Daniel Pouzzner
b56cafdd25
Merge pull request #8692 from kareem-wolfssl/zd19563_verify
...
Update wolfSSL_X509_verify_cert to retry all certs until a valid chain is found.
2025-09-30 16:22:41 -05:00
Sean Parkinson
4719fd5e80
Ed448: No large code option with fast code
...
Make from bytes, to bytes and mod top half use for loops when no large
code.
Make generation script generate casting changes.
2025-09-30 09:38:06 +10:00
Daniel Pouzzner
7ea66aeffe
refactor WOLFSSL_LINUXKM gates as generic WOLFSSL_KERNEL_MODE gates where appropriate:
...
rename WOLFSSL_LINUXKM_USE_SAVE_VECTOR_REGISTERS to WOLFSSL_USE_SAVE_VECTOR_REGISTERS, and wherever appropriate, replace defined(WOLFSSL_LINUXKM) with defined(WOLFSSL_USE_SAVE_VECTOR_REGISTERS).
rename WC_WANT_FLAG_DONT_USE_AESNI to WC_WANT_FLAG_DONT_USE_VECTOR_OPS.
rename lkm_printf() to wc_km_printf().
replace WOLFSSL_LINUXKM gates on kernel-incompatible includes with header-specific gates NO_STRING_H, NO_STDINT_H, NO_LIMITS_H, NO_CTYPE_H, NO_STDLIB_H
remove low level threading setup section of wolfssl/internal.h, which duplicated existing logic in wc_port.h, except for off-topic WOLFSSL_APACHE_MYNEWT TLS-layer setup, which is preserved, and a defined(__NT__) clause, which is now merged into the existing section in wc_port.h.
2025-09-29 16:59:12 -05:00
David Garske
6698cb7616
Fix for crypto callback only
2025-09-29 12:37:57 -07:00
Brett Nicholas
5121847728
add HAVE_SELFTEST protection
2025-09-29 12:00:41 -06:00
Brett Nicholas
7b67dbaa31
add FIPS protection to test.c usage of wc_HKDF_ex()
2025-09-29 11:36:18 -06:00
Brett Nicholas
26ed835ca1
fix HKDF test macro protection
2025-09-29 10:52:22 -06:00
Brett Nicholas
3c81fffedd
Add HKDF cryptoCb and test
2025-09-29 10:16:01 -06:00
David Garske
eda6c184bb
Merge pull request #9219 from kareem-wolfssl/zd20538
...
Fix building with --enable-keygen --enable-rsavfy.
2025-09-26 14:08:33 -07:00
Kareem
ef989a4241
Merge remote-tracking branch 'upstream/master' into zd19563_verify
2025-09-26 11:13:28 -07:00
Kareem
28aef2f4dd
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into zd20038_3
2025-09-26 10:56:42 -07:00
Kareem
af9a06e9bf
Merge remote-tracking branch 'upstream/master' into zd19563_verify
2025-09-25 10:39:11 -07:00
Kareem
3a4472f5da
Merge remote-tracking branch 'upstream/master' into zd20527
2025-09-25 10:37:22 -07:00
Kareem
a3b29ed99f
Merge remote-tracking branch 'upstream/master' into zd20038_3
2025-09-25 10:32:13 -07:00
JacobBarthelmeh
50835c14a2
fix warning of const char* passed as char*
2025-09-25 09:27:16 -06:00
JacobBarthelmeh
40b9fc35f9
handle unsupported fsl algo
2025-09-25 09:14:59 -06:00
Sean Parkinson
561fead861
Merge pull request #9235 from anhu/rpi_WC_RESEED_INTERVAL
...
Fixing up a small documentation omission.
2025-09-25 10:48:37 +10:00
Stanislav Klima
1cfafc2a52
fixes from zd20556
2025-09-24 12:03:39 +02:00
Sean Parkinson
aa87b35964
Mark variables as volatile
...
Ensures compiler optimizers don't stop code from being constant time.
2025-09-24 08:47:20 +10:00
Daniel Pouzzner
4af6eb4f2b
wolfcrypt/src/chacha20_poly1305.c: in wc_XChaCha20Poly1305_crypt_oneshot(), allow empty message.
2025-09-23 17:06:22 -05:00
Anthony Hu
93955a2ba7
Fixing up a small documentation omission.
2025-09-23 15:24:50 -04:00
Kareem
0fcfade6a0
Add missing aes NULL check to SI Labs wc_AesSetKey.
2025-09-23 10:16:47 -07:00
Kareem
1c7fe06322
Also gate out wc_Sha512Final for SILabs.
2025-09-22 15:45:37 -07:00
gojimmypi
d50593834b
Add fix for SHA HW on ESP-IDF v6
2025-09-19 12:04:46 -07:00
Kareem
f4d9c90827
Fix swapped WOLFSSL_SILABS_SHA384/SHA512 defines in sha512.c.
2025-09-19 11:45:22 -07:00
Kareem
7afcf20077
Fix non constant compare of TLS 1.3 binder, check for negative dst_len in wc_XChaCha20Poly1305_crypt_oneshot.
2025-09-19 11:39:46 -07:00
Kareem
23f595586d
Fix building with --enable-keygen --enable-rsavfy.
2025-09-18 16:21:08 -07:00
JacobBarthelmeh
5d9c608ed6
Merge pull request #9195 from rlm2002/zd20508
...
address undefined shift behavior and overflow
2025-09-18 15:34:32 -06:00
JacobBarthelmeh
f143dbb858
Merge pull request #9217 from douzzer/20250918-25519-low-mem-gates
...
20250918-25519-low-mem-gates
2025-09-18 14:34:13 -06:00
Daniel Pouzzner
d15523a6df
fix gating in wolfssl/wolfcrypt/fe_operations.h -- gate out load_3() and load_4() when !(CURVE25519_SMALL || ED25519_SMALL);
...
harmonize low-mem outer gate in wolfcrypt/src/fe_operations.c with outer gate in wolfcrypt/src/fe_low_mem.c.
2025-09-18 12:27:37 -05:00
Andrew Hutchings
b7679dbe96
Fix a test when using ACVP_VECTOR_TESTING
...
The `ACVP_VECTOR_TESTING` blocks the clearing of the output when an auth
tag check fails. This causes a test for that scenario to fail, so don't
do that test whcn `ACVP_VECTOR_TESTING` is defined.
2025-09-18 11:37:06 +01:00
gojimmypi
152075848c
Change test order: random_test after SHA tests
2025-09-16 10:48:14 -07:00
Ruby Martin
a8fca08b7e
add edge case unit test where cost=22, block=8
2025-09-16 11:04:43 -06:00
Ruby Martin
86abe793d7
address undefined shift behavior and overflow
2025-09-16 11:03:21 -06:00
Kareem
ec92f76dec
Fix tests when building with PEM support disabled by using DER certs/keys.
2025-09-12 16:11:07 -07:00
Sean Parkinson
dc421a0d4c
Merge pull request #9164 from dgarske/keytoder
...
Add support for enabling RSA private key to DER without keygen
2025-09-12 10:36:34 +10:00
David Garske
3e63bc68d4
Add support for enabling RSA private key to DER without keygen. ( new macro WOLFSSL_KEY_TO_DER)
2025-09-11 10:29:31 -07:00
David Garske
c397a27897
Appease IAR compiler possible use of uninitialized variables
2025-09-11 10:27:01 -07:00
David Garske
88586a5a47
Fix for ST-Safe issue with ECC signature R/S parsing needing leading zero pad (ZD 20504)
2025-09-11 10:27:01 -07:00
David Garske
b3aa39ddad
Merge pull request #9138 from JacobBarthelmeh/sgx
...
update for SGX CPU ID to follow atomics refactor
2025-09-09 12:18:51 -07:00
Kareem
8e7bcfc5c2
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into zd20378
2025-09-04 10:16:53 -07:00
Daniel Pouzzner
ee2e63444d
wolfcrypt/src/sha512.c: don't remap ByteReverseWords64(), remove ByteReverseWords64_1() inline asm macro, and refactor Sha512FinalRaw() and wc_Sha384FinalRaw() to write directly to the output buffer when possible.
2025-09-03 22:16:15 -05:00
Kareem
37fc63ca39
Allow the keyCertSign bit to be asserted specifically for self-signed CAs.
2025-09-03 11:43:15 -07:00
Ruby Martin
4d5e1d0dfe
move pathLegthSet assignment
2025-09-02 10:09:11 -06:00
Daniel Pouzzner
8ed1ce6a8b
wolfcrypt/src/wc_mlkem_asm.S: in _mlkem_decompress_5_avx2, use movzwq, not movzxw, for portability.
2025-08-29 14:42:48 -05:00
effbiae
44c403f4c7
replace (f)printf with WOLFSSL_DEBUG_PRINTF
2025-08-29 12:34:22 +10:00
Sean Parkinson
0224ef3d2e
Merge pull request #9146 from rlm2002/gh9128_MEM_ZERO
...
ForceZero change for WOLFSSL_CHECK_MEM_ZERO
2025-08-28 22:37:55 +10:00
JacobBarthelmeh
ccf8eebc5f
update for cpuid atomic refactor
2025-08-27 16:44:46 -06:00
Ruby Martin
11942e774c
do not abort MEM_ZERO check if TEST_ALWAYS_RUN_TO_END is defined
2025-08-27 15:04:49 -06:00
Ruby Martin
1ad8b2897a
Force zero with bufferSize instead of length. add void prototype to definitions
2025-08-27 14:56:51 -06:00