Reda Chouk bbe4bb52bf Zeroizization fixes in tls13 ...

- wipe the whole preMasterSEcret buffer at the tls 1.3 handshake secret's last use as preMasterSz no longer describes its contents
- zeroize the tls 1.3 early secret and teh psk it was extracted from at their last use in DeriveHandshakeSecret

2026-10-01 14:35:05 +02:00

..

bio.c

Add a verbose logging tier and move the highest-volume traces onto it

2026-09-11 14:10:31 -07:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Merge pull request #11151 from kojo1/timeLen

2026-09-30 16:12:57 -05:00

dtls13.c

dtls13: accept a NewConnectionId CID longer than DTLS_CID_MAX_SIZE

2026-09-11 12:48:24 +02:00

dtls.c

dtls: ignore unauthenticated datagrams until the peer is verified

2026-09-22 22:52:01 +02:00

include.am

Merge pull request #11218 from SparkiDev/regression_fixes_30

2026-09-03 12:23:53 -05:00

internal.c

Merge pull request #11230 from aidangarske/fenrir-fixes-10620

2026-10-01 00:45:46 -05:00

keys.c

Merge pull request #10978 from kareem-wolfssl/zd21980

2026-09-15 13:51:51 -06:00

ocsp.c

F-6523 - Read remaining length (fcur) not total (flen) in d2i_OCSP_RESPONSE_bio

2026-08-12 15:51:59 -07:00

pk_ec.c

Give the FFDHE groups their own NIDs instead of a sentinel

2026-09-17 05:14:08 +00:00

pk_rsa.c

cap derLen at largest valid DER size

2026-08-20 13:11:32 -06:00

pk.c

Merge pull request #11149 from kojo1/no-pwdbased

2026-09-28 22:05:42 -05:00

quic.c

Distinguish QUIC alerts from TLS alerts in the alert history.

2026-09-21 12:11:49 -07:00

sniffer.c

sniffer: use the wire session id length in both hello parsers

2026-09-30 08:45:05 +09:00

ssl_api_cert.c

Merge pull request #11089 from julek-wolfssl/tls13-certificate-authorities-api

2026-09-30 14:40:32 -05:00

ssl_api_crl_ocsp.c

ssl.c split: cleanup

2026-08-07 09:30:56 +10:00

ssl_api_dtls.c

address reviewer's comments

2026-09-24 15:34:15 +02:00

ssl_api_ext.c

Merge pull request #11230 from aidangarske/fenrir-fixes-10620

2026-10-01 00:45:46 -05:00

ssl_api_hs.c

DTLS 1.3: accept fragmented ClientHello when cookies are disabled

2026-09-17 11:01:32 +02:00

ssl_api_pk.c

Add curve448 crypto callback support

2026-08-21 17:04:18 -06:00

ssl_api_rw.c

Fix CI: let a started shutdown finish after a handshake in init

2026-09-17 05:23:27 +00:00

ssl_asn1.c

Add a verbose logging tier and move the highest-volume traces onto it

2026-09-11 14:10:31 -07:00

ssl_bn.c

Add a verbose logging tier and move the highest-volume traces onto it

2026-09-11 14:10:31 -07:00

ssl_certman.c

Merge pull request #11239 from aidangarske/fenrir-fixes-10608

2026-09-29 08:34:06 -05:00

ssl_crypto.c

Code review feedback

2026-08-21 10:55:16 -07:00

ssl_ech.c

Restore the caller's key RNG after an HPKE operation

2026-08-01 12:04:56 +02:00

ssl_err.c

Translate VERSION_ERROR to SSL_R_WRONG_VERSION_NUMBER in ERR_GET_REASON

2026-08-08 19:32:23 +09:00

ssl_load.c

Falcon: size key buffers by level, add dynamic keys, halve the verify arena

2026-09-29 15:58:27 +02:00

ssl_misc.c

F-5625 - Cap BIO file read at MAX_WOLFSSL_FILE_SIZE

2026-08-12 15:51:59 -07:00

ssl_p7p12.c

Transfer PKCS7 cert stack ownership only on encode success

2026-08-14 14:52:43 -07:00

ssl_sess.c

ssl_sess: cleanup for review.

2026-09-21 18:30:21 -05:00

ssl_sk.c

Add a verbose logging tier and move the highest-volume traces onto it

2026-09-11 14:10:31 -07:00

ssl_tsp.c

Time-Stamp Protocol (RFC 3161)

2026-07-08 09:33:47 +10:00

ssl.c

Merge pull request #11089 from julek-wolfssl/tls13-certificate-authorities-api

2026-09-30 14:40:32 -05:00

tls13.c

Zeroizization fixes in tls13

2026-10-01 14:35:05 +02:00

tls.c

Merge pull request #11230 from aidangarske/fenrir-fixes-10620

2026-10-01 00:45:46 -05:00

wolfio.c

dtls: ignore unauthenticated datagrams until the peer is verified

2026-09-22 22:52:01 +02:00

x509_str.c

Inhreit full verify params into X509_STORE_CTX and WOLFSSL

2026-09-21 20:29:38 +02:00

x509.c

Falcon: size key buffers by level, add dynamic keys, halve the verify arena

2026-09-29 15:58:27 +02:00