1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • 41fb718965 Merge pull request #11427 from gasbytes/crl-revoked-list-compat-api-fix Sean Parkinson 2026-10-07 10:40:03 +10:00
  • e747faf4aa Merge pull request #11415 from stenslae/split/suites-slhdsa-gate Sean Parkinson 2026-10-07 10:34:59 +10:00
  • bbe7989fd3 Merge pull request #11375 from julek-wolfssl/feature/extending_comp_layer Sean Parkinson 2026-10-07 10:32:54 +10:00
  • ec9f14bc4e Merge pull request #11569 from Frauschi/mldsa_mem Sean Parkinson 2026-10-07 10:15:14 +10:00
  • fe9786e1ba Merge pull request #11353 from Frauschi/tls_mem_1 Sean Parkinson 2026-10-07 09:49:51 +10:00
  • f09ab215a8 Merge pull request #11293 from jackctj117/10628 Sean Parkinson 2026-10-07 09:38:14 +10:00
  • e7645e883e Correct comment, v6 does not limit the one-shot decrypt Ruby Martin 2026-10-06 16:57:08 -06:00
  • 126d88a343 Define ecc_get_k_raw and ecc_forcezero_k in eccsi.c and sakke.c if skipped by FIPS v6 enable Ruby Martin 2026-10-06 10:02:59 -06:00
  • d2f328e61a Rust wrapper: rsa_pkcs1v15: make SigningKey::verifying_key infallible Josh Holtrop 2026-09-21 10:49:39 -04:00
  • c48b3821c3 Declare wc_RNG_DRBG_GetReseedCtr as a local function WCv5.2.4-KRNL-CHKIN-r14 Lealem Amedie 2026-10-06 15:22:44 -06:00
  • e61f90d0c2 Merge pull request #11619 from sameehj/fix/enum-enum-conversion-probe philljj 2026-10-06 15:32:03 -05:00
  • 6a2ed8ec8f Add crypto callback for wc_falcon_check_key Paul Adelsbach 2026-10-06 09:35:03 -07:00
  • 15e449f580 CI: address flaky path in hostap workflow Paul Adelsbach 2026-10-06 11:41:12 -07:00
  • d13bfba32e Skip the ML-DSA device hashing test in callback only ML-DSA builds Tobias Frauenschläger 2026-10-06 19:29:15 +02:00
  • e4cb364cfd Add FIPS version guard to AES-XTS tests Ruby Martin 2026-10-06 11:10:29 -06:00
  • 11ed0930e1 Merge pull request #11346 from aidangarske/fenrir-fixes-12309-12312-12310-12311 JacobBarthelmeh 2026-10-06 09:56:57 -06:00
  • 175c67fb5a Merge pull request #11214 from padelsbach/cbonly-mldsa philljj 2026-10-06 10:55:10 -05:00
  • 73b7dc4797 Report the SHA-3 variant of the call, not the one cached on the context Tobias Frauenschläger 2026-09-15 19:50:54 +02:00
  • 3cb91f9200 Keep the key's device id on ML-KEM and ML-DSA internal hashing Tobias Frauenschläger 2026-09-15 11:03:19 +02:00
  • b1ccfa2047 pkcs7: read isDynamic before freeing recipients Sameeh Jubran 2026-10-06 17:42:44 +03:00
  • 444db2b8d2 Fix the ML-DSA white-box make hint dispatch test build Tobias Frauenschläger 2026-10-06 15:38:15 +02:00
  • 75d898a4c5 Allocate the ML-DSA matrix cache before checking a key Tobias Frauenschläger 2026-09-28 16:36:35 +02:00
  • c021c04c48 Drop the ML-DSA key caches when small memory key generation replaces a key Tobias Frauenschläger 2026-09-28 16:36:35 +02:00
  • 23e49f0512 Scrub the ML-DSA signature buffer when smallest memory signing fails Tobias Frauenschläger 2026-09-28 16:36:35 +02:00
  • dc95f4f2b4 Harden the ML-DSA signing range checks Tobias Frauenschläger 2026-09-28 16:36:35 +02:00
  • 9f7e700922 Fix ML-DSA option derivation and build gates Tobias Frauenschläger 2026-09-28 16:36:34 +02:00
  • 198b09a093 Transform each polynomial of y once when signing with small memory Tobias Frauenschläger 2026-09-28 16:36:34 +02:00
  • d899ad8dc9 Separate ML-DSA smallest memory verify from pinned buffers Tobias Frauenschläger 2026-09-28 16:36:34 +02:00
  • 8531d630a9 Fix ML-DSA cached vector build and test failures Tobias Frauenschläger 2026-09-28 16:36:34 +02:00
  • 487f673556 Reduce ML-DSA small memory heap use and add a smallest memory signer Tobias Frauenschläger 2026-09-28 16:36:33 +02:00
  • abd4217caa Use a dedicated mutex for the SE05x port Andrew Hutchings 2026-10-06 14:16:06 +01:00
  • 9a7d77afd6 pkcs7: free encoded recipients in wc_PKCS7_Free Sameeh Jubran 2026-10-06 12:21:08 +03:00
  • 2190edb246 asn: reject RSAPrivateKey with version other than 0 in both decoders Reda Chouk 2026-10-06 14:14:40 +02:00
  • 1d16e4ad83 maxq10xx: install pk callbacks on every wolfssl_ctx, not just the first Reda Chouk 2026-10-06 14:03:10 +02:00
  • 6aff4edc17 Merge pull request #11413 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-N Sean Parkinson 2026-10-06 21:34:50 +10:00
  • 6fdd014de8 Merge pull request #11422 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-M Sean Parkinson 2026-10-06 21:32:22 +10:00
  • f6671beda0 AArch64 assembly: branch instructions Sean Parkinson 2026-09-18 10:15:10 +10:00
  • 6f96db9bf7 Merge pull request #11638 from holtrop-wolfssl/f-8289 philljj 2026-10-06 01:29:39 -05:00
  • 338180e65f Merge pull request #11519 from Frauschi/fixes philljj 2026-10-06 01:23:37 -05:00
  • 57313b9e19 Address review: move AddRDNToName above GetCertName docs, guard CM load test Juliusz Sosinowicz 2026-10-06 05:26:57 +00:00
  • f5dd686105 CI: fix MacOS port issue in openssl.test Paul Adelsbach 2026-10-05 22:20:56 -07:00
  • 0c020b3b3f Stop the Falcon white-box failing when a max|G| > max|F| key does not turn up David Garske 2026-10-05 13:55:36 -07:00
  • 746ef404aa SP C RSA/DH: add sliding window and use hardend fixed window Sean Parkinson 2026-08-24 18:20:15 +10:00
  • b874f7167f Merge pull request #11295 from julek-wolfssl/tls13-0rtt-single-use-bound philljj 2026-10-05 20:34:31 -05:00
  • bc808cbd9c Merge pull request #11457 from rlm2002/coverity philljj 2026-10-05 17:53:41 -05:00
  • 5f1d6369d4 Escape Altera FCS error code comparisons and drop unneeded known macro entries Aidan Garske 2026-10-05 15:46:33 -07:00
  • 3c6bbcf1a4 Add WC_MLDSA_HAVE_NATIVE guard in test_mldsa.c Paul Adelsbach 2026-10-02 13:04:28 -07:00
  • 42bce8f18c PR feedback: add test coverage for MakeKeyFromSeed Paul Adelsbach 2026-10-01 18:58:38 -07:00
  • 58cc77dbe0 Fix RNG test Paul Adelsbach 2026-09-28 17:25:13 -07:00
  • 8528f08a30 Address CI failure and note that swdev.c needs updating as a future improvement Paul Adelsbach 2026-09-16 23:06:20 -07:00
  • 3384f376e7 PR feedback: seed dispatch, precompiler guards Paul Adelsbach 2026-09-08 15:17:42 -07:00
  • 2085760644 Update configure.ac for ml-dsa Paul Adelsbach 2026-09-02 20:37:59 -07:00
  • 5aa7a191d6 PR feedback: rework pubkey detection, pass seed to device (as done in SLHDSA PR) Paul Adelsbach 2026-08-27 10:50:00 -07:00
  • 02d796129d Add CB_ONLY mode for ML-DSA Paul Adelsbach 2026-08-26 22:19:43 -07:00
  • 1795dc6432 Merge pull request #11315 from AlexLanzano/casper-fix philljj 2026-10-05 17:23:52 -05:00
  • dc7b2d83d8 Probe libFCS with a prototyped link test so configure passes -Werror Aidan Garske 2026-10-05 14:22:47 -07:00
  • 3136f17a93 Merge pull request #11212 from padelsbach/cbonly-mlkem philljj 2026-10-05 16:17:33 -05:00
  • 769b9a0617 Fix Altera FCS device key reuse without ECDHE, libFCS configure probe and first digest Aidan Garske 2026-10-05 14:15:11 -07:00
  • 3fee3b3e1e Free newly claimed QNX CAAM partitions on mapping failure Aidan Garske 2026-10-05 11:58:50 -07:00
  • e239fb36d6 Merge upstream master into Agilex 5 FCS port Aidan Garske 2026-10-05 11:24:14 -07:00
  • b47b771563 Fix QNX CAAM partition ownership tracking Aidan Garske 2026-09-01 15:29:49 -07:00
  • 10df338fa6 Fix QNX CAAM review findings Aidan Garske 2026-09-01 11:36:28 -07:00
  • 592d69cbc9 F-12311 - Validate QNX partition access ranges Aidan Garske 2026-09-01 10:18:31 -07:00
  • ec4ac91775 F-12310 - Enforce QNX partition ownership Aidan Garske 2026-09-01 09:49:59 -07:00
  • 4213ba999a F-12308 - Bound QNX CAAM BLOB key modifier input Aidan Garske 2026-09-01 08:38:43 -07:00
  • f838ec1ff1 F-12312 - Reject short QNX AES requests Aidan Garske 2026-09-01 09:38:27 -07:00
  • 85bc038536 F-12309 - Validate QNX secure-memory partition indices Aidan Garske 2026-09-01 08:57:35 -07:00
  • b34f33a5c8 CI: increase timeouts in workflow scripts Paul Adelsbach 2026-10-05 09:41:29 -07:00
  • 295044f584 CI: stop wrapped test servers with TERM, not KILL Paul Adelsbach 2026-10-05 09:25:41 -07:00
  • 603574f79e TLSX_GetSize: remove dead ret value check and while break Ruby Martin 2026-10-02 13:08:03 -06:00
  • e8aed64817 Set ssl and ctx to NULL after free, prevents use after free Ruby Martin 2026-09-15 16:30:11 -06:00
  • bfef0b456f Add ssl NULL checks in dtls13 before dereferencing Ruby Martin 2026-09-15 15:52:11 -06:00
  • 57dcbca9d0 Testing: Bound cni_buildName() to the caller's buffer size Ruby Martin 2026-09-15 12:50:35 -06:00
  • b5137ac84d restructure check to eliminate dead hmacOidBuf == NULL check Ruby Martin 2026-09-14 17:09:04 -06:00
  • 32a638c6a1 If out is null when prePopulated == 1, return 0 early in d2iTryEd25519Key() Ruby Martin 2026-09-14 15:53:02 -06:00
  • 0e7cc2fe69 Use one-element array for empty-message stand-in (ARRAY_VS_SINGLETON) Ruby Martin 2026-09-10 11:04:49 -06:00
  • ae5c820587 mlkem: clear the ciphertext when an encapsulation fails kaleb-himes 2026-10-05 08:18:50 -06:00
  • feb1c87933 mldsa: clear the signature buffer when a sign fails kaleb-himes 2026-10-05 08:18:50 -06:00
  • c29c2479cb slhdsa: clear the signature buffer when a sign fails kaleb-himes 2026-10-05 08:18:50 -06:00
  • 1a0cfe2b9f tests: keep the ML-KEM allocator hooks inside their memory guard kaleb-himes 2026-10-04 14:18:22 -06:00
  • 121521b9e0 mlkem: drop the old key flags before a decode replaces its buffers kaleb-himes 2026-10-04 10:13:52 -06:00
  • 130dc923be mlkem: refuse software decapsulation before decrypting without a public key kaleb-himes 2026-10-03 06:41:35 -06:00
  • 2d0897eb5d tests: zero the ML-KEM reuse test keys so a failed init frees safely kaleb-himes 2026-10-02 15:31:39 -06:00
  • 1fc0ee378e mlkem: a decoded key drops the matrix cached from the key it replaces kaleb-himes 2026-10-02 11:43:06 -06:00
  • 40d9d88640 tests: a refused ML-KEM public key decode leaves the key unusable kaleb-himes 2026-10-01 16:10:14 -06:00
  • 79a8949671 settings: say how to get WC_C_DYNAMIC_FALLBACK in the FIPS v7 error kaleb-himes 2026-10-01 16:08:45 -06:00
  • 2ff5efd3b3 mldsa: wrap four status lines to the 80-column convention kaleb-himes 2026-10-01 16:08:45 -06:00
  • 5314276184 unit-mcdc: whitebox comments describe a refused save as an error kaleb-himes 2026-10-01 16:00:23 -06:00
  • e4914cf843 mlkem: a failed public key decode leaves the key unusable kaleb-himes 2026-10-01 15:49:28 -06:00
  • 8b3a380117 unit-mcdc: mldsa whitebox follows the make_hint valid out-parameter kaleb-himes 2026-10-01 15:45:18 -06:00
  • 5896d12e9d sp x86_64: define the ct save macros before the per-curve guards kaleb-himes 2026-10-01 15:45:18 -06:00
  • 6252ca2e19 linuxkm: require the native vector save in FIPS v7 kernel builds kaleb-himes 2026-10-01 11:59:22 -06:00
  • 80d2ce62f5 linuxkm: no shim C fallback in validated FIPS v7 builds kaleb-himes 2026-10-01 10:52:48 -06:00
  • f219010cab linuxkm: correct the hardirq comment about falling back to C kaleb-himes 2026-10-01 10:00:37 -06:00
  • 0b9bb0a481 linuxkm: stop re-running the CASTs with the registers disabled kaleb-himes 2026-10-01 10:00:37 -06:00
  • 19fe1ce0dd unit-mcdc: check verify still runs when the base lane needs no save kaleb-himes 2026-10-01 10:00:37 -06:00
  • e287ed4fc5 sp x86_64: base lane saves only when the ct table lookup runs kaleb-himes 2026-10-01 10:00:37 -06:00
  • 9bc84691d1 linuxkm: pin AES-XTS to the C lane when there is no fallback kaleb-himes 2026-10-01 09:44:49 -06:00
  • 05f682d6a2 mldsa: keep the verify error instead of the next sampler status kaleb-himes 2026-10-01 09:38:33 -06:00
  • 4a97c10893 mldsa: stop signing when the small-mem NTT reports an error kaleb-himes 2026-10-01 09:38:33 -06:00