59f4fa5686
Merge pull request #9452 from JacobBarthelmeh/release
...
prepare for release 5.8.4
2025-11-20 13:05:19 -08:00
91f3d90f82
Update version .rc files too
2025-11-20 13:10:38 -07:00
ab98c150c6
prepare for release 5.8.4
2025-11-20 10:57:50 -07:00
176801a21b
Include new header in the template file also
2025-11-20 09:40:18 -07:00
eeb2b09b23
Address linuxkm builds and the new header
2025-11-20 09:38:13 -07:00
4da42ffae9
Fix typo in header include (capital E)
2025-11-20 09:38:13 -07:00
301a4a554b
Add header to make install set
2025-11-20 09:38:13 -07:00
dc6fa0ad4e
De-couple ESV from DRBG
2025-11-20 09:38:13 -07:00
80d3037332
Use more uppercase U's
2025-11-20 08:34:54 -05:00
bb8673070a
Use uppercase U
2025-11-19 23:52:21 -05:00
2c4b6f46b7
Add scripts/rsapss.test to test RSA-PSS signature algorithm negotiation
2025-11-19 23:05:31 -05:00
b6adf12f83
Merge pull request #9438 from douzzer/20251113-linuxkm-aarch64-fips-tweaks
...
20251113-linuxkm-aarch64-fips-tweaks
2025-11-19 17:42:45 -07:00
bea6bcbba9
Merge pull request #9450 from JacobBarthelmeh/xilinx
...
adjust test case to account for AES-GCM key size support with Xilinx …
2025-11-19 18:14:10 -06:00
30487ad236
linuxkm/: fixes for ARMv7, and miscellaneous fixes for Makefile and FIPS logic.
2025-11-19 17:21:29 -06:00
06d3d6d3df
linuxkm/Kbuild and linuxkm/module_hooks.c: refactor wc_linuxkm_pie_reloc_tab to include ground truth segment tag from ELF metadata.
...
tweaks for ARM32: recognize R_ARM_* relocations, and add -fno-unwind-tables to PIE_FLAGS.
linuxkm/linuxkm_wc_port.h:
* __PIE__: don't declare static pmd_to_page() unless USE_SPLIT_PMD_PTLOCKS.
* add wc_lkm_refcount_to_int() helper with -Wnested-externs suppressed.
wolfcrypt/src/fe_operations.c: in fe_frombytes() and fe_sq2(), use explicit XMEMSET()s to initialize working vars, rather than implicit, to avoid implicit (unshimmable) memset() calls.
wolfcrypt/src/ge_operations.c: fix gate on _wc_curve25519_dummy() to require CURVED25519_ASM.
2025-11-19 17:21:29 -06:00
23a6edcc89
adjust test case to account for AES-GCM key size support with Xilinx afalg
2025-11-19 23:00:13 +00:00
96dde5b4a8
Merge pull request #9392 from philljj/bsdkm
...
bsdkm: initial wolfcrypt FreeBSD kernel module support.
2025-11-19 15:25:21 -07:00
668602016c
Allow user to prevent wc_PKCS7_EcdsaVerify from erroring out due to extentions we do not know about
2025-11-19 14:36:04 -05:00
268b81c29e
TLSv1.3 certificate verify: report rsa_pss_pss_* signature algorithm when supported
2025-11-19 09:47:05 -05:00
8d357de6d8
Merge pull request #9444 from dgarske/macros_explicit
...
Fix issue with poorly written macros
2025-11-18 17:28:12 -07:00
64c03fa9ee
Fix stm32.c type warnings
2025-11-18 14:33:11 -08:00
658ea305d1
Fix issue with poorly written macros
2025-11-18 14:15:22 -08:00
10c5baec1a
Merge pull request #9442 from SparkiDev/lms_192_8bit_checksum
...
LMS - check sum fix for SHA-256-192
2025-11-18 14:57:21 -07:00
7fdd177233
fixed oss-fuzz warnings
2025-11-18 13:28:51 -07:00
631a28fccc
bsdkm: better with-bsd-export-syms description in configure.ac.
2025-11-18 12:59:51 -06:00
0458fba394
bsdkm: add atomic_fcmpset_ptr.
2025-11-18 10:12:28 -06:00
551f90414c
bsdkm: review cleanup.
2025-11-18 09:02:45 -06:00
da0e4f59ec
LMS - check sum fix for SHA-256-192
...
Only 8 bits needed of checksum whem doing 192-bit hashes with Winternitz
of 1 (9 for 256-bit hashes).
Cleanup code around checksum.
2025-11-18 21:20:02 +10:00
28e4fe3b6c
bsdkm: initial wolfcrypt FreeBSD kernel module support.
2025-11-18 01:28:08 -06:00
46a7719e2d
Merge pull request #9441 from gojimmypi/pr-arduino-examples
...
Update Arduino workflow with parameterized matrix
2025-11-17 17:58:13 -06:00
8e38e3bb5e
Merge pull request #9433 from holtrop/rust-conditional-compilation
...
Rust wrapper: enable conditional compilation based on C library build options
2025-11-17 15:03:17 -07:00
35374a16fe
Merge pull request #9436 from douzzer/20251114-WOLFSSL_BLIND_PRIVATE_KEY-thread-safety
...
20251114-WOLFSSL_BLIND_PRIVATE_KEY-thread-safety
2025-11-17 15:01:13 -07:00
2be7482210
Merge pull request #9439 from SparkiDev/mlkem_derive_secret_fix
...
ML-KEM: derive secret fix
2025-11-17 10:29:56 -07:00
d2c0901e80
Update Arduino workflow with parameterized matrix
2025-11-17 08:41:28 -08:00
074a3dbcc1
ML-KEM: derive secret fix
...
Fixes for deriving secret for ML-KEM.
2025-11-17 10:01:19 +10:00
9bc259ae6f
Enable hardware acceleration for AES on PSoC6.
...
- Implemented AES ECB, CBC, CFB, and GCM modes with hardware acceleration.
- Ensured proper mutex locking for concurrent access to hardware resources during
- Adjusted the aes.h header to include PSoC6 specific definitions and structures.
- Updated README for PSoC6 port.
2025-11-16 00:12:09 +05:30
c29abccc9f
src/internal.c: peer review: refactor wolfssl_priv_der_unblind() and wolfssl_priv_der_unblind_free() to use AllocDer() and FreeDer().
2025-11-14 18:13:44 -06:00
dee0658e8a
fix races around WOLFSSL_CTX.{privateKey,privateKeyMask,altPrivateKey,altPrivateKeyMask} in WOLFSSL_BLIND_PRIVATE_KEY code paths:
...
* rename wolfssl_priv_der_unblind() to wolfssl_priv_der_blind_toggle(),
* add wolfssl_priv_der_unblind() that allocates a temp copy,
* add wolfssl_priv_der_unblind_free(),
* in wolfssl_priv_der_blind_toggle(), make mask a const arg;
restore const attribute to ctx arg to wolfSSL_CTX_get0_privatekey(), and add explanatory comment.
2025-11-14 18:13:43 -06:00
5c421a152d
Merge pull request #9429 from JacobBarthelmeh/certs
...
renew example certificates
2025-11-14 16:02:55 -08:00
a68da8d2d5
update pksc7 decode test for new ca-cert.pem size
2025-11-14 14:53:48 -07:00
3f441ef1a5
update tests after certificate renewal
2025-11-14 14:45:37 -07:00
6c74098be5
run renewcerts.sh, gencertbuf.pl, and create_ocsp_test_blobs.py
2025-11-14 14:45:37 -07:00
d18b251f54
Merge pull request #9420 from wolfSSL/TLS13-cipher-suite-fix
...
Fix TLS 1.3 cipher suite when TLS 1.2 ciphers precede TLS 1.3 ciphers
2025-11-14 16:42:05 -05:00
46a2234c61
Merge pull request #9425 from JacobBarthelmeh/pkcs7_stream
...
with decode enveloped data track total encrypted content size
2025-11-14 12:59:09 -08:00
30baf0a2e0
Merge pull request #9435 from dgarske/hmac_zerolen
...
Improve wc_HmacUpdate to return early if input length == 0
2025-11-14 15:49:04 -05:00
59800d8bb7
additional index checks, handle when j is 0 or 1
2025-11-14 12:19:58 -07:00
a071426bc8
Migrate wolfAsyncCrypt repo into wolfSSL proper
2025-11-14 09:43:59 -08:00
4e1b719236
Improve wc_HmacUpdate to return early if input length == 0. Fixes QAT issue with HKDF test.
2025-11-14 09:40:56 -08:00
fda674a48a
Clarify return value of wc_RsaSSL_Verify/Inline
2025-11-14 11:06:26 -06:00
0767cb84bf
Removed trailing white space
2025-11-14 09:03:51 -07:00
David Garske
JacobBarthelmeh
kaleb-himes
Josh Holtrop
Daniel Pouzzner
Anthony Hu
sebastian-carpenter
jordan
Sean Parkinson
gojimmypi
Kamatham Pushyanth
Ruby Martin
Eric Blankenhorn
jackctj117