kaleb-himes
c333fdf545
Check-in Nucleus Plus 2.3 port work
2024-07-09 15:53:00 -06:00
Colton Willey
4ec07bb5a8
Changes needed for default TLS support in zephyr kernel
2024-07-09 12:00:34 -07:00
Hideki Miyazaki
2d0353bcb1
updae ecc key and signed cert
2024-07-09 20:40:34 +09:00
Sean Parkinson
90836c782b
Poly1305 AArch64: unique naming of asm funcs
...
Change function names to ensure no clash with OpenSSL.
Specifically: poly1305_blocks()
2024-07-09 11:02:10 +10:00
David Garske
00e42151ca
Merge pull request #7725 from JacobBarthelmeh/release
...
prepare for release 5.7.2
v5.7.2-stable
2024-07-08 11:02:46 -07:00
JacobBarthelmeh
c8aa0fa351
remove * in changelog created from search and replace
2024-07-08 10:31:13 -06:00
JacobBarthelmeh
203f65a636
prepare for release 5.7.2
2024-07-08 09:47:46 -06:00
JacobBarthelmeh
6c0aae714f
update over max ext test certs and add them to renew script
2024-07-07 23:38:29 -07:00
Sean Parkinson
d1e26b4f5d
Dilithium: fixes
...
Fix inclusion of functions dilithium_vec_check_low() in build:
--enable-dilithium=verify-only,44,65,87
CFLAGS=-DWOLFSSL_DILITHIUM_VERIFY_SMALL_MEM
Fix memory leaks in unit.test:
--enable-dilithium CFLAGS=-DWC_DILITHIUM_CACHE_MATRIX_A 'CC=clang
-fsanitize=address'
2024-07-08 15:02:43 +10:00
JacobBarthelmeh
595e71d7f4
Merge pull request #7718 from douzzer/20240705-coverity-fixes
...
20240705-coverity-fixes
2024-07-06 21:53:16 -06:00
Daniel Pouzzner
e35e713c4a
wolfcrypt/src/asn.c: fix for copy-paste error in FillSigner() WOLFSSL_DUAL_ALG_CERTS path.
2024-07-06 10:04:26 -05:00
Daniel Pouzzner
780fd98f40
src/internal.c: in ProcessPeerCerts(), smallstack refactor of a span gated on HAVE_CERTIFICATE_STATUS_REQUEST_V2, to get DecodedCert off the stack.
2024-07-06 10:04:06 -05:00
Daniel Pouzzner
c8a9bdbe15
wolfcrypt/src/asn.c: fix for -Wconversion in FillSigner().
2024-07-05 20:42:32 -05:00
Daniel Pouzzner
88af1a2932
fixes for Coverity #394680 , #394682 , #394693 , #394712 .
2024-07-05 20:42:32 -05:00
David Garske
d8757a51b3
Merge pull request #7717 from JacobBarthelmeh/coverity
...
Some additional Coverity touch ups
2024-07-05 15:49:53 -07:00
JacobBarthelmeh
fee9788bb0
fix for coverity report 394710
2024-07-05 15:40:47 -06:00
JacobBarthelmeh
b948f6797c
account for negative return value, fixes coverity issue 394678
2024-07-05 15:34:28 -06:00
JacobBarthelmeh
de20bb7ba9
fix for coverity issue 394677
2024-07-05 15:13:28 -06:00
David Garske
d5016d451f
Merge pull request #7714 from JacobBarthelmeh/coverity
...
Coverity issues reported
2024-07-05 13:49:20 -07:00
JacobBarthelmeh
7ef424b193
Merge pull request #7715 from kaleb-himes/C394706
...
Address coverity issue 394706
2024-07-05 14:46:54 -06:00
JacobBarthelmeh
f8eb0c3776
fix for coverity issue 394676 possible null dereference
2024-07-05 14:06:19 -06:00
kaleb-himes
f42fb587a5
Address coverity issue 394706
2024-07-05 13:54:23 -06:00
JacobBarthelmeh
d4cf93c2cf
avoid overflow if clamping a digit with used size 0
2024-07-05 13:17:53 -06:00
JacobBarthelmeh
c880fcf822
add check on padSz return, coverity issue 394711
2024-07-05 12:07:42 -06:00
JacobBarthelmeh
25d52dde3f
fix coverity issue 367842 possible null dereference
2024-07-05 11:56:45 -06:00
JacobBarthelmeh
50a7243486
fix for coverity issue 394670 possible overflow
2024-07-05 11:53:19 -06:00
JacobBarthelmeh
fbdb064a4b
coverity issue 394701 possible derefernce before null check
2024-07-05 11:24:42 -06:00
JacobBarthelmeh
ac52660d5b
Merge pull request #7713 from SparkiDev/dilithium_sign_small_alloc
...
Dilithium: add implementation of signing that allocated less
2024-07-05 10:38:19 -06:00
JacobBarthelmeh
8946e3fb4b
Merge pull request #7702 from rizlik/ocspv2
...
ocsp stapling improvements
2024-07-05 10:29:25 -06:00
Marco Oliverio
053170613a
fixup! csrv2multi: pending ca list
2024-07-05 15:26:41 +00:00
JacobBarthelmeh
5ca9b2f8a4
Merge pull request #7712 from SparkiDev/kyber_ml_kem
...
KYBER/ML-KEM: make ML-KEM available
2024-07-05 09:15:08 -06:00
David Garske
4ae277d21e
Fixes for building RX TSIP with e2Studio project. Fixed tsip_Tls13GenEccKeyPair incorrect free of key if TSIP not used (ZD18222).
2024-07-05 07:44:00 -07:00
Sean Parkinson
44a5e1a398
Dilithium: add implementation of signing that allocated less
...
Added implementation of signing that allocates less memory by doing the
matrix/vector loops in the sign code - WOLFSSL_DILITHIUM_SIGN_SMALL_MEM.
Split out vector operations into vector and polynomial operations so
that small mem signing can call them.
Fix benchmark to be able to compile with only Dilithium and no
asymmetric algorithms.
2024-07-05 16:20:06 +10:00
JacobBarthelmeh
e6fbe25398
Merge pull request #7711 from SparkiDev/dilithium_kats
...
Dilithium: Add KATs and fix key generation
2024-07-04 19:40:08 -06:00
David Garske
f91d0a2925
Remove hash type check not required for ECDSA deterministic k. Fix _HMAC_K devId.
2024-07-04 14:49:20 -07:00
Sean Parkinson
1fd9f2af91
KYBER/ML-KEM: make ML-KEM available
...
Added ML-KEM instead of Kyber implementation with WOLFSSL_ML_KEM.
Tests added from NIST for ML-KEM operations.
2024-07-04 23:51:23 +10:00
Sean Parkinson
387f36657c
Dilithium: Add KATs and fix key generation
...
Add KATs from NIST and fix key generation to produce output of KATs.
2024-07-04 22:22:11 +10:00
Marco Oliverio
3e58cfd864
fixup! ocsp: improvements
2024-07-04 10:21:20 +02:00
Marco Oliverio
fe932b893c
fixup! csrv2multi: pending ca list
2024-07-04 10:21:20 +02:00
Anthony Hu
4c13834500
Don't do multithreaded logging tests if single threaded
2024-07-03 19:31:21 -04:00
JacobBarthelmeh
1c23d2222c
Merge pull request #7693 from philljj/zd18204
...
Fixes ZD 18204: check hashsigalgo matches ssl suites.
2024-07-03 17:12:43 -06:00
Anthony Hu
f5e27bfb0c
Stop stripping out the sequence header on the AltSigAlg extension.
2024-07-03 19:02:04 -04:00
David Garske
4335dac794
Add wc_ecc_set_deterministic_ex to support custom hash type for deterministic sign or verify.
2024-07-03 15:13:29 -07:00
David Garske
4004e6886f
Fix the FIPS Shake logic.
2024-07-03 10:39:51 -07:00
JacobBarthelmeh
a8780d4a80
fix test case for lean static memory build
2024-07-03 11:25:05 -06:00
jordan
f7f3ba9c76
check hashsigalgo matches ssl suites on client side.
2024-07-03 11:59:18 -05:00
David Garske
d3316b72d3
Fix to not allow Shake128/256 with Xilinx AFALG. Cleanup the Shake disable logic to allow forcing off with WOLFSSL_NO_SHAKE128 and WOLFSSL_NO_SHAKE256.
2024-07-03 09:49:52 -07:00
JacobBarthelmeh
955490e90a
use max key length for PSK encrypt buffer size
2024-07-03 10:17:01 -06:00
Andras Fekete
7cc42d446e
Update the true minimum ECC key size default
...
The discrepancy shows up when trying to compile with FIPS
2024-07-03 11:50:04 -04:00
JacobBarthelmeh
ba1eedb46b
Merge pull request #7697 from SparkiDev/arm32_ldrd_strd_fix
...
ARM32 SHA-3 ASM: fix ldrd/strd for ARMv6
2024-07-02 17:18:06 -06:00