5e7ef142e8
Refactor GetHandshakeHeader/GetHandShakeHeader into one
2025-05-20 13:23:14 +02:00
c619c19a1d
asn: add underflow check to idx.
2025-05-19 19:04:27 -05:00
cbcd7bca2c
added support for Tropic01 crypto callbacks
2025-05-19 21:41:49 +02:00
3666851589
Support PBE_AES256_CBC and PBE_AES128_CBC key encryption on wc_PKCS12_create()
2025-05-19 22:26:46 +09:00
83ce63ac1a
TLSX_UseSupportedCurve: Check group correctness outside of TLS 1.3 too
2025-05-19 14:19:59 +02:00
cbe1fb2c62
dtls: drop DTLS messages that span across datagrams
...
A new macro "WOLFSSL_DTLS_RECORDS_CAN_SPAN_DATAGRAMS" restores the old
behaviour.
2025-05-19 10:28:13 +02:00
23b73bb298
test_memio: preserve write boundaries in reads
2025-05-19 10:25:24 +02:00
80bdd1736a
internal: refactor out Decryption in DoDecrypt function
...
To uniform error handling for the SanityCheckCipherText check.
2025-05-19 10:25:24 +02:00
05bc7e0d2f
Merge pull request #8783 from douzzer/20250516-remove-implicit-WOLFSSL_DEBUG_CERTIFICATE_LOADS
...
20250516-remove-implicit-WOLFSSL_DEBUG_CERTIFICATE_LOADS
2025-05-16 17:06:18 -06:00
3ab16257b0
wolfssl/wolfcrypt/logging.h: don't define WOLFSSL_DEBUG_CERTIFICATE_LOADS just because defined(DEBUG_WOLFSSL).
2025-05-16 16:53:10 -05:00
4495da457a
Merge pull request #8778 from rlm2002/ghi8772
...
add NULL reference checks to RSA functions
2025-05-16 16:41:43 -05:00
7ae2c24ac4
add NULL reference checks to RSA functions
2025-05-16 14:00:35 -06:00
91af9073b0
Merge pull request #8777 from rizlik/dtls_reject_v11
...
Drop DTLS packets with bogus minor version number
2025-05-16 14:45:25 -05:00
e67536cb15
Merge pull request #8775 from rlm2002/coverity
...
Coverity: address uninitialized scalar variable issues
2025-05-16 14:44:38 -05:00
56b43e5948
Merge pull request #8776 from anhu/no_server_with_opensslall
...
Allow tests to build with opensslall and no server.
2025-05-16 13:28:48 -05:00
5abe5df498
Merge pull request #8760 from miyazakh/benchmark_up
...
Guard some benchmark tests by NO_SW_BENCH
2025-05-16 12:42:59 -05:00
25e3a2d34f
Merge pull request #8780 from douzzer/20250515-fips-armasm-fixes
...
20250515-fips-armasm-fixes
2025-05-16 11:12:16 -06:00
69ae36a1b6
Merge pull request #8781 from night1rider/zephyr-mlkem-update
...
updating kyber to mlkem arm file for zephyr
2025-05-16 09:21:19 -07:00
e998a4c2fc
fix off-by-one error in asn.c
2025-05-16 08:26:19 -06:00
229141fd51
updating kyber to mlkem arm file for zephyr
2025-05-15 21:55:36 -06:00
77bebff341
fixes for armasm:
...
configure.ac: set DEFAULT_ENABLED_ALL_ASM=no if FIPS <v6 and not on amd64 (i.e. if ARM);
tests/api/test_sha256.c: skip test_wc_Sha256_Flags() and test_wc_Sha224_Flags() if armasm and FIPS <v7;
wolfssl/wolfcrypt/settings.h: define WOLFSSL_SP_INT_DIGIT_ALIGN for ARM (needed on BE, and no effect on LE).
2025-05-15 21:20:10 -05:00
8a8a2b5bb1
.github/workflows/smallStackSize.yml: don't install multilib (not needed).
2025-05-15 21:13:50 -05:00
2940a16c10
coverity: initialize variables for api.c, test_digest.h, and test_sha3.c
2025-05-15 16:55:34 -06:00
081b8397c0
Merge pull request #8779 from douzzer/20250515-smallstack-refactors-and-tests
...
20250515-smallstack-refactors-and-tests
2025-05-15 15:02:58 -07:00
401868908a
add .github/workflows/smallStackSize.yml;
...
smallstack refactors in
* wolfcrypt/src/asn.c : wc_GetSubjectPubKeyInfoDerFromCert(),
* wolfcrypt/src/dilithium.c : dilithium_sign_with_seed_mu(),
* wolfcrypt/src/ecc.c : wc_ecc_mulmod_ex2(),
* wolfcrypt/src/wc_mlkem.c : mlkemkey_decapsulate(),
* and wolfcrypt/src/wc_mlkem_poly.c : mlkem_gen_matrix_k*_avx2() and mlkem_get_noise_k2_avx2();
wolfcrypt/test/test.c: in TEST_PASS(), fix STACK_SIZE_CHECKPOINT_WITH_MAX_CHECK to honor TEST_ALWAYS_RUN_TO_END.
2025-05-15 15:28:11 -05:00
a1b644202c
Merge pull request #8759 from anhu/index_idx
...
Rename variable index to idx to avoid conflicting declaration.
2025-05-15 11:01:27 -07:00
63c3c547b6
Merge pull request #8768 from lealem47/zd19853
...
Add sniffer cleanup API's
2025-05-15 11:01:19 -07:00
c13be21a90
Merge pull request #8755 from AlexLanzano/pqc-gcc-error
...
Remove redefinition of MlKemKey and Fix build issue in benchmark
2025-05-15 11:00:40 -07:00
22f41a8dbb
Drop DTLS packets with bogus minor version number
2025-05-15 19:50:36 +02:00
6790c95e94
Merge pull request #8745 from dgarske/stm32_crypt_header_width
...
Fix edge case issue with STM32 AES GCM auth padding
2025-05-15 16:51:52 +01:00
a613fc28d6
Allow tests to build with opensslall and no server.
2025-05-15 11:18:15 -04:00
2ac4be3f22
Merge pull request #8773 from douzzer/20250514-linuxkm-and-sp-tweaks
...
20250514-linuxkm-and-sp-tweaks
2025-05-14 19:54:48 -07:00
baaab4ccac
Merge pull request #8722 from anhu/undef_def
...
Do not allow define of max to interfere with pthreads
2025-05-14 18:44:57 -05:00
c201006a26
wolfcrypt/src/sp_int.c: move setup for -Wno-array-bounds when WOLFSSL_SP_DYN_STACK, to follow sp_int.h include.
2025-05-14 18:20:08 -05:00
a814683684
Rename variable index to idx to avoid conflicting declaration.
2025-05-14 18:26:37 -04:00
c8b507d246
wolfssl/wolfcrypt/sp_int.h: refactor SP_WORD_SIZEOF as a simple numeric literal, and use them for XALIGNED() for Windows portability.
2025-05-14 16:54:49 -05:00
55bbd84445
wolfssl/wolfcrypt/sp_int.h and wolfcrypt/src/sp_int.c: add WOLFSSL_SP_DYN_STACK macro to orthogonalize gnarly setup logic, and refactor to use it throughout; refactor several more sp_int stack-allocated data buffers as sp_int_digit[]s rather than char[]s.
2025-05-14 15:39:37 -05:00
f0f4084f94
linuxkm/lkcapi_dh_glue.c: never install DH/FFDHE on kernel <5.18 -- DH secrets have a different format before that version, and FFDHE (CONFIG_CRYPTO_DH_RFC7919_GROUPS) was introduced in 5.18 and is the only FIPS-allowed DH variant.
2025-05-14 15:39:37 -05:00
49d9bfa160
Merge pull request #8758 from bigbrett/exportx509pubkey-api
...
Added new ASN X509 API: `wc_GetSubjectPubKeyInfoDerFromCert`
2025-05-14 12:28:45 -07:00
4af0e14e7b
Add ssl_RemoveSession API
2025-05-14 12:09:41 -06:00
40c9a03ebe
rename function args to match implementation
2025-05-14 11:31:36 -06:00
6270429089
Fix STM32MP13x STM32 AES GCM.
2025-05-14 10:27:01 -07:00
4fd76dae95
Add portability fix for new INT_MAX required on all TLS limit checking (added in 91aad90c59 Jan 24, 2025).
2025-05-14 10:27:01 -07:00
7a936d731d
Fix edge case issue with STM32 AES GCM auth padding. Issue introduced in PR #8584 . Fixes ZD 19783
...
Added way to override STM_CRYPT_HEADER_WIDTH.
2025-05-14 10:27:01 -07:00
813e36a823
Merge pull request #8770 from douzzer/20250514-WOLFSSL_DEBUG_PRINTF-C89
...
20250514-WOLFSSL_DEBUG_PRINTF-C89
2025-05-14 08:50:46 -07:00
88ae4266cf
Don't define PQC option strings in benchmark if WOLFSSL_BENCHMARK_ALL is defined
...
This fixes the 'defined but not used' build issue in benchmark.c if any PQC algos are enabled
and WOLFSSL_BENCHMARK_ALL is defined.
2025-05-14 08:54:59 -04:00
8035667d9b
wolfssl/wolfcrypt/logging.h and wolfcrypt/src/logging.c: add WOLFSSL_DEBUG_PRINTF_FN and WOLFSSL_DEBUG_PRINTF_FIRST_ARGS, and update refactored wolfssl_log(), for C89 compat.
2025-05-14 03:21:28 -05:00
c5021c0690
wolfcrypt/src/ecc.c: fix identicalInnerCondition in ecc_mulmod().
2025-05-14 03:18:35 -05:00
9b7a95e338
gurd tests NO_SW_BENCH
2025-05-14 14:52:51 +09:00
cd79be4928
Merge pull request #8769 from douzzer/20250513-WOLFSSL_DEBUG_PRINTF-WOLFSSL_DEBUG_CERTIFICATE_LOADS
...
20250513-WOLFSSL_DEBUG_PRINTF-WOLFSSL_DEBUG_CERTIFICATE_LOADS
2025-05-13 21:15:43 -07:00
Juliusz Sosinowicz
jordan
Maxim Kostin
Koji Takeda
Marco Oliverio
JacobBarthelmeh
Daniel Pouzzner
Ruby Martin
Kaleb Himes
David Garske
night1rider
Andrew Hutchings
Anthony Hu
Lealem Amedie
Brett Nicholas
Alex Lanzano
Hideki Miyazaki