14ce7956f1
Increase test coverage
...
* More PQC configurations
* More CMake setups
* Fix various bugs uncovered by these tests
Added some missing feature additions to CMake to make the example
`user_settings_all.` config file work for the CI test.
2026-01-23 09:27:16 +01:00
2616fe3ff1
Better guards around tests
2026-01-22 22:17:59 -05:00
0f72d2eafe
enable kyber and dilithium in selftest
2026-01-23 11:59:46 +09:00
27df554e99
Merge pull request #9701 from Frauschi/brainpool-tls13
...
Add support for TLS 1.3 Brainpool curves
2026-01-23 10:42:32 +10:00
baaa368a61
Merge pull request #9668 from kaleb-himes/PQ-FS-2026-Part1
...
PQ FS 2026 part1
2026-01-23 10:30:47 +10:00
2c83711319
Merge pull request #9693 from kareem-wolfssl/zd21012
...
Use MinGW XINET_PTON definition for 32-bit MinGW as well as 64-bit.
2026-01-22 15:24:31 -08:00
a1b43ab3fa
wolfssl/wolfcrypt/dilithium.h: add a check for whether all supported levels are disabled, in WOLFSSL_WC_DILITHIUM setup.
2026-01-22 17:20:46 -06:00
71bffcc5eb
linuxkm/Kbuild: move FORCE_GLOBAL_OBJTOOL_OFF setup outside ENABLED_LINUXKM_PIE setup, i.e. always usable.
2026-01-22 17:20:46 -06:00
a17f68f036
Merge pull request #9587 from kareem-wolfssl/zd20850
...
Add duplicate entry error to distinguish cases where a duplicate CRL is rejected.
2026-01-22 15:07:19 -08:00
2fb19f84e5
Fixes for STSAFE-A120 ECDHE
2026-01-22 22:46:35 +00:00
1103552c37
Code review feedback
2026-01-22 15:46:13 -07:00
d60dd53165
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into zd19378
2026-01-22 15:37:30 -07:00
4c0c51fdff
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into gh7735
2026-01-22 15:13:15 -07:00
baedba6a58
Force client haveDH to true in wolfSSL_set_options. haveDH won't be set to true on the client as the server side is what calls DH param generation APIs which set this to true, but we still want the client to support DH cipher suites if enabled. This matches behavior from InitSSL_EitherSide.
2026-01-22 15:13:08 -07:00
20fc2de29d
Restore sanity to < SEED_BLOCK_SZ
2026-01-22 09:09:29 -07:00
20b2fd200f
Address failure rates from FIPS CRNGT test by implementing alternate RCT/ADP tests
...
Update ret code to match docs and update docs
Replace magic numbers with appropriate define
Define MAX_ENTROPY_BITS when MEMUSE not enabled
Fix type cast windows detection
Older FIPS modules still need the old check
CodeSpell you're wrong, that is what I want to name my variable
Turn the hostap into a manual dispatch until it gets fixed
Upon closer review we can not skip the test when memuse enabled
Fix whitespace stuff found by multitest
More syntax things
Correct comments based on latest findings
2026-01-22 09:06:17 -07:00
bde1bf6ce7
Fix user_settings ASM multiple define
2026-01-22 14:14:15 +01:00
eb8ba6124e
Support TLS 1.3 ECC Brainpool authentication
...
This also fixes TLS 1.2 authentication to only succeed in case the
brainpool curve was present in the supported_groups extension.
2026-01-22 14:14:09 +01:00
a462398387
Support Brainpool ECC curve TLS 1.3 key exchange
...
When both TLS 1.3 and Brainpool curves are enabled, three new groups can
be used for the ECDHE key exchange according to RFC 8734:
* WOLFSSL_ECC_BRAINPOOLP256R1TLS13 (31)
* WOLFSSL_ECC_BRAINPOOLP384R1TLS13 (32)
* WOLFSSL_ECC_BRAINPOOLP512R1TLS13 (33)
Also ensure that the existing TLS 1.2 curves are sent properly.
The TLS client application is updated to support handshakes via
Brainpool curves using the new argument "--bpKs".
2026-01-22 14:14:09 +01:00
62ca34497c
Merge pull request #9633 from douzzer/20260108-DEFAULT_MAX_CLASSIC_ASYM_KEY_BITS
...
20260108-DEFAULT_MAX_CLASSIC_ASYM_KEY_BITS
2026-01-21 17:39:56 -08:00
baeffb2f6a
Merge pull request #9692 from anhu/aead
...
wc_XChaCha20Poly1305_Init: NULL check aead, not ad
2026-01-21 17:22:32 -08:00
142f493964
configure.ac: if ENABLED_32BIT, add -DWC_32BIT_CPU to AM_CFLAGS, and don't add WOLFSSL_X86_64_BUILD to AM_CFLAGS; fix handling for --enable-bump;
...
wolfssl/wolfcrypt/settings.h: classify OPENSSL_EXTRA as "desktop type system" in bump up of default FP_MAX_BITS and SP_INT_BITS;
wolfssl/wolfcrypt/types.h: if WC_32BIT_CPU, don't define WC_64BIT_CPU.
2026-01-21 18:21:16 -06:00
e4e79dd8a3
Merge pull request #9694 from SparkiDev/tls_msg_sanity_fix
...
TLS: more sanity checks on message order
2026-01-21 15:11:11 -08:00
d088fee72c
Add cipher suite filtering when downgrade is disabled
...
When wolfSSL_SetVersion() is called to set a specific TLS version,
the downgrade flag is now set to 0. This causes wolfSSL_parse_cipher_list()
to no longer preserve cipher suites from the other TLS version group.
Previously, when using SSLv23 method and setting cipher suites for only
one TLS version (e.g., TLS 1.2), the library would preserve any existing
cipher suites from the other version (e.g., TLS 1.3) for OpenSSL API
compatibility. With this change, if a specific version is set via
wolfSSL_SetVersion(), only the cipher suites for that version are kept.
2026-01-21 18:01:01 -05:00
7d7299e254
Do not allow NULL with non-zero length.
2026-01-21 17:49:30 -05:00
11ddec3f69
Merge pull request #9681 from tmael/wfb1_
...
Fix cert SW issues in Aes and rng
2026-01-21 13:41:01 -08:00
e1e7c4d9f0
Merge pull request #9695 from miyazakh/fix_qt_unittest
...
Include `asn.h` for SN_xxx definitions from `openssl/obj_mac.h`
2026-01-21 12:56:53 -08:00
47ff34b503
Merge pull request #9696 from SparkiDev/mldsa_max_vals_from_avail
...
ML-DSA: max values based on available parameters
2026-01-21 12:56:07 -08:00
758d74f51f
Merge pull request #9687 from holtrop-wolfssl/rust-hmac-blake2
...
Rust wrapper: add HMAC-BLAKE2[bs] wrappers
2026-01-21 12:55:48 -08:00
1c3816d7d8
Use seedSz < SEED_BLOCK_SZ
2026-01-21 12:09:53 -08:00
d3d2105035
Fix cert SW issues
2026-01-21 12:09:53 -08:00
418a3bff32
Merge pull request #9698 from dgarske/rsa_no_rng2
...
More fixes for NO RNG and NO check key
2026-01-21 14:01:10 -06:00
f52930b844
More fixes for NO RNG and NO check key (broken in #9606 and #9576 )
2026-01-21 10:31:57 -08:00
2a449ebfdf
Merge pull request #9673 from holtrop-wolfssl/update-github-workflows-ubuntu
...
Update from Ubuntu 22.04 to Ubuntu 24.04 for github workflows
2026-01-21 09:14:39 -08:00
cc7897be0d
Merge pull request #9689 from dgarske/rsa_no_rng
...
Fixes for RSA with no RNG
2026-01-21 11:13:03 -06:00
98dbc56daa
Merge pull request #9691 from douzzer/20260120-linuxkm-RHEL9v6-and-RDSEED-sanity-check
...
20260120-linuxkm-RHEL9v6-and-RDSEED-sanity-check
2026-01-21 09:03:32 -08:00
685bacc917
Merge pull request #9614 from dgarske/stsafe-a120
...
Add STSAFE-A120 Support
2026-01-21 09:12:23 -07:00
69fd8dc01f
Update from Ubuntu 22.04 to Ubuntu 24.04 for several github workflows
2026-01-20 21:44:56 -05:00
88593f8dcd
ML-DSA: max values based on available parameters
...
When building wolfSSL implementation, make maximum sizes based on
available parameter sets.
Add wc_MlDsaKey_SignCtx and wc_MlDsaKey_VerifyCtx macros.
2026-01-21 12:04:28 +10:00
38b0fe19a1
Improvements to code for ECDHE and peer review fixes.
2026-01-21 00:03:26 +00:00
16fb84d0d1
Peer review fixes. Tested with brainpool.
2026-01-21 00:03:26 +00:00
54f0ecb536
Fix for ephemeral key usage limit.
2026-01-21 00:03:26 +00:00
384eaa48b3
Peer review fixes (thank you copilot)
2026-01-21 00:03:26 +00:00
654901782c
Peer review cleanups. ECDHE improvements.
2026-01-21 00:03:26 +00:00
02c3086e00
Added ECDHE support
2026-01-21 00:03:26 +00:00
09c75f25de
Fixes for peer review.
2026-01-21 00:03:26 +00:00
c7ca035baf
Cleanup WOLFSL_STSAFE and fix issue with multi-test macros
2026-01-21 00:03:26 +00:00
a4c2398265
Add STSAFE-A120 Support
2026-01-21 00:03:26 +00:00
8902afdcea
TLS: more sanity checks on message order
...
Add more checks on message ordering for TLS 1.2 and below.
Reformat code.
2026-01-21 10:00:38 +10:00
22ed7472b4
fix qt unit test
...
include asn.h for SN_xxx definitions
2026-01-21 08:59:28 +09:00
Tobias Frauenschläger
Anthony Hu
Hideki Miyazaki
Sean Parkinson
David Garske
Daniel Pouzzner
Kareem
kaleb-himes
Tesfa Mael
JacobBarthelmeh
Josh Holtrop