28c78b5c0c
Use global devId for RNG initialization in tests: mlkem_test, dilithium_test, xmss_test, lms_test
2025-10-20 09:16:23 -06:00
fba8cab200
Refactor wc_rng_new to use wc_rng_new_ex, and to use WC_USE_DEVID as the devId if set at compile time
2025-10-20 09:16:23 -06:00
525c212d1c
cmac kdf: add NIST SP 800-108, and NIST SP 800-56C two-step.
2025-10-20 08:20:23 -05:00
987bf2fe2e
Rust wrapper: fix test_ecc sig_to_rs() check
2025-10-20 09:09:53 -04:00
714abfa1c0
Rust wrapper: add wolfssl::wolfcrypt::sha module
2025-10-20 08:44:07 -04:00
aba9ee4015
Merge pull request #9319 from douzzer/20251018-linuxkm-gdwarf-4-g1
...
20251018-linuxkm-gdwarf-4-g1
2025-10-18 14:35:46 -05:00
9881c95c46
linuxkm/Kbuild: refactor RENAME_PIE_TEXT_AND_DATA_SECTIONS to automatically derive the list of all ELF sections to rename, rather than enumerating them staticly in the objcopy recipe (motivated by changes expected in kernel 6.19).
2025-10-18 12:07:35 -05:00
a36dd35e59
linuxkm: rename FIPS container segments from foo.wolfcrypt to foo_wolfcrypt to avoid getting rearranged by kernel scripts/module.lds klp/kpatch clauses expected in kernel 6.19.
2025-10-18 03:23:38 -05:00
2bbc3a0ae2
wolfcrypt/test/test.c: fixes for --disable-sha256, --disable-hmac, --disable-rng, and FIPS gating on RSA-PSS.
2025-10-18 02:05:55 -05:00
08f5c3e8b9
configure.ac: in linuxkm setup, use -g1 explicitly unless --enable-debug, whereupon use -g3. also, add -gdwarf-4 to AM_CCASFLAGS.
2025-10-18 01:56:48 -05:00
d87ca70048
Fix mixed declaration / code
2025-10-18 06:18:29 +01:00
01dc28ad31
Seperate AES alloc / dealloc phases
2025-10-18 06:13:40 +01:00
65bb68b6c0
Move heap/stack tracking to before init phase
...
Start tracking during the setup of the algo, so we can capture the
memory usage of the algo init functions.
2025-10-18 06:13:36 +01:00
036c66c777
Benchmark memory tracking
...
This adds heap and stack tracking to wolfCrypt bench so that it is
possible to see RAM usage. It also adds support for stack tracking in
microcontrollers (tested on STM32).
2025-10-18 06:09:01 +01:00
c091c8b7ba
Merge pull request #9318 from douzzer/20251017-linuxkm-signal-handling-tweaks
...
20251017-linuxkm-signal-handling-tweaks
2025-10-17 21:17:20 -05:00
69f236be0a
linuxkm/linuxkm_wc_port.h: suppress -Wformat-nonliteral while including kernel headers (needed for kernel <=4.9).
2025-10-17 19:31:17 -05:00
6a0be6a7f7
configure.ac: remove -g0 from, and always add -DHAVE_REPRODUCIBLE_BUILD to, reproducible-build AM_CFLAGS, and always add -gdwarf-4 to AM_CFLAGS when ENABLED_LINUXKM;
...
.github/workflows/linuxkm.yml: restore as-was, but change from oldconfig to olddefconfig.
2025-10-17 18:24:32 -05:00
d2f819a2f6
linuxkm/module_hooks.c and linuxkm/lkcapi_glue.c: check retval from WC_SIG_IGNORE_BEGIN().
2025-10-17 18:23:25 -05:00
d475985062
Merge pull request #9306 from holtrop/rust-wc-dh
...
Rust wrapper: add wolfssl::wolfcrypt::dh module
2025-10-17 15:41:58 -07:00
e142a9629f
linuxkm/linuxkm_wc_port.h and linuxkm/module_hooks.c: tweak gating for verifyCore and my_kallsyms_lookup_name, and use the latter to reach verifyCore on old FIPS. also tweak the In-core integrity hash check failure." message to supply module-update-fips-hash instructions.
2025-10-17 17:12:37 -05:00
354c576c96
.github/workflows/linuxkm.yml: comment out --enable-linuxkm-pie config, pending resolution of "dwarf_get_units failed" on Azure kernel 6.14 image.
2025-10-17 15:00:04 -05:00
7a43732daa
linuxkm/linuxkm_wc_port.h, wolfssl/wolfcrypt/types.h, linuxkm/module_hooks.c, linuxkm/lkcapi_glue.c:
...
* add WC_SIG_IGNORE_BEGIN(), WC_SIG_IGNORE_END(), wc_linuxkm_sig_ignore_begin(), wc_linuxkm_sig_ignore_end();
* move WC_CHECK_FOR_INTR_SIGNALS() and WC_RELAX_LONG_LOOP() definitions outside the BUILDING_WOLFSSL gate;
* refactor linuxkm_lkcapi_registering_now as a wolfSSL_Atomic_Int and use it as a mutex for linuxkm_lkcapi_register() and linuxkm_lkcapi_unregister();
* add WC_SIG_IGNORE_BEGIN()...WC_SIG_IGNORE_END() wrappers around all relevant critical spans in linuxkm glue.
2025-10-17 14:58:21 -05:00
4faa21a74a
Rust wrapper: Fix DH::FFDHE_* constant values
2025-10-17 14:46:15 -04:00
8e7f77db76
Rust wrapper: add wolfssl::wolfcrypt::dh module
2025-10-17 14:46:15 -04:00
5280bfb89a
Merge pull request #9297 from douzzer/20251011-more-fips-optest-tweaks
...
20251011-more-fips-optest-tweaks
2025-10-17 12:44:25 -06:00
f492abfe9e
Merge pull request #9314 from SparkiDev/silabs_no_hash_raw
...
SHA-2: No hash raw
2025-10-17 10:19:01 -07:00
8969e5f36a
refactor to TLSX_EchChangeSNI
2025-10-17 13:51:42 +11:00
9cf08afbbb
fixes for --disable-tls.
2025-10-16 18:50:06 -05:00
f508b44f0f
configure.ac: in setup for cryptonly, don't set enable_tls13=no or enable_tlsv12=no -- they're needed for crypto-layer KDFs.
2025-10-16 18:50:06 -05:00
b924e9a905
linuxkm/module_hooks.c: add sanity check for compiled-in verifyCore, and fix linuxkm_op_test_1() call to use argc==3 arg list.
2025-10-16 18:50:06 -05:00
5ee42402ae
wolfssl/wolfcrypt/types.h: fix whitespace around WC_SAFE_SUM_*().
2025-10-16 18:50:06 -05:00
6fb547a1ae
linuxkm/module_hooks.c: purge fipsMode override (fipsEntry() takes care of this), and add explicit fipsCastStatus[] reset code.
2025-10-16 18:50:06 -05:00
e8d9f91868
linuxkm/module_hooks.c and linuxkm/linuxkm_wc_port.h: finish implementation of
...
FIPS_OPTEST glue code, including /sys/module/libwolfssl/FIPS_optest_run_code
(FIPS_optest_trig_handler(), plus my_kallsyms_lookup_name() helper).
2025-10-16 18:50:05 -05:00
581e86c178
wolfcrypt/test/test.c: fix error-path uninitialized access defect in ecc_test_buffers().
2025-10-16 18:50:05 -05:00
0d588b446c
Merge pull request #9313 from douzzer/20251016-Wnull-dereference
...
20251016-Wnull-dereference
2025-10-16 17:47:23 -06:00
d0909991fb
SHA-2: No hash raw
...
Implementation of FinalRaw for SE050 was not usable - TLS_hmac did not
produce valid results.
Removed implementations and defining WOLFSSL_NO_HASH_RAW to compile to
not require FinalRaw APIs.
2025-10-17 07:46:50 +10:00
0c4feb0aa6
wolfcrypt/src/asn.c: revert earlier changes in EncodeName(), and add local S390-specific pragma to inhibit false-positive -Wnull-dereference.
2025-10-16 16:10:54 -05:00
d6aa157187
fixes for OPENSSL_COEXIST covering OPENSSL_COMPATIBLE_DEFAULTS and WOLFSSL_WPAS:
...
* src/ssl.c:wolfSSL_CTX_new_ex()
* src/x509.c:wolfSSL_X509_PUBKEY_set()
2025-10-16 15:10:16 -05:00
6ee660841b
fixes/workarounds for -Wnull-dereferences, some true positive, some false
...
positive:
* src/pk.c:wolfSSL_RSA_meth_new()
* tests/api.c:test_wolfSSL_PKCS7_certs()
* tests/api.c:test_wolfSSL_X509V3_EXT_get()
* wolfcrypt/src/asn.c:EncodeName()
* wolfcrypt/src/pkcs12.c:wc_i2d_PKCS12()
* wolfcrypt/src/port/af_alg/afalg_aes.c
2025-10-16 15:10:16 -05:00
0727bae09e
Merge pull request #9310 from SparkiDev/lms_cast_16bit
...
LMS: Cast constants before shifting left
2025-10-16 12:16:05 -07:00
a22d239bfd
Merge pull request #9301 from effbiae/set_srp_username
...
refactor wolfSSL_CTX_set_srp_username
2025-10-16 11:32:24 -07:00
d88ab84b9f
Merge pull request #9311 from SparkiDev/regression_fixes_19
...
Regression testing
2025-10-16 10:56:27 -07:00
058686b829
Merge pull request #9305 from dgarske/bench_rsapub
...
Fix for benchmark with key gen and "out" not being allocated
2025-10-16 12:23:23 -05:00
c111c5bacc
Regression testing
...
x509.c: realloc may fail and therefore need to store result in a
temporary so the old pointer is not lost.
tls.c: free the name if it is not pushed on to the stack of peer CA
names. Failure to push can be from memory allocation failure.
aes.c: Don't compile XTS decrypt functions without HAVE_AES_DECRYPT.
Fix tests to have better pre-processor protection.
2025-10-16 12:13:32 +10:00
36c953dd8f
LMS: Cast constants before shifting left
...
Compiling for 16-bit results in some constants type being too small for
shift amount without cast.
2025-10-16 09:24:48 +10:00
88a55cdb71
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into zd20603
2025-10-15 15:48:16 -07:00
8d41d1ca65
Add IPv6 support to wolfSSL_BIO_new_accept and wolfIO_TcpBind.
2025-10-15 15:47:22 -07:00
832e23a5f7
Merge pull request #9307 from douzzer/20251015-linuxkm-fixes
...
20251015-linuxkm-fixes
2025-10-15 16:26:00 -06:00
3746164d60
linuxkm/linuxkm_wc_port.h: don't include wolfssl/wolfcrypt/memory.h (unneeded and out of order).
2025-10-15 17:06:31 -05:00
790808b172
Merge pull request #9303 from dgarske/silabs_series2
...
Support for detecting SILABS ERF32 Series 2 ECDSA support for P384/P521
2025-10-15 12:46:44 -06:00
night1rider
jordan
Josh Holtrop
Daniel Pouzzner
Andrew Hutchings
David Garske
lealem47
effbiae
Zackery
Sean Parkinson
Kareem