David Garske
ac7aea9674
Merge pull request #7478 from JacobBarthelmeh/staticmemory
...
add global heap hint setter function
2024-05-15 10:43:15 -07:00
JacobBarthelmeh
9aeef1d857
add void and remove rebase issue
2024-05-15 10:28:39 -06:00
David Garske
c73e4333bf
Merge pull request #7535 from gojimmypi/PR-fix-sha512-endianness
...
Fix Espressif SHA512 SW fallback endianness
2024-05-15 09:04:07 -07:00
David Garske
9c4c9234b1
Merge pull request #7532 from SparkiDev/wc_ecc_mulmod_zero
...
ECC: handle zero in wc_ecc_mulmod()
2024-05-15 09:02:02 -07:00
gojimmypi
b25a4f1082
Use zero, not Espressif macro for return code
2024-05-15 08:06:06 -07:00
gojimmypi
1024d7a809
Fix Espressif SHA512 SW fallback endianness
2024-05-15 07:36:10 -07:00
Daniel Pouzzner
1469aab109
linuxkm/lkcapi_glue.c: add native test coverage for WOLFSSL_AESXTS_STREAM.
...
wolfcrypt/test/test.c:
* add WOLFSSL_AESXTS_STREAM testing to the LARGE_XTS_SZ exercise in aes_xts_128_test().
* add the LARGE_XTS_SZ exercise to aes_xts_256_test().
* add aes_xts_192_test().
* fix -Werror=frame-larger-than=2048 in ed25519_test().
2024-05-15 00:45:51 -05:00
Daniel Pouzzner
2fe366cc74
wolfcrypt/test/test.c: add test coverage for WOLFSSL_AESXTS_STREAM.
...
linuxkm/lkcapi_glue.c: typographic cleanups, and failsafe error return constructs when skcipher_walk_virt() returns zero walk.nbytes.
wolfcrypt/src/aes.c: additional comments and inline documentation.
.github/workflows/openvpn.yml: disable test on master branch.
2024-05-14 19:11:39 -05:00
Daniel Pouzzner
8392748cda
wolfcrypt/src/aes.c: de-deduplicate code, AesXts{En,De}crypt_sw() vs AesXts{En,De}cryptUpdate_sw().
2024-05-14 19:11:39 -05:00
Daniel Pouzzner
4f1f7b3a4d
linuxkm/lkcapi_glue.c: update names of wc_AesXts{En,De}cryptInit().
...
wolfcrypt/src/aes.c: activate _AesXtsHelper() in AesXts{En,De}cryptUpdate_sw().
2024-05-14 19:11:39 -05:00
Sean Parkinson
643f472cfb
AES-XTS ASM x64: Add Intel x64 implementation of streaming
...
Changed APIs from wc_AesXts*Start -> wc_AesXts*Init.
Enabled ASM for x64 in aes.c.
AesXtsDecryptStart_sw same as AesXtsEncryptStart_sw so changed them to
AesXtsInit_sw.
2024-05-14 19:11:39 -05:00
Daniel Pouzzner
f874d8753d
AES-XTS-streaming: refactor API to eliminate caller-supplied tweak_block. instead, caller-supplied iv is used as a readwrite buffer.
2024-05-14 19:11:39 -05:00
Daniel Pouzzner
9e06524c6f
wolfcrypt/src/aes.c: add prototypes and linkages for AES_XTS_{encrypt,decrypt}_{start,update}_{avx1,aesni}.
2024-05-14 19:11:39 -05:00
Daniel Pouzzner
70d7b6e48b
add WOLFSSL_AESXTS_STREAM, --enable-aesxts-stream, wc_AesXtsEncryptStart(), wc_AesXtsDecryptStart(), wc_AesXtsEncryptUpdate(), wc_AesXtsDecryptUpdate(), and implement fixes in linuxkm/lkcapi_glue.c to use the streaming API when needed. also added support for 2*192 bit AES-XTS, needed for Linux kernel.
2024-05-14 19:11:38 -05:00
Sean Parkinson
b63f308812
fixup
2024-05-15 09:07:04 +10:00
Sean Parkinson
36754683d6
ECC: handle zero in wc_ecc_mulmod()
...
Public API needs to handle multiplying by zero as the underlying code
doesn't and needn't.
2024-05-15 09:05:31 +10:00
David Garske
28bd4ebeea
Merge pull request #7520 from bandi13/fixConversion
...
Fix conversion
2024-05-14 11:26:37 -07:00
David Garske
7526f527d1
Merge pull request #7526 from lealem47/addCast
...
Fix for type conversion error
2024-05-14 10:30:08 -07:00
Andras Fekete
a59a3d109f
Explicit cast
2024-05-14 11:03:20 -04:00
Andras Fekete
702b6c25d5
Fix conversion error in benchmark.c
2024-05-14 11:02:28 -04:00
Andras Fekete
affd0a318e
Fix sign conversion errors
2024-05-14 11:02:28 -04:00
David Garske
0e2bb28ff3
Merge pull request #7529 from SparkiDev/aes_decrypt_fixes
...
AES: NO_AES_DECRYPT defined
2024-05-14 06:59:02 -07:00
David Garske
1ee315bbab
Merge pull request #7505 from gojimmypi/PR-Apple-Homekit-SRP-fix
...
Espressif updates to fix Apple Homekit SHA / SRP
2024-05-14 06:58:31 -07:00
Sean Parkinson
e1274013d8
AES: NO_AES_DECRYPT defined
...
Allow code to compile with NO_AES_DECRYPT with AES modes enabled and
disabled.
2024-05-14 16:27:36 +10:00
Sean Parkinson
b7eca574bb
SSL/TLS: blind private key DER
...
When WOLFSSL_BLIND_PRIVATE_KEY is defined, blind the private key DER
encoding so that stored private key data is always changing.
2024-05-14 09:47:51 +10:00
Sean Parkinson
f24ebdde25
ECC: blind private key after use in signing
...
Use a mask to blind the private key after use so that stored private key
is always changing.
2024-05-14 09:41:06 +10:00
Daniel Pouzzner
009ea6640b
Merge pull request #7493 from SparkiDev/sm3_benchmark_fix
...
Benchmark, SM3: fix full hash testing
2024-05-13 19:22:22 -04:00
Lealem Amedie
f4275d53c4
Fix for type conversion error
2024-05-13 16:32:12 -06:00
gojimmypi
44ec470df0
Update esp32 sha uintptr_t types; ret (0/1 not TRUE/FALSE)
2024-05-13 12:36:35 -07:00
David Garske
29f7578a61
Merge pull request #7446 from julek-wolfssl/hostap
...
hostap update
2024-05-13 10:35:01 -07:00
Daniel Pouzzner
4b81a99f91
Merge pull request #7424 from SparkiDev/aes_xts_x64_msvc
...
AES XTS asm x64 MSVC
2024-05-13 13:05:23 -04:00
David Garske
a9164293c2
Merge pull request #7513 from julek-wolfssl/gh/7510
...
ed25519: check that the signature is smaller than the order
2024-05-13 09:16:17 -07:00
David Garske
568fda0e8b
Merge pull request #7517 from bandi13/bugFixes
...
Bug fixes
2024-05-13 09:01:00 -07:00
David Garske
d39ab765f6
Merge pull request #7519 from julek-wolfssl/gh/7516
...
Return length in wc_Curve448PublicKeyToDer with NULL output param
2024-05-13 09:00:33 -07:00
Daniel Pouzzner
1faa70c128
wolfcrypt/test/test.c:
...
* fix unconditional memory leak in pkcs12_test().
* refactor pkcs12_test() to fix error-conditional memory leaks.
* fix various old-style return codes in sm4_ccm_test(), pkcs12_test(), prf_test(), tls12_kdf_test(), xmss_test(), xmss_test_verify_only(), lms_test(), and lms_test_verify_only().
2024-05-12 14:13:06 -05:00
Juliusz Sosinowicz
239706615c
Return length in wc_Curve448PublicKeyToDer with NULL output param
2024-05-10 20:10:23 +02:00
JacobBarthelmeh
d68f3cf63c
add macro guard around test case
2024-05-10 11:08:45 -06:00
JacobBarthelmeh
98a19f9fdd
add debug log and adjust set global heap hint function
2024-05-10 11:08:43 -06:00
JacobBarthelmeh
de3d1a488d
add global heap hint setter function
2024-05-10 11:08:01 -06:00
Sean Parkinson
add7428d1c
TLS, SM2: fixes to get SM handshakes working
...
Pass around the algorithm id from the private key so that the WOLFSSL or
WOLFSSL_CTX get the correct key format set.
Use different verification context when self-signed certificate with SM2
and SM3 signature but public key OID is ECC.
2024-05-10 10:15:47 +10:00
Sean Parkinson
b87b521044
AES XTS asm x64 MSVC
...
Use assembly code for AES-XTS with MSVC for x64.
2024-05-10 09:10:36 +10:00
Sean Parkinson
b62e8c1467
ASN template debug compile error
...
Variable is length instead of len.
2024-05-09 10:44:36 -05:00
Juliusz Sosinowicz
ab03324dc7
ed25519: put entire order into buffer for sanity check
2024-05-09 10:36:37 +02:00
Daniel Pouzzner
f7e1e370a0
Merge pull request #7438 from julek-wolfssl/zephr-no-malloc
...
zephyr no malloc
2024-05-09 02:57:20 -04:00
Daniel Pouzzner
af928faca7
Merge pull request #7489 from anhu/zero_len_hash
...
Allow for zero length hash. Its not an error.
2024-05-09 01:34:24 -04:00
Daniel Pouzzner
5a784c818d
Merge pull request #7319 from SparkiDev/chacha_poly1305_asm_msvc
...
ChaCha20, Poly1305 ASM for MSVC
2024-05-08 19:03:56 -04:00
Juliusz Sosinowicz
2508c9e1f4
ed25519: check that the signature is smaller than the order
2024-05-08 17:54:37 +02:00
Andras Fekete
8f9c8a1203
Fix infinite loop
...
'ret' could be set to non-zero inside the loop and the 'cmac->bufferSz' never gets reset causing 'add' to become 0 in the subsequent loop.
2024-05-08 09:52:37 -04:00
Juliusz Sosinowicz
06798ab8bf
EAP-FAST
...
Implement PACs for EAP-FAST
- wolfSSL_set_session_ticket_ext_cb
- server side wolfSSL_set_session_secret_cb (tls <=1.2 only)
2024-05-08 10:33:20 +02:00
Juliusz Sosinowicz
14ce8ce198
Jenkins fixes
2024-05-07 11:46:36 +02:00