1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • 627ebcc4fd tests: w1 encode test checks status instead of pinning a refusal kaleb-himes 2026-10-01 06:45:32 -06:00
  • 3cabac8bb5 configure: gate the fallback on the same test settings.h uses kaleb-himes 2026-10-01 06:45:32 -06:00
  • 47da9b6894 slhdsa: wipe the auth-path slot that holds a private key value kaleb-himes 2026-10-01 06:45:32 -06:00
  • 11db6e87b3 mlkem: do not decapsulate after a refused save in decompression kaleb-himes 2026-10-01 06:45:32 -06:00
  • bfa8f74b0c settings: keep the save fuzzer out of the LMS and XMSS lanes kaleb-himes 2026-10-01 06:35:21 -06:00
  • 3398e4aba6 xmss: fail closed on the n-way batch lanes kaleb-himes 2026-10-01 06:35:21 -06:00
  • d7ee43ae2d lms: fail closed on the n-way batch lanes kaleb-himes 2026-10-01 06:35:21 -06:00
  • e3d7351d61 slhdsa: fail closed on the AVX512 lanes upstream added kaleb-himes 2026-10-01 06:04:08 -06:00
  • af4bc8aeaf mldsa: correct the NTT flavor note after the lane pinning kaleb-himes 2026-09-24 16:58:38 -06:00
  • 172d309b9f mlkem: correct the return docs for paths that can now fail kaleb-himes 2026-09-24 16:58:38 -06:00
  • 371fdcf91c slhdsa: wipe the slot the failing iteration may have written kaleb-himes 2026-09-24 16:58:38 -06:00
  • 238328e6a9 unit-mcdc: check the add_points return in the whitebox sweep kaleb-himes 2026-09-24 16:24:56 -06:00
  • 428a4b9e3f configure: limit the fallback lockout to FIPS v7 builds kaleb-himes 2026-09-24 16:24:56 -06:00
  • b1a3bdf917 settings: describe what pins the lane in these files kaleb-himes 2026-09-24 16:24:56 -06:00
  • 093dadceaa slhdsa: clear the seed state and partial signature on refusal kaleb-himes 2026-09-24 16:24:56 -06:00
  • 4c6df50e9d mldsa: say not valid on a refused save, gate the hint count kaleb-himes 2026-09-24 16:24:56 -06:00
  • f48a5affdb mlkem: treat a refused save as a ciphertext mismatch kaleb-himes 2026-09-24 16:24:56 -06:00
  • 176e3a4279 mldsa: pass the small-mem W0 range check through the save contract kaleb-himes 2026-09-13 16:47:38 -06:00
  • 47870ef68e settings: keep the save fuzzer out of files with no C fallback kaleb-himes 2026-09-12 17:49:21 -06:00
  • c22e5aa029 settings: refuse WC_C_DYNAMIC_FALLBACK in validated FIPS builds kaleb-himes 2026-09-12 17:01:27 -06:00
  • b504681698 configure: allow WC_C_DYNAMIC_FALLBACK only in FIPS dev builds kaleb-himes 2026-09-12 16:54:41 -06:00
  • d1c525ad4d mldsa: separate lane selection from vector-register ownership kaleb-himes 2026-09-11 11:31:17 -06:00
  • 59a3b28a8a mlkem: separate lane selection from vector-register ownership kaleb-himes 2026-09-11 11:31:17 -06:00
  • 1c70b658ef slhdsa: separate lane selection from vector-register ownership kaleb-himes 2026-09-11 11:31:17 -06:00
  • 489853fa1e unit-mcdc: a build with no instrumented SP call is not a failed check kaleb-himes 2026-10-02 07:25:09 -06:00
  • 60716639de unit-mcdc: fail the sp x86_64 whitebox if a refused save still runs kaleb-himes 2026-09-09 12:10:55 -06:00
  • 0c19693adf cpuid: FIPS v7 reads CPU features once at power on, changes are ignored kaleb-himes 2026-10-02 07:25:09 -06:00
  • b076e1a4e5 unit-mcdc: sp x86_64 whitebox comments follow the fail-closed dispatch kaleb-himes 2026-09-06 12:48:02 -06:00
  • 0a9aeae4f2 sp x86_64: separate lane selection from vector-register ownership kaleb-himes 2026-09-06 09:34:20 -06:00
  • a592403878 Merge pull request #11445 from dgarske/nuvoton_m2354_cryptocb JacobBarthelmeh 2026-10-05 09:23:32 -06:00
  • 3c44545c10 Merge pull request #11342 from Frauschi/tls_mem_5 JacobBarthelmeh 2026-10-05 09:20:45 -06:00
  • 20d01e1a8f Merge pull request #11440 from aidankeefe2022/x509-depth-fix JacobBarthelmeh 2026-10-05 08:58:49 -06:00
  • 4861ba7d3a Merge pull request #11639 from danielinux/falcon-ct-hardening Tobias Frauenschläger 2026-10-05 14:04:54 +02:00
  • c0a630d30b Store an alt name with its entry in one allocation Tobias Frauenschlaeger 2026-08-21 22:31:29 +00:00
  • 84c4b409cb Provide XATOI under STRING_USER and in the platform templates David Garske 2026-10-01 16:35:46 -07:00
  • 910b7fb7ad Size key identifier buffers from the hash the build actually uses David Garske 2026-10-01 16:35:46 -07:00
  • 72222b8ff1 Address review: ignore non-owning cache entries for session ex_data Juliusz Sosinowicz 2026-10-05 05:54:30 +00:00
  • cd6acb72ab Encode certificate names and extensions without an allocator David Garske 2026-10-01 16:35:46 -07:00
  • 1e23853f18 Add a wolfCrypt-only CMake option and fix stray defines in options.h David Garske 2026-10-01 16:35:46 -07:00
  • 854b1d3ff3 Address review: only set a conversion form oct2key can name Juliusz Sosinowicz 2026-09-07 05:52:44 +00:00
  • 10c53bbf7e X509_add1_ext_i2d: validate an extKeyUsage stack before replacing Juliusz Sosinowicz 2026-08-27 17:17:55 +00:00
  • c229c140b7 X509_add1_ext_i2d: refuse an extension encoded under another NID Juliusz Sosinowicz 2026-08-27 17:06:54 +00:00
  • bb5765121a X509_add1_ext_i2d: report NIDs with no presence tracking Juliusz Sosinowicz 2026-08-27 16:58:43 +00:00
  • 76031d9797 Consume extKeyUsage object stacks in X509_add_ext Juliusz Sosinowicz 2026-08-27 16:58:43 +00:00
  • 8994bcf45d Record the point conversion form in EC_KEY_oct2key Juliusz Sosinowicz 2026-08-27 16:58:29 +00:00
  • 6e5278f8d4 Keep new test comment within 80 columns Juliusz Sosinowicz 2026-07-28 12:44:50 +00:00
  • adf5372d89 Fix X509V3_ADD_* semantics and extension removal state Juliusz Sosinowicz 2026-07-28 12:41:48 +00:00
  • 67aee1e0be Fix SSL_set_ciphersuites test under NO_ERROR_STRINGS Juliusz Sosinowicz 2026-07-28 10:08:21 +00:00
  • eb8793391a Bugfix - fix tests failure Roy Carter 2026-06-21 15:39:15 +03:00
  • 6942f35df0 Refactor - Fix PR notes Roy Carter 2026-06-07 10:53:59 +03:00
  • 5c8ac7998f Introduce missing functionality that was found in compatibility layer of wolfssl Roy Carter 2026-05-22 21:56:18 +03:00
  • 21bb7a10f1 Merge pull request #11579 from julek-wolfssl/xmlsec-compat JacobBarthelmeh 2026-10-04 23:03:00 -06:00
  • ca8d28f9b9 Merge pull request #11587 from embhorn/gh11116 JacobBarthelmeh 2026-10-04 22:33:28 -06:00
  • 8d77c82285 Merge pull request #11618 from padelsbach/ci-reseed-skip philljj 2026-10-04 21:56:17 -05:00
  • 90de9ffabb Merge pull request #11568 from holtrop-wolfssl/f-11274 philljj 2026-10-04 21:52:45 -05:00
  • 052973cd38 Ensure the casper and hashcrypt accelerator functions are using mutexes Alex Lanzano 2026-08-30 15:07:38 -04:00
  • 84aaaf9957 Merge pull request #11597 from sebastian-carpenter/ml-dsa-evp JacobBarthelmeh 2026-10-03 22:03:45 -06:00
  • b13a923b75 Merge pull request #11468 from padelsbach/ossl-compat-issue-02 JacobBarthelmeh 2026-10-03 21:31:25 -06:00
  • 9173cf7baa Merge pull request #11514 from holtrop-wolfssl/f-12236 JacobBarthelmeh 2026-10-03 21:13:28 -06:00
  • 8f81b78579 Merge pull request #11634 from holtrop-wolfssl/f-13052 philljj 2026-10-03 15:13:33 -05:00
  • 0f403f8f40 Merge pull request #11635 from holtrop-wolfssl/f-8288 philljj 2026-10-03 15:08:41 -05:00
  • ef77203732 ML-DSA: check len for NULL in the key length getters Arpan Sharma 2026-10-03 09:18:54 -05:00
  • 2411aae3f7 Merge pull request #11560 from jackctj117/C#-FIPS JacobBarthelmeh 2026-10-03 00:12:53 -06:00
  • a988163b00 Address test issue, update dox Paul Adelsbach 2026-10-01 17:42:53 -07:00
  • 44c5d0017a PR feedback: cryptocb find handling, remove TLS requirement, test issue, windows arm64 asm Paul Adelsbach 2026-09-30 21:09:26 -07:00
  • 59f10e6f82 PR feedback: add precompiler checks, update test cases Paul Adelsbach 2026-09-08 09:52:59 -07:00
  • 4628df01f0 Add CB_ONLY mode for ML-KEM Paul Adelsbach 2026-09-02 20:36:23 -07:00
  • a8d1ab3235 Merge pull request #11611 from dgarske/mldsa_cryptocb philljj 2026-10-02 22:04:39 -05:00
  • f04673ac94 cryptocb: add ML-DSA keygen, sign and verify test coverage David Garske 2026-09-30 10:16:46 -07:00
  • 592c478e01 Code review feedback: Preserve error return code and continue running rather than exiting early in wc_rng_bank_reseed_range. Kareem 2026-10-02 16:11:44 -07:00
  • 0392f764d8 Add Nuvoton NuMicro M2354 crypto callback port David Garske 2026-09-17 15:41:57 -07:00
  • c2d54df3fb arm32 FIPS: build plain ARMv7, softfp NEON C, own memset, one SHA-256 body kaleb-himes 2026-10-01 17:16:41 -06:00
  • 24160519d2 skoll review fixes: v7-only arm32 pin, dead terms, comments, docs, tests kaleb-himes 2026-10-01 16:30:51 -06:00
  • f45c86e55c arm32 kernel: SHA-512 and SHA-3 on scalar lanes, everything else NEON kaleb-himes 2026-10-01 14:36:13 -06:00
  • b0868cd096 aes ctr: claim the vector registers before the leftover drain kaleb-himes 2026-10-01 13:39:59 -06:00
  • ca44fb3a6e skoll review fixes: arm32 wrapper guards, test gaps, Kbuild flag, comments kaleb-himes 2026-10-01 11:43:22 -06:00
  • 0599f87e7f aes: note which path the GCM auth failure wipe covers kaleb-himes 2026-10-01 06:07:43 -06:00
  • 7927ab5cb0 tests: cover the 32-bit Arm bulk decrypt path with unaligned buffers kaleb-himes 2026-10-01 06:07:43 -06:00
  • 89862f1ee2 aes arm32: bulk block loads take unaligned buffers, with a test kaleb-himes 2026-09-09 08:44:01 -06:00
  • f5d83bca02 linuxkm: pack the EABI division pair and report a zero divisor kaleb-himes 2026-09-08 19:55:53 -06:00
  • 659b0939d3 settings: move the 32-bit Arm FIPS pin out of the curve25519 guard kaleb-himes 2026-09-08 19:55:53 -06:00
  • 69ae24bc02 aes, linuxkm: 32-bit x86 GCM carve and the 32-bit Arm kernel module kaleb-himes 2026-09-08 19:55:53 -06:00
  • 3bfdf354bc Avoid suppressing errors from wc_rng_bank_checkin in wc_rng_bank_reseed_range. (F-7414) Kareem 2026-10-02 14:29:54 -07:00
  • 25c706099d Merge pull request #11441 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-P JacobBarthelmeh 2026-10-02 15:16:34 -06:00
  • 2c0f460f8f Fix undersized buffers and incorrect read lengths for the file read case in unit tests. Kareem 2026-08-28 12:23:04 -07:00
  • 2f4ad074ee Fix wc_PKCS7_EncodeContentStream for sizes above BER_OCTET_LENGTH Kareem 2026-08-21 17:34:27 -07:00
  • e1a0915127 Code review feedback Kareem 2026-08-21 10:41:13 -07:00
  • 63bb10b5e2 Fix failing test Kareem 2026-08-18 15:10:44 -07:00
  • ec2e05c29b Correct ordering of added EVP_DigestUpdate checks to match OpenSSL's behavior. Kareem 2026-08-17 10:55:03 -07:00
  • 208bf80be5 Code review feedback Kareem 2026-08-17 10:17:08 -07:00
  • 6851003490 Correct size documentation for wc_AesCfb1Encrypt and wc_AesCfb1Decrypt (bits not bytes). (F-9329) Kareem 2026-08-14 17:54:54 -07:00
  • 3c54695d53 Clear hash in EVP_CIPHER_MD_CTX_copy_ex before all possible returns. (F-8166) Kareem 2026-08-14 17:53:59 -07:00
  • 57502e3ded Merge pull request #11199 from dgarske/sec_qoriq JacobBarthelmeh 2026-10-02 14:55:35 -06:00
  • c07e10c40d Merge pull request #11095 from rizlik/dtls13_export philljj 2026-10-02 15:10:17 -05:00
  • 23438233d1 Avoid clamping in EncodeAttributes when attribute size exceeds capacity. (F-7624) Kareem 2026-08-14 17:44:47 -07:00
  • b334acb134 Correct decOidSz in wc_ecc_get_curve_id_from_oid. (F-7623) Kareem 2026-08-14 17:40:53 -07:00
  • bde5e2f2d0 Use subtraction-based comparison in EVP fillBuff. (F-7446) Kareem 2026-08-14 17:39:37 -07:00
  • 07a546459c Zero out SRP user and key when overwriting them. (F-7400) Kareem 2026-08-14 17:36:02 -07:00
  • 878d558c2c Zero out the digest in SHA256/512 generation functions. (F-7135) Kareem 2026-08-14 17:34:35 -07:00
  • 50c9ecb78b Always use new key in wc_ecc_decrypt to avoid freeing passed in key. (F-7105) Kareem 2026-08-14 17:32:07 -07:00