1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • bc8a9fa7c2 Refactor wolfSSL_EVP_DigestUpdate into a chunked function so sizes above word32 max are handled correctly. (F-7103) Kareem 2026-08-14 17:28:35 -07:00
  • e4013538d5 Falcon: white-box vectors for the fpr shift helpers Daniele Lacamera 2026-10-02 21:59:28 +02:00
  • 28fc484554 Merge pull request #11350 from Frauschi/pqc-smime-1-pkcs7-multirecipient JacobBarthelmeh 2026-10-02 13:25:17 -06:00
  • ca554c4248 Falcon: keep fpr_mul selects branchless Daniele Lacamera 2026-10-02 21:20:59 +02:00
  • f9dad2356e Falcon: branchless fpr shift helpers on 32-bit targets Daniele Lacamera 2026-10-02 21:20:59 +02:00
  • d526f9d020 Merge pull request #11548 from padelsbach/crypto-cb-shake-absorb-squeeze philljj 2026-10-02 14:20:49 -05:00
  • c073103cd8 Rust wrapper: scrypt/pbkdf2: zeroize local temporary password hash Josh Holtrop 2026-10-02 15:19:48 -04:00
  • e6abd33bb4 Falcon: keep fpr_add and fpr_floor selects branchless Daniele Lacamera 2026-10-02 21:16:53 +02:00
  • 41e52bc19e Merge pull request #11636 from philljj/clang-tidy Daniel Pouzzner 2026-10-02 13:53:55 -05:00
  • cad8c56369 Merge pull request #11506 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-T Daniel Pouzzner 2026-10-02 13:50:22 -05:00
  • 0c5434ec2a Merge pull request #11393 from gasbytes/session-ticket-cache-fix philljj 2026-10-02 13:47:40 -05:00
  • fb67a7ebab Move C# FIPS wrapper ignores to the root .gitignore jackctj117 2026-10-02 11:25:35 -06:00
  • e2881e043e Add NXP QorIQ SEC (CAAM) hardware crypto port for PowerPC T-series David Garske 2026-09-09 09:00:07 -07:00
  • e65f05e0af random: a rejected seed fails the reseed, not the instantiation kaleb-himes 2026-10-02 11:04:36 -06:00
  • 30cf62ac67 Merge pull request #11633 from holtrop-wolfssl/f-11278 philljj 2026-10-02 12:03:38 -05:00
  • 3e422945ff Rust wrapper: fix ed25519/ed448 Keypair possibly panicking without public component Josh Holtrop 2026-09-17 09:47:20 -04:00
  • 3374c6f9f6 Merge pull request #11511 from holtrop-wolfssl/f-8307 Reda Chouk 2026-10-02 18:15:28 +02:00
  • 927a580533 pkcs7: clang-tidy, fix bugprone inc-dec-in conditions. jordan 2026-10-02 10:59:17 -05:00
  • cf887f1295 Defer tls 1.2 client session caching until the server Finished verifies, so a handshake that fails leaves nothing resumable in the cache RFC 5246 Section 7.2.2 Reda Chouk 2026-09-07 15:19:38 +02:00
  • 8ae68eb4b1 Rust wrapper: mlkem_kem: zeroize local private key and shared secret variables Josh Holtrop 2026-10-02 11:51:18 -04:00
  • f6a75d4aaf Merge pull request #11267 from dgarske/silabs_cryptocb JacobBarthelmeh 2026-10-02 09:46:30 -06:00
  • aa4b743e19 Remove ACVP vector tests from the C# wrapper suite jackctj117 2026-10-02 09:32:25 -06:00
  • d7950e20e9 Merge pull request #11631 from holtrop-wolfssl/f-11277 philljj 2026-10-02 09:51:58 -05:00
  • 35e58f35bf Fix KDF key buffer comments for SRTCP labels Josh Holtrop 2026-10-02 10:33:09 -04:00
  • 6764ed1f4c Merge pull request #11527 from holtrop-wolfssl/f-8285 philljj 2026-10-02 09:31:56 -05:00
  • 0ea2866041 Merge pull request #11563 from miyazakh/f10033_FSPSMgcm JacobBarthelmeh 2026-10-02 08:31:46 -06:00
  • 34ab05567e Merge pull request #11605 from danielinux/fix_ssl_free_ctx_deref philljj 2026-10-02 09:24:01 -05:00
  • 36720795d3 Merge pull request #11622 from holtrop-wolfssl/f-10079 philljj 2026-10-02 09:19:26 -05:00
  • 49df3ed007 Rust wrapper: kdf: fix comments about output buffer size Josh Holtrop 2026-10-02 10:12:03 -04:00
  • 625c5b8bf1 Rust wrapper: blake2: fix comments about hash length Josh Holtrop 2026-10-02 09:11:10 -04:00
  • beabee767c Rust wrapper: hkdf: fix comments about output buffer size Josh Holtrop 2026-10-02 09:15:03 -04:00
  • b254964c38 tls13: generalize secret export to support keyupdate and tickets Marco Oliverio 2026-09-03 17:16:20 +02:00
  • 7e1409350e dtls13 export: address review comments Marco Oliverio 2026-09-02 11:45:57 +02:00
  • 7379d804ae dtls13: support session export and import Marco Oliverio 2026-08-26 15:29:10 +02:00
  • 704178a021 tls13: factor the record key expansion out of DeriveTls13Keys Marco Oliverio 2026-08-26 15:28:38 +02:00
  • 6ae1da08fd DTLS 1.3 record and Multicast fixes - dtls 1.3: don't skip the record padding twice when ignoring a ticket after ech rejection - dtls multicast: look up the sender's peer entry by id when processing a ChangeCipherSpec Reda Chouk 2026-09-30 16:20:48 +02:00
  • 5cc9233fbe - dtls: compute replay window distance across the sequence high word boundary - dtls13: only use an epoich 0 ack as a retransmission hint once encrypted Reda Chouk 2026-09-24 16:26:34 +02:00
  • 88568fdd49 Address review: drop stale ex_data on overlapping ticket reissue Juliusz Sosinowicz 2026-10-02 07:14:44 +00:00
  • 4049566487 Reject trailing data in the first AttributeTypeAndValue of an RDN Juliusz Sosinowicz 2026-10-02 06:33:21 +00:00
  • 723444bd3a Skip the name constraints test where the extension is not supported Juliusz Sosinowicz 2026-09-09 13:04:00 +00:00
  • 5c01876079 Guard the name constraints test certificates like the code using them Juliusz Sosinowicz 2026-09-09 11:54:13 +00:00
  • 7e2cc097bb Define TrustPeerCertBuffer outside the filesystem-only section Juliusz Sosinowicz 2026-09-09 11:28:45 +00:00
  • d8ba0f9ecb Check name constraints against isCA after all extensions are decoded Juliusz Sosinowicz 2026-09-09 10:14:50 +00:00
  • 74d543775f Thread the caller's verify setting into trusted-peer loads and parse multi-valued RDNs Juliusz Sosinowicz 2026-09-09 08:15:28 +00:00
  • c707096f6d Merge pull request #10916 from mattia-moffa/20260715-armasm-fix-625 philljj 2026-10-01 20:54:38 -05:00
  • 2c080bf837 Merge pull request #11365 from twcook86/tls_rfc8446_6.2 philljj 2026-10-01 20:48:43 -05:00
  • e4a05859ea Merge pull request #11610 from douzzer/20260930-armcc-AC5-WC_BARRIER philljj 2026-10-01 20:46:25 -05:00
  • ea80b9d84d Addressed review comments Hideki Miyazaki 2026-10-02 09:56:11 +09:00
  • bce83ff98a Merge pull request #11450 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-Q JacobBarthelmeh 2026-10-01 17:16:10 -06:00
  • fa00891412 Merge pull request #11443 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-R JacobBarthelmeh 2026-10-01 16:58:24 -06:00
  • 5a963bbe68 Merge pull request #11620 from holtrop-wolfssl/f-10077 philljj 2026-10-01 16:24:02 -05:00
  • 064f9e6695 Merge pull request #11621 from holtrop-wolfssl/f-10078 philljj 2026-10-01 16:22:01 -05:00
  • 1673012ea3 Merge pull request #11205 from gasbytes/eku-oid-checksum-fix philljj 2026-10-01 16:15:21 -05:00
  • 00fa593540 Merge pull request #11452 from kaleb-himes/PQ-FS-2026-Part3-SecurityReview-nofallback-S JacobBarthelmeh 2026-10-01 15:00:49 -06:00
  • 7c5977945a Add TLS 1.3 record version tests Eric Blankenhorn 2026-10-01 14:32:27 -05:00
  • b20615be86 Merge pull request #11602 from padelsbach/ci-runtime-zephyr philljj 2026-10-01 14:07:55 -05:00
  • fa3df82c71 CI: drop NetXDuo install.sh from the ThreadX build for performance Paul Adelsbach 2026-10-01 10:32:30 -07:00
  • 018ef0571f test: fix test when using DH params Marco Oliverio 2026-10-01 18:55:34 +02:00
  • 9c0fa2b7f4 PR feedback: decline in Versal ASU, bump CRYPTO_CB_VER to 4 Paul Adelsbach 2026-09-30 09:33:13 -07:00
  • 57096053c0 Add crypto callback for SHAKE absorb and squeeze ops Paul Adelsbach 2026-09-28 09:23:20 -07:00
  • add37e64f3 Merge pull request #11352 from Frauschi/pqc-smime-2-mlkem-asn1-x509 philljj 2026-10-01 11:46:41 -05:00
  • 8bfd781b01 CI: check cache status before running reseed job Paul Adelsbach 2026-09-30 22:45:52 -07:00
  • 13b424d43d CI: Prevent the reseed check being marked 'skipped' Paul Adelsbach 2026-09-30 22:44:29 -07:00
  • a0717c38bb Merge pull request #11601 from padelsbach/cryptocb-reorg-shards JacobBarthelmeh 2026-10-01 10:26:33 -06:00
  • 3d24f9e0bb Merge pull request #11603 from padelsbach/ci-guardrails JacobBarthelmeh 2026-10-01 10:25:38 -06:00
  • c997468781 random: drop an unsound cutoff bound and stop masking source errors kaleb-himes 2026-09-30 13:09:51 -06:00
  • f03294aa35 linuxkm: reinstantiate up to three times before failing a generate kaleb-himes 2026-09-25 13:41:41 -06:00
  • 4d46a11e23 random: condemn on a seed verdict and bound a caller-set APT cutoff kaleb-himes 2026-09-24 11:14:13 -06:00
  • 5c41bfc170 random: guard caller-set seed cutoffs and correct the APT comments kaleb-himes 2026-09-20 20:55:12 -06:00
  • 04b8bc4a58 random: build the seed verdict helper only where DRBG_FAILURE exists kaleb-himes 2026-09-20 19:36:20 -06:00
  • b517d91771 tests/api: sweep every window the seed APT cutoff tables cover kaleb-himes 2026-09-20 14:38:32 -06:00
  • 95ba963aef random: preserve 90B verdicts at instantiate and drop stale returns kaleb-himes 2026-09-20 14:32:54 -06:00
  • 8c7e00ce61 random: hold the seed APT cutoffs as byte deltas from half the window kaleb-himes 2026-09-20 11:07:12 -06:00
  • 0cdb65ee9d random: add the all-values seed check as a 4.3 Req 1c extra test kaleb-himes 2026-09-20 04:42:20 -06:00
  • 617ad9b1c2 linuxkm: recover the DRBG on a seed health-test alarm too kaleb-himes 2026-09-19 21:41:28 -06:00
  • 2a0d6bbdfc tests/api: cover the seed APT cutoff, windows and remainder kaleb-himes 2026-09-19 17:14:03 -06:00
  • b084a5096a random: seed APT uses the 90B reference window and its own cutoff kaleb-himes 2026-09-19 17:14:03 -06:00
  • 00a68582ad tests/api: stuck seed source at reseed reports ENTROPY_RT_E kaleb-himes 2026-09-11 14:52:23 -06:00
  • aeed5847f2 random: keep SP 800-90B RCT/APT verdicts through reseed kaleb-himes 2026-09-19 16:16:44 -06:00
  • af04013ccb linuxkm: add PQ in-core sanity markers to the PIE redirect table kaleb-himes 2026-09-02 16:41:33 -06:00
  • 00269ba58b random: add wc_InitRngFixedSeed() for FIPS known-answer tests kaleb-himes 2026-09-12 16:32:37 -06:00
  • d4d87b026a tests/api: align the new PQ test declarations with their tables kaleb-himes 2026-09-24 16:55:28 -06:00
  • 83a670a89e tests/api: heap-allocate the ML-KEM key in the seed indicator test kaleb-himes 2026-09-24 16:54:55 -06:00
  • b93589c5e4 tests/api: pick an enabled ML-DSA level in the seed indicator test kaleb-himes 2026-09-24 16:54:43 -06:00
  • 42dc1e1d38 Add the FIPS capability macros to .wolfssl_known_macro_extras kaleb-himes 2026-09-15 09:08:24 -06:00
  • 3fa84fbf09 tests/api: expect SEED_OK from the newer SLH-DSA seed tests kaleb-himes 2026-09-11 16:16:31 -06:00
  • b825601fc7 tests/api: expect SEED_OK from the PQ seed-input services kaleb-himes 2026-09-11 16:01:37 -06:00
  • 21ce450035 tests/api: cut the capability gate comments to two lines kaleb-himes 2026-09-11 14:16:29 -06:00
  • 8311c99181 tests/api: replace a double hyphen dash in the SEED_OK comment kaleb-himes 2026-09-11 14:14:54 -06:00
  • 6e3f8af419 tests/api: drop seed indicator comment claims the tree does not back kaleb-himes 2026-09-11 14:14:54 -06:00
  • 5e2949b945 tests/api: drop unused SEED_ARG_ERR and WOLFSSL_TEST_PQC_SEED_KAT kaleb-himes 2026-09-11 14:12:12 -06:00
  • de2cb08f45 tests/api: gate RSA verify on the module 2048-bit minimum kaleb-himes 2026-09-06 12:34:26 -06:00
  • 07b7f54114 tests/api: add the SLH-DSA seed-service indicator test kaleb-himes 2026-09-06 10:33:18 -06:00
  • 12e4b90bf9 tests/api: gate the seed-service indicator on the module capability kaleb-himes 2026-09-02 15:53:35 -06:00
  • cd639a125b Rust wrapper: ed25519/ed448: fix public parameter comment for import_private_key_ex() Josh Holtrop 2026-10-01 11:58:05 -04:00
  • 7289200655 Rust wrapper: aes: fix XTS key size comments Josh Holtrop 2026-10-01 11:54:01 -04:00
  • ee67256986 Rust wrapper: aes: fix GCMStream.decrypt_update comment Josh Holtrop 2026-10-01 11:47:07 -04:00
  • 641ddc673c Rust wrapper: fix rsa_oaep cfg probe for FIPS Josh Holtrop 2026-09-21 14:12:04 -04:00
  • c6a10c9606 Merge pull request #11607 from Frauschi/aes-128-cbc philljj 2026-10-01 10:39:45 -05:00
  • c5eba44b14 Merge pull request #11407 from gasbytes/tls13-zeroization-fixes philljj 2026-10-01 10:21:34 -05:00