Commit Graph

  • 7b948fe04d Merge pull request #667 from JacobBarthelmeh/SGX Kaleb Himes 2016-12-15 16:23:29 -07:00
  • ec90d72412 Merge pull request #666 from cconlon/chachafix toddouska 2016-12-15 12:08:08 -08:00
  • 01d8201284 Merge pull request #665 from cconlon/certs toddouska 2016-12-15 12:03:12 -08:00
  • d0533c6dad Merge pull request #664 from cconlon/pkcs7 toddouska 2016-12-15 12:01:00 -08:00
  • 9d94474133 Merge pull request #668 from ejohnstown/handshake-size dgarske 2016-12-15 11:41:53 -08:00
  • 6959c21fdd Merge pull request #663 from dgarske/stm32_iar toddouska 2016-12-15 11:26:43 -08:00
  • be65f26dd2 If there is a badly formed handshake message with extra data at the end, but the correct size with the extra data, send a decode_error alert and fail the handshake. John Safranek 2016-12-14 13:07:06 -08:00
  • 33f21e8b8d set correct cert type in CertificateRequest when using ChaCha suite with ECDSA Chris Conlon 2016-12-14 11:34:10 -07:00
  • e16f2c0722 add Windows build for SGX Jacob Barthelmeh 2016-12-14 10:41:52 -07:00
  • 41f6863970 add missing certs and keys to certs/include.am Chris Conlon 2016-12-14 09:46:41 -07:00
  • 55554b79a9 PKCS#7: fix use after free in wc_DecodeKtri Chris Conlon 2016-12-14 09:15:45 -07:00
  • 20887a8c35 Implementation of scrypt Sean Parkinson 2016-12-14 16:47:54 +10:00
  • e5d1e3ae10 PKCS#7: only output test bundles when PKCS7_OUTPUT_TEST_BUNDLES is defined Chris Conlon 2016-12-13 09:52:25 -07:00
  • 22ecd55964 Don't ForceZero in assembly optimized versions. Sean Parkinson 2016-12-09 08:31:37 +10:00
  • a1b92dc809 Tidy up CPU Id check not not reference SHA384 Sean Parkinson 2016-11-12 11:17:35 +10:00
  • 24cfba4276 Fix ForceZero calls Sean Parkinson 2016-11-11 13:14:58 +10:00
  • 0e4aa233ba Use ForceZero in all implementations of Transform Sean Parkinson 2016-11-10 15:18:05 +10:00
  • fd21023823 Share code between SHA512 and SHA384 Sean Parkinson 2016-11-10 15:08:37 +10:00
  • 811be0eb9e Faster zeroize on x86_64 Sean Parkinson 2016-11-10 15:06:59 +10:00
  • f70860a9af Make sure NO_64BIT is defined. David Garske 2016-12-13 12:18:21 -08:00
  • fd9a94b2bd Fixes to build STM32 with IAR. David Garske 2016-12-13 10:24:55 -08:00
  • dad0cfda92 add EnvelopedData ECC support, refactor pkcs7 Chris Conlon 2016-12-09 17:22:09 -07:00
  • 483e461c49 Merge pull request #647 from kaleb-himes/RIOT_OS dgarske 2016-12-10 19:13:19 -08:00
  • 6c7e1785aa EXIT_TEST macro added for cleaner implementation and maintenance kaleb-himes 2016-12-09 19:39:36 -07:00
  • 1748045d52 use NO_WRITEV for portability kaleb-himes 2016-12-09 19:12:25 -07:00
  • 5006306bb8 PKCS#7: add support for optional unprotectedAttributes with EncryptedData Chris Conlon 2016-11-23 15:38:27 -07:00
  • abf18858a8 refactor PKCS#7 functionality into separate functions for Enveloped and EncryptedData Chris Conlon 2016-11-18 15:10:30 -07:00
  • b5eb8dce2f add PKCS#7/CMS EncryptedContent support Chris Conlon 2016-11-17 15:44:45 -07:00
  • e80331e03a fix Windows debug build warning with secure renegotiation John Safranek 2016-12-09 14:31:21 -08:00
  • 7fa825fde0 Enable secure renegotiation by default for Windows library build. John Safranek 2016-12-09 13:39:00 -08:00
  • e3b57211d5 undo whitespace modification kaleb-himes 2016-12-09 14:36:06 -07:00
  • fc9d689bc6 fastmath works with RIOT_OS if defined TFM_NO_ASM kaleb-himes 2016-12-09 14:34:14 -07:00
  • b0b80bed78 Merge pull request #657 from cconlon/x963kdf toddouska 2016-12-09 13:29:41 -08:00
  • ad2b0810c6 Merge pull request #648 from cconlon/keywrap toddouska 2016-12-09 13:23:39 -08:00
  • 7a76baa83e restore .am and gitignore kaleb-himes 2016-12-09 13:13:43 -07:00
  • c957107d76 merge with master and remove RIOT_Make directory, keep changes for working on Mac OS X kaleb-himes 2016-12-09 13:11:45 -07:00
  • 9e17b2b0aa Merge branch 'master' of https://github.com/wolfssl/wolfssl into RIOT_OS kaleb-himes 2016-12-09 13:09:25 -07:00
  • 8b1a6d4c70 Merge pull request #658 from kaleb-himes/sniffer John Safranek 2016-12-09 09:04:01 -08:00
  • 33e840b01b add AES key wrap support, RFC 3394 Chris Conlon 2016-12-05 15:38:42 -07:00
  • fdbb142699 Merge pull request #659 from toddouska/distcheck dgarske 2016-12-09 08:04:02 -08:00
  • d2ed611757 fix nxp distcheck filename typo toddouska 2016-12-08 16:52:12 -08:00
  • 6cfb8e30b2 Merge pull request #591 from dgarske/STM32_CUBEMX toddouska 2016-12-08 16:36:43 -08:00
  • ab7849be0d Merge pull request #655 from JacobBarthelmeh/ARMv8 toddouska 2016-12-08 16:34:19 -08:00
  • 2db7bf0dc0 use static digest for X9.63 KDF, add smallstack support Chris Conlon 2016-12-08 17:22:25 -07:00
  • 5da564d03c Merge pull request #656 from SparkiDev/hashes toddouska 2016-12-08 16:23:28 -08:00
  • d2b5a9538d Prevent forcezero from running on freed memory kaleb-himes 2016-12-08 15:11:41 -07:00
  • 289acd088a Remove state save and restore Sean Parkinson 2016-12-08 14:29:26 +10:00
  • ea1a03d538 Get the hash of the handshake messages rather than finalize. Sean Parkinson 2016-12-07 10:50:26 +10:00
  • a5b267087f add ANSI-X9.63-KDF support [SEC1] Chris Conlon 2016-12-07 20:09:54 -07:00
  • 2a3f3433e7 Merge pull request #652 from ejohnstown/autoconf-size-check toddouska 2016-12-07 15:23:25 -08:00
  • 3dec222969 Merge pull request #523 from dgarske/atmel_pr toddouska 2016-12-07 15:01:08 -08:00
  • 074741aabf Merge pull request #651 from dgarske/ksdk_dup_dec toddouska 2016-12-07 13:48:53 -08:00
  • a1bd2c8b35 Merge pull request #654 from dgarske/smallstackfixes toddouska 2016-12-07 13:41:45 -08:00
  • da4a46ddf6 Merge branch 'master' of https://github.com/wolfSSL/wolfssl into RIOT_OS kaleb-himes 2016-12-07 14:16:34 -07:00
  • 477ec3c3d1 Merge pull request #2 from NickolasLapp/STM32_CUBEmX dgarske 2016-12-07 11:27:24 -08:00
  • 82c12fb7be Fix DES3 on STM32 CUBEMX Nickolas Lapp 2016-12-07 10:20:46 -07:00
  • 5c59ccdeb9 Fix scan-build warning. Updated "side" variable failure case to return proper error code. David Garske 2016-12-06 13:12:18 -08:00
  • 4dd393077f Updated EccSharedSecret callback to use ecc_key* peer directly. Passes examples with "-P" tests and new pkcallback test script. David Garske 2016-12-06 13:00:48 -08:00
  • 45d26876c8 Moved wolfSSL_GetEccKey logic to internal.c and use only for PK_CALLBACK. Added other ECC key info to the EccSharedSecretCb. Cleanup of the "if (ssl->ctx->EccSharedSecretCb == NULL)" logic to revert indent so changes are minimized. Removed new wolfSSL_GetEccKey API. David Garske 2016-12-05 11:36:53 -08:00
  • eaca90db28 New Atmel support (WOLFSSL_ATMEL) and port for ATECC508A (WOLFSSL_ATECC508A). Adds wolfCrypt support for ECC Hardware acceleration using the ATECC508A. Adds new PK callback for ECC shared secret. Fixed missing "wc_InitRng_ex" when using "CUSTOM_RAND_GENERATE_BLOCK". Added ATECC508A RNG block function for P-RNG bypass ability. Added internal "wolfSSL_GetEccPrivateKey" function for getting reference to private key for ECC shared secret (used in test.h for testing PK_CALLBACK mode). Added README.md for using the Atmel ATECC508A port. David Garske 2016-08-29 10:02:06 -07:00
  • 9399cc05cb Fixes for building with CRL monitor when not linux, OS X or FreeBSD and --enable-distro set. Cleanup of the crl.c HAVE_CRL_MONITOR checks for OS and make sure if StopMonitor preprocessor is defined the function will also be defined. David Garske 2016-12-07 07:07:27 -08:00
  • fdc297f6bd Moved the check for the size of long, long long, and __m128 to before the checks for libraries. In some combination of autotools, making a 32-bit build, the autoconf test code can't link libnetwork and crashes, leaving those sizes all set to 0. John Safranek 2016-12-06 16:15:45 -08:00
  • 55b1ced783 Merge pull request #653 from toddouska/pkcallbacks dgarske 2016-12-06 15:15:50 -08:00
  • 944e5fba03 ARMv8 : load pointer to AES key and counter into a register along with pointer to SHA256 K table to handle tight optimized loops on function call with -flto Jacob Barthelmeh 2016-12-06 21:42:15 +00:00
  • ed8e0132a7 do_cleanup on pkcallbacks.test toddouska 2016-12-06 13:04:12 -08:00
  • c0e006d42c Fixes for build with small stack enabled. David Garske 2016-12-06 12:38:05 -08:00
  • 80cc737ffa add pkcallbacks script test toddouska 2016-12-06 11:27:05 -08:00
  • 9fcb6e4e3c Remove obsolete duplicate declaration for wc_RsaFunction in the KSDK port header. David Garske 2016-12-06 10:25:56 -08:00
  • 932199c5e9 Fix build warning about unused static functions wc_AesEncrypt and wc_AesDecrypt with STM32. David Garske 2016-11-02 10:13:15 -07:00
  • 4a7651a09a STM32 F2/F4 CubeMX and Std Peripheral Library hardware crypto support for RNG, AES, SHA1, DES3 and MD5. Adds new WOLFSSL_STM32_CUBEMX and WOLFSSL_STM32F4 defines. Tested on STM32F437II. David Garske 2016-10-17 19:17:58 -07:00
  • f3816a4dc5 Merge pull request #597 from dgarske/NXPLTC toddouska 2016-12-05 13:50:31 -08:00
  • 1d14ac5ff3 Fixes to include.am and sha256.c after master rebase. Retested on NXP K82 with and without HW accel (all tests/benchmarks pass). David Garske 2016-12-05 09:15:58 -08:00
  • 877ea7011c Fix for LTC RSA-4096. Use original wolfSSL code for RSA operation, reduce in LTC port layer. Martin Latal 2016-12-02 08:49:05 +01:00
  • 0611c45869 Attempt to fix sha.c error with older visual studio compiler. David Garske 2016-10-17 09:16:04 -07:00
  • 08b8af5f83 Fix for forced software crypto build. David Garske 2016-10-14 16:20:42 -07:00
  • c35daa877e Fix to allow disabling MMCAU/LTC for software only test (moved preprocessor defines to Kinetis). Updated K82 software benchmark with actual values. David Garske 2016-10-14 16:17:46 -07:00
  • ae75842021 Fix build issues with rebase for ECC and RSA. Changed user_settings.h example when LTC is enabled to disable Shamir and ECC-521. Cleanup to add USE_NXP_MMCAU and USE_NXP_LTC for the example user_settings.h, so the project file can automatically configure. David Garske 2016-10-14 13:42:40 -07:00
  • a6b96b17ff Fixes to include path for NXP ksdk_port. Fixes for time USER/OVERRIDES so their #ifdef's are checked first. Fix to initialize LTC via new "ksdk_port_init" function. Cleanup of the ksdk_port.c for formatting, macros, statics and line length. Cleanup of the AES code for key size. Cleanup of the wolfCrypt sha.c for readability. Added support for the KSDK bare metal drivers to the IDE Rowley CrossWorks example. Updated the settings.h to allow for overrides in Freescale section. Updated README with info for using LTC. David Garske 2016-06-15 14:34:59 -07:00
  • 8e64d564dc NXP/Freescale K8X MMCAU / LTC core support for RSA, ECC, Ed/Curve25519, AES, DSA, DES3, MD5, RNG, SHA and SHA2. David Garske 2016-06-10 15:46:35 -07:00
  • ddeb9da502 warning on empty translation units ignored, move cflags to Makefile kaleb-himes 2016-12-03 11:55:24 -07:00
  • d2aef9a82a README update kaleb-himes 2016-12-03 11:03:17 -07:00
  • 43525343fc add RIOT tests to dist and make sure Makefiles are not excluded by .gitignore kaleb-himes 2016-12-02 17:30:57 -07:00
  • 162294e3e5 added benchmark app for RIOT and updated test error handling kaleb-himes 2016-12-02 14:39:37 -07:00
  • 684f9bad22 RIOT OS build and test scripts, build instructions kaleb-himes 2016-12-02 13:53:05 -07:00
  • 4317141260 Merge pull request #646 from JacobBarthelmeh/master toddouska 2016-12-01 12:56:56 -08:00
  • d32af7e44b remove fPIE flag : fPIE is suitable for use with executables and not when creating libraries Jacob Barthelmeh 2016-12-01 12:01:38 -07:00
  • 92377140b7 Merge pull request #520 from dgarske/compat_fixes toddouska 2016-12-01 09:23:49 -08:00
  • 650ddb8d23 Fixes so make check works with NO_FILESYSTEM and FORCE_BUFFER_TEST. Example: ./configure CFLAGS="-DNO_FILESYSTEM -DFORCE_BUFFER_TEST" David Garske 2016-11-23 17:19:54 -08:00
  • 039aedcfba Added "wolfSSL_use_certificate_chain_buffer_format". Added "wolfSSL_SESSION_CIPHER_get_name" to get cipher suite name using WOLFSSL_SESSION*. Moved the "wolfSSL_get_cipher_name_from_suite" function to internal.c. Added new server-cert-chain.der, which is combination of ca-cert.der and server-cert.der. Enhanced load_buffer to detect format using file extension. Can test use of DER cert chain with NO_FILESYSTEM defined using "./examples/server/server -c ./certs/server-cert-chain.der -k ./certs/server-key.der". David Garske 2016-11-23 11:25:01 -08:00
  • 3d920b23a0 Fix for building with NO_ERROR_STRINGS. David Garske 2016-10-17 10:15:01 -07:00
  • 7a35d904c2 Added new API "wolfSSL_CIPHER_get_name_from_suite" to allow use of the cipherSuite and cipherSuite0 args directly to get cipher suite name. Changed "wolfSSL_CIPHER_get_name" to call new API (based on original). ASN change to allow ToTraditional and SetName for OPENSSL_EXTRA. David Garske 2016-10-17 09:59:05 -07:00
  • c3c3419138 Added processing of user cert chain in DER format. Added arg check on "wolfSSL_get_certificate" to fix NULL dereference if certificate not yet set via "wolfSSL_use_certificate_buffer" or "wolfSSL_use_certificate_file". Added "wolfSSL_CTX_use_certificate_chain_buffer_format" to expose way to import certificate chain buffer as ASN1 (since "wolfSSL_CTX_use_certificate_chain_buffer" assumes PEM) . Changed ProcessFile from static and added as local in internal.h. David Garske 2016-09-22 14:02:32 -07:00
  • cfc5de8c5a Merge pull request #645 from toddouska/fds John Safranek 2016-11-30 13:17:58 -08:00
  • 8f89d4922f allow separate set fds for read/write, helpful for DTLS multicast toddouska 2016-11-30 11:15:57 -08:00
  • a2dc01413c For distro build don't install options.h (conflicts with multi-arch). Fix for BUILD_DISTRO excludes with indent. David Garske 2016-11-29 13:29:19 -08:00
  • 235060eff2 Merge pull request #644 from cconlon/return_fix toddouska 2016-11-28 10:58:06 -08:00
  • a9936cf3ee correct MEMORY_E returns in asn.c Chris Conlon 2016-11-28 10:39:07 -07:00
  • 2cbc6ed673 ARMv8 : handle aggressive optimizers Jacob Barthelmeh 2016-11-23 15:44:53 -07:00
  • 7dab97fb01 Merge pull request #641 from dgarske/verifycb_peer_cert_chain toddouska 2016-11-23 12:59:00 -08:00
  • 1240014fab Fix OCSP to use public buffer type (now WOLFSSL_BUFFER_INFO). David Garske 2016-11-22 19:33:40 -08:00