3121c55e4e
linuxkm on x86: global refactor across PK implementations of sp-asm vector register preservation, including removal of all residual can't-fail vector paths in PK algs.
...
wolfcrypt/src/sp_x86_64.c:
* fix ASSERT_SAVED_VECTOR_REGISTERS() in C wrappers: add where missing for implementations that use AVX2, and remove frivolous checks for ones that don't.
* refactor vector save-restore with a single locally tracked save in sp_RsaPublic_#(), sp_RsaPrivate_#(), sp_ecc_mulmod_add_#(), sp_ecc_mulmod_base_add_#(), sp_ecc_make_key_#(), and sp_#_calc_s_#().
* fix feature test in sp_ModExp_Fp_star_1024(), sp_Pairing_1024(), and sp_Pairing_gen_precomp_1024(), to properly gate on IS_INTEL_AVX2(cpuid_flags) and SAVE_VECTOR_REGISTERS2() == 0.
wolfcrypt/src/{dh.c,dsa.c,ecc.c,eccsi.c,rsa.c,sp_int.c}:
* remove all vector register provisions (SAVE_VECTOR_REGISTERS(), RESTORE_VECTOR_REGISTERS(), ASSERT_SAVED_VECTOR_REGISTERS());
* add explicit WC_CHECK_FOR_INTR_SIGNALS() and WC_RELAX_LONG_LOOP() to the lengthy loops in wc_DhGenerateParams(), wc_MakeDsaParameters(), ecc_sign_hash_sw(), and wc_MakeRsaKey().
wolfssl/wolfcrypt/{error-crypt.h,logging.h,memory.h}:
* make wc_backtrace_render() and wc_backtrace_set_fp() available whenever defined(WOLFSSL_DEBUG_BACKTRACE_ERROR_CODES);
* add support for DEBUG_VECTOR_REGISTERS_BACKTRACE_ON_FAIL, activating backtraces on vector register errors.
* also improve the debugging format from the DEBUG_VECTOR_REGISTER_ACCESS variants of SAVE_VECTOR_REGISTERS() and friends.
linuxkm/lkcapi_{dh,ecdh,ecdsa,rsa}_glue.c: harmonize PK driver names with AES, SHA, and DRBG, notably adding AVX2 annotation when enabled.
wolfcrypt/src/{sp_x86_64_asm.S,sp_x86_64_asm.asm}: synchronize with wolfssl/scripts#581 (removes SSE2 implementations of sp_#_get_from_table_#(), which no longer have users).
2026-05-30 15:11:15 -05:00
f6f27652dd
Merge pull request #10495 from LinuxJedi/PIC32MZ-Sim
...
Add PIC32MZ emulator tests
2026-05-29 16:21:15 -06:00
9fa5db5606
Merge pull request #10509 from kareem-wolfssl/zd21863_5
...
Disallow matching URI type in CheckForAltNames. NULL *response on error in wolfSSL_d2i_OCSP_RESPONSE.
2026-05-29 16:08:04 -06:00
1f32365e45
Merge pull request #10547 from SparkiDev/api_c_split_4
...
api.c: move out tests into other files
2026-05-29 16:03:56 -06:00
ac1c727c66
Merge pull request #10538 from michael-membrowse/membrowse-report-path-filter
...
fix memory report and add path filter
2026-05-29 08:23:17 -07:00
beff858833
Merge pull request #10552 from julek-wolfssl/evp-x25519-x448
...
Add NID_X25519 and NID_X448 support to the EVP layer
2026-05-28 15:57:50 -06:00
a31ce6e981
Merge pull request #10546 from philljj/malloc_nowait
...
bsdkm: misc cleanup.
2026-05-28 15:55:46 -06:00
7467ce2173
Merge pull request #10531 from SparkiDev/kernel_sp_vector
...
SP x86_64: save and restore vector registers
2026-05-28 11:43:48 -05:00
8fb72de2e9
Merge pull request #10402 from holtrop-wolfssl/rust-crate-updates-2026-05-05
...
Rust wrapper: ensure memory safety for C RNG struct
2026-05-28 10:06:05 -06:00
fc12de010d
Merge pull request #10513 from SparkiDev/tls13_aead_limit_fix
...
TLS 1.3: AEAD limit fixed
2026-05-28 09:30:43 -06:00
df8cc30cb8
Add NID_X25519 and NID_X448 support to the EVP layer
2026-05-28 14:40:36 +00:00
c674cec4ac
api.c: move out tests into other files
...
Move out DTLS 1.3 specific tests into test_dtls13.c. (Also move out from
test_dtls.c)
Move out DTLS tests into test_dtls.c.
Move out LMS and XMSS tests into test_lms_xmss.c.
Move out SSL session tests into test_session.c.
Move out remaining ML-DSA/Dilithium tests in api.c into test_mldsa.c.
2026-05-28 19:34:09 +10:00
5547e608b2
bsdkm: fix comment typo.
2026-05-28 00:56:57 -05:00
4bf539095d
bsdkm: misc cleanup.
2026-05-27 23:26:00 -05:00
2dd7947d27
Merge pull request #10483 from cconlon/pkcs8V1PublicKeyParse
...
ML-DSA: PKCS#8 parsing + EVP_PKCS82PKEY support
2026-05-27 17:41:30 -07:00
4472980738
Code review feedback and minor fixes.
...
Remove outdated RFC, refactor into single error case, guard against negative/0 len and NULL *data pointer, don't set ownStatus until status is confirmed non-NULL.
2026-05-27 16:54:14 -07:00
1e338487db
Code review feedback
2026-05-27 16:54:14 -07:00
a28ea7ac1c
NULL *response on error in wolfSSL_d2i_OCSP_RESPONSE.
...
Thanks to Zou Dikai for the report.
2026-05-27 16:54:14 -07:00
872a03a056
Disallow matching URI type in CheckForAltNames.
...
Thanks to Haruki Oyama (Waseda University) for the report.
2026-05-27 16:54:14 -07:00
713a220fc9
Merge pull request #10426 from JeremiahM37/fenrir-8
...
protocol correctness, OpenSSL-compat hardening, and sensitive-memory zeroization
2026-05-28 09:48:10 +10:00
971d2b051a
Merge pull request #10401 from night1rider/Early-heap-delcare-cmac
...
plumb caller heap into Cmac before cryptocb fires
2026-05-28 09:46:10 +10:00
78a5740bac
Merge pull request #10504 from miyazakh/f-2180_pbkdf
...
f-2180: fix clamp iterations <= 0 to 1 instead of returning an error
2026-05-28 09:32:01 +10:00
c92208076f
Merge pull request #10374 from kareem-wolfssl/zd21699
...
Enable all-zero shared secret check for Curve448/25519 by default. Ensure post_handshake_auth extension was sent before accepting post-handshake CertificateRequest message.
2026-05-28 09:29:49 +10:00
eaadfb12ed
Merge pull request #10508 from JacobBarthelmeh/static_analysis_3
...
devcrypto fixes, forcezero on memory after use, RX64 GetHash port fix, blake2 stor64 alignment
2026-05-28 09:24:56 +10:00
7bcc613bb0
Merge pull request #10478 from embhorn/zd21821
...
Fixes in SP int and DH
2026-05-28 09:00:41 +10:00
70f8bd9831
Merge pull request #10492 from rizlik/legacy_session_id_bad_client
...
Add compatibility flag and tests for pre-5.9.0 DTLSv1.3 clients
2026-05-28 08:57:48 +10:00
b0d61c5e44
Merge pull request #10545 from douzzer/20260527-fixes
...
20260527-fixes
2026-05-27 16:14:21 -06:00
815d48c65a
Merge pull request #10533 from JacobBarthelmeh/wolfclu_flag
...
set MD5 min hash size when using --enable-wolfclu
2026-05-27 16:05:52 -06:00
b28cbc7666
Merge pull request #10521 from philljj/kernel_fcntl
...
wc_port: guard fcntl behind WOLFSSL_KERNEL_MODE.
2026-05-27 15:10:50 -06:00
12d79d8838
wc_port: guard fcntl behind WOLFSSL_KERNEL_MODE.
2026-05-27 14:52:54 -05:00
e55e8a9842
Merge pull request #10524 from JacobBarthelmeh/sgx
...
SGX build does not have fcntl.h
2026-05-27 12:06:05 -07:00
f6d6ae687a
tests/api/test_mldsa_legacy.c: fix bugprone-macro-parentheses in MLDSA_LEGACY_SIZE_ASSERT().
...
wolfssl/wolfcrypt/wc_mldsa.h: move WOLFSSL_MLDSA_NO_CTX setup to precede legacy dilithium.h header, so that the _NO_CTX remap macros are properly gated in.
2026-05-27 14:02:37 -05:00
bddf76d4d1
fix memory report and add path filter
2026-05-27 19:18:00 +01:00
4e491ed3db
Merge pull request #10511 from dgarske/zd21780
...
Fix minor compile error with `WOLFSSL_DEBUG_MEMORY`
2026-05-27 11:16:19 -06:00
39a3546b64
Merge pull request #10519 from sebastian-carpenter/flaky-ech-test
...
CI Fix: fix flaky ECH test
2026-05-27 11:09:18 -06:00
3fa4ebcaec
Merge pull request #10527 from mattia-moffa/20260525-writedup-no-dtls
...
Allow --enable-writedup when DTLS is disabled
2026-05-27 11:02:55 -06:00
c568755751
Merge pull request #10528 from julek-wolfssl/tls/maxsigalgos
...
Default WOLFSSL_MAX_SIGALGO to 128
2026-05-27 11:01:54 -06:00
cd82d7e08d
Merge pull request #10529 from SparkiDev/sp_fixes_8
...
sp_int: fixes and added testing
2026-05-27 10:59:24 -06:00
7cf84dd833
Merge pull request #10523 from dgarske/ci_opt2
...
CI: cache compiler output in os-check Ubuntu matrix
2026-05-26 19:35:03 -06:00
5b08bc04b2
set MD5 min hash size when using --enable-wolfclu
2026-05-26 17:58:23 -06:00
91f3e7e063
Merge pull request #10332 from jackctj117/SNI
...
tls.c: send missing_extension alert on TLS 1.3 SNI absence
2026-05-27 08:37:05 +10:00
10020f9cc9
Fix minor compile error with WOLFSSL_DEBUG_MEMORY
2026-05-26 11:39:34 -07:00
8199fda0a4
Merge pull request #10160 from Roy-Carter/feature/integrate_openssl_comp_fixes
...
OpenSSL compatibility layer extension
2026-05-26 10:39:14 -07:00
cd2713a731
Default WOLFSSL_MAX_SIGALGO to 128
2026-05-26 17:37:11 +00:00
08022ffebf
CI: cache compiler output in os-check Ubuntu matrix
...
- Add .github/actions/ccache-setup composite (ccache + PATH intercept).
- Wire into os-check.yml make_check_linux; macOS unchanged for now.
- Measured on master --enable-all: cold 11.6s -> warm 1.1s (~10x), 100% hit.
2026-05-26 10:36:49 -07:00
291ec20d4e
stash caller heap before cryptocb fires so InitCmac_* callbacks can honor it
2026-05-26 09:51:59 -06:00
a3f5260260
Merge pull request #10500 from rizlik/sha224_only
...
crpytocb: support SHA224 under WOLF_CRYPTO_CB_ONLY_SHA256
2026-05-26 08:05:47 -07:00
52620e3204
Merge pull request #10516 from Frauschi/mldsa_rename
...
Finalize ML-DSA renaming
2026-05-26 08:05:04 -07:00
0c15be5fef
Revert ".wolfssl_known_macro_extra: add ONLY_AES and ONLY_SHA256"
...
This reverts commit 87f8078367
2026-05-26 15:48:06 +02:00
637c07798a
Finalize ML-DSA renaming
2026-05-26 14:54:30 +02:00
Daniel Pouzzner
JacobBarthelmeh
David Garske
Juliusz Sosinowicz
Sean Parkinson
jordan
Kareem
Chris Conlon
Michael Rogov Papernov
Zackery
night1rider
Marco Oliverio
Tobias Frauenschläger