wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-05-06 09:16:17 +02:00
Code Issues Packages Projects Releases Wiki Activity
10,861 Commits 13 Branches 184 Tags
58c239a49f48fa2ae0f168ac437dfd3cfdaacf62
Commit Graph

3554 Commits

Author SHA1 Message Date
Sean Parkinson 0552fbc5de Fix lshift in SP 32-bit C code - FFDHE 2019-12-05 09:08:30 +10:00
John Safranek 44fc3e14b1 Maintenance: ASN.1 
1. Fix some preprocessor flag checking for function EncodePolicyOID. It
also needs to be available for OpenSSL Compatibility.
2. Fix for a name string for a test that can get left in or out
incorrectly.
 2019-12-04 10:26:37 -08:00
Sean Parkinson 2a0c037f98 Improve wc_ecc_mulmod_ex cache attack resistance 2019-12-04 11:08:28 +10:00
Sean Parkinson c5f9a601e8 Handle more values in mp_exptmod 
Handle prime (modulus) of 0 and 1.
Handle exponent of 0.
Fix for base of 0 in fp_exptmod and hadnle base of 0 in mp_exptmod.
fp_exptmod - Don't modify X's sign during operation when passed in as negative.
 2019-12-04 09:32:08 +10:00
Sean Parkinson fd4fb28a2e Fix missing variable declaration 
--enable-scep --with-libz
PKCS#7 decompress code
 2019-12-03 11:07:29 +10:00
Sean Parkinson b9a82204e2 Blinding for DSA sign 2019-12-03 09:36:33 +10:00
David Garske 7e45ae2ec6 Merge pull request #2621 from JacobBarthelmeh/SanityChecks 
sanity check on "a" input to invmod
 2019-12-02 10:57:01 -08:00
Sean Parkinson 204045223f Fix sp_invmod to handle more input values 2019-11-29 11:54:36 +10:00
Sean Parkinson bd7a572a8f mp_invmod handles more inputs 
Value to invert: a
Modulus: b
integer.c - normal math
  - a is one, or a mod b is one
tfm.c - fast math
  - b is -ve (error), or b is zero
  - a is zero or a mod b is zero
 2019-11-29 09:08:44 +10:00
Sean Parkinson 06ca07c79f Poly1305 AVX2 asm fix 
Missed carry when converting from 26 in 64 bits to 64 in 64 bits.
 2019-11-28 16:01:29 +10:00
Sean Parkinson 16ac0d8eb6 Support 20-byte serial numbers and disallow 0. 2019-11-28 10:21:48 +10:00
Sean Parkinson 245a2b7012 sp_int: clamp more results 2019-11-28 10:01:54 +10:00
Sean Parkinson dadbeff433 sp_int: When setting digit of 0, set used to 0 2019-11-28 10:01:54 +10:00
Sean Parkinson 2ac0ac8776 Fix for sp_div when a > d but same bit length 2019-11-28 10:01:54 +10:00
Sean Parkinson 8315ae892f sp_div improved to handle when a has less digits than d 2019-11-28 10:01:54 +10:00
toddouska b396ed0984 Merge pull request #2627 from SparkiDev/rsa_sign_vfy 
Change signature generation to verify by default
 2019-11-27 14:08:07 -08:00
toddouska e1ebb39296 Merge pull request #2618 from ejohnstown/maintenance-prime 
Maintenance: Prime
 2019-11-27 14:06:23 -08:00
toddouska ff85cc7740 Merge pull request #2622 from SparkiDev/ber_to_der_rework 
Rework BER to DER to not be recursive
 2019-11-27 14:05:36 -08:00
John Safranek cc722468be Maintenance: ASN.1 
1. Add an additional check in GetCertHeader() to see that sigIndex is
bounded by maxIdx.
 2019-11-27 10:43:51 -08:00
Juliusz Sosinowicz 9be1b4cfd8 Remove tabs 2019-11-27 17:46:15 +01:00
Juliusz Sosinowicz 9064de1e75 Set proper WOLFSSL_ASN1_TIME in thisupd and nextupd in wolfSSL_OCSP_resp_find_status 2019-11-27 17:45:49 +01:00
Juliusz Sosinowicz a892f2a95a Changes for nginx 1.15 
- ssl.c: add to check to overwrite existing session ID if found
- evp.c: wolfSSL_EVP_DecryptFinal* was checking for wrong value
 2019-11-27 17:45:49 +01:00
Sean Parkinson 23878512c6 Change signature generation to verify by default 2019-11-27 10:47:03 +10:00
Sean Parkinson 776f4af7f6 Rework BER to DER to not be recursive 2019-11-27 10:20:32 +10:00
toddouska 1b63ab0e73 Merge pull request #2623 from SparkiDev/set_ser_rand 
Generating serial number - clear top bit
 2019-11-26 16:14:54 -08:00
John Safranek 2de52c7666 Maintenance: Prime 
When returning a result from mp_prime_is_prime for normal math, the
result should be MP_YES or MP_NO, not a bare number (1 or 0).
 2019-11-26 15:44:30 -08:00
toddouska 57df5c10c9 Merge pull request #2619 from dgarske/async_mem 
Fix for Intel QuickAssist asynchronous build
 2019-11-26 15:29:04 -08:00
toddouska 0d69950d07 Merge pull request #2615 from SparkiDev/mp_exptmod_neg_p 
Handle negative modulus with negative exponent in exptmod
 2019-11-26 15:20:54 -08:00
toddouska 5d41ef171c Merge pull request #2610 from ejohnstown/maintenance-DTLS 
Maintenance: DTLS
 2019-11-26 15:17:22 -08:00
John Safranek 55540c6bd3 Replace a compile option check around some filenames for certificate testing. 2019-11-25 16:13:01 -08:00
John Safranek 1ac0b1fc0b Maintenance: ASN.1 
1. Undo an earlier change with respect to parsing a long length with
length zero. If BerToDer is disabled, this will be treated as a zero
length. With BerToDer enabled, the conversion will do the right thing.
 2019-11-25 16:08:32 -08:00
John Safranek 5e0ca866df Maintenance: ASN.1 
1. For certificates, when copying a member of a container, one shouldn't read
beyond the enclosing context.
 2019-11-25 16:08:32 -08:00
John Safranek d389133f33 Maintenance: ASN.1 
1. Update the ParseCRL function to always obey the length value of a tag.
 2019-11-25 16:08:31 -08:00
John Safranek 9753bf627b Maintenance: ASN.1 
1. Remove the function Word32ToString and replace with calls to
XSNPRINTF().
2. Simplify DecodePolicyOID(), which converts an ASN.1 OID to a text
string in the form a.b.ccccc.d... Return an error if it gets too long.
 2019-11-25 16:08:26 -08:00
Jacob Barthelmeh 7c3a4a1975 update comment to reflect new sanity check 2019-11-25 10:57:09 -07:00
Jacob Barthelmeh 316b8b0b4d add early return to normal math and WOLFSSL_VALIDATE_ECC_IMPORT to enable-all and enable-fpecc builds 2019-11-25 10:47:08 -07:00
Sean Parkinson 6325269236 Generating serial number - clear top bit 
If the top bit is set then the encoding routine will drop a byte of the
serial number.
Better to ensure number is positive, top bit clear, and use as much of
the serial number data as possible.
 2019-11-25 15:36:11 +10:00
Jacob Barthelmeh 9a0a48e093 sanity check on "a" input to invmod 2019-11-22 15:47:05 -07:00
John Safranek 3432a8a1fc Maintenance: Prime 
1. Prime test should return NO for 1. (ex function, normal math and fast
math)
2. Call mp_init() on the k value for the primality test case in the
wolfCrypt test.
 2019-11-22 13:02:59 -08:00
John Safranek 481da3dcc1 Maintenance: Prime 
1. Added a test case for checking "1" as a prime number to the wolfCrypt
test.
2. Allow the wolfCrypt prime test for SP builds.
3. Modify the prime test to use mp_mul rather than mp_mul_d, as the SP
math library doesn't export sp_mul_d.
 2019-11-22 11:39:19 -08:00
David Garske be88bce36d Fix for issues with wolfSSL_OBJ_nid2sn and wc_OBJ_sn2nid and logic finding max item when WOLFSSL_CUSTOM_CURVES and ECC_CACHE_CURVE are defined. Improvements to wolfSSL_EC_get_builtin_curves to avoid using "min" as variable name and eliminate using a local static. 2019-11-22 10:09:10 -08:00
John Safranek 0a924af894 Maintenance: Prime 
1. Prime test should return NO for 1. (sp math)
 2019-11-22 10:01:21 -08:00
David Garske ffb3dfd6ec Fixes for minor test.c build configuration issues. 2019-11-22 07:01:10 -08:00
Sean Parkinson 50c4347748 More corner cases in tfm 
Handle zero base in fp_exptmod better().
Handle negatives in fp_gcd().
Return FP_OKAY when writing out 0 with mp_toradix().
 2019-11-22 09:56:02 +10:00
John Safranek 452ba5b502 Maintenance: Prime 
1. Prime test should return NO for 1. (normal math and fast math)
 2019-11-21 13:49:26 -08:00
John Safranek edb07cf68e Merge pull request #2587 from guidovranken/ocsp-resp-decoder-bounds-fix 
Properly limit array access in OCSP response decoder
 2019-11-21 10:13:49 -08:00
toddouska e883a2f696 Merge pull request #2611 from SparkiDev/sp_int_add_fix 
Fix sp_add to handle carries properly
 2019-11-21 08:59:09 -08:00
Sean Parkinson f56a74b6b7 Handle negative modulus with negative exponent in exptmod 2019-11-21 14:55:13 +10:00
toddouska b33ce2207d Merge pull request #2608 from SparkiDev/use_heap 
When disabled memory, ensure all heap and types are used
 2019-11-20 16:18:07 -08:00
Sean Parkinson a20db0b8ad Fix sp_add to handle carries properly 2019-11-21 09:47:17 +10:00