David Garske
6be8a3710d
Merge pull request #8937 from miyazakh/tsip_cryptcb_ut
...
Fix TSIP port using crypto callback
2025-07-02 17:42:51 -07:00
Hideki Miyazaki
b60a05f45e
Fix TSIP port using crypto callback
...
- Add unit test using cb
2025-07-03 08:23:24 +09:00
David Garske
59061aebec
Fix issue with benchmark help options and descriptions not lining up due to new -aead_set_key added in #8160 on April 14, 2025.
2025-07-02 14:58:11 -07:00
jordan
9e811b5bd5
wolfcrypt misc: avoid frivolous initialization.
2025-07-02 10:46:38 -05:00
jordan
9ac480a60d
linuxkm fedora: fix uninitialized build errors.
2025-07-02 10:00:28 -05:00
Daniel Pouzzner
a8fc68d81b
wolfcrypt/src/random.c: in Hash_DRBG_Generate(), gate the verbose reseed message on DEBUG_WOLFSSL or DEBUG_DRBG_RESEEDS, use WOLFSSL_MSG_EX(), and refactor the condition from drbg->reseedCtr == RESEED_INTERVAL to drbg->reseedCtr >= WC_RESEED_INTERVAL.
...
also some unrelated cleanup in .wolfssl_known_macro_extras.
2025-07-01 13:05:00 -05:00
JacobBarthelmeh
8fa0f6b3df
Merge pull request #8944 from SparkiDev/evp_hmac_copy_hash_fix
...
EVP HMAC: get working with WOLFSSL_HMAC_COPY_HASH
2025-07-01 09:50:53 -06:00
Sean Parkinson
7c4de54e73
EVP HMAC: get working with WOLFSSL_HMAC_COPY_HASH
...
Get the EVP layer working with the wolfSSL HMAC implementation when
WOLFSSL_HMAC_COPY_HASH is defined.
This define hashes the ipad and opad into temporary hashes and copies
the required hash into the working hash when needed. Uses more memory
but is faster when starting a new hash with the same key.
2025-07-01 13:14:26 +10:00
Sean Parkinson
574de4b234
Memory allocation failure testing fixes
...
Fixes for test code to cleanup on failure properly.
pkcs7.c: when streaming, free the decrypting content when adding data to
the stream fails.
2025-07-01 11:50:42 +10:00
Daniel Pouzzner
018ee9754f
Merge pull request #8608 from anhu/2akid
...
Check for duplicate extensions in a CRL
2025-06-27 22:25:27 -05:00
Daniel Pouzzner
d1c1bca9e4
Merge pull request #8914 from dgarske/stm32n6
...
Added support for STM32N6
2025-06-27 22:19:01 -05:00
Daniel Pouzzner
4421f8bd84
Merge pull request #8934 from dgarske/macos_typo
...
Fix minor code typos for macos signal and types.h max block size
2025-06-27 14:11:31 -05:00
David Garske
9a2c8840e2
Merge pull request #8933 from SparkiDev/armv7a_asm_branch_fix
...
ARMv7a ASM: fix branch instruction
2025-06-27 08:45:52 -07:00
David Garske
295d90655b
Merge pull request #8929 from SparkiDev/regression_fixes_18
...
Regression testing
2025-06-27 08:44:43 -07:00
David Garske
20a2ec0fc1
Fix typo from MacOS signal fix improvement in PR #8928 .
2025-06-27 07:43:55 -07:00
Sean Parkinson
edacf0434c
Merge pull request #8869 from rlm2002/coverityTests
...
Coverity: parameter checking and NULL assignment
2025-06-27 09:49:21 +10:00
Sean Parkinson
a7430b3f70
Merge pull request #8930 from kojiws/check_shift_counts
...
Clarify the len range on SetShortInt()
2025-06-27 09:46:42 +10:00
Sean Parkinson
f713882c54
Merge pull request #8928 from dgarske/macos
...
Implement proper MacOS dispatch for conditional signal/wait
2025-06-27 09:35:30 +10:00
Sean Parkinson
81e1eb4600
ARMv7a ASM: fix branch instruction
...
Branch instructions got changed for 64-bit to be B.<cond>.
32-bit must be B<cond>.
Return them to this form.
2025-06-27 09:26:28 +10:00
Anthony Hu
a0cd18daea
Add back a removed comment and give RFC reference.
2025-06-26 16:08:21 -04:00
Ruby Martin
8ab08f7b17
check length in wc_oid_sum()
...
add MAX_OID_SZ to known macro extras
2025-06-26 09:20:26 -06:00
Sean Parkinson
f1cb4d579c
Regression testing
...
Fixes to get WOLFSSL_PUBLIC_MP testing passing.
Fix DH constant time agreement:
- implement constant time encoding to big-endian byte array in TFM
- only force x to be zero for SP math as others implementations ensure
unused words are zero
- exponentiate in constant time to the smallest number of words
possible
- no need to encode into separate buffer anymore as encoding is
constant time and front padded
- make requested_sz be the maximum size for the parameters and check
against agreeSz
- update agreeSz to be the maximum valid size instead of filling all
the buffer which may be many times too big
- fix SP result to front pad when doing constant time
2025-06-26 21:21:05 +10:00
Koji Takeda
b734c47cc9
Check the len range stricter
2025-06-26 17:48:52 +09:00
Daniel Pouzzner
6fb1c54c29
Merge pull request #8854 from dgarske/renesas_rx_tsip_aesctr
...
Added Renesas RX TSIP AES CTR support
2025-06-25 22:20:03 -05:00
Daniel Pouzzner
d6d124bb85
Merge pull request #8774 from SparkiDev/armv8_ghs
...
Armv8 (Aarch64) ASM fixes for Green Hills compiler
2025-06-25 21:46:48 -05:00
Daniel Pouzzner
29f534f3b0
Merge pull request #8836 from SparkiDev/lms_serialize_state
...
LMS: Allow state to be saved with private key
2025-06-25 21:34:42 -05:00
David Garske
6b7fe091bf
Implement proper MacOS dispatch for conditional signal/wait. Note: this logic was pulled from wolfMQTT and is well established.
2025-06-25 17:14:12 -07:00
Sean Parkinson
f119086d3e
Merge pull request #8918 from kojiws/fix_asn_integer_export
...
Fix SetShortInt() not to export wrong DER
2025-06-26 08:16:48 +10:00
Sean Parkinson
80a234a0c5
Merge pull request #8830 from JacobBarthelmeh/rx_threadx
...
add option to not use CT code with min/max
2025-06-26 08:15:09 +10:00
Koji Takeda
05c8bc7514
Fix SetShortInt()
2025-06-25 11:27:11 +09:00
JacobBarthelmeh
c33035e6a6
add conditions to constant time mask functions
2025-06-24 13:52:40 -06:00
JacobBarthelmeh
838636c76b
add option to not use CT code with min/max
2025-06-24 13:52:40 -06:00
David Garske
41591e7eb9
Fixes for TSIP AES CTR unit tests and handling of invalid cases.
2025-06-24 09:41:33 -07:00
David Garske
dc57adcfed
Fix to increment IV for AES CTR with TSIP (allow encrypt to be called multiple times without having to manually reset the IV).
2025-06-24 09:41:33 -07:00
David Garske
c7ff3b99b7
Allow for calling the Renesas RX TSIP AES crypto callback without a user context.
2025-06-24 09:41:33 -07:00
David Garske
ad9d068174
Fix issues with crypto callbacks and HAVE_ECC_DHE. Fix issues with ecc_onlycb_test.
2025-06-24 09:41:33 -07:00
David Garske
111feedadc
Add build guards on the crypto callback ECC items.
2025-06-24 09:41:32 -07:00
David Garske
ebe8816c2a
Code size reductions (check RX TSIP enables).
2025-06-24 09:41:32 -07:00
David Garske
78362bc346
Changes to support Renesas RX TSIP AES CTR.
2025-06-24 09:41:32 -07:00
David Garske
803edb0fa4
Added support for STM32N6.
2025-06-24 09:41:01 -07:00
Anthony Hu
423ecf8b1f
Try harder not to make stack increases
2025-06-24 11:12:27 -04:00
Anthony Hu
1dff76782b
Check for duplicate extensions in a CRL
2025-06-24 11:10:18 -04:00
Sean Parkinson
d05790ed89
LMS: Allow state to be saved with private key
...
Defining WOLFSSL_WC_LMS_SERIALIZE_STATE will have the state serialized
before the private key data.
Lots of memory used but means fast reload times. That means that the key
can be reloaded for each sign.
2025-06-24 20:46:41 +10:00
Sean Parkinson
fc1d281268
Green Hills compiler fixes
...
internal.c: Move non-enumeration value out of switch.
ssl.c: Only declare globalRNGMutex when required.
x509.c: initialize ret
armv8-aes.c, armv8-chacha.c: fix branch instructions
armv8-mlkem*: ensure only required constants are input operands and move
constants closer to first use.
armv8-poly1305.c: remove POLY1305_BLOCK_SIZE from input operands.
armv8-sha3-asm_c.c, armv8-sha512-asm_c.c: use constraint ':' instead of
'S'.
armv8-sha512.c: initialize initfp. Is always used.
2025-06-24 19:39:40 +10:00
Sean Parkinson
f8bb889712
Armv8 (Aarch64) ASM fixes for Green Hills compiler
...
Change branch instructions to proper form.
Use constant value rather than POLY1305_BLOCK_SIZE.
Remove duplicate clobber registers - both w and x versions.
Make clamp unconditionally compiled.
2025-06-24 19:39:39 +10:00
David Garske
c4428a432f
Merge pull request #8912 from SparkiDev/lms_sha256_192_w_fix
...
LMS SHA-256_192: fix parameters
2025-06-23 15:35:02 -07:00
David Garske
d4c827bc5e
Fix for building LMS with verify only. Added tests for LMS/XMSS verify only. New wc_LmsKey_GetKid references key->priv_raw that is not available.
2025-06-23 11:12:53 -07:00
Daniel Pouzzner
47a8242093
Merge pull request #8868 from SparkiDev/dilithium_win_fixes_1
...
Dilithium/ML-DSA: Fixes for casting down and uninit
2025-06-23 09:02:35 -05:00
Sean Parkinson
f36f86ee98
LMS SHA-256_192: fix parameters
...
Winternitz bits needs to be one larger when only 192 bit hash.
2025-06-23 08:16:05 +10:00
David Garske
b9455bc94b
Fixes issue with cert gen, no malloc and crypto callback causing wolfssl/wolfcrypt/asn.h:1375:18: error: use of undeclared identifier 'WC_MAX_DIGEST_SIZE. Fixed netcat issue in openssl.test causing server open check to fail on some platforms. Fixed clang-tidy report in benchmark.c where XFTELL could return negative (error) and wasn't handled.
2025-06-20 16:34:46 -07:00
