1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • f608a41c56 ecc: bound explicit EC domain parameters to MAX_ECC_BYTES Tobias Frauenschläger 2026-09-16 14:10:32 +02:00
  • dd9f0af9f6 tls: reject TLS 1.3 cipher suites below TLS 1.3 on the client Tobias Frauenschläger 2026-09-16 11:58:14 +02:00
  • bdb842b9a2 pkcs7: bound the AuthEnvelopedData authTag copy by the remaining input Tobias Frauenschläger 2026-10-01 09:50:10 +02:00
  • dbe330a61a Bound EVP_CipherUpdate output to inl + block size on decrypt Tobias Frauenschläger 2026-09-16 10:16:35 +02:00
  • 2e98900435 tls13: base the ECH acceptance check on the handshake header, not the buffer Tobias Frauenschläger 2026-09-15 15:42:13 +02:00
  • 41588f0f3e tests: free the key share when an earlier Expect fails Sameeh Jubran 2026-10-07 14:25:07 +03:00
  • 59e3b141c9 tests: drop the freed key-share pointer before the next case Sameeh Jubran 2026-10-01 14:22:06 +03:00
  • e2b6dd49a3 tests: guard the key-share push-fail helper with USE_WOLFSSL_MEMORY Sameeh Jubran 2026-10-01 11:41:54 +03:00
  • afc4bf00d2 tests: free async key-share state when the list node allocation fails Sameeh Jubran 2026-10-01 08:56:02 +03:00
  • 08a25e7efb tests: free a key share with the function for its group Sameeh Jubran 2026-09-30 14:45:44 +03:00
  • b934acdf18 tests: free the key share when its list node cannot be allocated Sameeh Jubran 2026-09-25 15:32:24 +03:00
  • d82d36b870 tests: drop freed SSL pointers before the next mem-fail case Sameeh Jubran 2026-09-25 14:25:45 +03:00
  • 4046cfe914 Addressed review comments Hideki Miyazaki 2026-08-30 17:06:43 -04:00
  • 0a88dd4628 Reject repeated wc_AsconAEAD128_SetAD calls Hideki Miyazaki 2026-08-30 08:53:54 -04:00
  • 4ae1d4e77f Add AES-256 zero-length coverage to TSIP GCM unit test Hideki Miyazaki 2026-10-08 14:29:25 +09:00
  • c9a2692f68 silabs: pass SE key flags to wrapped-key APIs and fix attestation key flags David Garske 2026-10-07 19:51:58 -07:00
  • 799bd17483 Merge pull request #11654 from dgarske/mldsa_small_mem philljj 2026-10-07 20:54:16 -05:00
  • e964ce50a9 Rust wrapper: lms: replace export_pub_from() with export_pub() Josh Holtrop 2026-09-21 15:04:59 -04:00
  • d9ab3ae2b5 ecc: validate a public key only as an affine point (Z = 1) kaleb-himes 2026-10-07 19:05:01 -06:00
  • 1bd8d50474 test_mldsa: run the pre-hash strength test only with native ML-DSA kaleb-himes 2026-10-06 16:04:04 -06:00
  • f661fb6640 test_mldsa: sign the pre-hash strength baseline with SHAKE256 kaleb-himes 2026-10-06 15:34:37 -06:00
  • ee3c0d156e test_ecc: keep peer point rejections off legacy FIPS and selftest builds kaleb-himes 2026-10-06 15:34:30 -06:00
  • ac54a6485e ecc: check range and curve of a raw peer point without the order check kaleb-himes 2026-10-06 15:34:09 -06:00
  • 7f6d4daa96 mldsa: reject a HashML-DSA pre-hash weaker than the parameter set kaleb-himes 2026-10-02 17:12:46 -06:00
  • a0125cde96 ecc: validate the raw peer point in wc_ecc_shared_secret_ex kaleb-himes 2026-10-06 08:31:16 -06:00
  • 8f81c79285 test_ecc: run the SSH shared secret test with both keys on one curve kaleb-himes 2026-10-05 08:26:34 -06:00
  • 01b60e0c8f settings: enforce AES-CBC block-multiple lengths in FIPS v7 builds kaleb-himes 2026-10-02 17:12:46 -06:00
  • 08088cd5fb fix: debian/copyright GPL-3+ and attributions Mark Atwood 2026-10-07 16:50:14 -07:00
  • 546961477a asn: type the certificate manager parameter instead of void* David Garske 2026-10-06 17:58:05 -07:00
  • ddb5b32e37 Merge pull request #11623 from gasbytes/dtls13-record-multicast-fixes Sean Parkinson 2026-10-08 08:52:47 +10:00
  • a09c2ee1cc Merge pull request #11667 from padelsbach/ci-hostap-key-len Sean Parkinson 2026-10-08 08:35:24 +10:00
  • b68d14eca7 Merge pull request #11543 from Frauschi/zephyr_fips_version Sean Parkinson 2026-10-08 08:33:08 +10:00
  • 3de360105c Merge pull request #11417 from stenslae/fix-certpol-empty-policyqualifiers Sean Parkinson 2026-10-08 08:31:58 +10:00
  • 44713f6aff Merge pull request #11659 from sameehj/fix/pkcs7-enveloped-mem-fail philljj 2026-10-07 16:38:33 -05:00
  • eac8081967 Merge pull request #11585 from dgarske/sp_ecc_nonblock Sean Parkinson 2026-10-08 07:35:45 +10:00
  • 824f8b3b3a Correct the macIter description in the PKCS #12 Doxygen comments Koji Takeda 2026-10-08 06:13:33 +09:00
  • ac760f8b75 Merge pull request #11541 from Frauschi/misc_fixes philljj 2026-10-07 16:01:50 -05:00
  • 95fea1a540 Merge pull request #11630 from holtrop-wolfssl/f-11276 philljj 2026-10-07 16:00:06 -05:00
  • 37036fd42d Add Japanese Doxygen documentation for the wolfCrypt PKCS#12 API Koji Takeda 2026-09-11 22:18:22 +09:00
  • e3811fe1af Use ForceZero instead of XMEMSET to clear sensitive data Emma Stensland 2026-10-07 13:36:11 -06:00
  • f0ff65115a CI: Zephyr: remove unneeded apt install Paul Adelsbach 2026-10-07 12:46:56 -07:00
  • be22ad2229 Fix test issue in test_wolfSSL_CRL_unverified_no_evict Paul Adelsbach 2026-10-07 12:29:02 -07:00
  • dc5d291610 PR feedback: add test case for CRL update via X509_STORE_load_locations Paul Adelsbach 2026-10-07 11:41:42 -07:00
  • c4cba534d1 Prevent unverified CRL from replacing a verified one in AddCRL() Paul Adelsbach 2026-10-07 10:22:22 -07:00
  • 0656a210be Merge pull request #11614 from holtrop-wolfssl/f-12237 philljj 2026-10-07 13:34:58 -05:00
  • d572483b4f Merge pull request #11662 from rlm2002/fipsv6_sakke philljj 2026-10-07 13:00:33 -05:00
  • bb748a75a0 XMSS/Falcon: zeroize secret working state and key buffers before free Arpan Sharma 2026-09-03 23:54:09 -05:00
  • 32a7e83d30 aes, cmac: refuse a zero tag length in the setters kaleb-himes 2026-10-07 11:25:58 -06:00
  • 9de075f84c aes: refuse changing an associated tag length, drop it on Silabs SE kaleb-himes 2026-10-06 17:08:33 -06:00
  • b173ef97ef cmac: associate the device path tag length only for valid arguments kaleb-himes 2026-10-05 19:35:28 -06:00
  • 326311d455 tests: skip the tag tests on ports that bring their own GCM or CCM kaleb-himes 2026-10-05 14:18:25 -06:00
  • d2f3a51793 tests: skip the cmac device tag test when software AES is stripped kaleb-himes 2026-10-01 09:56:11 -06:00
  • 0d83c724a6 Fixing CI and skoll items kaleb-himes 2026-09-29 11:03:13 -06:00
  • 5e4c5befac aes: tidy tag association spacing and guards, note the object write kaleb-himes 2026-09-29 09:01:32 -06:00
  • 0cdf6541f7 aes: refuse the tag association opt-out in FIPS v7 and later kaleb-himes 2026-09-28 21:30:51 -06:00
  • 255602ee85 tests: cover the tag association clear, lower bound and device paths kaleb-himes 2026-09-28 17:22:28 -06:00
  • 6010cfd805 aes: add WOLFSSL_NO_AES_TAG_ASSOCIATION to opt out of the tag rule kaleb-himes 2026-09-28 17:17:39 -06:00
  • ea1bcf05fb tests: cover the EVP tag length rule and note it in the docs kaleb-himes 2026-09-28 16:44:28 -06:00
  • 3eb3868fe7 cmac: clear the tag association when the callback path sets a key kaleb-himes 2026-09-28 16:16:22 -06:00
  • b2fb58018d tests: gate the 12-byte tag cases on the configured minimum tag size kaleb-himes 2026-09-28 16:13:06 -06:00
  • 27d93e2e55 AES: keep the tag check ahead of crypto callback dispatch kaleb-himes 2026-09-17 09:58:23 -06:00
  • e7aad59073 cmac: skip tag association when aes.h is pinned by selftest kaleb-himes 2026-09-17 09:32:22 -06:00
  • 787825798f tests: name the cmac tag sizes instead of bare numbers kaleb-himes 2026-09-17 07:56:41 -06:00
  • a803539a83 AES: let crypto callback devices set their own tag policy kaleb-himes 2026-09-17 07:39:18 -06:00
  • 3f93442257 AES: document which setters clear the tag length association kaleb-himes 2026-09-17 05:55:41 -06:00
  • 4ffcbcbbde tests: match tag helper build gates to their call sites kaleb-himes 2026-09-16 22:35:54 -06:00
  • 24f40c067a AES/CMAC: associate one tag length with a key per SP 800-38B/C/D kaleb-himes 2026-09-16 21:35:56 -06:00
  • b44b1c654b Don't emit an empty policyQualifiers SEQUENCE in certificatePolicies Emma Stensland 2026-09-09 11:19:08 -06:00
  • dba52cf55b Rust wrapper: mldsa: use cfg gates for level constants Josh Holtrop 2026-09-30 14:47:11 -04:00
  • fce5e879d5 Merge pull request #11664 from rlm2002/fipsv6 philljj 2026-10-07 11:26:05 -05:00
  • 84fa109943 Merge pull request #11556 from holtrop-wolfssl/f-10085 philljj 2026-10-07 10:03:39 -05:00
  • 8639f5259c Fix the ML-DSA benchmark verifying a baked signature against the wrong key David Garske 2026-10-06 11:06:17 -07:00
  • c55f09c545 sp: fix ECC non-blocking build with the SP assembly implementations David Garske 2026-10-07 06:58:53 -07:00
  • e09a10ecd5 Merge pull request #11625 from dgarske/cryptonly_nomalloc philljj 2026-10-07 08:38:22 -05:00
  • 00e6291105 Merge pull request #11485 from holtrop-wolfssl/f-11271 philljj 2026-10-07 08:37:00 -05:00
  • 016e6ee311 session: initialize the external cache copy flag to 1 Yosuke Shimizu 2026-09-15 15:16:40 +09:00
  • 38b5c376b9 Drop the sanitizer claim from the DHE-PSK test comments Tobias Frauenschläger 2026-10-06 19:12:10 +02:00
  • a92fa28e1e Test the pre-master secret buffer against a DHE-PSK exchange Tobias Frauenschlaeger 2026-08-22 22:37:29 +00:00
  • 044bbfc0fa Size the pre-master secret buffer by the key exchanges Tobias Frauenschlaeger 2026-08-22 21:16:52 +00:00
  • 4ee9927e4c Carry the pre-master secret with the handshake arrays Tobias Frauenschlaeger 2026-08-21 22:28:45 +00:00
  • e9908ab34f Accept a full session chain in wolfSSL_SESSION_get0_peer() Tobias Frauenschläger 2026-10-06 19:50:12 +02:00
  • 54aa66af8a Reset the session certificate chain for each Certificate message Tobias Frauenschläger 2026-09-30 09:48:00 +02:00
  • e7a063ec30 Keep the session certificate chain positional when a certificate is dropped Tobias Frauenschläger 2026-09-16 16:32:58 +02:00
  • 02d0620a48 Fix RPK test build without the OpenSSL compatibility layer Tobias Frauenschläger 2026-09-16 10:46:41 +02:00
  • 033328c006 Do not send EndOfEarlyData again when re-entering connect for post-handshake auth Tobias Frauenschläger 2026-09-16 09:55:16 +02:00
  • 51c7aa5783 Merge pull request #11677 from SparkiDev/pr_merge_fix_1 Tobias Frauenschläger 2026-10-07 09:37:23 +02:00
  • 844fa340b6 TLS 1.3: fix expected resumption secret with early data Sean Parkinson 2026-10-07 14:35:18 +10:00
  • f32984761c Accept zero-length ciphertext in TSIP AES-GCM decrypt Hideki Miyazaki 2026-10-07 11:25:01 +09:00
  • 73e180c664 Fix unit tests broken by the interaction with 0-RTT single-use tickets Sean Parkinson 2026-10-07 11:50:46 +10:00
  • ab4a14619a Merge pull request #11660 from LinuxJedi/se05x-own-mutex Sean Parkinson 2026-10-07 11:23:02 +10:00
  • a9d37e7692 Merge pull request #11658 from gasbytes/maxq-cb-rsa-key-version Sean Parkinson 2026-10-07 11:20:16 +10:00
  • 913adefc1f Merge pull request #11624 from padelsbach/ci-pkg-download Sean Parkinson 2026-10-07 11:12:51 +10:00
  • b40d82ae23 Merge pull request #11584 from gasbytes/dtls-seq-window-ack-fixes Sean Parkinson 2026-10-07 11:09:54 +10:00
  • b0afba1235 Merge pull request #11580 from embhorn/gh11080 Sean Parkinson 2026-10-07 11:03:44 +10:00
  • a746ce7aef Merge pull request #11570 from Frauschi/fix-test-hostent-alignment Sean Parkinson 2026-10-07 11:02:02 +10:00
  • 6f36d495d4 Merge pull request #11539 from gasbytes/wolfssl_x509_store_add_crl-fix Sean Parkinson 2026-10-07 10:58:36 +10:00
  • b2d0b2fe9c Merge pull request #11532 from rizlik/inject_fix Sean Parkinson 2026-10-07 10:55:18 +10:00
  • dc49262d5e Merge pull request #11498 from julek-wolfssl/openresty-1.31.1.1 Sean Parkinson 2026-10-07 10:52:05 +10:00
  • 8719ecb6b7 Merge pull request #11482 from gasbytes/dsa-sig-fix Sean Parkinson 2026-10-07 10:46:56 +10:00
  • 8a93f0f78f Merge pull request #11476 from padelsbach/verify-crle Sean Parkinson 2026-10-07 10:42:28 +10:00