2f1be0f0d4
Merge pull request #9486 from julek-wolfssl/hostap-sha-cert-update
...
Update sha384 and sha512 certs
2025-12-02 06:55:35 -08:00
c63df82f0d
Update sha384 and sha512 certs
...
- Print errors in logs on failure
2025-12-02 10:46:43 +01:00
801d9bfa3d
Merge branch 'master' into doc
2025-12-02 14:14:01 +09:00
8741805e9d
Merge pull request #9476 from embhorn/zd20515
...
Fix Coverity dead code report
2025-12-01 13:59:21 -08:00
a2f46cd9b0
Merge pull request #9470 from lealem47/MLKEM_PUB_HASH_E
...
ML-KEM: Add check for Pubkey hash mismatch on decoding the dk
2025-12-01 12:49:48 -08:00
cd99aa2f0e
bsdkm: return cleanup.
2025-12-01 09:43:15 -06:00
9a699c04ea
linuxkm: Fix spinlock initialization on Tegra kernels for __SPIN_LOCK_UNLOCKED macro incompatibility
...
Tegra vendor kernels (L4T / NVIDIA Yocto BSP) fail to compile the
wolfSSL Linux kernel module due to the use of the legacy assignment form
of the spinlock initializer:
m->lock = __SPIN_LOCK_UNLOCKED(m);
On Tegra, __SPIN_LOCK_UNLOCKED() expands to a braced-struct initializer
that is *not* valid as an assignment expression, causing:
error: expected expression before '{' token
This patch applies a Tegra-specific workaround by replacing the
assignment with the stable kernel API:
spin_lock_init(&m->lock);
This is guarded behind CONFIG_ARCH_TEGRA so that non-Tegra platforms
retain the current initialization behavior until further validation is
completed.
This fix restores successful kernel module builds on NVIDIA Tegra-based
Yocto images without modifying behavior on other architectures.
Signed-off-by: Sameeh Jubran <sameeh@wolfssl.com >
2025-11-27 10:08:55 +02:00
10efcd9787
Enhance MQX platform support and integration
2025-11-27 10:03:04 +08:00
93944d289f
Merge pull request #9482 from anhu/move_the_sigalg_check
...
Need to move sigalg check down because it does not consider hybrids.
2025-11-27 09:42:18 +10:00
e30e9b7e09
Merge pull request #9473 from holtrop/rust-cargo-clippy
...
Rust wrapper: enable cargo clippy and fix several clippy warnings
2025-11-27 09:18:51 +10:00
6c8b9054a0
Merge pull request #9443 from holtrop/report-rsa_pss_pss-sig-algo
...
TLSv1.3 certificate verify: report rsa_pss_pss_* signature algorithm when supported
2025-11-27 09:12:58 +10:00
6a5e29e21d
Merge pull request #9477 from douzzer/20251125-linuxkm-arm-fips-tweaks
...
20251125-linuxkm-arm-fips-tweaks
2025-11-27 09:03:36 +10:00
a02b61a9db
Merge pull request #9475 from douzzer/20251125-aes-arm-fixes
...
20251125-aes-arm-fixes
2025-11-26 14:11:23 -05:00
a765bbdb79
Need to move sigalg check down because it does not consider hybrids.
2025-11-26 13:31:21 -05:00
36418aca76
Set useRsaPss flag in both SSL and CTX structures
2025-11-26 10:30:38 -05:00
26206821ff
Prefer ARMASM over MMCAU for AES CBC when both enabled
2025-11-26 16:05:05 +08:00
be1f916028
wolfcrypt/src/aes.c: in the WOLFSSL_ARMASM && GCM_SMALL && !__aarch64__ static C implementation of GCM_gmult_len(), rename to GCM_gmult_len_armasm_C() (incompatible with other implementations);
...
wolfcrypt/src/aes.c: move FREESCALE_MMCAU implementations later (minimum precedence) for wc_AesEncrypt(), wc_AesDecrypt(), wc_AesSetKeyLocal(), wc_AesSetKey(), and wc_AesSetKeyDirect() (fixes ZD#20862).
2025-11-25 23:01:05 -06:00
f5543f6b95
wolfcrypt/test/test.c: in wolfcrypt_test_main(), install myFipsCb if applicable, and save failed wolfCrypt retvals to args.return_code to assure error exit. fixes FIPS integrity failure message with wolfEntropy.
2025-11-25 20:21:37 -06:00
4fda0883a4
globally rename WC_PIE_RELOC_TABLES to WC_SYM_RELOC_TABLES;
...
globally replace defined(__PIE__) with defined(WC_CONTAINERIZE_THIS) to decouple containerization from -fPIE;
configure.ac:
* add --enable-kernel-reloc-tables as an alias for --enable-linuxkm-pie;
* always activate ENABLED_ENTROPY_MEMUSE_DEFAULT when KERNEL_MODE_DEFAULTS and not RDSEED/RDRAND, regardless of FIPS presence/version;
linuxkm/Kbuild:
* add -DWC_CONTAINERIZE_THIS to PIE_FLAGS;
* add support for NO_PIE_FLAG, which inhibits -fPIE on ENABLED_LINUXKM_PIE builds, and adds -DWC_NO_PIE_FLAG to PIE_FLAGS;
linuxkm/linuxkm_wc_port.h: add setup for WC_LINUXKM_WOLFENTROPY_IN_GLUE_LAYER;
linuxkm/module_hooks.c: add wc_linuxkm_GenerateSeed_wolfEntropy().
2025-11-25 18:01:25 -06:00
0aaa31c438
Merge pull request #9459 from JacobBarthelmeh/async
...
fix small stack define and warnings for g++ build with async
2025-11-25 14:22:24 -08:00
6fc99ac6d8
Merge pull request #9431 from Pushyanth-Infineon/psoc6_aes_support
...
Enable hardware acceleration for AES on PSoC6.
2025-11-25 13:31:23 -08:00
6de31e95fc
Fix Coverity dead code report
2025-11-25 13:53:36 -06:00
bfce171836
Rust wrapper: enable cargo clippy and fix several clippy warnings
2025-11-25 08:22:02 -05:00
0afbc1ef08
Merge pull request #9471 from douzzer/20251124-memory_test-wolfSSL_Atomic_Ptr_CompareExchange
...
20251124-memory_test-wolfSSL_Atomic_Ptr_CompareExchange
2025-11-25 19:22:22 +10:00
a83fb4fc42
revert 6bda10a forcing small stack with async
2025-11-25 00:43:04 -07:00
e459b21744
wolfcrypt/src/wc_port.c and wolfssl/wolfcrypt/wc_port.h: add volatile attribute to wolfSSL_Atomic_Uint_CompareExchange() first arg, for pedantic accuracy;
...
wolfssl/internal.h and src/ssl.c: add volatile attribute to WOLFSSL_CTX.privateKeyPKey pointer, for pedantic accuracy;
wolfcrypt/test/test.c: in memory_test(), use compatible pointers for all operands in the wolfSSL_Atomic_Ptr_CompareExchange() test, to avoid undefined behavior.
2025-11-24 18:21:09 -06:00
eace02115b
Address review feedback
2025-11-24 16:57:52 -07:00
ea0793f0af
Merge pull request #9428 from dgarske/qat_v5.8.4
...
Migrate wolfAsyncCrypt repo into wolfSSL proper
2025-11-25 09:33:31 +10:00
7c8d7dff5e
Merge pull request #9348 from effbiae/ExportEccTempKey
...
Refactor: Extract ExportEccTempKey, DhSetKey, and other helper functions from SendServerKeyExchange
2025-11-25 09:31:20 +10:00
ed7ace504f
Merge pull request #9434 from embhorn/zd20802
...
Clarify return value of wc_RsaSSL_Verify/Inline
2025-11-25 09:28:26 +10:00
9c467a916a
Merge pull request #9437 from rlm2002/coverity
...
20251114 Coverity change
2025-11-25 09:26:17 +10:00
86789f92c0
Merge pull request #9446 from dgarske/stm32_castwarn
...
Fix stm32.c type warnings
2025-11-25 09:22:58 +10:00
76fec60754
Merge pull request #9448 from anhu/p7_unknownExt
...
unknown extension support in wc_PKCS7_EcdsaVerify
2025-11-25 09:21:47 +10:00
c6ecafced2
Merge pull request #9451 from kaleb-himes/ESV-DRBG-Decouple
...
Esv drbg decouple
2025-11-25 09:19:52 +10:00
89f27ceb19
Merge pull request #9453 from holtrop/rust-wc-random-additions
...
Rust wrapper: add HAVE_HASHDRBG RNG functions
2025-11-25 09:18:12 +10:00
eac5c29fdb
Merge pull request #9455 from holtrop/rust-wc-init-cleanup
...
Rust wrapper: wrap wolfCrypt_Init() and wolfCrypt_Cleanup()
2025-11-25 09:17:23 +10:00
4ccad17a39
Merge pull request #9465 from SparkiDev/aesgcm_small_armasm
...
AES-GCM small ARM asm: add back implementation
2025-11-24 15:06:49 -08:00
0786aa2585
Merge pull request #9464 from SparkiDev/sp_384_sub_fix
...
SP Thumb2/ARM32: P-384 sub not needed for small builds
2025-11-24 15:05:43 -08:00
d49c76945a
Merge pull request #9468 from josepho0918/mmcau
...
Correct SHA256 final endianness on MMCAU platforms
2025-11-25 08:38:21 +10:00
d766b82bac
Remove conditional and just assign boolean result
2025-11-24 15:55:32 -05:00
f5cb791e39
ML-KEM: Add check for Pubkey hash mismatch on decoding the dk
2025-11-24 10:22:40 -07:00
7752df3340
Correct SHA256 final endianness on MMCAU platforms
2025-11-24 16:48:35 +08:00
ba47f7f333
AES-GCM small ARM asm: add back implementation
...
Implementation of GCM mult with length for ARM asm and small GCM was
added to armv8-aes.c but got lost when code pulled back to aes.c.
2025-11-24 11:08:18 +10:00
46c704f51f
SP Thumb2/ARM32: P-384 sub not needed for small builds
...
Don't have an implementation of sp_384_sub when building for small code
size.
2025-11-24 10:45:36 +10:00
c5fb83f52d
fix warnings for g++ build with async
2025-11-21 14:38:40 -07:00
026fa2dd4e
Fix issues with the API documentation
2025-11-21 17:43:55 +00:00
cf8b729bae
Initialize test variables; avoid false warnings.
2025-11-21 11:59:07 -05:00
09e223baf3
Rust wrapper: wrap wolfCrypt_Init() and wolfCrypt_Cleanup()
2025-11-21 08:48:22 -05:00
15b55ef279
Rust wrapper: add HAVE_HASHDRBG RNG functions
2025-11-21 08:31:27 -05:00
23c5678797
RSA decrypt: don't write past buffer end on error
...
When the decrypted data is bigger than the buffer, the one extra bytes
was being written to.
2025-11-21 12:12:14 +10:00
David Garske
Juliusz Sosinowicz
Masaki Iwai
jordan
Sameeh Jubran
Joseph Chen
Sean Parkinson
Anthony Hu
Anthony Hu
Josh Holtrop
Daniel Pouzzner
Eric Blankenhorn
JacobBarthelmeh
Lealem Amedie
Andrew Hutchings