1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-27 04:49:34 +03:00

Commit Graph

  • 9e7958c108 dtlsv13: fix: send correct CH2 when server do not send HRR Marco Oliverio 2026-06-18 13:46:08 +02:00
  • 6c211be5b9 CI: only save dependency caches on master, restore on PRs Juliusz Sosinowicz 2026-06-18 11:37:29 +00:00
  • fc946d6327 Intel x86/x64 assembly fixes Sean Parkinson 2026-06-18 21:03:50 +10:00
  • 611bf688f8 CI: harden ci-deps-image downloads against stalled mirror connections Juliusz Sosinowicz 2026-06-17 21:35:23 +00:00
  • ad85f49926 Thumb2 X25519: Fix to do full reduction Sean Parkinson 2026-06-18 20:34:11 +10:00
  • 66c530f4fc cryptocb: ecc_check/make_pub: address reviewer's comments Marco Oliverio 2026-06-18 10:38:04 +02:00
  • 506a8649e9 add macro guard around new test case for specific builds JacobBarthelmeh 2026-06-18 00:26:22 -06:00
  • 633784e91b Merge pull request #10714 from Frauschi/zd21992_2 JacobBarthelmeh 2026-06-17 17:34:15 -06:00
  • 3f9ae22010 Merge pull request #10709 from douzzer/20260616-aes-fixes JacobBarthelmeh 2026-06-17 15:58:23 -06:00
  • 877208c2fb Merge pull request #10701 from julek-wolfssl/ci-drop-apt-deps-cache David Garske 2026-06-17 13:29:00 -07:00
  • 59295869dc Merge pull request #10715 from lealem47/amdseed_force_fail JacobBarthelmeh 2026-06-17 13:26:13 -06:00
  • aec9b202c9 Merge pull request #10702 from Frauschi/zd21992 JacobBarthelmeh 2026-06-17 13:22:05 -06:00
  • 881fe769a3 wolfcrypt/src/aes.c, wolfcrypt/test/test.c: use WOLFSSL_MAX_32BIT rather than magic 0xffffffff; Daniel Pouzzner 2026-06-17 13:55:10 -05:00
  • 9d15bc707c wolfcrypt/src/aes.c, wolfcrypt/src/port/caam/caam_aes.c, wolfcrypt/src/port/riscv/riscv-64-aes.c, wolfcrypt/src/port/silabs/silabs_aes.c, wolfcrypt/src/port/ti/ti-aes.c: implement AES-CCM counter overflow checks for ports; Daniel Pouzzner 2026-06-17 13:18:46 -05:00
  • dedba75ad4 Reject duplicate certificatePolicies extension in WOLFSSL_CERT_EXT builds Tobias Frauenschläger 2026-06-17 14:30:18 +02:00
  • 8e5be42a9d Fix !aNULL/!eNULL to drop explicitly-listed anonymous/NULL cipher suites Tobias Frauenschläger 2026-06-17 10:52:00 +02:00
  • a3ca9e1dfa Fix FORCE_FAILURE_RDSEED case guard Lealem Amedie 2026-06-17 11:12:55 -06:00
  • 1070384034 wolfcrypt/src/aes.c and wolfcrypt/test/test.c: fixes from review, re "catch and error on total length overflow". Daniel Pouzzner 2026-06-17 11:59:54 -05:00
  • 5def276e07 wolfcrypt/src/aes.c: catch and error on total length overflow in wc_AesGcmEncryptUpdate(), wc_AesGcmDecryptUpdate(), wc_AesCcmEncrypt(), and wc_AesCcmEncrypt(). Daniel Pouzzner 2026-06-16 18:23:37 -05:00
  • 9d60981071 Merge pull request #10695 from philljj/bsdkm_fixes JacobBarthelmeh 2026-06-17 10:54:32 -06:00
  • 160b3179a1 Add regression tests for various d2i_* methods Tobias Frauenschläger 2026-06-17 08:26:59 +02:00
  • 7aed5ac316 Merge pull request #10698 from Frauschi/slhdsa_fixes JacobBarthelmeh 2026-06-17 10:36:58 -06:00
  • a593fbe90c configure: avoid entropy fallback for AMD RDSEED in FIPS builds Lealem Amedie 2026-06-17 09:45:20 -06:00
  • c43ab39306 cryptocb: add WC_PK_TYPE_EC_CHECK_PUB_KEY for ECC key validation offload Marco Oliverio 2026-06-11 14:28:32 +02:00
  • 0d98a65940 test: cover the EC make-pub crypto callback Marco Oliverio 2026-06-11 14:23:02 +02:00
  • f7877887d7 cryptocb: add WC_PK_TYPE_EC_MAKE_PUB for ECC public-key derivation offload Marco Oliverio 2026-06-11 14:20:39 +02:00
  • 2f38b856c2 ecc: extract software public-key derivation into ecc_make_pub_sw Marco Oliverio 2026-06-11 15:02:05 +02:00
  • d3659c74fd CI: move Arduino cores from actions/cache to ghcr bundles Juliusz Sosinowicz 2026-06-17 09:29:48 +00:00
  • 94a671bed8 CI: disable setup-alire's cache in the Ada workflow Juliusz Sosinowicz 2026-06-17 08:50:51 +00:00
  • e017e6cba7 X25519: standard requires masking of top bit Sean Parkinson 2026-06-17 12:05:27 +10:00
  • bce9fdda68 ML-KEM/ML-DSA: unaligned reads Sean Parkinson 2026-06-17 08:16:58 +10:00
  • 6ff1f8f2b8 Merge pull request #10705 from cconlon/tsipMemFix JacobBarthelmeh 2026-06-16 16:14:54 -06:00
  • e6f02ecf4d fix for clang-tidy warning on variable not read JacobBarthelmeh 2026-06-16 16:09:42 -06:00
  • 6ebc379f31 Renesas TSIP: skip XMEMCPY on MEMORY_E from tsip_StoreMessage() Chris Conlon 2026-06-16 13:58:52 -06:00
  • d523e463a5 Rust wrapper: validate WOLFSSL_PREFIX in build.rs Josh Holtrop 2026-06-16 15:09:26 -04:00
  • eaa563419e BIO: reject negative length in memory BIO read Tobias Frauenschläger 2026-06-16 18:38:13 +02:00
  • 8f55480a1d SP math: validate ECDH shared-secret output buffer against the field size Tobias Frauenschläger 2026-06-16 18:06:11 +02:00
  • f23544f094 TLS 1.3: fix for post-handshake authentication Tobias Frauenschläger 2026-06-16 15:59:54 +02:00
  • c929798460 TLS: validate negotiated certificate type for raw public keys Tobias Frauenschläger 2026-06-16 15:30:49 +02:00
  • 3e30e69c35 certman: enforce keyCertSign usage on chain-supplied intermediate CAs Tobias Frauenschläger 2026-06-16 14:02:00 +02:00
  • d382439c7c PKCS7: tighten signature presence check in PKCS7_verify Tobias Frauenschläger 2026-06-16 13:03:59 +02:00
  • cfbfecb1bc CI: fail the linuxkm bundle build on any download error Juliusz Sosinowicz 2026-06-16 16:33:12 +00:00
  • 06e4ec9fe3 CI: install all apt deps from ghcr bundles Juliusz Sosinowicz 2026-06-16 15:22:36 +00:00
  • dd861af06f .github: link parallel-make-check.py annotations to the workflow file Juliusz Sosinowicz 2026-06-16 14:53:35 +00:00
  • 266e07e58d SLH-DSA: zeroize secret WOTS+/FORS material and fix alloc-failure paths Tobias Frauenschläger 2026-06-16 15:48:39 +02:00
  • 2f50f8c968 CI: drop actions/cache apt-deps layer from install-apt-deps Juliusz Sosinowicz 2026-06-16 10:52:07 +00:00
  • c761755add bsdkm driver: tiny cleanup. jordan 2026-06-16 00:25:59 -05:00
  • 7cffbb6240 bsdkm driver: cleanup switch default. jordan 2026-06-15 23:19:46 -05:00
  • 6bfbf19721 bsdkm driver: cleanup. jordan 2026-06-15 23:14:57 -05:00
  • c685293c92 Merge pull request #10685 from julek-wolfssl/ci-cache-offload David Garske 2026-06-15 18:35:12 -07:00
  • 70883a4ead Merge pull request #10692 from JacobBarthelmeh/fuzz David Garske 2026-06-15 18:27:58 -07:00
  • 68422e84de additional sanity check on alert message size JacobBarthelmeh 2026-06-15 16:49:54 -06:00
  • 634ac9b6da CI: align branch-introduced actions with master's Node.js 24 bump Juliusz Sosinowicz 2026-06-15 22:39:56 +00:00
  • b8c008f3ac CI: address Skoll review (reseed coverage, ghcr owner, restore key) Juliusz Sosinowicz 2026-06-15 22:06:52 +00:00
  • 80a3e67ba3 CI: clarify ccache/apt-deps offload comments (Copilot review) Juliusz Sosinowicz 2026-06-15 18:53:00 +00:00
  • 93b1e35a15 CI: address Copilot review (ccache-setup if:, smoke-test concurrency) Juliusz Sosinowicz 2026-06-15 17:18:52 +00:00
  • 86e5df754e CI: drop github context from ccache-setup input description Juliusz Sosinowicz 2026-06-15 17:01:42 +00:00
  • 8754aee447 CI: fix ccache-setup load failure (github context in composite if:) Juliusz Sosinowicz 2026-06-15 16:19:48 +00:00
  • 146e1c3d34 CI: reseed ccache from clean compiles on scheduled runs Juliusz Sosinowicz 2026-06-15 15:41:50 +00:00
  • 3faaf7818c CI: address Copilot review - offline no-install-recommends, stale comments Juliusz Sosinowicz 2026-06-15 13:33:23 +00:00
  • dd2f9d3ab8 CI: offload ccache/apt/buildx caches off the GitHub Actions cache Juliusz Sosinowicz 2026-06-15 13:04:48 +00:00
  • f9cd909c4d Merge pull request #10689 from julek-wolfssl/bump-github-actions-node24 David Garske 2026-06-15 15:27:01 -07:00
  • 77fea4fe84 bsdkm driver: fix callback sync. jordan 2026-06-15 16:00:19 -05:00
  • 753a47739d Merge pull request #10688 from douzzer/20260615-linuxkm-fenrir-fixes philljj 2026-06-15 15:25:50 -05:00
  • 844852202b .github: bump JavaScript actions to Node.js 24 runtimes Juliusz Sosinowicz 2026-06-15 18:09:04 +00:00
  • 5aad1447b6 fix F-1236: Copy-Paste Error in #endif Comment: AESCBC Instead of AESCFB Info Assigned fix F-3291: Copy-paste error in linuxkm_test_aesgcm error message uses WOLFKM_AESCBC_DRIVER fix F-1431: AES-GCM RFC4106 SetKey Uses memcpy Instead of XMEMCPY for Nonce Copy Daniel Pouzzner 2026-06-15 12:08:04 -05:00
  • 3c9996efe0 fix F-5958: wc_linuxkm_drbg_generate returns untranslated wolfCrypt RNG_FAILURE_E on the slen>0 reseed-failure path Daniel Pouzzner 2026-06-15 11:44:04 -05:00
  • bd804c632c fix F-5957: atomic_t fallback of wc_lkm_refcount_to_int reads address of pointer parameter instead of the refcount Daniel Pouzzner 2026-06-15 11:39:21 -05:00
  • ea5e86d967 fix F-5956: Heap buffer overflow in DH/FFDHE shared-secret computation when peer public key is shorter than the modulus Daniel Pouzzner 2026-06-15 11:33:42 -05:00
  • cc6887ffe8 Merge pull request #10684 from julek-wolfssl/parallel-make-check-warn-stale-minutes David Garske 2026-06-15 09:19:08 -07:00
  • 8ef48f3188 Merge pull request #10683 from Frauschi/zd21977 David Garske 2026-06-15 07:48:14 -07:00
  • ea3bd56e97 parallel-make-check: fix warning-doc wording and escape every workflow command Juliusz Sosinowicz 2026-06-15 11:30:00 +00:00
  • d9079978ed parallel-make-check: percent-encode warn() workflow-command data Juliusz Sosinowicz 2026-06-15 11:14:06 +00:00
  • 44a22af323 Handle wildcard DNS names in compat name-constraint checks Marco Oliverio 2026-06-12 08:19:55 +02:00
  • eb9cd6c9c5 Use the shared URI name-constraint matcher in the compat layer Marco Oliverio 2026-06-12 08:18:55 +02:00
  • a39e8ae976 Route DNS name-constraint checks through one helper Marco Oliverio 2026-06-12 08:16:44 +02:00
  • d4eedf8af8 Add missing ForceZero call for ML-DSA Tobias Frauenschläger 2026-06-15 11:17:34 +02:00
  • e43281b2dc Add missing ForceZero calls for ML-KEM Tobias Frauenschläger 2026-06-15 10:32:33 +02:00
  • ef8836a346 Handle the absolute-FQDN trailing dot in URI name constraints Marco Oliverio 2026-06-12 08:15:38 +02:00
  • 4b3bb49b27 NameConstraints: Require DNS reg-name host for URI name constraints Marco Oliverio 2026-06-12 08:12:11 +02:00
  • 7b2d19ca86 parallel-make-check: warn when a job runtime drifts >50% from "minutes" Juliusz Sosinowicz 2026-06-15 08:36:04 +00:00
  • 3dc729002a Extract GetUriHost from wolfssl_local_MatchUriNameConstraint Marco Oliverio 2026-06-12 08:07:52 +02:00
  • 68381e0197 Merge pull request #10680 from michael-membrowse/skip_membrowse_comment nightly-snapshot David Garske 2026-06-13 19:18:23 -07:00
  • e8b88643ba Merge pull request #10681 from douzzer/20260613-linuxkm-fix-fips-random-seed David Garske 2026-06-13 19:18:08 -07:00
  • 70e7bf5eab linuxkm/linuxkm_wc_port.h: fix entropy source setup for FIPS: use in-boundary wc_GenerateSeed() unless FIPS < 5.2.4 or explicit WC_LINUXKM_WOLFENTROPY_IN_GLUE_LAYER / WC_LINUXKM_RDSEED_IN_GLUE_LAYER. Daniel Pouzzner 2026-06-13 10:26:50 -05:00
  • 6b9949ed4a Merge pull request #10676 from douzzer/20260610-linuxkm-fenrir David Garske 2026-06-13 08:19:19 -07:00
  • f30cbd4606 skip membrowse comment action on draft PRs Michael Rogov Papernov 2026-06-13 11:58:29 +01:00
  • 4d77baff3b linuxkm/module_hooks.c: fix flub in IntelRDseed64_r() ForceZero() call; Daniel Pouzzner 2026-06-12 19:24:32 -05:00
  • f42a698c59 Merge pull request #10668 from holtrop-wolfssl/f-5394 David Garske 2026-06-12 16:35:31 -07:00
  • 1b22e4b502 fix F-4409: Integer Overflow in PKCS1 Sign Length Check Allows Heap Buffer Overflow Daniel Pouzzner 2026-06-12 18:14:04 -05:00
  • 8624bca5b5 fix F-3294: IntelRDseed64_r Stack Buffer Containing Entropy Cleared with Plain Assignment Instead of wc_ForceZero Daniel Pouzzner 2026-06-12 18:08:57 -05:00
  • 476cfd6c64 fix for F-3946: Missing ForceZero on Heap-Allocated HMAC State Buffer in km_hmac_init Error Path Daniel Pouzzner 2026-06-12 18:05:53 -05:00
  • d3279a825a fixes for F-1433: AES CBC/CFB Self-Test Functions Silently Continue After enc2/dec2 Allocation Failure F-1434: linuxkm_test_aesgcm Silently Returns Success on Kernel Crypto Allocation Failure Daniel Pouzzner 2026-06-12 17:56:39 -05:00
  • 503084629f fix F-1430: AES-GCM Non-Stream Path Returns -EINVAL Instead of Propagating skcipher_walk Error Daniel Pouzzner 2026-06-12 17:48:10 -05:00
  • ab69af541f fixes for F-1428: Missing ForceZero on sg_buf Containing Decrypted Plaintext in AES-GCM Non-Stream Path F-3293: AES-CCM Non-Contiguous SG Path Missing ForceZero on sg_buf Containing Decrypted Plaintext Daniel Pouzzner 2026-06-12 17:45:12 -05:00
  • c071c29eca fixes for Skoll-flagged linuxkm/ flubs in #10658: Daniel Pouzzner 2026-06-12 17:28:03 -05:00
  • c84c44f62f fix F-1238: Integer Overflow in ECDSA Verify Allocation of sig_len + hash_len Daniel Pouzzner 2026-06-12 17:13:25 -05:00
  • 0272f0a506 fix F-709: AES-XTS Stream Finalize Returns Untranslated wolfCrypt Error Code to Kernel LKCAPI Daniel Pouzzner 2026-06-12 16:56:30 -05:00
  • 8110d567c8 fix F-708: DH km_dh_set_secret Missing Private Key Cleanup on Error Path Daniel Pouzzner 2026-06-12 16:52:09 -05:00
  • 591f52fb9b fix F-681: DH/FFDHE Init Error Paths Leak RNG Resource Daniel Pouzzner 2026-06-12 16:47:41 -05:00