dbb75c46c9
ASN.1 original: Fix DecryptContent to check sequence len
...
Original ASN.1 code wasn't checking that data in a sequence didn't
exceed the length of the sequence.
In particular, the contents of the parameters and the PKCS#5 parameters.
2025-08-06 07:42:09 +10:00
d0f8493c6a
SHA-3 C code: use xorbuf for little-endian builds
...
Instead of loading 64-bits with alignment protection, use xorbuf which
has built in protection.
Only XOR in as much data as cached and XOR padding and rate bit directly
rather than XORing maximum amount after clearing out rest of array and
adding in padding and rate bit.
2025-08-06 07:39:53 +10:00
219509d7d9
SP int: modular exponentiation constant time
...
Using a 1-bit window size for small exponentsisn't useful.
2025-08-06 07:38:37 +10:00
7c9327a36b
Please use DEBUG_WOLFSSL not WOLFSSL_DEBUG
2025-08-05 12:19:30 -07:00
bfb2a817e3
Fix CID 535964
2025-08-05 13:25:42 +09:00
040e2102a8
Merge pull request #9049 from kojiws/import_mldsa_seed_pkcs8_reapply
...
Reapply - Import ML-DSA's seed from PKCS8 file
2025-08-01 14:34:09 -06:00
a63bb12f6b
Move devId from internal to public
...
- addressed code review by devin
2025-08-01 16:58:16 +09:00
1152d612a6
wolfcrypt/benchmark/benchmark.c: smallstack refactors for bench_mlkem() and bench_dilithiumKeySign(), and globally replace stray uses of fprintf(stderr, ...) with printf(...) for portability.
2025-07-31 11:30:42 -05:00
09deacbe8f
Revert "Merge pull request #9045 from douzzer/20250730-revert-PR9000"
...
This reverts commit 70af2be5ab46347173b2
2025-07-31 14:14:51 +09:00
c353052e54
linuxkm/linuxkm_wc_port.h:
...
* move enum wc_svr_flags out of BUILDING_WOLFSSL guard;
* add DISABLE_VECTOR_REGISTERS() and REENABLE_VECTOR_REGISTERS() definitions for !BUILDING_WOLFSSL;
* add #include <linux/spinlock.h> to !WOLFSSL_LINUXKM_USE_MUTEXES implementation to fix compilation (and add usability) to caller code;
linuxkm/lkcapi_sha_glue.c: in wc_linuxkm_drbg_ctx_clear(), fix error-path deallocation of locked object;
wolfcrypt/benchmark/benchmark.c:
* in FIPS v6+ builds, and FIPS linuxkm v5+, check retval from wc_AesEncryptDirect() and wc_AesDecryptDirect();
* add WC_RELAX_LONG_LOOP() in bench_stats_sym_finish() and bench_stats_asym_finish_ex();
wolfcrypt/test/test.c: fix rng_seed_test() with correct test vectors for the relevant combinations of features, and gate the test out if there are user override defines for ENTROPY_SCALE_FACTOR or SEED_BLOCK_SZ.
2025-07-30 22:15:05 -05:00
9b7caac3ef
Update RZ examples
...
- Use xSPI0 boot mode
- Update FSP from v1.3 to v2.0.0
- Simplify UART
- Migrate new User Ctx
- Update README
- Fix SCE TLS on RA6M4
2025-07-31 11:04:06 +09:00
26806cda7b
Revert "Support importing seed of ML-DSA key"
...
This reverts commit a82d1a6b12
2025-07-30 15:39:57 -05:00
d0bf9c4b3c
Revert "Disable exporting dilithium DER tests without WOLFSSL_ASN_TEMPLATE"
...
This reverts commit bbcdfe92e0
2025-07-30 15:39:53 -05:00
40646964b4
Revert "Follow copilot review"
...
This reverts commit 189ba201f3
2025-07-30 15:39:47 -05:00
46347173b2
Merge pull request #9034 from holtrop/allow-pkcs7-without-x963-kdf
...
Allow building with HAVE_PKCS7 set and HAVE_X963_KDF unset
2025-07-30 10:05:09 -06:00
ccb463dd1d
Fix unit test coverity defect in test_wc_PKCS7_SetAESKeyWrapUnwrapCb()
2025-07-30 10:37:28 -04:00
42e2dd9990
Zero sha->buffer
...
msan reported it as an uninitialized buffer
2025-07-30 14:16:52 +02:00
36912c3af8
Merge pull request #9000 from kojiws/import_mldsa_seed_pkcs8
...
Import ML-DSA's seed from PKCS8 file
2025-07-29 16:02:36 -06:00
df7e105fb7
Allow building with HAVE_PKCS7 set and HAVE_X963_KDF unset
2025-07-29 11:46:44 -04:00
189ba201f3
Follow copilot review
2025-07-29 07:15:32 +09:00
26a4ea93eb
Allow building with HAVE_PKCS7 set and HAVE_AES_KEYWRAP unset
2025-07-28 12:40:35 -04:00
bbcdfe92e0
Disable exporting dilithium DER tests without WOLFSSL_ASN_TEMPLATE
2025-07-28 21:46:28 +09:00
a82d1a6b12
Support importing seed of ML-DSA key
2025-07-28 21:46:28 +09:00
77dccc0c32
linuxkm:
...
* add wc_linuxkm_check_for_intr_signals(), wc_linuxkm_relax_long_loop(),
WC_CHECK_FOR_INTR_SIGNALS(), WC_RELAX_LONG_LOOP(), SAVE_NO_VECTOR_REGISTERS(),
RESTORE_NO_VECTOR_REGISTERS(), and new error code INTERRUPTED_E ("Process
interrupted");
* update the no-asm remaps in the PK implementations to use
SAVE_NO_VECTOR_REGISTERS() and RESTORE_NO_VECTOR_REGISTERS(), so that inner
loops in them are always covered by the new logic.
2025-07-25 15:56:48 -05:00
c347f75b3c
Merge pull request #9029 from holtrop/extract-kari-rid
...
Add wc_PKCS7_GetEnvelopedDataKariRid()
2025-07-25 09:04:11 -07:00
a06268f705
Merge pull request #9010 from miyazakh/sce_tlsproperties_uc
...
Make properties related to Renesas FSP Security Module TLS hidden for FSP SM context
2025-07-24 12:35:56 -07:00
2db1669713
Merge pull request #8988 from JacobBarthelmeh/visibility
...
remove WOLFSSL_API in source code when already used in header file
2025-07-24 11:00:55 -07:00
cf843c8b82
Add wc_PKCS7_GetEnvelopedDataKariRid()
...
Allow access to recipient ID before attempting to decrypt content.
2025-07-24 11:15:30 -04:00
09de113145
Fix warning with WOLFSSL_RSA_VERIFY_ONLY
...
PR #8830 introduces a warning when WOLFSSL_NO_CT_OPS is selected.
However, in WOLFSSL_RSA_VERIFY_ONLY mode this is enforced in
wolfssl/wolfcrypt/settings.h:4035, forcing this warning to appear when
this configuration is used.
This PR takes into account the special case, allowing WOLFSSL_NO_CT_OPS
when WOLFSSL_RSA_VERIFY_ONLY, and removing the warning.
2025-07-24 16:13:00 +02:00
6aabc73845
Merge pull request #9018 from holtrop/decode-skp
...
Add API to decode SymmetricKeyPackage and OneSymmetricKey CMS objects
2025-07-23 16:01:58 -07:00
44eba446ec
Merge pull request #9002 from holtrop/aes-key-wrap-callbacks
...
Add callback functions for custom AES key wrap/unwrap operations
2025-07-23 16:01:49 -07:00
e1b3c43a2b
Merge pull request #8987 from gojimmypi/pr-espressif-allocators
...
Add wolfSSL_GetAllocators PSRAM support for Espressif ESP32
2025-07-23 15:33:53 -07:00
c261bf4452
Merge pull request #9006 from rlm2002/zd20212
...
Coverity fixes for Zendesk issue
2025-07-23 15:29:20 -07:00
2f2f999657
Rework to remove early function returns
2025-07-22 20:35:28 -04:00
0d48911ae4
Update style per code review comments
2025-07-22 20:30:44 -04:00
65126352a0
Merge pull request #9025 from douzzer/20250721-wolfssl_linuxkm_pie_redirect_table-direct
...
20250721-wolfssl_linuxkm_pie_redirect_table-direct
2025-07-22 18:08:11 -05:00
5e77253577
Addressed code review comments
2025-07-23 07:44:30 +09:00
13fb6b83cd
Update style per code review comments
2025-07-22 16:38:13 -04:00
27f0ef8789
Combine AES key wrap/unwrap callbacks
2025-07-22 16:34:37 -04:00
7bcb346dd7
Remove early function returns per code review comments
2025-07-22 14:58:26 -04:00
15c8730ef7
Use wc_ prefix for IndexSequenceOf()
2025-07-22 14:50:42 -04:00
77bace5010
Update style per code review comments
2025-07-22 14:47:22 -04:00
97c2e9f973
Add wolfSSL_GetAllocators PSRAM support for Espressif ESP32
2025-07-22 11:34:47 -07:00
29288640ab
add additional check so dead code can be reached
2025-07-22 10:48:06 -06:00
dc345553df
wrap res assignment in else statement
2025-07-22 08:49:26 -06:00
aa986a2b24
Update doxygen comment style per code review comments
2025-07-22 08:27:00 -04:00
525f1cc39e
Update style per code review comments
2025-07-22 08:19:01 -04:00
8f00fc2594
Merge pull request #8890 from kareem-wolfssl/zd20022
...
Allow larger pathLen values in Basic Constraints.
2025-07-22 17:16:27 +10:00
1f72866489
Merge pull request #8993 from miyazakh/tsip_tlsproperties_uc
...
Make properties related to TLS handshake hidden for TSIP TLS user-context structure
2025-07-22 17:05:44 +10:00
6c847b1870
Merge pull request #9013 from ColtonWilley/fix_cryptocb_rsa_pad_inline
...
Set out ptr properly for RSA pad crypto cb inline
2025-07-22 16:47:06 +10:00
Sean Parkinson
gojimmypi
Koji Takeda
JacobBarthelmeh
Hideki Miyazaki
Daniel Pouzzner
Josh Holtrop
Juliusz Sosinowicz
David Garske
Daniele Lacamera
philljj
Ruby Martin