1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-27 04:49:34 +03:00

Commit Graph

  • 8945f2bde8 Address pr comments. Thomas Cook 2026-06-05 12:55:18 -04:00
  • 2d186b378a Merge pull request #10537 from SparkiDev/tls13_pt_alert_before_enc Daniel Pouzzner 2026-06-05 11:12:47 -05:00
  • 4bf2d52780 Merge pull request #10571 from Frauschi/mlkem_rename Daniel Pouzzner 2026-06-05 11:00:44 -05:00
  • 727041b525 Merge pull request #10543 from anhu/zeroOnAuthFail Daniel Pouzzner 2026-06-05 10:55:05 -05:00
  • d80785bb07 Merge pull request #10583 from Frauschi/zephyr_patch Daniel Pouzzner 2026-06-05 10:06:23 -05:00
  • eeab53205a Merge pull request #10600 from douzzer/20260604-asm-and-linuxkm-fixes Sean Parkinson 2026-06-05 20:55:43 +10:00
  • c6158c63bb fix undefined doDTLS Hideki Miyazaki 2026-06-05 13:47:19 +09:00
  • b8d8e918af Merge pull request #10597 from SparkiDev/sp_lazy_mutex_init_improv Daniel Pouzzner 2026-06-04 22:38:06 -05:00
  • b06ced1166 Addressed Copilot comments Hideki Miyazaki 2026-06-05 12:20:09 +09:00
  • de3eb8dace fix tls_bench DTLS mode failures Hideki Miyazaki 2026-06-05 11:51:49 +09:00
  • b0757c1cb7 TLS 1.3 plaintext alert: ignore before seeing encrypted Sean Parkinson 2026-05-27 16:10:05 +10:00
  • 0796519a99 More regression testing fixes Sean Parkinson 2026-06-05 11:30:53 +10:00
  • 089f1f7c91 TLSv1.3 PSK binders: always use id protection Sean Parkinson 2026-05-27 10:45:53 +10:00
  • ada6c5f95b SP gen: FP_ECC init mutex improvement Sean Parkinson 2026-06-04 18:57:03 +10:00
  • af119869d2 Merge pull request #10364 from MarkAtwood/fix/evp-cipher-iv-length-cfb-ofb Daniel Pouzzner 2026-06-04 17:26:48 -05:00
  • b2e4bd1a11 Merge pull request #9987 from MarkAtwood/fix/evp-pkey-cmp-after-der-roundtrip Daniel Pouzzner 2026-06-04 17:19:46 -05:00
  • 6c4c03dc76 Merge pull request #10593 from miyazakh/f4429_EntropyGet Daniel Pouzzner 2026-06-04 17:09:36 -05:00
  • 887f88b106 Merge pull request #10599 from michael-membrowse/master David Garske 2026-06-04 14:38:11 -07:00
  • 50166aab36 wolfcrypt/src/port/ppc64/ppc64-aes-asm.S: use TOC-relative addressing consistently, and add ELFv2 global-entry prologues. Daniel Pouzzner 2026-06-04 16:28:08 -05:00
  • bd022d995a Update README so the #define can be grepped by CI Mattia Moffa 2026-06-04 23:11:53 +02:00
  • 5d810f4625 fix membrowse report group Michael Rogov Papernov 2026-06-04 21:02:59 +01:00
  • ca59984200 wolfssl/wolfcrypt/settings.h: for WOLFSSL_LINUXKM, force on NO_STDDEF_H to avoid conflicts with linux/stddef.h, which is always included indirectly in linuxkm_wc_port.h (via linux/kernel.h); Daniel Pouzzner 2026-06-04 14:20:50 -05:00
  • a7b0b3ebc2 linuxkm/module_hooks.c: tweak wc_linuxkm_malloc_usable_size() and my_kallsyms_lookup_name(), moving wc_linuxkm_can_block() to where it's really needed in my_kallsyms_lookup_name(). Daniel Pouzzner 2026-06-04 14:18:34 -05:00
  • 99bf36bb61 wolfcrypt/src/port/arm/armv8-32-curve25519.S and wolfcrypt/src/port/arm/armv8-32-curve25519_c.c: fix MPI overflow in L_curve25519_inv_8, similar to fix in #10536 (efabd1844a). Daniel Pouzzner 2026-06-04 14:12:01 -05:00
  • 8404459918 Update README Mattia Moffa 2026-06-04 21:04:34 +02:00
  • 6291af4e88 Add WOLFSSL_MAX3266X_SHA_ONESHOT to go to previous behavior Mattia Moffa 2026-06-04 20:59:29 +02:00
  • 0314b3fed2 cryptocb: support WOLF_CRYPTO_CB_ONLY_SHA512 Marco Oliverio 2026-05-20 22:01:34 +02:00
  • 368e1486f6 Harden X509 DER length handling in wolfSSL_X509_get_der and wolfSSL_i2d_X509 Colton Willey 2026-06-04 10:31:32 -07:00
  • 5b8b61bda6 Merge master into harden-chain-depth-and-parser-bounds Colton Willey 2026-06-04 10:10:52 -07:00
  • 27edd64118 bsdkm: call wolfkdriv_unregister before wolfkmod_cleanup, and misc cleanup. jordan 2026-06-04 11:42:43 -05:00
  • 2e9fe0e3b7 Create individual crypto callbacks for hkdf extract and hkdf expand Thomas Cook 2026-06-04 12:36:00 -04:00
  • 1f0f29cf30 Merge pull request #10590 from douzzer/20260603-linuxkm-fixes philljj 2026-06-04 11:14:35 -05:00
  • b01382c13b Add unit tests that TLS resumption fails due to ALPN mismatch Josh Holtrop 2026-06-04 09:26:43 -04:00
  • 5744df1c77 test: add sha512 variants by sha512 general fallback test Marco Oliverio 2026-06-03 15:57:23 +02:00
  • 76962339c4 cryptocb: fallback to sha512 if no sha384 cryptocb handler Marco Oliverio 2026-06-02 15:28:32 +02:00
  • 40a6a04d23 fix: restore SHA-512 variant IV after generic fallback Marco Oliverio 2026-06-02 09:05:04 +02:00
  • 26a2b793dc Regression testing fixes Sean Parkinson 2026-06-04 15:23:12 +10:00
  • 904a70d179 Addressed Copilot comments Hideki Miyazaki 2026-06-04 15:30:39 +09:00
  • 3bf1ae36a7 Merge pull request #10539 from julek-wolfssl/misc/20260527 Daniel Pouzzner 2026-06-03 22:50:57 -05:00
  • 35329296e8 Merge pull request #10554 from gasbytes/ocsp-certid-serial-number-fix Daniel Pouzzner 2026-06-03 22:49:31 -05:00
  • 12e7a1d5c3 Merge pull request #10548 from SparkiDev/x509_fixups_1 Daniel Pouzzner 2026-06-03 22:48:19 -05:00
  • 513bbccf9d Merge pull request #10574 from embhorn/zd21918 Daniel Pouzzner 2026-06-03 22:36:51 -05:00
  • 4993571ccd Merge pull request #10549 from rizlik/nc_dns_wildcards Daniel Pouzzner 2026-06-03 22:29:49 -05:00
  • 374ad4051d Merge pull request #10555 from anhu/NO_STDATOMIC_FENCE Daniel Pouzzner 2026-06-03 20:49:47 -05:00
  • 590a367d16 Merge pull request #10576 from holtrop-wolfssl/zd21906 Daniel Pouzzner 2026-06-03 20:48:03 -05:00
  • c96da9a002 Merge pull request #10581 from miyazakh/ra6m4_update Daniel Pouzzner 2026-06-03 20:42:46 -05:00
  • 86fa502285 Merge pull request #10577 from kareem-wolfssl/zd21907 Daniel Pouzzner 2026-06-03 20:41:02 -05:00
  • 2e34433c52 enforce trailerField==1 in DecodeRsaPssParams Hideki Miyazaki 2026-06-04 10:32:27 +09:00
  • 9e711f5c9c Add MAX ENTROPY BITS check wolfEntropyv5.2.4-CHKIN Hideki Miyazaki 2026-06-04 09:08:24 +09:00
  • aef6283a7e Merge pull request #10540 from Frauschi/small_order_check Sean Parkinson 2026-06-04 09:58:24 +10:00
  • a7cc526747 Fix AES-EAX to allow empty plaintext Mark Atwood 2026-03-24 05:53:04 -07:00
  • 3bc1575e12 Merge pull request #9852 from SparkiDev/ppc64_asm_aes David Garske 2026-06-03 16:30:12 -07:00
  • 4cce154024 Merge pull request #10530 from SparkiDev/riscv_unaligned_fix David Garske 2026-06-03 16:29:33 -07:00
  • 396e83a48b linuxkm/linuxkm_wc_port.h: * add WOLFSSL_API attribute to wc_linuxkm_sig_ignore_begin(), wc_linuxkm_sig_ignore_end(), wc_linuxkm_check_for_intr_signals(), and wc_linuxkm_relax_long_loop(). * fix WC_CONTAINERIZE_THIS macro wrappers for wc_linuxkm_sig_ignore_begin() and wc_linuxkm_sig_ignore_end() (stray semicolons). Daniel Pouzzner 2026-06-03 18:18:31 -05:00
  • 05f8d0beed evp: fix EVP_PKEY_cmp for EC keys after DER deserialization Mark Atwood 2026-03-16 11:43:49 -07:00
  • df9f3e4cf9 Merge pull request #10377 from jackctj117/DTLS13-Kernel Daniel Pouzzner 2026-06-03 17:58:25 -05:00
  • 70da83972b Merge pull request #10536 from SparkiDev/curve25519_x64_red_fix David Garske 2026-06-03 09:24:48 -07:00
  • e80b4b5888 Merge pull request #10578 from douzzer/20260602-FPKI-DecodeGeneralName-URI Tobias Frauenschläger 2026-06-03 16:47:21 +02:00
  • cf9d2446a5 Merge pull request #10490 from LinuxJedi/more-membrowse David Garske 2026-06-03 07:30:17 -07:00
  • 00a899e9a3 Fixes for Zephyr secure sockets integration Tobias Frauenschläger 2026-05-16 11:03:35 +02:00
  • da719da30c F-4591: fix right-justification of short DH shared secret Juliusz Sosinowicz 2026-06-01 18:33:04 +02:00
  • 108b120d7f F-5632: zeroize Camellia key schedule on cipher free Juliusz Sosinowicz 2026-06-01 18:32:54 +02:00
  • 118d3a8226 F-5583: evict oldest DTLS 1.3 epoch slot, not the last eligible one Juliusz Sosinowicz 2026-06-01 18:32:46 +02:00
  • 289a2670f4 F-5591: reject negative group count in group setters Juliusz Sosinowicz 2026-06-01 18:32:36 +02:00
  • 0089fa852e F-5631: reject zero-length/duplicate post-handshake CertReq context Juliusz Sosinowicz 2026-06-01 18:32:25 +02:00
  • 18b86922d9 F-5630: require signature_algorithms in TLS 1.3 CertificateRequest Juliusz Sosinowicz 2026-06-01 18:32:10 +02:00
  • 6e7bf5fa66 F-5629: reject ServerHello ALPN response with multiple protocols Juliusz Sosinowicz 2026-06-01 18:31:58 +02:00
  • 7a0eca841f F-5628: reject max_fragment_length response that differs from request Juliusz Sosinowicz 2026-06-01 18:31:46 +02:00
  • abb5943466 F-4594: return non-zero from wolfSSL_get_verify_result on NULL ssl Juliusz Sosinowicz 2026-06-01 18:31:31 +02:00
  • 7047d4e01a F-5590: reject oversized length in wolfSSL_CRYPTO_memcmp Juliusz Sosinowicz 2026-06-01 18:31:20 +02:00
  • 754f5cfe41 F-5606: enforce DTLS 1.3 KeyUpdate 2^48-1 sending epoch ceiling Juliusz Sosinowicz 2026-06-01 18:31:02 +02:00
  • 10c1816e35 Add GCC-ARM large linker script for membrowse Andrew Hutchings 2026-05-15 13:49:27 +01:00
  • 61a77e2dd6 Add lots more membrowse platforms Andrew Hutchings 2026-05-08 13:27:44 +01:00
  • 5af10ad14c Fixed typo in README.md Hideki Miyazaki 2026-06-03 16:46:36 +09:00
  • f3a60c2c69 Removes the legacy ASN parser override (WOLFSSL_ASN_ORIGINAL) from the RA6M4 demo project Hideki Miyazaki 2026-06-03 14:00:53 +09:00
  • 768cdc39d3 wolfcrypt/src/asn.c: in DecodeGeneralName() and DecodeAcertGeneralName(), Daniel Pouzzner 2026-06-02 22:16:40 -05:00
  • 0ca238c50e Scope PKCS7 truncation check to NO_PKCS7_STREAM and guard test underflow Colton Willey 2026-06-02 16:39:26 -07:00
  • 586fe466bf Fix compilation of benchmark with MAIN_NO_ARGS defined. Kareem 2026-06-02 15:57:01 -07:00
  • 9592d8254a Fix compilation with WOLFSSL_RNG_USE_FULL_SEED. Kareem 2026-06-02 15:50:42 -07:00
  • faad28301a Fix user buffer overrun from wolfSSL_get_finished/wolfSSL_get_peer_finished Josh Holtrop 2026-06-02 18:21:26 -04:00
  • 5c3100ed5c Remove non-RFC-compliant OCSP responder chain walk. The chain walk authorized any responder issued by an ancestor of the target's issuer; RFC 6960 4.2.2.2 requires direct issuance by the CA identified in the request. Ruby Martin 2026-05-26 13:35:18 -06:00
  • 08a7c4590e Remove CheckOcspResponderChain and related references. Function is not compliant with RFC 6960, 4.2.2.2. Ruby Martin 2026-05-26 12:10:05 -06:00
  • 4c0c093fe9 Merge pull request #10544 from holtrop-wolfssl/zd21880 JacobBarthelmeh 2026-06-02 11:59:46 -06:00
  • 7f3d589c12 Support importing/exporting DTLS sessions with encrypt-then-mac options Josh Holtrop 2026-05-27 14:01:07 -04:00
  • 40dcda3fe3 Fix in IoTSafe RaspPi client example Eric Blankenhorn 2026-06-02 08:30:44 -05:00
  • 320010aad6 Migrate internal ML-KEM consumers to canonical wc_MlKemKey API Tobias Frauenschläger 2026-06-02 10:51:37 +02:00
  • 95158fa31f Merge pull request #10563 from douzzer/20260528-pk-vector-regs Sean Parkinson 2026-06-02 12:59:46 +10:00
  • 151e0d9ccc Merge pull request #10567 from douzzer/20260601-fixes David Garske 2026-06-01 14:26:23 -07:00
  • 492603fbd4 Early-return from TLS 1.2 resumption on SNI/ALPN mismatch Josh Holtrop 2026-06-01 16:15:43 -04:00
  • d037bd1eed tests/api/test_pkcs12.c, tests/api/test_pwdbased.c: add missing FIPS version gates to test_wc_PKCS12_PBKDF(), test_wc_PKCS12_PBKDF_ex(), and test_wc_PBKDF1_ex_iterations(); Daniel Pouzzner 2026-06-01 14:22:43 -05:00
  • aec2756a1b Merge pull request #10566 from julek-wolfssl/membrowse-fork-guard David Garske 2026-06-01 12:09:49 -07:00
  • 226f96db33 Rust wrapper: add comments about label pointer casts in rsa.rs Josh Holtrop 2026-06-01 14:57:58 -04:00
  • 62c0c8fc13 Merge pull request #10557 from dgarske/cryptocb_fips Daniel Pouzzner 2026-06-01 13:32:08 -05:00
  • 71ca579ef2 Merge pull request #10317 from Roy-Carter/feature/pem_write_enhancement David Garske 2026-06-01 10:10:39 -07:00
  • 6852a0abd0 Merge pull request #10564 from SparkiDev/sp_fixes_8 David Garske 2026-06-01 10:05:59 -07:00
  • 2703458535 ci: don't run membrowse workflows on forks Juliusz Sosinowicz 2026-06-01 17:36:26 +02:00
  • 58fcbd46a8 wolfcrypt/src/sp_*: synchronize with scripts#581. Daniel Pouzzner 2026-06-01 10:59:27 -05:00
  • 62168d44c7 bsdkm: misc cleanup. jordan 2026-06-01 00:03:56 -05:00
  • 55c9f83d64 Improvements to SP code Sean Parkinson 2026-06-01 10:38:05 +10:00
  • 8e4e76fdcc X509 API: fix issues Sean Parkinson 2026-05-28 16:44:13 +10:00