY/VERIFY_ONLY macros to .wolfssl_known_macro_extras aidan garske 2026-07-09 16:49:37 -07:00
  • 949976b856 Add STM32 DHUK crypto-callback ECDSA verify handler for callback-only ECC David Garske 2026-07-08 16:42:45 -07:00
  • 986e114dde Let WOLF_CRYPTO_CB_ONLY_AES compose with the STM32 bare AES path David Garske 2026-07-08 15:30:41 -07:00
  • 040043c747 Fix STM32 DHUK AES-CBC callback routing and RNG init robustness David Garske 2026-07-06 12:54:12 -07:00
  • 3b3b47a9d5 Add STM32 DHUK full wrapped AES-GCM and TRNG crypto-callback cases David Garske 2026-07-02 17:14:28 -07:00
  • f3f7425807 Add STM32C5 CCB ECDSA hardware blob-create support David Garske 2026-06-16 15:16:12 -07:00
  • d0b2d76d90 Refactor STM32 CCB driver and expand STM32 port docs and doxygen David Garske 2026-06-16 14:20:22 -07:00
  • 33ce6e7e7e Add STM32 CCB and STM32C5 HW PKA ECDSA support David Garske 2026-06-16 09:43:11 -07:00
  • f143edff6a Add STM32 DHUK (Device Hardware Unique Key) support via crypto callbacks David Garske 2026-06-16 09:43:11 -07:00
  • d43bc1d319 Add STM32 bare-metal support for Hash, SAES/AES, PKA and RNG David Garske 2026-06-16 09:43:11 -07:00
  • 66fe117538 docs: keep in-repo security policy, fix contacts Mark Atwood 2026-07-09 12:39:30 -07:00
  • 4c6852372f Merge pull request #10872 from Frauschi/force_zero_pkcs12 David Garske 2026-07-09 12:11:20 -07:00
  • feb357db09 Merge pull request #10675 from kareem-wolfssl/f5393 David Garske 2026-07-09 12:07:11 -07:00
  • 2b62c84832 Merge pull request #10486 from embhorn/zd21825 David Garske 2026-07-09 12:05:17 -07:00
  • f44b16cfa3 Merge pull request #10759 from Frauschi/pkcs7_mldsa David Garske 2026-07-09 10:32:26 -07:00
  • f2fc9b6603 Merge pull request #10822 from mattia-moffa/20260629-ticket-hint-window-check David Garske 2026-07-09 10:27:57 -07:00
  • 40f1582dc4 Merge pull request #10824 from yosuke-wolfssl/fix/f_6555 Daniel Pouzzner 2026-07-09 12:14:49 -05:00
  • 0315ea3a60 Merge pull request #10826 from yosuke-wolfssl/fix/f_6539 David Garske 2026-07-09 10:11:39 -07:00
  • 2dfb38f92c Merge pull request #10845 from danielinux/mcdc-test-coverage David Garske 2026-07-09 09:40:43 -07:00
  • bc3288204e PKCS#7: add ML-DSA (FIPS 204) SignedData support Tobias Frauenschläger 2026-06-22 15:43:24 +02:00
  • 9e72e8d718 Merge pull request #10853 from night1rider/cross-library-testing David Garske 2026-07-09 09:08:35 -07:00
  • 5e1e4231c5 adjust test case for updated sanity check with heap math JacobBarthelmeh 2026-07-09 09:54:30 -06:00
  • f430d5b472 Merge pull request #10251 from MarkAtwood/fix/aes-eax-empty-plaintext David Garske 2026-07-09 08:24:55 -07:00
  • 5caa3565b8 Merge pull request #10858 from anhu/89compl Daniel Pouzzner 2026-07-09 10:14:16 -05:00
  • bcd0805237 Add missing ForceZero in PKCS#12 Tobias Frauenschläger 2026-07-09 13:18:13 +02:00
  • c1500f8622 tests: import the falcon benchmark key instead of OQS keygen Daniele Lacamera 2026-07-09 10:51:29 +02:00
  • 7487366b0c tests: keep OQS_SIG_keypair() out of ExpectIntEQ Daniele Lacamera 2026-07-09 02:00:39 +02:00
  • 53cad55295 tests: address review findings (dead HAVE_PQC guard, guard/style cleanups) Daniele Lacamera 2026-07-08 18:32:57 +02:00
  • 2159b15a66 tests: keep test_wolfSSL_X509V3_EXT OPENSSL_ALL-only Daniele Lacamera 2026-07-07 19:34:04 +02:00
  • a79c7044da tests: make RsaDecisionCoverage padding-mismatch check deterministic Daniele Lacamera 2026-07-07 16:09:23 +02:00
  • a178b6f50d tests: also exclude old FIPS from AesFeatureCoverage CCM block Daniele Lacamera 2026-07-07 15:43:37 +02:00
  • e14a3aafc9 tests: skip AesFeatureCoverage GCM/CCM under the self-test module Daniele Lacamera 2026-07-07 13:27:11 +02:00
  • b9925e72f7 tests: skip RsaDecisionCoverage under the self-test module Daniele Lacamera 2026-07-07 11:29:03 +02:00
  • b680985328 tests: skip whole AesCcmArgMcdc under FIPS/self-test (fixes v5 segfault) Daniele Lacamera 2026-07-07 09:14:05 +02:00
  • 479659fa96 tests: guard Gmac/AesGcmSetExtIV tests for the self-test module Daniele Lacamera 2026-07-07 07:26:43 +02:00
  • 4755bb21c5 tests: skip AES rounds-corruption under FIPS/self-test (fixes CCM segfault) Daniele Lacamera 2026-07-07 06:49:32 +02:00
  • e63555a924 tests/unit-mcdc: white-box the AES-NI internal pointer guards Daniele Lacamera 2026-07-06 23:04:55 +02:00
  • 27b1a40bdd tests: fix AUTHORITY_INFO_ACCESS leak under OPENSSL_EXTRA-only builds Daniele Lacamera 2026-07-06 22:48:11 +02:00
  • e3a6d4a0e6 build: register HAVE_PQC in known-macro extras Daniele Lacamera 2026-07-06 22:33:28 +02:00
  • ba2e52ae02 tests: zero-init ccmTag to satisfy clang-tidy Daniele Lacamera 2026-07-06 22:33:28 +02:00
  • 9d0c6cb89c tests: guard AesModes/AesGcm ArgMcdc tests for the older FIPS API Daniele Lacamera 2026-07-06 22:33:13 +02:00
  • a0dbe59597 tests: guard AesSetKey/Cmac ArgMcdc tests for the older FIPS API Daniele Lacamera 2026-07-06 22:13:54 +02:00
  • a9299732d9 tests: fix AesKeyExport lifecycle-tag leak and server-only session-cache test Daniele Lacamera 2026-07-06 18:02:06 +02:00
  • ba3fd1203b tests: skip AES rounds-corruption checks under WOLFSSL_ARMASM Daniele Lacamera 2026-07-06 17:18:56 +02:00
  • bd8730543c tests: fix X509V3_EXT leak, C++ build, and no-client link Daniele Lacamera 2026-07-06 17:12:36 +02:00