Daniel Pouzzner
7365c3c6ba
Merge pull request #7215 from julek-wolfssl/openssh-workflow-update
...
Point openssh workflow to wolf master
2024-02-08 12:43:53 -05:00
David Garske
7e142583c6
Merge pull request #7221 from SparkiDev/thumb2_inline_asm_iar_fix
...
Thumbs inline ASM IAR: fix register clobber list
2024-02-07 13:30:41 -08:00
Sean Parkinson
fff4effe31
Thumbs inline ASM IAR: fix register clobber list
...
Change register clobber list so that it reserves the same registers for
constants regardless of WOLFSSL_NO_VAR_ASSIGN_REG.
2024-02-07 10:28:01 +10:00
Juliusz Sosinowicz
bdc0b80ddb
Don't include unnecessary headers in public header file
2024-02-06 13:27:34 +01:00
Daniel Pouzzner
4d842f094e
Merge pull request #7199 from lealem47/defaultASN
...
Default to ASN TEMPLATE library
2024-02-05 22:32:57 -05:00
Sean Parkinson
86b1aae218
Merge pull request #7209 from philljj/zd17416
...
Coverity issues: fix MD5 and SHA buffer overrun.
2024-02-06 08:58:27 +10:00
Lealem Amedie
d36bd47a27
For cppcheck: Explicitly initialize some variables
2024-02-05 15:09:05 -07:00
Daniel Pouzzner
48e40b8d8e
Merge pull request #7201 from SparkiDev/sha256_aarch64_unaligned
...
SHA-256 Aarch64: fix alignments on loads and stores
2024-02-05 16:50:27 -05:00
Sean Parkinson
9060da42a6
Merge pull request #7211 from douzzer/20240203-linuxkm-fixes
...
20240203-linuxkm-fixes
2024-02-06 07:08:40 +10:00
Daniel Pouzzner
5c421d0207
Merge pull request #7178 from anhu/OQS_MEM_LEAKS
...
Fixes that prevent memory leaks when using OQS.
2024-02-05 13:26:43 -05:00
jordan
83169f91e9
Fix ShaFinal overrun.
2024-02-03 17:36:26 -06:00
Daniel Pouzzner
3a280e8295
linuxkm fixes:
...
linuxkm/linuxkm_wc_port.h: add fallback definition for static_assert() to support legacy kernels.
wolfcrypt/src/aes.c: fix AESNI runtime failure/fallback logic in wc_AesXtsSetKeyNoInit().
2024-02-03 13:46:45 -06:00
jordan
d111d7da1b
Fix MD5 and SHA buffer overrun.
2024-02-02 19:50:22 -06:00
Daniel Pouzzner
851f059023
Merge pull request #7203 from julek-wolfssl/openssh-9.6
...
openssh 9.6p1 fixes
2024-02-02 19:51:55 -05:00
Daniel Pouzzner
866992151b
Merge pull request #7208 from philljj/fix_ext_xmss_sigsleft
...
Fix ext_xmss sigsleft null deref.
2024-02-02 18:28:20 -05:00
Daniel Pouzzner
7823acbbde
Merge pull request #7184 from JacobBarthelmeh/pkcs7-enc
...
PKCS7 streaming with encode/sign
2024-02-02 18:00:12 -05:00
jordan
13e427433c
Fix ext_xmss sigsleft null deref.
2024-02-02 16:04:23 -06:00
JacobBarthelmeh
7592559fd3
rename argument, fix warnings on casts
2024-02-02 14:50:50 -07:00
David Garske
32aecf4c35
Merge pull request #7180 from douzzer/20240126-LINUXKM_LKCAPI_REGISTER
...
20240126-LINUXKM_LKCAPI_REGISTER
2024-02-02 11:12:35 -08:00
Juliusz Sosinowicz
be90fe073e
tfm and integer: skip whitespace at end in radix read
2024-02-02 14:38:40 +01:00
Juliusz Sosinowicz
7ebb8cd007
Update radix tests
2024-02-02 12:09:50 +01:00
Sean Parkinson
c8b0aac144
SHA-256 Aarch64: fix alignments on loads and stores
...
Input buffer must be loaded with a byte alignment.
Fix other loads and stores to be consistent.
2024-02-02 12:41:12 +10:00
Lealem Amedie
63f7298be2
Default to ASN TEMPLATE library
2024-02-01 14:52:06 -07:00
JacobBarthelmeh
ed4b87eb37
fix for clang-tidy null dereference error
2024-02-01 14:26:13 -07:00
JacobBarthelmeh
8d0dc7a568
fix asn original build, vs warning, and add test cases
2024-02-01 11:50:51 -07:00
JacobBarthelmeh
bf23357c8c
refactor streaming and additional comments
2024-02-01 11:50:51 -07:00
JacobBarthelmeh
c843064681
update macro guard
2024-02-01 11:50:51 -07:00
JacobBarthelmeh
75762d44b6
PKCS7 streaming with encode/sign
2024-02-01 11:50:51 -07:00
Juliusz Sosinowicz
335c51987e
openssh 9.6p1 fixes
...
- wolfSSL_DSA_set0_key: allow setting just the public key
- radix16: allow skipping the end of line whitespace
- Add openssh action
2024-02-01 11:39:56 +01:00
Daniel Pouzzner
f9bf96d9ba
Merge pull request #7187 from SparkiDev/sha256_intel_instrs
...
SHA-256: Implementation using Intel instructions
2024-01-31 19:15:43 -05:00
Daniel Pouzzner
1fda249468
Merge pull request #7189 from philljj/fix_static_nomalloc_build
...
Fix WOLFSSL_NO_MALLOC build.
2024-01-31 18:46:48 -05:00
Daniel Pouzzner
75bd1af110
Merge pull request #7179 from philljj/fix_ext_xmss_sigsleft
...
Fix ext_xmss SigsLeft.
2024-01-31 14:33:18 -05:00
Daniel Pouzzner
f228a85cee
AES-XTS: fix FIPS gating to use defined(HAVE_FIPS), not defined(HAVE_FIPS_VERSION).
2024-01-30 17:16:37 -06:00
jordan
7ddf20851d
Fix WOLFSSL_NO_MALLOC build.
2024-01-30 09:00:02 -06:00
Sean Parkinson
492490f7e6
SHA-256: Implementation using Intel instructions
...
Detects Intel SHA-256 instructions available for CPU.
Preferences implementation using Intel instructions.
2024-01-30 23:17:05 +10:00
Daniel Pouzzner
3d3c07944e
wolfcrypt/src/ecc.c: fix logic around WOLF_CRYPTO_CB_ONLY_ECC in wc_ecc_shared_secret(), _ecc_make_key_ex(), wc_ecc_sign_hash(), and wc_ecc_verify_hash() (defects reported by -Wreturn-type, -Wmaybe-uninitialized around err, and a failure of ecc_onlycb_test()).
2024-01-29 22:30:33 -06:00
Daniel Pouzzner
67bbe1e1bb
wolfcrypt/src/rsa.c: in wc_RsaFunction_ex(), if defined(WOLF_CRYPTO_CB_ONLY_RSA), add clause to return NO_VALID_DEVID if key->devId == INVALID_DEVID. fixes "control reaches end of non-void function" in PRB-single-flag.txt.
2024-01-29 22:00:20 -06:00
Daniel Pouzzner
11e8a89f67
wolfcrypt/src/aes.c: coddle XCode (clang) to clear frivolous -Wparentheses-equality.
2024-01-29 17:58:13 -06:00
Daniel Pouzzner
6261108d49
linuxkm: fix line lengths throughout; in linuxkm/lkcapi_glue.c: fix/harmonize error catching, reporting, and error codes; further address peer review feedback.
2024-01-29 17:48:31 -06:00
David Garske
de91add3d9
Merge pull request #7182 from SparkiDev/armv8_32_align_chacha20_asm
...
ARMv8 32 bit ChaCha20 ASM: loading from in/out
2024-01-29 14:59:56 -08:00
David Garske
de4a6f9e00
Merge pull request #7167 from SparkiDev/rsa_dec_check_d
...
RSA Decryption: check private value after decryption
2024-01-29 14:01:27 -08:00
David Garske
a6326bd80a
Merge pull request #7183 from SparkiDev/regression_fixes_9
...
Regression testing fixes
2024-01-29 07:42:34 -08:00
David Garske
60de159707
Merge pull request #7176 from danielinux/iotsafe-sha384
...
IoT-Safe sha384+sha512 support
2024-01-29 07:35:50 -08:00
Sean Parkinson
13591dcae8
Regression testing fixes
...
internal.c: NO_CERT, privateKeySz not used.
./configure --disable-shared --disable-asn --disable-rsa --disable-ecc
--enable-psk
sp_int.c: fix when sp_gcm is available
./configure --disable-shared --disable-shared --disable-ecc
--disable-dh --disable-aes --disable-aesgcm --disable-sha512
--disable-sha384 --disable-sha --disable-poly1305 --disable-chacha
--disable-md5 --disable-sha3 --enable-cryptonly --disable-inline
--enable-rsavfy --disable-asn --disable-oaep --disable-rng
--disable-filesystem --enable-sp=rsa2048 --disable-sp-asm
--enable-sp-math
2024-01-29 23:05:46 +10:00
Daniel Pouzzner
856c9a9a7f
wolfcrypt/src/port/arm/armv8-aes.c: revert changes in a0415ce855.
2024-01-29 00:17:19 -06:00
Daniel Pouzzner
1fc67183a5
linuxkm: address peer review:
...
* support AES_ENCRYPTION_AND_DECRYPTION only if WC_AES_XTS_SUPPORT_SIMULTANEOUS_ENC_AND_DEC_KEYS is defined, and define it in linuxkm_wc_port.h if LINUXKM_LKCAPI_REGISTER.
* fix a typo in km_AesInitCommon().
* remove #if 0 code in lkcapi_glue.c.
2024-01-28 23:58:46 -06:00
Sean Parkinson
4585c6d508
ARMv8 32 bit ChaCha20 ASM: loading from in/out
...
Input and output buffers come from the application and are not
necessarily alighed.
Use instructions that allow unaligned access to these buffers.
2024-01-29 11:03:40 +10:00
Daniel Pouzzner
a0415ce855
wolfcrypt/src/port/arm/armv8-aes.c: fix for AesXts.aes_encrypt and AesXts.aes_decrypt.
2024-01-26 20:19:52 -06:00
Daniel Pouzzner
b1e5d0f9bb
linuxkm: completion and stabilization of LKCAPI integration for AES-CBC, AES-CFB, AES-GCM, and AES-XTS:
...
linuxkm/lkcapi_glue.c (added in earlier commit):
implement linuxkm_lkcapi_register() and linuxkm_lkcapi_unregister() with idempotency.
add AES-XTS algorithm glue and self-test implementations.
add per-algorithm gating: LINUXKM_LKCAPI_REGISTER_AESCBC, _AESCFB, _AESGCM, and _AESXTS.
carry forward philljj's implementations for AES-CBC, AES-CFB, and AES-GCM, with various cleanups.
linuxkm/module_hooks.c:
print the "wolfCrypt container hashes" message only if DEBUG_LINUXKM_PIE_SUPPORT is set.
render the FIPS version for the self-test success message using the HAVE_FIPS_VERSION* macros.
add a "skipping full wolfcrypt_test() ..." message for --disable-crypttests builds.
add CONFIG_FORTIFY_SOURCE gates.
configure.ac:
add support for --enable-linuxkm-lkcapi-register;
add AES-XTS to output config summary;
rename --enable-xts to --enable-aesxts (retaining old option for backward compatibility).
linuxkm/linuxkm_wc_port.h: add support for CONFIG_FORTIFY_SOURCE.
linuxkm/linuxkm_memory.c:
fix retvals in save_vector_registers_x86() (wc-style MEMORY_E, not sys-style ENOMEM).
add __my_fortify_panic() implementation.
linuxkm/Kbuild: for ENABLED_LINUXKM_PIE in rename-pie-text-and-data-sections recipe, create an .rodata.wolfcrypt section.
linuxkm/include.am: add linuxkm/lkcapi_glue.c to EXTRA_DIST.
wolfcrypt/test/test.c:
when defined(HAVE_FIPS_VERSION), inhibit a test clause in aes_xts_128_test() disallowed by FIPS ("FIPS AES-XTS main and tweak keys must differ").
fix out-of-order user message in ecc_test().
2024-01-26 20:01:19 -06:00
jordan
947528ee16
Fix ext_xmss SigsLeft.
2024-01-26 17:07:43 -06:00
